The U.S. Department of the Treasury on April 8, 2026, published a joint notice of proposed rulemaking (NPRM) through FinCEN and OFAC that would subject permitted payment stablecoin issuers (PPSIs) to the same anti-money laundering (AML) and sanctions compliance obligations as traditional banks un...
"President Trump is strengthening American leadership in digital financial technology. This proposal will protect the U.S. financial system from national security threats without hindering American companies' ability to forge ahead in the payment stablecoin ecosystem." — Scott Bessent, U.S. Secretary of the Treasury
The U.S. Department of the Treasury on April 8, 2026, published a joint notice of proposed rulemaking (NPRM) through FinCEN and OFAC that would subject permitted payment stablecoin issuers (PPSIs) to the same anti-money laundering (AML) and sanctions compliance obligations as traditional banks under the Bank Secrecy Act. The rule implements provisions of the GENIUS Act, signed into law by President Trump on July 18, 2025, following Senate passage (68-30) on June 17 and House approval (308-122) on July 17.
The proposed framework arrives as the stablecoin market reaches an all-time high of $318.6 billion in market capitalization. Total stablecoin transaction volume topped $28 trillion in Q1 2026 alone. Comments on the NPRM close June 9, 2026; final implementing regulations are due by July 18, 2026, with full enforcement beginning no later than January 18, 2027.
The economic implications are significant: compliance infrastructure — AML teams, monitoring technology, legal counsel, audit functions, sanctions programs, and on-chain transaction controls — costs millions annually to build and operate. These costs are largely fixed and do not scale with issuance, meaning smaller issuers face disproportionate burden relative to revenue.
The joint FinCEN-OFAC proposed rule designates PPSIs as "financial institutions" under the Bank Secrecy Act for the first time. According to the Federal Register filing (Document 2026-06963, published April 10, 2026), issuers must establish and maintain:
According to Sullivan & Cromwell's analysis of the proposal, FinCEN signaled it would generally not pursue enforcement against issuers that already have adequate programs in place — a carve-out that effectively advantages incumbents like Circle and Tether with existing compliance architecture over newer entrants.
The rule distinguishes between "primary market" and "secondary market" activities. Primary market activities include a PPSI interacting directly with users — issuing, converting, redeeming, repurchasing, burning, and reissuing stablecoins. Secondary market activities describe any payment stablecoin activity that does not directly involve the PPSI as a party to the transaction.
The most technically demanding aspect of the proposal requires PPSIs to maintain capabilities to block, freeze, and reject specific or impermissible transactions that violate federal or state laws. According to the Federal Register filing, this includes capabilities related to:
This requirement effectively mandates that issuers retain administrative control over their token contracts — an architecture already present in USDT and USDC contracts (both maintain blacklist functions) but absent from many smaller or more decentralized stablecoin designs.
According to PwC's April 13, 2026 analysis, the technical requirements create a clear demarcation: issuers must be able to programmatically enforce compliance at the smart contract level, not merely at the issuer-facing interface.
The OFAC component introduces what may be the most contentious provision. According to Elliptic's regulatory analysis, a PPSI must prevent its stablecoin from being issued to or used by sanctioned parties in secondary markets — meaning the issuer must not allow OFAC-sanctioned persons, or parties located in sanctioned jurisdictions such as Iran, to interact with its smart contracts to facilitate payments, including in peer-to-peer (P2P) transactions between unhosted wallets.
This extends issuer liability beyond direct customer relationships into the broader ecosystem of transfers they do not control. The NPRM indicates that PPSIs can leverage blockchain analytics capabilities to ensure sanctions compliance, including by programming smart contracts to identify and prevent transactions involving wallets associated with OFAC-sanctioned parties.
Privacy advocates and trade groups are expected to contest how customer due diligence and travel-rule-equivalent requirements apply to retail-scale transactions during the 60-day public comment period, according to legal analyses by Sullivan & Cromwell and King & Spalding.
The GENIUS Act creates a tiered structure based on issuance size:
Federal oversight (OCC or Federal Reserve): Required for issuers with more than $10 billion in outstanding stablecoins. Currently, this captures only Tether (USDT: $184.2 billion market cap) and Circle (USDC: $77.3 billion market cap).
