Stablecoin Regulation in 2026: The Compliance Fault Lines

The GENIUS Act — the Guiding and Establishing National Innovation for U.S. Stablecoins Act — was signed into law in 2026, establishing the first comprehensive federal licensing and reserve framework for payment stablecoins in the United States. As of 2026-08-31, the implementing regulations are being finalized by the Office of the Comptroller of the Currency (OCC) and the Federal Reserve, and firms already issuing or planning to issue stablecoins are working against tight deadlines.

If your organization issues, holds, or processes stablecoins — or advises entities that do — this framework is not optional reading.

What the GENIUS Act Actually Does

The Act creates a tiered licensing regime. Issuers with outstanding stablecoins above a threshold set in the statute must obtain a federal payment stablecoin issuer charter from either the OCC (for national bank-chartered issuers) or the Federal Reserve (for certain nonbank issuers). Smaller issuers may operate under approved state frameworks, provided those frameworks meet minimum federal standards set out in the Act.

The core obligations that flow from that structure:

• 1:1 reserve backing. Every payment stablecoin in circulation must be backed by U.S. dollars, Treasury bills with maturities of 93 days or less, or insured depository institution deposits. No algorithmic backing, no fractional reserves.
• Monthly reserve attestations. Issuers must publish monthly attestations from a registered public accounting firm confirming reserve composition and sufficiency.
• Redemption at par on demand. Holders must be able to redeem at face value within defined time windows. The precise window is subject to final rulemaking as of 2026-08-31.
• Prohibition on foreign issuers without approval. The Act restricts U.S. persons from transacting in stablecoins issued by foreign entities that have not received a specific Treasury Department determination of equivalence.

The Compliance Fault Lines Counsel Should Flag

Reserve Composition Disputes

The Act defines permissible reserves, but the definition of "insured depository institution deposits" is already generating debate in comment letters to the OCC. The question is whether deposits held at foreign branches of U.S. banks qualify. Until final rules resolve this, issuers with internationally distributed treasury operations face real uncertainty about whether their current reserve holdings are compliant.

This is not an academic question. An issuer that reports a non-compliant reserve composition in its mandatory attestation faces supervisory action. An issuer that misreports to avoid that outcome faces fraud exposure.

The State-Federal Tension

New York, Wyoming, and California each had stablecoin or virtual currency frameworks in place before the GENIUS Act passed. The Act includes a preemption clause, but it is qualified: state frameworks that meet federal minimum standards are preserved. The OCC is expected to publish a list of approved state frameworks, but that list does not exist as of 2026-08-31.

Firms currently licensed under a state framework — and operating in good faith reliance on it — are in a gray zone. The Act provides a transitional safe harbor period, but the length of that period and the conditions attached are set by implementing regulation, not the statute itself. Counsel advising state-chartered issuers should not assume the existing license is sufficient.

Bank Secrecy Act and AML Integration

The GENIUS Act explicitly preserves all Bank Secrecy Act (BSA) obligations and directs FinCEN to issue guidance on how BSA requirements apply to payment stablecoin issuers specifically. FinCEN has not yet issued that guidance as of 2026-08-31. In the interim, issuers must apply existing BSA rules — customer identification, suspicious activity reporting, transaction monitoring — to stablecoin issuance and redemption activity.

The compliance risk here is real: stablecoin transactions can be structured to obscure beneficial ownership in ways that evade conventional monitoring systems built for fiat flows. Firms relying on legacy transaction monitoring tools without stablecoin-specific rules may be exposed. The Risky Business: Cryptocurrency, Money Laundering, and Smart Contracts course provides useful grounding in how these laundering typologies work in practice.

Custody and Insolvency Risk

The Act does not explicitly address what happens to stablecoin holders in an issuer insolvency. Reserve assets are required to be held in segregated accounts, but the Act's language on how those assets rank in bankruptcy — and whether holders have a direct claim against them — is ambiguous. This is a material risk for any institutional counterparty holding stablecoins as a cash equivalent on its balance sheet.

Until a court interprets the Act's segregation requirement in an insolvency context, or Congress clarifies it, legal counsel should advise clients against treating stablecoin holdings as bankruptcy-remote instruments equivalent to insured deposits.

Practical Steps to Take Before Final Rules Land

Map your exposure now. Identify every product, counterparty relationship, or treasury operation that touches a stablecoin. Determine whether the issuer of each stablecoin you hold or accept is on a path to federal or state licensure under the GENIUS Act framework.

Review reserve documentation. If your organization issues a stablecoin, pull your current reserve composition and compare it line by line against the Act's permitted asset list. Do not wait for final OCC rules to discover a mismatch.

Audit your BSA/AML controls. Confirm that your transaction monitoring system generates alerts on stablecoin-specific patterns — rapid round-trip transfers, structuring across wallets, redemption behavior inconsistent with stated business purpose.

Engage with your state regulator. If you hold a state virtual currency or money transmission license that covers stablecoin activity, open a dialogue with the state agency about whether it is seeking OCC approval as an equivalent framework and on what timeline.

Revisit smart contract terms. If stablecoin issuance or redemption runs through a smart contract, have counsel assess whether the contract's automated logic is consistent with the par-redemption and reserve requirements the Act imposes. Immutable code that contradicts statutory obligations is a problem the Act will not forgive.

For a broader picture of the regulatory landscape around digital assets and token structures, the Introduction to Utility Tokens and Initial Coin Offerings course covers foundational concepts that remain relevant as the statutory framework evolves around them.

What the Foreign Issuer Prohibition Changes

This provision has received less attention than the reserve requirements, but it may have the most immediate operational impact. As of 2026-08-31, Treasury has not published a list of approved foreign issuers or announced the criteria for equivalence determinations. That means U.S. persons — including corporate treasury departments and institutional investors — technically cannot transact in foreign-issued stablecoins without risk of violation, unless Treasury provides interim guidance.

For multinational companies that have integrated non-U.S. stablecoins into cross-border payment flows, this is an urgent compliance gap, not a future planning item.

The rulemaking calendar matters. Watch the OCC's and Federal Reserve's unified rulemaking docket and FinCEN's BSA guidance publication for the triggers that will convert these open questions into hard obligations.