On April 8, 2026, the U.S. Department of the Treasury published a joint Notice of Proposed Rulemaking (NPRM) from the Financial Crimes Enforcement Network (FinCEN) and the Office of Foreign Assets Control (OFAC) that would, for the first time, classify permitted payment stablecoin issuers (PPSIs)...
"President Trump is strengthening American leadership in digital financial technology." — Scott Bessent, U.S. Secretary of the Treasury, April 8, 2026
On April 8, 2026, the U.S. Department of the Treasury published a joint Notice of Proposed Rulemaking (NPRM) from the Financial Crimes Enforcement Network (FinCEN) and the Office of Foreign Assets Control (OFAC) that would, for the first time, classify permitted payment stablecoin issuers (PPSIs) as financial institutions under the Bank Secrecy Act (BSA). The 85-page rule, published in the Federal Register on April 10 as document 2026-06963, requires stablecoin issuers to build anti-money laundering, counter-terrorism financing, and sanctions enforcement directly into their smart contract infrastructure. Comments are due June 9, 2026. If finalized, issuers must comply within 12 months of the final rule — placing the operational deadline around January 2028.
The rule arrives as the stablecoin market exceeds $320 billion in total supply, with Tether's USDT at $188 billion and Circle's USDC at $78.25 billion as of mid-April 2026. It also arrives days after Tether froze $344 million in USDT across two Tron addresses on April 23 — the largest single stablecoin freeze in history — in coordination with OFAC and U.S. law enforcement under Operation Economic Fury targeting Iran-linked wallets. The timing underscores the practical stakes: the Treasury is not proposing a theoretical framework. It is codifying enforcement capabilities that some issuers already exercise voluntarily into a binding legal obligation for all.
Four banking trade associations — the American Bankers Association, Bank Policy Institute, Consumer Bankers Association, and Independent Community Bankers of America — sent a joint letter on April 21 requesting that Treasury pause comment deadlines until the Office of the Comptroller of the Currency (OCC) finalizes its own GENIUS Act framework. The OCC's comment period closes May 1.
The GENIUS Act, signed into law on July 18, 2025, delegated implementation to multiple federal agencies. By April 2026, five separate NPRMs are active simultaneously:
OCC Framework (published February 25, 2026; comments due May 1): Establishes the first federal regulatory framework governing payment stablecoins, organized into five subparts — definitions, permissible activities, custody standards, application procedures, and capital adequacy. Nonbank applicants must submit the same biographical and financial disclosures used in traditional bank chartering, including FBI fingerprint background checks.
Treasury State Equivalence Principles (published April 3, 2026; comments due June 2): Sets criteria for evaluating whether state-level stablecoin regulatory regimes meet federal standards.
FinCEN/OFAC AML and Sanctions Rule (published April 10, 2026; comments due June 9): The subject of this report. Classifies PPSIs as BSA financial institutions, mandates AML/CFT programs and sanctions compliance.
FDIC Requirements (published April 10, 2026; comments due June 9): Imposes requirements on FDIC-supervised PPSIs and insured depository institutions.
SEC "Reg Crypto" (submitted to OIRA, pending publication): Covers fundraising and startup exemptions — not stablecoin-specific but overlapping in scope.
The simultaneous publication of overlapping rules from four different agencies creates what banking lobbyists describe as an "interlocking puzzle" that cannot be assessed in isolation. This is the core of the banking industry's request for a comment period pause.
The proposed rule designates PPSIs as a new category of financial institution under the BSA, alongside banks, broker-dealers, and money services businesses. The practical consequences:
AML/CFT Program Requirements:
Transaction Reporting:
Sanctions Compliance:
The framework largely mirrors obligations already imposed on banks and traditional MSBs. FinCEN noted that most PPSIs already registered as MSBs "should be able to adapt" to the new requirements. The operative word is "adapt" — the rule expands obligations, particularly around sanctions compliance and smart contract-level enforcement, beyond what MSB registration previously required.
The rule draws a sharp line between primary and secondary market activity — a distinction with significant operational and philosophical implications.
