Four federal agencies published a coordinated set of proposed rules between April 3 and April 10, 2026, that would subject every permitted payment stablecoin issuer (PPSI) in the United States to the same anti-money laundering regime that governs banks. The joint FinCEN/OFAC notice of proposed ru...
"This proposal will protect the U.S. financial system from national security threats without hindering American companies' ability to forge ahead in the payment stablecoin ecosystem." — Scott Bessent, U.S. Treasury Secretary
Four federal agencies published a coordinated set of proposed rules between April 3 and April 10, 2026, that would subject every permitted payment stablecoin issuer (PPSI) in the United States to the same anti-money laundering regime that governs banks. The joint FinCEN/OFAC notice of proposed rulemaking, published in the Federal Register on April 10, designates PPSIs as financial institutions under the Bank Secrecy Act. The FDIC issued a parallel proposal on April 7. The OCC had already released its own framework in February. Treasury published state-level regulatory equivalence criteria on April 3.
Combined, the four proposals create a compliance architecture that touches the full $318.6 billion stablecoin market — an all-time high reached in April 2026, according to DefiLlama data. The rules impose suspicious activity reporting thresholds at $5,000, mandate U.S.-based compliance officers, require the technical capability to freeze, block, or burn tokens on permissionless blockchains, and establish civil penalties of up to $100,000 per day for violations. Criminal penalties reach $5 million in fines and 20 years imprisonment for false certifications. Comments are due June 2, 2026. Final implementing regulations are required by July 18, 2026, with full enforcement no later than January 18, 2027.
The regulatory push follows a March 2026 FATF targeted report that found stablecoins accounted for 84% of all illicit virtual asset transaction volume in 2025 — roughly $129 billion of the $154 billion total. That data point was cited directly in the Treasury's rulemaking rationale.
The GENIUS Act — the Guiding and Establishing National Innovation for U.S. Stablecoins Act — was signed into law on July 18, 2025, after passing the Senate 68-30 and the House 307-122. It was the first federal stablecoin statute in U.S. history. The law set a 12-month deadline for implementing regulations.
Nine months later, four agencies moved in a 7-day window:
| Date | Agency | Action | |------|--------|--------| | April 3, 2026 | Treasury | Published state regulatory equivalence framework (three-tier system) | | April 7, 2026 | FDIC | Board approved NPR for FDIC-supervised PPSIs and insured depository institutions | | April 8, 2026 | FinCEN/OFAC | Joint NPR designating PPSIs as BSA financial institutions | | April 10, 2026 | Federal Register | FinCEN/OFAC rule formally published; comment period opens |
The comment period closes June 2, 2026. The GENIUS Act mandates final regulations by July 18, 2026 — exactly one year after enactment. Full enforcement begins no later than January 18, 2027. By July 2028, digital asset service providers are prohibited from offering non-compliant stablecoins.
The joint proposal treats PPSIs identically to traditional financial institutions under the Bank Secrecy Act. The core obligations:
AML/CFT Program Requirements:
Sanctions Compliance:
Operational Standards:
FinCEN stated that "compliance obligations and expectations should be focused on effectiveness" and that the requirements are designed to be "fit for purpose," according to the Treasury press release. The phrasing signals an intent to avoid the one-size-fits-all critique that dogged earlier crypto enforcement actions.
The FDIC and OCC proposals address prudential supervision rather than AML/CFT, but they layer additional requirements on top of the FinCEN/OFAC framework.
Reserve Requirements (Both Agencies):
Where the Agencies Diverge:
The FDIC proposes a maximum 40% reserve concentration at any single eligible financial institution. The OCC adds maturity and weighted-average requirements that the FDIC omits. On enforcement, the FDIC applies agency discretion for violations; the OCC mandates specific consequences including liquidation, redemption extension, and issuance prohibition. The OCC requires prior notice for changes of control; the FDIC does not.
The FDIC published 144 specific questions alongside its proposal. Treasury published 78. The volume of open questions — 222 in total — suggests the agencies recognize significant implementation ambiguity.
State-Level Issuers:
Under the Treasury's three-tier state equivalence framework, state-regulated issuers with up to $10 billion in outstanding stablecoin issuance can operate under state supervision, provided the state regime meets federal standards. Tier 1 requires alignment "in all substantive respects" with no material deviations. Tier 2 allows limited discretion but mandates outcomes "at least as stringent" as the federal framework. Tier 3 grants broader flexibility on supervision and enforcement, requiring only "similar to" and "consistent with" approaches.
No agency published a formal cost-benefit analysis with its proposal. That absence is notable.
For context: U.S. and Canadian financial institutions spent an estimated $61 billion on AML/CFT compliance in 2024, according to a LexisNexis risk solutions study. For large banks, AML costs represented less than 1% of operating expenses; for small community banks, the figure reached 2.4%.
Stablecoin issuers face a structurally different cost profile. According to compliance industry estimates cited by Dotfile, building internal compliance infrastructure from scratch requires $50-100 million in capital, 18-24 months to launch, and $10-20 million or more in annual operational costs. These figures apply to full-stack compliance operations including transaction monitoring on permissionless blockchains — a requirement with no direct analog in traditional banking.
