Stablecoin Regulation in 2026: The Compliance Fault Lines

The GENIUS Act — the Guiding and Establishing National Innovation for U.S. Stablecoins Act — was signed into law on July 18, 2025 (Pub. L. 119-27), establishing the first comprehensive federal licensing and reserve framework for payment stablecoins in the United States. As of 2026-08-31, the implementing regulations are being finalized by the Office of the Comptroller of the Currency (OCC) and the Federal Reserve, and firms already issuing or planning to issue stablecoins are working against tight deadlines.

If your organization issues, holds, or processes stablecoins — or advises entities that do — this framework is not optional reading.

What the GENIUS Act Actually Does

The Act creates a tiered licensing regime. Only a "permitted payment stablecoin issuer" may issue a payment stablecoin in the United States: a subsidiary of an insured depository institution, approved by its primary federal regulator; a federal qualified issuer (a nonbank entity, uninsured national bank or federal branch), approved and supervised by the OCC; or a state qualified issuer. A state qualified issuer with no more than $10 billion in outstanding issuance may operate under a state regime that is "substantially similar" to the federal framework; above that threshold it must move to federal oversight within 360 days or stop issuing new stablecoins, unless its federal regulator grants a waiver.

The core obligations that flow from that structure:

• 1:1 reserve backing. Every payment stablecoin in circulation must be backed at least 1:1 by identifiable reserves drawn from a closed statutory list: U.S. coins and currency or Federal Reserve balances, demand deposits at insured depository institutions, Treasury bills, notes or bonds with a remaining maturity of 93 days or less, certain overnight repurchase and reverse repurchase agreements, government money market funds holding only those assets, other similarly liquid federal government-issued assets approved by the regulator, and tokenized forms of certain of those assets. No algorithmic backing, no fractional reserves.
• Monthly reserve reporting. Issuers must publish the composition of their reserves on their website each month, have each month-end report examined by a registered public accounting firm, and have the CEO and CFO certify its accuracy to their regulator each month; a knowingly false certification carries criminal penalties.
• Redemption at par on demand. Holders must be able to redeem at face value within defined time windows. The precise window is subject to final rulemaking as of 2026-08-31.
• Limits on foreign-issued stablecoins. From July 18, 2028, the Act bars digital asset service providers from offering or selling in the United States a payment stablecoin from an issuer that is not a permitted issuer. A foreign issuer can come within an exception only if, among other conditions, it is supervised in a country whose regime Treasury has determined to be comparable and it is registered with the OCC.

The Compliance Fault Lines Counsel Should Flag

Reserve Composition Disputes

The Act defines permissible reserves closely. Deposits at an insured depository institution count, including deposits at its foreign branches and correspondent banks, but they are subject to limits the FDIC and NCUA may set to address safety and soundness risks. Until those limits are set, issuers with internationally distributed treasury operations cannot be sure how much of their current deposit holdings will qualify.

This is not an academic question. An issuer that reports a non-compliant reserve composition in its mandatory attestation faces supervisory action. An issuer that misreports to avoid that outcome faces fraud exposure.

The State-Federal Tension

New York, Wyoming, and California each had stablecoin or virtual currency frameworks in place before the GENIUS Act passed. The Act does not displace them outright: a state qualified issuer with no more than $10 billion in outstanding issuance may remain under a state regime that is "substantially similar" to the federal framework. Each state regulator must certify its regime to the Stablecoin Certification Review Committee, chaired by the Treasury Secretary, within one year after the Act takes effect.

Firms currently licensed under a state framework — and operating in good faith reliance on it — are in a gray zone. The statute itself sets the main transition dates: the Act takes effect on the earlier of January 18, 2027 or 120 days after final implementing regulations, and the bar on digital asset service providers offering stablecoins from issuers that are not permitted begins July 18, 2028, three years after enactment. Treasury may also adopt limited, de minimis safe harbors by regulation. Counsel advising state-chartered issuers should not assume the existing license is sufficient.

Bank Secrecy Act and AML Integration

The GENIUS Act explicitly preserves all Bank Secrecy Act (BSA) obligations and directs FinCEN to issue guidance on how BSA requirements apply to payment stablecoin issuers specifically. FinCEN has not yet issued that guidance as of 2026-08-31. In the interim, issuers must apply existing BSA rules — customer identification, suspicious activity reporting, transaction monitoring — to stablecoin issuance and redemption activity.

The compliance risk here is real: stablecoin transactions can be structured to obscure beneficial ownership in ways that evade conventional monitoring systems built for fiat flows. Firms relying on legacy transaction monitoring tools without stablecoin-specific rules may be exposed. The Risky Business: Cryptocurrency, Money Laundering, and Smart Contracts course provides useful grounding in how these laundering typologies work in practice.

Custody and Insolvency Risk

The Act does address issuer insolvency. In any insolvency proceeding of a permitted issuer, stablecoin holders' claims have priority, ratably among holders, over all other claims with respect to the required reserves; required reserves are excluded from the bankruptcy estate; and any shortfall in required reserves becomes a first-priority claim against the estate. That protection stops at the reserves the Act requires, payment stablecoins are not federally insured, and the provisions have not yet been tested in an actual insolvency. The residual risk matters to any institutional counterparty holding stablecoins as a cash equivalent on its balance sheet.

Until a court applies these provisions in an actual insolvency, legal counsel should advise clients against treating stablecoin holdings as equivalent to insured deposits.

Practical Steps to Take Before Final Rules Land

Map your exposure now. Identify every product, counterparty relationship, or treasury operation that touches a stablecoin. Determine whether the issuer of each stablecoin you hold or accept is on a path to federal or state licensure under the GENIUS Act framework.

Review reserve documentation. If your organization issues a stablecoin, pull your current reserve composition and compare it line by line against the Act's permitted asset list. Do not wait for final OCC rules to discover a mismatch.

Audit your BSA/AML controls. Confirm that your transaction monitoring system generates alerts on stablecoin-specific patterns — rapid round-trip transfers, structuring across wallets, redemption behavior inconsistent with stated business purpose.

Engage with your state regulator. If you hold a state virtual currency or money transmission license that covers stablecoin activity, open a dialogue with the state agency about whether it intends to certify its regime to the Stablecoin Certification Review Committee as substantially similar to the federal framework, and on what timeline.

Revisit smart contract terms. If stablecoin issuance or redemption runs through a smart contract, have counsel assess whether the contract's automated logic is consistent with the par-redemption and reserve requirements the Act imposes. Immutable code that contradicts statutory obligations is a problem the Act will not forgive.

For a broader picture of the regulatory landscape around digital assets and token structures, the Introduction to Utility Tokens and Initial Coin Offerings course covers foundational concepts that remain relevant as the statutory framework evolves around them.

What the Foreign Issuer Prohibition Changes

This provision has received less attention than the reserve requirements, but it may have the most immediate operational impact. Treasury makes comparability determinations country by country, only on the recommendation of the other members of the Stablecoin Certification Review Committee, and must publish its justification in the Federal Register before a determination takes effect. The prohibition runs against digital asset service providers that offer or sell these stablecoins in the United States, not against holders. Once it applies, corporate treasury departments and institutional investors should expect their exchanges and custodians to stop making available foreign-issued stablecoins that lack a comparability determination and OCC registration.

For multinational companies that have integrated non-U.S. stablecoins into cross-border payment flows, this is an urgent compliance gap, not a future planning item.

The rulemaking calendar matters. Watch the OCC's and Federal Reserve's unified rulemaking docket and FinCEN's BSA guidance publication for the triggers that will convert these open questions into hard obligations.