Primary market activity refers to direct interactions between the PPSI and stablecoin holders: issuance, redemption, and direct transfers. PPSIs must apply full AML/CFT and sanctions compliance to these transactions.
Secondary market activity refers to transactions that do not directly involve the PPSI as a counterparty — peer-to-peer transfers, exchange trades, DeFi protocol interactions. The proposed rule does not require PPSIs to monitor secondary market transactions as part of their AML/CFT programs or to file SARs related to such activity.
However, the exemption is narrower than it appears. PPSIs must still "maintain technical capabilities to block, freeze, and reject impermissible transactions" on the secondary market via their smart contracts. They must also comply with lawful orders — subpoenas, sanctions designations — that relate to secondary market activity.
The rule clarifies that a smart contract processing a secondary transfer does not constitute a "transaction" through the PPSI. This is a meaningful legal distinction. It means a stablecoin transfer on Uniswap, for example, would not trigger SAR filing obligations for the issuer — but the issuer must still be technically capable of freezing that wallet if ordered to do so.
The most structurally significant aspect of the NPRM is its requirement that compliance be embedded directly into stablecoin smart contracts. According to PYMNTS reporting on the Treasury's framing, stablecoin issuers are expected to "architect systems where compliance is built into the infrastructure itself, and enforcement is automatic, continuous and inseparable from the operation of the network."
This amounts to a federal mandate for programmable financial enforcement. The practical requirements:
This is not a new capability for the largest issuers. Tether has frozen $4.4 billion across more than 2,300 cases globally, including over $2.1 billion connected to U.S. authorities, according to the company's April 23 disclosure. Circle's USDC has included blocklisting functionality since launch. But smaller or newer issuers entering under the GENIUS Act framework will need to build these capabilities from scratch and demonstrate them during the application process.
The rule also explicitly recognizes "innovative technologies" as a mitigating factor in enforcement proceedings. PPSIs that deploy AI, federated learning, or advanced monitoring tools may receive more favorable treatment during supervisory review. This provision appears designed to incentivize technological investment rather than penalize early-stage compliance gaps — an unusual concession in sanctions enforcement policy.
FinCEN set the SAR filing threshold for PPSIs at $5,000 — identical to the threshold for banks and significantly higher than the $2,000 threshold applied to traditional money services businesses.
The justification, according to the NPRM: primary market stablecoin transactions below $5,000 are rare. Minting and redemption typically occur in large denominations by institutional counterparties, exchanges, and treasury management operations. A $2,000 threshold would generate substantial reporting volume with limited intelligence value.
This decision has structural implications. It aligns PPSIs closer to the banking regulatory tier than the MSB tier, consistent with the GENIUS Act's broader intent to treat stablecoin issuers as a new class of prudentially regulated financial institution rather than an extension of the money transfer industry.
The proposed rule creates an entirely new section of the Code of Federal Regulations — 31 CFR Part 502 — specifically for PPSI sanctions compliance. This is the first time OFAC has proposed a binding regulatory obligation requiring any specific category of U.S. persons to adopt and maintain a formal sanctions compliance program.
Previously, sanctions compliance was legally required of all U.S. persons under OFAC's general authorities, but there was no regulatory mandate specifying what an "effective" program must look like. The new Part 502 codifies OFAC's 2019 Framework for Compliance Commitments into binding law for PPSIs, requiring five elements:
For the broader sanctions compliance industry, this sets a precedent. If OFAC can mandate formal compliance program structures for stablecoin issuers, the same framework could theoretically extend to other digital asset market participants — exchanges, custodians, or DeFi protocols — through future rulemaking.
Four major banking trade organizations — ABA, BPI, CBA, and ICBA — sent a joint letter to Treasury, the FDIC, FinCEN, and OFAC on April 21, 2026, requesting that comment deadlines be extended. Specifically, they asked that deadlines be pushed to 60 days after the OCC issues its final rule.
Their stated reasoning: all three active NPRMs (Treasury state equivalence, FDIC requirements, and FinCEN/OFAC AML/sanctions) are "inextricably tied" to the OCC framework, which remains unfinished. Without knowing how the OCC will regulate nonbank stablecoin issuers, banks argue they cannot meaningfully assess how the other rules interact.
