A regulated issuer knows exactly who its customer is. With access that does't involve direct onboarding by the issuer, the primary identifier may instead be a wallet address.
That obligation does not go away. It just has to be enforced when the wallet connects.
See how
@onrefinance is using Range đ