OCC finalises GENIUS Act rules effective 18 January 2027
The framework covers reserves, redemptions, custody, capital and supervision, while BSA/AML and sanctions requirements will come separately.
The Office of the Comptroller of the Currency (OCC) issued its final GENIUS Act rule on 21 October 2026. It will take effect on 18 January 2027, the effective date of the Guiding and Establishing National Innovation for U.S. Stablecoins Act.
The rule implements the payment stablecoin framework for entities within the OCC’s jurisdiction. It covers national banks and their subsidiaries, federal savings associations and their subsidiaries, federal branches and their subsidiaries, foreign payment stablecoin issuers, non-bank entities seeking or holding federal qualified issuer status, and state-qualified issuers where the OCC has regulatory or enforcement authority under sections 4 or 7 of the Act.
This is the shift from statutory permission to an operating rulebook. The Act generally prohibits anyone other than a permitted payment stablecoin issuer from issuing a payment stablecoin in the United States. It also restricts digital asset service providers from offering or selling a payment stablecoin to a person in the United States unless the issuer is permitted or is a foreign issuer meeting the Act’s conditions.
A new OCC rulebook and supervisory perimeter
Most of the requirements sit in a new 12 CFR 15. It addresses:
- permitted activities;
- reserve assets;
- redemption;
- risk management;
- audits, reports and supervision;
- state-qualified issuers transitioning to the federal framework;
- custody;
- applications and registrations;
- examination and supervision of foreign issuers;
- revocation or rescission of approval; and
- capital and an operational backstop.
The rule also revises the OCC’s capital adequacy standards in 12 CFR 3, prompt corrective action rules in 12 CFR 6, assessment-of-fee rules in 12 CFR 8, and practice and procedure rules in 12 CFR 19.
The OCC’s framework therefore reaches beyond whether an issuer may launch a token. It creates continuing requirements for reserve management, redemption operations, risk controls, reporting, examinations and possible loss of approval. Custody is also brought into the framework for certain activities conducted by OCC-supervised entities.
The GENIUS Act also assigns the OCC regulatory or enforcement authority over certain state-qualified issuers, rather than limiting the federal perimeter to national-bank subsidiaries. Foreign issuers subject to the OCC’s jurisdiction will face examination and supervision requirements under the new framework.
The rule is not the complete compliance framework
The most important boundary for compliance teams is what the final rule leaves out. The OCC says it addresses all regulations required under the GENIUS Act except those concerning the Bank Secrecy Act, anti-money laundering and Office of Foreign Assets Control sanctions.
Those requirements will be addressed in a separate rulemaking coordinated with the Department of the Treasury. The OCC had already issued a June proposal on BSA, AML/CFT and sanctions standards for permitted payment stablecoin issuers, but the 21 October final rule does not make those standards final.
In Atlas’s view, firms should therefore treat 18 January as the start of the OCC’s issuer and prudential framework, not as the date on which every GENIUS Act compliance question is settled. An issuer that has mapped reserves, redemptions, custody, capital and risk controls against the final rule will still need to track the separate AML and sanctions rulemaking.
Applications and reporting are running in parallel
The OCC issued separate waiver and application guidance on 21 October ahead of the January approval requirement. It also revised proposed weekly and quarterly reporting forms for payment stablecoin issuers, with proposed 2027 start dates.
Those documents give firms additional material for preparing for the approval, waiver and reporting processes that accompany the final framework. The final rule itself sets out the relevant application and registration topics, as well as audits, reports and supervision.
The framework becomes effective on 18 January 2027.
Permanent link to this Atlas analysis
Related Atlas analysis
Continue with coverage connected by market, topic and operating context.
- United StatesBank of America admits wilful BSA breaches as Treasury agencies impose over $1.21bnThe bank failed to report more than $5bn of suspicious activity on time, and OFAC gave no credit for remediation or cooperation in its $11.66m settlement.
- MaltaMFSA's Q3 round-up finds weak oversight and board reporting across seven reviewsBanks' own ICAAP assessments diverged from the MFSA's, and fund managers' boards got only high-level outsourcing reports; most expectations say "should", a few say "must".
- ItalyADM doubles completion period and narrows tracking for Article 110(6)(a) machinesThe changes take effect on 1 November, moving the post-decommissioning period from six months to one year.
Continue with Atlas
Move from this development into the relevant research, comparison and workflow.