The request also carries strategic subtext. Banks are simultaneously positioning to issue their own stablecoins under the GENIUS Act, and several (including JPMorgan and its existing JPM Coin infrastructure) are evaluating conversion paths. A delayed comment period gives banks more time to assess competitive dynamics and ensure the regulatory framework does not disadvantage incumbent institutions relative to crypto-native issuers.
As of this writing, Treasury has not responded to the extension request. The June 9 deadlines for the FinCEN/OFAC and FDIC rules remain in effect.
The $320 billion stablecoin market is dominated by two issuers: Tether (USDT, $188 billion, 57.96% share) and Circle (USDC, $78.25 billion). Together they account for approximately 83% of total stablecoin supply. Both already maintain compliance infrastructure that approximates the proposed requirements.
The operational burden falls disproportionately on smaller and prospective issuers. The GENIUS Act creates a pathway for state-chartered and OCC-chartered entities to issue stablecoins, which could bring banks, fintechs, and new entrants into the market. For these players, the combined cost of AML/CFT programs, sanctions compliance infrastructure, smart contract engineering for freeze/block capabilities, independent auditing, and staff training represents a material barrier to entry.
The framework also has implications for decentralized stablecoins. The GENIUS Act's definition of "permitted payment stablecoin" includes any digital asset pegged to a fixed value and redeemable by the issuer. DAI (now USDS), issued by MakerDAO/Sky, operates through decentralized governance with no single entity acting as issuer. The proposed rule addresses PPSIs — entities — and its applicability to decentralized issuance models remains legally ambiguous. FinCEN did not address this question in the NPRM. The comment period may surface industry positions on this gap.
Meanwhile, the operational proof-of-concept already exists. Tether's April 23 freeze of $344 million in USDT, executed in coordination with OFAC under Operation Economic Fury, demonstrated real-time, large-scale programmable enforcement on the Tron network. The company reports cooperation with more than 340 law enforcement agencies across 65 countries. The proposed rule would make this voluntary cooperation a legal requirement for all issuers.
The FinCEN/OFAC NPRM published April 10, 2026, would classify stablecoin issuers as BSA financial institutions for the first time, with AML/CFT program and sanctions compliance obligations mirroring those of banks.
OFAC's proposed 31 CFR Part 502 creates the first binding regulatory mandate requiring any category of U.S. persons to maintain a formal sanctions compliance program — a precedent that extends beyond stablecoins.
Issuers must embed freeze, block, and reject capabilities directly into smart contract code — codifying "programmable financial enforcement" as a federal regulatory requirement.
The SAR threshold was set at $5,000 (bank-tier, not MSB-tier), reflecting the institutional nature of primary market stablecoin transactions.
Secondary market transactions are exempt from SAR filing but not from freeze/block obligations under lawful orders — a narrow exemption with broad technical requirements.
Four banking trade groups requested a comment deadline extension on April 21, citing inability to assess the rule without a finalized OCC framework. Treasury has not responded.
Compliance costs fall disproportionately on smaller and new entrants. Tether and Circle already operate at or near the proposed standards. The rule functions as a competitive moat for incumbents.
The rule's applicability to decentralized stablecoin issuers (e.g., DAI/USDS) remains unaddressed — a gap likely to generate significant comment period debate.
The FinCEN/OFAC proposed rule translates the GENIUS Act's legislative framework into operational reality for a $320 billion market. Its core demand — that stablecoin issuers architect sanctions enforcement into their smart contracts — makes the United States the first major jurisdiction to require programmable financial compliance by law. The rule does not ask issuers to report on enforcement. It asks them to be the enforcement layer.
For the two dominant issuers, the compliance burden is incremental. For the dozens of prospective entrants enabled by the GENIUS Act's new charter pathways, it represents a substantial infrastructure investment before a single stablecoin can be minted. Whether this concentrates the market further around Tether and Circle or attracts well-capitalized banking entrants with existing compliance infrastructure will depend on how the OCC, FDIC, and Treasury resolve the remaining open questions before their respective final rules are published.
The comment period closes June 9, 2026. Final rules are expected by late 2026 or early 2027, with a 12-month implementation window thereafter.