What Is a Digital Identity? Digital IDs, Verify Identity Rules & Feds' New ID Push

Imagine opening a new payment app, one that lets you send digital dollars instantly, anywhere, no bank required. You go to sign up. And before you can move a single cent, it asks for your name, your date of birth, your home address, and a photo of your government ID. You pause. Who exactly is keeping this?

That's not a hypothetical anymore. On June 18, 2026, five federal agencies, including the Federal Reserve and the Treasury Department's financial crimes unit, jointly proposed new rules that would require stablecoin issuers to verify who their customers are before those customers can use their products. PYMNTS.com reported the full scope of the proposal. This is a big deal, and not for the reasons most tech headlines will tell you.

The debate you'll see online will be "crypto vs. government" or "regulation vs. freedom." Ignore that. The real question is simpler and more personal: when digital money starts asking for your ID, where does that ID actually go?

First, Let's Talk About What a Stablecoin Actually Is

What Is a Digital Identity, and Why Does It Matter Here?

A digital identity is the collection of data points that prove you're really you online: your legal name, date of birth, home address, government ID number, and increasingly a photo or selfie matched against that ID. Every time an app asks you to verify who you are, it's building a digital identity file tied to your account. That file doesn't stay in one place either, it gets copied, stored, and sometimes shared across the company's systems and its vendors.

Understanding what a digital identity actually includes matters because it's not just your login and password anymore. It's your full identity information: name, address, birthdate, and ID number, all bundled together in one digital identity record. Once a company has that digital identity on file, verification is essentially permanent, unlike a password, you can't reset your date of birth.

You may have heard the word "stablecoin" and assumed it was just another weird crypto thing. Here's the plain-English version: a stablecoin is a type of digital money designed to always be worth one dollar (or one euro, or one pound). It doesn't go up and down in value like Bitcoin. Think of it more like a digital gift card that's always worth exactly $1.00, except you can send it to anyone, instantly, anywhere in the world, without going through a bank.

Companies like PayPal have already launched stablecoin products. Big banks are exploring them. These aren't fringe-internet curiosities anymore. They're trying to become how you pay for things, rent, groceries, freelance work, international transfers.

And that growth is exactly why regulators got involved. This article is part of a series, start with One Stolen Badge Shouldnt Unlock Your Whole Office Heres Wha.

What the New Rules Would Actually Require

Digital Identification, Digital IDs, and What Counts as Proof of Identity Verification

The proposed rule is really about digital identification: how a company confirms that the person opening a digital identity account is a real, verifiable human being. Digital IDs in this context usually mean a driver's license, passport, or state ID scanned and cross-checked against a database. Some apps will also ask for a live selfie to match against that digital ID, a process often called identity proofing.

Identity proofing is simply the technical term for confirming a digital identity belongs to the person claiming it, rather than someone using stolen information. This is the same identity management challenge banks have handled for decades, just now applied to newer digital wallets and stablecoin apps instead of checking accounts.

Under the proposed rules, which stem from the GENIUS Act, a law signed in 2025 that brought stablecoin companies under federal financial oversight for the first time, stablecoin issuers would have to collect specific information from every customer before that customer can open an account. We're talking your full legal name, date of birth, physical home address, and a government ID number (think: driver's license, passport, Social Security number).

Sound familiar? It should. That's the exact same information your bank collects when you open a checking account. The whole point of the proposal is to bring digital-dollar companies into the same system banks use, including the part where they're legally required to know who you are.

According to CoinDesk, the requirements are directly modeled on bank-style identification standards, the same infrastructure that traditional financial institutions have used for decades to comply with anti-money laundering laws.

The proposed rule has a 60-day public comment period. That means ordinary people can submit their thoughts directly to the government. More on that in a moment, because this is one of the rare times when your opinion actually has a formal place to land.

Why This Is Good News and a Real Risk at the Same Time

Your Online Identity Is Now Tied to Your Money

Your online identity used to mean a username on a forum or a profile photo on social media. Now, your online identity increasingly means the verified digital identity attached to your bank account, your payment apps, and soon your stablecoin wallet. That shift raises the stakes considerably, a leaked forum password is annoying, a leaked digital identity tied to your government ID is a much bigger problem.

Let's be honest about both sides here.

