The enactment of the Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act) in July 2025 marked a defining moment in the regulation of payment stablecoins in the United States. The legislation established a comprehensive federal framework for payment stablecoin issuers while directing the U.S. Department of the Treasury, the Financial Crimes Enforcement Network (FinCEN), and other federal regulators to develop implementing regulations. In 2026, FinCEN issued a series of proposed rules designed to translate the GENIUS Act's requirements into practical compliance obligations in the areas of anti-money laundering (AML), countering the financing of terrorism (CFT), customer identification, and sanctions compliance.
These proposed rules are significant not because they create an entirely new AML framework, but because they formally extend existing Bank Secrecy Act (BSA) obligations to a new category of regulated entities: permitted payment stablecoin issuers (PPSIs). The issuances provide long-awaited regulatory clarity for stablecoin market participants while reinforcing a principle that has guided financial regulation for decades—innovative financial products do not eliminate the need for robust controls against illicit finance.
FinCEN's recent issuances under the GENIUS Act
In April 2026, FinCEN and the Office of Foreign Assets Control (OFAC) jointly proposed rules implementing the GENIUS Act's AML/CFT and sanctions compliance requirements. The proposed framework would treat PPSIs as financial institutions under the BSA and require them to establish risk-based AML programs tailored to the nature, scale, and complexity of their operations. The proposal also requires effective sanctions compliance programs and clarifies expectations regarding suspicious activity monitoring, reporting, and controls designed to mitigate illicit finance risks.
Subsequently, in June 2026, FinCEN, together with the federal banking agencies, issued a separate proposed rule addressing Customer Identification Program (CIP) requirements. This proposal implements the GENIUS Act's mandate that stablecoin issuers maintain effective procedures for identifying and verifying customers when opening accounts. Notably, the proposal largely mirrors existing CIP obligations applicable to banks and other financial institutions, adapting them to stablecoin issuance activities rather than creating a cryptocurrency-specific identification framework.
A particularly important aspect of both proposals is the distinction between primary-market and secondary-market activity. FinCEN has signaled that AML and CIP obligations primarily attach when issuers directly engage with customers through issuance, redemption, custody, conversion, or similar services. The agency generally avoids imposing compliance obligations on every secondary-market stablecoin transaction occurring on exchanges, decentralized platforms, or peer-to-peer networks.
Impact on prospective stablecoin issuers
For organizations considering entry into the stablecoin market, FinCEN's proposals provide clarity related to the required AML/CFT programs. While the GENIUS Act offers a clear path to regulatory legitimacy, it also imposes substantial obligations that closely resemble those faced by banks, money services businesses, and other regulated financial institutions.
Prospective issuers must now prepare to build comprehensive AML/CFT compliance infrastructures. This includes conducting enterprise-wide risk assessments, establishing written policies and procedures, developing customer due diligence processes, implementing transaction monitoring systems, filing Suspicious Activity Reports (SARs) when necessary, maintaining records, and ensuring appropriate governance and independent testing. Although many established fintech companies already operate under comparable frameworks, newer digital asset firms may face significant investment requirements to achieve compliance.
The proposed CIP requirements further elevate onboarding expectations. Stablecoin issuers will need to collect identifying information, verify customer identities using documentary or non-documentary methods, maintain records of verification activities, and monitor for discrepancies. Digital-native onboarding processes, including automated identity verification tools and blockchain analytics solutions, are expected to play a central role in meeting these obligations efficiently.
Re-emphasis of existing financial crime compliance principles
Perhaps the most notable feature of FinCEN's approach is how little of it is fundamentally novel. Rather than inventing an entirely separate compliance framework for digital assets, regulators have largely adapted long-standing BSA and sanctions principles to stablecoin issuance activities.
The core expectations placed on stablecoin issuers are familiar to compliance professionals across banking, securities, and payments sectors. Risk-based AML programs, customer identification, sanctions screening, recordkeeping, and suspicious activity reporting have existed for decades and remain foundational pillars of U.S. financial regulation.
The CIP proposal is a prime example. FinCEN specifically modeled the proposed requirements on existing bank CIP regulations, maintaining concepts such as customer identification, verification, record retention, and reliance on third parties. The emphasis remains on establishing a reasonable belief that the institution knows the true identity of its customers rather than introducing cryptocurrency-specific identity requirements.
Similarly, the AML proposal reinforces the importance of risk-based compliance management. Stablecoin issuers are expected to understand customer behavior, assess exposure to illicit finance threats, monitor transactions, and maintain controls proportionate to their risk profiles. These are the same expectations that regulators have long applied to banks, broker-dealers, and money transmitters.
The principal difference lies not in the nature of the requirements but in their application to blockchain-based payment instruments. Stablecoins introduce unique considerations related to pseudonymous transactions, digital wallet structures, cross-border transfers, and decentralized ecosystem participants. FinCEN's proposals seek to address these novel operational realities while preserving established AML principles.
What comes next?
The current rules remain in proposed form, meaning industry participants still have opportunities to influence final implementation through the regulatory comment process. Several questions remain unresolved, particularly regarding intermediated business models, wallet providers, embedded finance platforms, and the boundaries between primary-market and secondary-market activities. Regulators will likely receive substantial feedback on these issues before finalizing the framework.
Beyond FinCEN's rulemakings, additional guidance from the Office of the Comptroller of the Currency, Federal Reserve, FDIC, state banking regulators, and potentially Congress may further refine the regulatory environment. New York's recent efforts to align its stablecoin framework with the GENIUS Act likely foreshadow similar state-level implementation initiatives across the country.
Conclusion
FinCEN's recent GENIUS Act issuances represent the formal integration of payment stablecoin issuers into the U.S. financial crime compliance framework. The proposals provide regulatory clarity and legitimacy for stablecoin businesses while imposing rigorous AML, sanctions, and customer identification obligations. For prospective issuers, success will require substantial investment in compliance infrastructure, governance, and risk management capabilities. Yet the broader message from regulators is clear: payment stablecoins may be technologically innovative, but they remain financial products subject to longstanding expectations designed to protect the integrity of the financial system. The future of regulated stablecoins in the United States will therefore depend not only on technological innovation, but equally on the industry's ability to demonstrate effective compliance with the same foundational principles that govern the broader financial sector.