The Office of the Comptroller of the Currency (OCC) issued its final rule implementing the Guiding and Establishing National Innovation for U.S. Stablecoins Act, commonly known as the GENIUS Act, on October 21, 2026. The rule establishes requirements for payment stablecoin issuers under the OCC's jurisdiction and certain related activities conducted by supervised institutions. The GENIUS Act became law on July 18, 2025, establishing a federal framework for payment stablecoins in the United States. The final rule and the Act take effect on January 18, 2027.
For stablecoin issuers, digital asset service providers and financial technology companies, the development creates a clearer regulatory framework for issuance, reserve management, redemption, governance and supervision. However, businesses should distinguish between requirements finalized in this rule and additional provisions that remain subject to separate rulemaking. The publication does not mean every component of the U.S. stablecoin compliance framework has been completed.
What Does the OCC's Final Rule Require?
The final rule addresses payment stablecoin activities, reserve assets, redemption, risk management, audits, reporting, custody, capital requirements, applications and registration procedures. These provisions establish operating standards for covered issuers and provide the OCC with a framework for assessing their financial condition, business risks and ability to meet obligations.
Reserve management is a central element. Issuers must manage reserve assets in accordance with applicable requirements and maintain operational processes that support their redemption obligations. For users and business partners, confidence in a stablecoin depends not only on market demand but also on whether the issuer can manage its reserves appropriately and honor redemption commitments.
Risk management extends beyond financial reporting. Issuers should assess operational vulnerabilities, third-party dependencies, custody arrangements, internal controls and audit processes. Compliance documentation must reflect how the business actually operates. A policy document alone is not sufficient if day-to-day procedures fail to follow it.
The rule also makes governance and supervision important parts of the compliance process. Covered businesses should be able to explain who is responsible for key decisions, how risks are escalated, how records are maintained and how management verifies that relevant controls are functioning.
How Should Issuers Prepare for January 18, 2027?
The final rule takes effect on January 18, 2027. Covered institutions should use the time before implementation to assess whether their activities fall within the OCC’s jurisdiction and identify gaps between existing operations and the applicable requirements.
Preparation can begin with three priorities. First, issuers should maintain reliable reserve records and ensure that asset information, reconciliation results and supporting documentation can be verified. Second, they should review redemption procedures, including processing timelines, assigned responsibilities, exception handling and customer communications. Third, they should strengthen governance, internal approvals, audit arrangements and third-party risk management.
Businesses should also monitor application and waiver procedures. On October 21, the OCC published separate guidance on applications and waiver requests. However, the agency stated that it would announce when it begins accepting applications after receiving the necessary approval for its application information collection. Issuers should therefore avoid assuming that all application channels are already open simply because the final rule has been published.
Cross-border businesses need an additional assessment. They should determine whether their activities fall within the rules for foreign payment stablecoin issuers and obtain appropriate legal advice where jurisdictional questions arise. Early preparation can help reduce operational disruption as the effective date approaches.
Why AML and Sanctions Compliance Still Require Attention
The final rule does not cover every regulatory provision required under the GENIUS Act. The OCC specifically stated that rules concerning the Bank Secrecy Act, anti-money laundering requirements and sanctions administered by the Office of Foreign Assets Control will be addressed through separate rulemaking in coordination with the U.S. Department of the Treasury.
Issuers should not interpret the announcement as confirmation that all stablecoin-related AML and sanctions requirements have been finalized. They should continue monitoring regulatory developments and maintain risk-based procedures for customer due diligence, transaction monitoring, suspicious activity escalation, sanctions screening and recordkeeping, as applicable to their businesses.
Know Your Transaction (KYT) tools can complement these controls by examining blockchain transaction flows, identifying exposure to high-risk addresses and helping investigators trace potentially suspicious movements of funds. Such analysis can support risk assessments, but it does not replace required customer identification, internal controls or regulatory reporting obligations.
The OCC's final rule marks an important step in implementing the U.S. payment stablecoin framework. Issuers should treat January 18, 2027, as a key preparation deadline while continuing to track application guidance and forthcoming AML and sanctions rules. A clear distinction between finalized requirements and pending regulatory work will help businesses avoid compliance gaps and build more reliable operating procedures.