The case for identity checks on digital money is solid. Without knowing who holds an account, it's almost impossible to catch money laundering (criminals hiding illegal money by running it through legitimate-looking transactions) or to stop payments that fund criminal organizations. Banks have been doing this for years, and it works. Bringing stablecoin companies into that same system isn't outrageous, it's arguably overdue.

But here's the thing regulators are dancing around: identity checks only reduce fraud if the people holding your data don't lose it. Previously in this series: Your Digital Id Looks Safe The 3 Things That Actually Prove .

"The GENIUS Act regulatory framework does not do enough so far to address the risks of illicit finance conducted through secondary market transactions." Federal Reserve Governor Michael Barr, as reported by KuCoin

Even one of the proposal's supporters, Federal Reserve Governor Michael Barr, acknowledged that the new rules have gaps. His concern is about transactions that happen after a stablecoin moves between users, where no identity check currently exists. That's a real problem. But it also tells you that even the people writing the rules aren't fully confident they cover all the risks.

Meanwhile, the Identity Theft Resource Center has consistently flagged that identity verification on payment apps creates genuine consumer risk, not because checking ID is wrong, but because every place that stores your ID documents becomes a target. Breaches expose exactly this kind of data. And unlike your credit card number, you can't get a new passport number when yours leaks.

The Question Nobody Is Really Asking

Identity Management Is Only as Good as the Company Doing It

Identity management is the ongoing job of collecting, storing, updating, and eventually deleting someone's digital identity data. A bank's identity management systems have decades of audits, insurance, and regulatory oversight behind them. A two-year-old stablecoin startup doing identity management for the first time simply hasn't had time to prove it can handle that responsibility the same way.

According to American Banker, the proposed rules do include some flexibility, companies can take a risk-based approach, meaning they don't necessarily need to treat every $5 transaction the same way they'd treat a $50,000 wire transfer. That's sensible design. But flexibility also means inconsistency. One stablecoin app might ask for a selfie and a passport scan. Another might just need your name and a ZIP code. The consumer has no way to know ahead of time what level of scrutiny, or what level of data storage, they're signing up for.

That's the gap that deserves more attention than it's getting. The rule tells companies they must verify identity. It doesn't tell consumers exactly what those companies are required to do with that identity data afterwardhow long they can keep it, whether they can share it, or what their obligation is if it leaks.

Banks have answers to those questions. Decades of regulation, insurance backstops, and hard-learned breach lessons have built a framework, imperfect, yes, but real. Most stablecoin companies are years, sometimes just months, old. That asymmetry matters when you're deciding whether to hand over a photo of your driver's license.

If you've ever wondered whether a digital profile or payment account is really attached to the person it claims to be, that's exactly the problem these rules are designed to solve, and it's a real problem worth solving. The honest answer is that identity verification, done right, makes digital money safer for everyone. The harder question is who gets to define "done right," and what accountability exists when something goes wrong. One practical thing you can do right now: before you sign up for any payment app that asks for your government ID, search the company's name plus "data breach" and "privacy policy." Check when they last updated their security practices. A fintech that can't answer basic questions about how long they keep your documents probably shouldn't be holding them. Up next: Why Passkey Adoption Is Stalling Recovery Problem.

So What Would Actually Make You Trust This?

Here's where we want to hear from you, genuinely. The 60-day comment period on this proposed rule means regular people can submit feedback directly to the government agencies writing it. You don't need a lawyer. You don't need a lobbyist. You just need an opinion and an email address.

Our question for you: if digital-dollar payment apps are about to require your government ID, what would actually make you trust the process? Clear rules on how long they can keep your data? A requirement that they delete your documents after verification instead of storing them indefinitely? Independent security audits that consumers can actually read? No face scans at all, just document numbers?

Tell us in the comments. And if you're the kind of person who's skeptical of handing a two-year-old startup the same documents you'd normally only show to your bank, that instinct isn't paranoia. It's exactly the right question to be asking right now, while the rules are still being written.

Because the history of digital payments is basically a list of companies that promised to keep your data safe, right up until they didn't. The fact that regulators are finally stepping in is progress. Whether this particular rule will be enough, that's still very much an open question, and August 21st is when the public gets to say so officially.

The GENIUS Act made stablecoin companies financial institutions. It didn't automatically make them good custodians of your most sensitive documents. Those are two very different things, and right now, only one of them is required by law.