The FinCEN proposal does offer one concession: smaller PPSIs may share compliance resources. The rule permits resource-sharing arrangements, potentially reducing per-issuer costs for entities below the $10 billion state threshold.
Penalty Structure:
| Violation | Civil Penalty | Criminal Penalty | |-----------|--------------|-----------------| | Unauthorized issuance or material violation | Up to $100,000 per day | Up to $1M fine + 5 years | | Knowing violation | Additional $100,000 per day | — | | False certification | — | Up to $5M fine + 20 years | | Misrepresentation of insured status | Up to $500,000 per violation | — |
Annual AML/sanctions certifications are required within 180 days of approval and yearly thereafter. Failure to submit a certification triggers license revocation.
The stablecoin market stood at $318.6 billion as of mid-April 2026. USDT held a $184 billion market capitalization with 57.85% market share, though its supply declined approximately $3 billion in Q1 2026 — the first quarterly net contraction since Q2 2022. USDC reached $78 billion, up 220% since late 2023.
The compliance framework favors entities with existing bank charters or bank affiliations. Circle, which has positioned USDC as regulation-first since its founding, already operates many of the required compliance functions. Bank entrants — Bank of America and JPMorgan have been cited as potential PPSI applicants — can layer stablecoin compliance onto existing BSA infrastructure at marginal cost.
Smaller issuers face a different calculation. The $50-100 million startup cost for compliance infrastructure, combined with $10-20 million in annual operating expenses, creates a floor that eliminates most of the 250-plus stablecoins currently in circulation. The rule may accelerate consolidation toward a handful of well-capitalized domestic issuers.
Offshore issuers face the most acute pressure. The GENIUS Act requires PPSIs to maintain U.S.-based operations, U.S.-based AML officers, and compliance with lawful orders including asset seizure. Entities that cannot or will not restructure operations to meet these standards risk losing access to U.S. exchanges and payment rails.
Tether, the largest stablecoin issuer, has responded with a two-product approach. On January 27, 2026, the company launched USAT (USA₮), a U.S.-regulated, dollar-backed stablecoin issued through Anchorage Digital Bank, N.A. — an OCC-regulated, federally chartered digital asset bank. USAT was built specifically to comply with the GENIUS Act framework, with 1:1 dollar backing and institutional-grade reserve oversight.
USDT continues to operate as Tether's primary product for non-U.S. markets. The company effectively bifurcated its stablecoin operations: USAT for U.S. regulatory compliance, USDT for everywhere else. Whether this structure satisfies the FinCEN/OFAC framework — particularly the requirements around secondary market monitoring and peer-to-peer transfer oversight — remains an open question in the comment period.
The Treasury's rulemaking rationale leaned heavily on a March 2026 FATF targeted report on stablecoins and unhosted wallets. The data points cited:
The FATF report recommended that jurisdictions strengthen controls specifically targeting stablecoin issuers, noting that "complex laundering techniques designed to obscure fund origins" had proliferated on permissionless networks. The FinCEN/OFAC proposal directly implements several FATF recommendations, including secondary market monitoring and the technical capability to freeze or burn tokens.
Whether the proposed controls can effectively address illicit flows on permissionless networks — where tokens move peer-to-peer without intermediary approval — is the central technical question the comment period will likely surface.
Four agencies, seven days: The coordinated GENIUS Act rulemaking between April 3-10 represents the most comprehensive stablecoin regulatory action in U.S. history, touching the full $318.6 billion market.
Bank-equivalent obligations: PPSIs will face the same BSA requirements as traditional banks — KYC, SARs at $5,000, sanctions screening, and independent compliance testing. The "fit for purpose" language signals some calibration, but the baseline is bank-level.
Compliance costs favor incumbents: The $50-100 million infrastructure cost and $10-20 million annual operating expense create barriers that advantage bank-affiliated issuers and large existing players like Circle. Most of the 250+ current stablecoins cannot absorb these costs.
FATF data drove the timeline: The 84% illicit activity figure from the March 2026 FATF report gave Treasury the evidentiary basis to move aggressively within the GENIUS Act's 12-month deadline.
Enforcement teeth are real: Civil penalties of $100,000 per day and criminal penalties up to $5 million with 20 years imprisonment elevate stablecoin compliance enforcement to the level of bank fraud statutes.
222 open questions: The combined FDIC (144) and Treasury (78) comment requests indicate significant implementation uncertainty. The final rules may differ materially from these proposals.
The April 2026 rulemaking wave transforms U.S. stablecoin regulation from a legislative framework into operational compliance requirements. The FinCEN/OFAC proposal is the centerpiece: it brings the $318.6 billion stablecoin market under the same anti-money laundering regime that has governed U.S. banks for decades.
The economic implications are straightforward. Compliance costs will compress margins for stablecoin issuers. Market structure will consolidate around entities that already possess bank-level compliance infrastructure or the capital to build it. Offshore issuers must restructure or exit U.S. markets. The 60-day comment period, closing June 2, will determine whether the final rules preserve the "fit for purpose" flexibility the agencies described or converge fully toward traditional banking requirements.
The data suggests the latter is more likely. When 84% of illicit virtual asset volume flows through stablecoins, regulators do not typically calibrate downward.