State oversight option: Available to issuers with $10 billion or less in outstanding stablecoins, provided the state regulatory regime is "substantially similar" to the federal framework as determined by the Stablecoin Review Commission (SCRC). Treasury issued a separate NPRM on April 10, 2026, establishing principles for acceptable state-level regimes.
Transition requirement: If a state-supervised issuer crosses the $10 billion threshold, it must obtain federal registration within 360 days or cease issuing new stablecoins until capitalization falls below the threshold.
According to the Conference of State Bank Supervisors (CSBS), this framework attempts to preserve existing state money-transmitter oversight for smaller issuers while creating federal uniformity at scale.
The compliance infrastructure Treasury requires — AML teams, monitoring technology, legal counsel, audit functions, sanctions programs, on-chain transaction controls — costs millions per year to build and operate. According to analysis published by RWA Times, these costs are largely fixed; a $500 million issuer bears roughly the same compliance burden as a $50 billion one, on a fraction of the revenue.
For context, according to a separate webthreepedia comparative analysis, crypto compliance costs have become one of the industry's largest line items. The GENIUS Act framework adds a new layer specifically for stablecoin issuers that mirrors the compliance apparatus of deposit-taking institutions.
Estimated annual compliance costs for a mid-size PPSI, based on analogues from banking compliance, include:
These figures suggest that only issuers generating substantial fee revenue (typically requiring billions in outstanding supply) can sustainably absorb compliance costs — a dynamic consistent with the broader finding that 85-90% of blockchain ecosystem value flows remain subsidy-driven rather than self-sustaining.
The stablecoin market reached a record $318.6 billion in total capitalization as of mid-April 2026. Key metrics:
| Metric | Value | |--------|-------| | Total stablecoin market cap | $318.6B (ATH) | | USDT market cap | $184.2B (57.85% share) | | USDC market cap | $77.3B (24.3% share) | | Q1 2026 transaction volume | $28T+ | | 2025 full-year volume | $35T | | Estimated real-world payments (non-trading) | ~1% of volume | | Treasury Sec. Bessent's 5-year projection | $3.7T market |
According to CoinDesk's analysis, stablecoins processed more than $35 trillion in transactions in 2025, but only approximately 1% of that reflected real-world payments. The remainder consisted primarily of trading, internal fund shuffling, and automated blockchain activity.
Real-world payment categories, according to McKinsey's 2026 stablecoin report, include: B2B transactions ($226 billion annually), global payroll and remittances ($90 billion), and capital markets settlement ($8 billion).
Secretary Bessent has projected the global market for U.S. dollar-backed stablecoins could grow to $3.7 trillion within five years under the GENIUS framework — a scenario he argues would "drive demand from the private sector for US Treasuries, which back stablecoins."
Key dates:
According to legal analyses from Gibson Dunn, King & Spalding, and Arnold & Porter, the rulemaking creates several immediate compliance imperatives for existing issuers:
FinCEN indicated it will not pursue immediate enforcement against issuers that demonstrate existing adequate programs — effectively creating a first-mover advantage for Circle and Tether, which already maintain blacklist functions and compliance teams at scale.
The Treasury's proposed rule represents the conversion of stablecoin issuers from lightly regulated fintech entities into fully supervised financial institutions. The economic logic is straightforward: a $318.6 billion market processing $28 trillion quarterly cannot operate outside the BSA/OFAC compliance perimeter that governs every other entity touching U.S. dollar flows at scale.
The compliance cost structure — millions annually in fixed overhead — will accelerate market concentration around the two dominant issuers already capitalized to absorb it. Smaller issuers face a binary outcome: either secure sufficient scale (and revenue) to justify compliance expenditure, or exit the market. The $10 billion state-oversight threshold provides a lower-cost on-ramp, but "substantially similar" requirements ensure the compliance floor remains elevated regardless of regulatory pathway.
The secondary market sanctions obligation is the provision most likely to generate industry opposition during the comment period. Requiring issuers to police P2P transfers between unhosted wallets — transactions the issuer does not intermediate — tests the technical boundaries of on-chain compliance and raises questions about feasibility at the protocol level.
Whether this framework ultimately strengthens or constrains dollar-stablecoin growth depends on implementation calibration over the next nine months. The Treasury has signaled it wants the market to reach $3.7 trillion. The question is whether bank-grade compliance costs become the mechanism that ensures only a handful of issuers participate in that growth.