So what is a digital identity, in the end? It's not one document or one password, it's the whole bundle of personal data, name, birthdate, address, ID number, and verification history, that proves you're you across every digital service you use. As digital identity requirements spread from banks to stablecoin apps to digital wallets of every kind, that bundle only grows larger and more valuable to protect.

Digital identities aren't going away, and honestly, they shouldn't. Verified digital identities make it much harder for someone to open an account pretending to be you, which protects both you and the broader financial system. The real work ahead is making sure the companies collecting digital identification treat it with the same seriousness as the banks that have been doing identity management for a century.

If there's one thing to remember about digital services that ask for your ID, it's this: every digital identity you create is a liability sitting somewhere on a server, not just a convenience at signup. Ask who has access to your identity information, how long they keep it, and what happens if their systems are breached, before you hand over a single digital identification document.

Let's slow down and define digital identity one more time, in the simplest terms possible. A digital identity is any set of data that a computer system uses to answer one question: is this person really who they claim to be? That includes your name, your birthdate, your address, your ID number, and any biometric scan tied to your face or fingerprint.

Every digital identity starts somewhere, usually the moment you sign up for a bank account, a phone plan, or now, a digital wallet. From that first signup, your digital identity gets referenced again and again, every time you log in, every time you move money, every time a company needs to confirm you are still you. That's why a single digital identity, once created, tends to follow you for years, sometimes decades.

It helps to separate digital identity from a related idea: online identity. Your online identity can be as casual as a screen name on a forum, something with no real connection to your legal name or government ID. A digital identity, by contrast, is the verified version, the one tied directly to identity documents a bank, government agency, or stablecoin issuer can check against official records.

Digital identification, in practice, usually happens in one of two ways. Either a company checks your digital ID against a government database in real time, or it stores a scanned copy of your digital ID on its own servers for future reference. The first approach limits how much identity information sits on any one company's servers. The second approach is more convenient for the company but means your digital identification documents live somewhere permanently, waiting to be protected or, in a bad case, breached.

Digital wallets add another layer to this picture. A digital wallet stores your payment methods and, increasingly, a verified copy of your digital identity so you don't have to reverify every time you use a new app. That's convenient, but it also means a single digital wallet breach could expose identity information tied to every service linked to that wallet, not just one account.

Verify identity is the actual moment of truth in this whole process, the step where a company checks your submitted documents against your face, your signature, or a government record. Verify identity workflows have gotten faster thanks to automated selfie matching, but faster isn't always safer. A rushed verify identity process can accept forged documents just as easily as a slow one can wrongly reject a real person.

Identity proofing and identity verification often get used interchangeably, but there's a subtle difference worth knowing. Identity proofing usually happens once, at signup, to establish that a digital identity is genuine. Ongoing verify identity checks happen afterward, whenever the company needs fresh confirmation, like before a large transfer or a password reset.

Digital identities, plural, matter here too, because most people don't have just one. You likely have a separate digital identity with your bank, another with your phone carrier, another with your employer, and soon possibly one with a stablecoin app. Each of these digital identities is supposed to be siloed, but in practice, the same core identity information, your name, birthdate, and ID number, tends to repeat across all of them.

That repetition is exactly why identity management as a discipline exists. Good identity management means a company only asks for the identity information it truly needs, stores it securely, and deletes it when it's no longer required. Poor identity management means collecting everything just in case, and holding onto identity information indefinitely because deleting it is more work than keeping it.

Digital services beyond payments face this same identity management question. Healthcare apps, tax software, even rental applications increasingly ask you to prove a digital identity before granting access. Every one of these digital services becomes another place your identity information could be exposed, which is why consumer advocates keep pushing for consistent standards across industries, not just banking and stablecoins.

There's a case to be made that strong digital identity systems can also work in your favor, not just the government's. Citizens' access to public benefits, tax refunds, and government services often depends on some form of verified digital identity, and a well-built system can make that access faster and less prone to fraud than paper-based processes ever were.

Seen that way, digital identity isn't purely a burden, it can be an enabler too, of faster loans, easier account recovery, and government services that don't require standing in line with a folder of paperwork. The technology itself isn't the problem. The problem is when the companies holding your digital identity treat it as a checkbox instead of a responsibility.

So the next time an app asks you to verify identity before you can send a digital dollar, remember what's actually happening behind that request. You're not just proving you're human, you're expanding a digital identity file that will likely outlive the app itself. Ask questions, read the privacy policy, and treat every digital identification document you hand over as something permanent, because in practice, it is.