Banca d'Italia Didn't Write a New Rule. It Made Every Crypto Transfer a Wire.

A document dated September 7, 2026, from the Bank of Italy tells the firms it supervises to make sure crypto-asset service providers screen every single transfer for links to sanctioned persons and entities. The press ran it as a clampdown: Italy will now check every crypto transfer, at any size. Both halves are accurate. Neither half is a new law — and the fact that it isn't is where the real message sits.

The Communication on restrictive measures is a supervisory reminder, not a statute. It reiterates obligations that already bind Italian crypto service providers through EBA Guidelines 2024/15, in force in Italy since December 30, 2025, and does not announce a fresh compliance deadline. What it does is sharpen a fight the guidelines left ambiguous — and it resolves that ambiguity against the crypto industry on the one point that matters.

The exemption that didn't survive contact with crypto

Traditional payment providers, under the same EU framework, get a carve-out for instant credit transfers: because a real-time payment is too fast to screen case by case, they may screen customers at least daily instead of before each transfer. Italian banks processing instant domestic payments can use that breathing room.

Banca d'Italia's Communication states plainly that this carve-out does not extend to crypto-asset transfers handled by CASPs, even when settlement is instantaneous. Every crypto transfer — any size, no minimum, originator and beneficiary both — must be screened against sanctions lists before it executes. There is no low-value layer to duck under, which closes the "structuring" trick of splitting a large transfer into a row of small ones to slip past an automated flag.

Call it an identity switch. Before the regime was enforced this way, a crypto transfer behaved like pseudonymous movement — an address, a timestamp, no name required to move value. After enforcement takes the exemption off the table, that same transfer carries the compliance weight of a wire transfer, screened and documented before it moves, with every decision kept on file for supervisory review.

The twist is that a blockchain address is not a name, and the guidelines themselves concede the point. Name screening against a list cannot catch a pseudonymous wallet, so the central bank's practical expectation is that firms combine customer screening with blockchain analytics — matching addresses to their known behavior, not their claimed identity. The cost of the regime therefore does not land on "identifying" an address, which is often impossible. It lands on the infrastructure that watches the address: the screening systems, the sanctions-list feeds, the analytics layer, the audit trail. That is where the economics now concentrate.

Why now: the exhibits

The bank did not publish this in a vacuum. Italy's push follows a cascade of traces that EU and U.S. officials have been assembling, and they read like a dossier of the exact behavior the rule targets.

• The ruble-backed stablecoin A7A5 processed about $110 billion in cumulative transactions between February 2025 and May 2026 despite being under Western sanctions, according to blockchain security firm CertiK.
• On July 14, U.S. Treasury Secretary Scott Bessent said American authorities directed a freeze of more than $130 million in crypto held in wallets linked to Iran's central bank.
• In June, analytics firm TRM Labs reported over $3.8 billion in flows between the exchange CoinEx and sanctioned Iranian entities across more than seven years.

The pattern these exhibits share is stablecoin and exchange rails carrying sanctioned money — which is exactly who the new screening order is aimed at. This is the enforcement phase arriving, not rulemaking. Regulators are done writing the law; they are now insisting the point of transfer actually performs it.

What this does to the investment case

Start with what it does not do. This is a costs-and-risk order, not a demand order, and the market data does not show a demand shock: crypto's fear/greed index sits at 69 — the "greed" band — and Bitcoin's USDT-denominated net inflows on Binance were positive through the week of the announcement, roughly $168 million net on September 8 and $186 million on September 10. Screened or not, money kept moving in. Retail holders of main-line assets should not read a compliance memo from Milan as a sign the market is about to roll over.

The pressure lands in three specific places.

Operators, not hold-holders. The cost of running compliant crypto rails in Italy rises with every transfer that must now be individually screened and archived. Italy has roughly nine MiCA-authorized CASPs as of mid-2026, a small field, and a per-transfer compliance obligation plus exposure to Italian criminal liability for breaches is a license-button to burden: the thinly capitalized service providers are the ones that feel it first, and the natural outcome is consolidation toward operators who can actually afford the compliance stack.

The picks and shovels. The identity switch concentrates value in the vendors that make screening possible — sanctions-list screening software and blockchain-analytics firms. What reads as a tax on Italian exchanges is a durable revenue stream for the infrastructure that prices, attributes, and flags the wallets. Every additional jurisdiction that hard-lines "no threshold on crypto" widens that market.

Stablecoins carry the checkpoint. The sanctions story is, in practice, a stablecoin story — A7A5, the frozen Iranian-linked wallets, the CoinEx flows are all USD- or ruble-pegged settlement. As enforcement hardens, stablecoin issuance in sanctioned corridors becomes a compliance liability rather than a settlement convenience. That is the deepest identity switch of all: the same token that makes cross-border settlement frictionless also makes its issuers and distributors newly responsible for screening every cent of it.

The break condition for all of this is whether the "reminder" acquires teeth. If Italian authorities begin tying criminal liability to specific operator conduct on instant transfers, or if the daily-screening carve-out for banks is visibly enforced while crypto gets the strict line, the cost divergence becomes real and the consolidation story accelerates. If, instead, this remains a memorandum no operator is ever sanctioned under, then the honest verdict is that it is a signal of intent, not yet a tariff. Right now, the document is the evidence. The enforcement is the forecast — and the forecast is where the risk, and the opportunity, actually sit.