GENIUS Act Stablecoin Compliance: A 2027 Roadmap for Issuers

By Chanté Eliaszadeh | Updated June 2026

If you issue a dollar stablecoin, the first thing to get right about the GENIUS Act is the calendar. The Act became law on July 18, 2025, but it did not switch on that day, and it is not in force now.¹ Its core obligations take effect on the earlier of January 18, 2027 or 120 days after federal regulators finalize their implementing rules --- and as of mid-2026 not one of those rules is final.¹ The compliance cliff is real, but it is in 2027, and the rulebook that will define what compliance means is still being written. That gap is the opportunity: issuers who use 2026 to position --- rather than sprint toward a date that has not arrived --- will reach the deadline on their own terms.

This guide lays out what the GENIUS Act requires, the three registration pathways, the reserve and disclosure rules as the statute actually writes them, and what an issuer should be doing now while the rules are still in proposed form.

Key Takeaways

• The Act is law, but not yet in force. Signed July 18, 2025; effective the earlier of January 18, 2027 or 120 days after final rules. A separate phase-in for secondary-market distribution runs to July 18, 2028.¹
• The rules are still proposed. Five federal agencies have issued proposed rules; none is final as of mid-2026, and the statutory deadline for regulators to finalize is July 18, 2026.²³
• Three registration pathways: a federal qualified nonbank issuer (OCC), an insured-bank subsidiary, or a state-qualified issuer whose home-state regime is certified “substantially similar.” An issuer above $10 billion outstanding must move to the federal framework within 360 days.¹
• Reserves are tightly limited: cash and central-bank balances, insured deposits, Treasuries maturing in 93 days or less, overnight Treasury repos, and government money-market funds. Corporate bonds, commercial paper, and crypto are out.¹
• Penalties are serious but smaller than widely reported: up to $100,000 per day of civil penalty for unregistered domestic issuance (the $1 million-per-day figure applies to foreign issuers), and up to $1 million plus five years for a knowing criminal violation.¹

When Does the GENIUS Act Actually Take Effect?

The GENIUS Act’s obligations take effect on the earlier of January 18, 2027 --- eighteen months after the July 18, 2025 enactment --- or 120 days after the primary federal regulators issue final implementing rules.¹ Because no final rule has issued, the operative date today is the January 18, 2027 backstop. A distinct, later phase-in governs secondary-market distribution: digital-asset service providers handling stablecoins face their own compliance date of July 18, 2028.¹

The rulemaking is the part to watch. The statute directed the primary federal regulators to issue implementing regulations within one year of enactment --- by July 18, 2026 --- and the agencies have moved, but only to the proposal stage. By mid-2026, Treasury, the OCC, the FDIC, and FinCEN had each published a notice of proposed rulemaking covering state-regime certification, federal nonbank issuers, bank-subsidiary standards, and AML/sanctions obligations.²³ None is final. The Federal Reserve had not published a proposed rule on its piece of the framework as of mid-2026.

Do not build a compliance plan against a fixed checklist yet --- the checklist is still in proposed form. Build against the statute, track the proposed rules in your pathway, and keep the plan flexible until the final rules land.

Does the GENIUS Act Apply to Your Stablecoin?

The Act governs “payment stablecoins” --- tokens designed to maintain a stable value against a fixed monetary amount and used for payment or settlement. If that describes your product, you must issue through one of the Act’s permitted pathways or stop offering it to U.S. persons. If it does not, the GENIUS Act may not be your statute at all. A token that pays yield to holders, runs on algorithmic stabilization, or is backed by crypto collateral generally falls outside the payment-stablecoin perimeter --- and lands instead in securities-law territory. For that fork, see SEC Innovation Exemption: A Founder’s Decision Guide.

The threshold question is whether your token is a payment instrument or an investment product. The GENIUS Act is the payment-instrument regime; a yield-bearing or crypto-collateralized token is somebody else’s problem --- usually the SEC’s.

What Reserves Does the GENIUS Act Require?

A permitted payment stablecoin must be backed one-to-one by a short, liquid, and exhaustively enumerated set of reserve assets. The statute permits only: U.S. currency and Federal Reserve balances; demand deposits at insured depository institutions; U.S. Treasury securities with a remaining maturity of 93 days or less; overnight repurchase agreements backed by those short Treasuries; and government money-market funds.¹ The list is exclusive --- anything not on it is prohibited, which rules out corporate debt and equity, municipal bonds, commercial paper, and crypto assets.

The 93-day cap is the detail issuers most often get wrong, and it is the one that bites: a reserve book built around six-month or one-year Treasuries does not comply, and unwinding longer-duration positions takes planning. Reserves must also be held bankruptcy-remote and legally segregated from the issuer’s operating funds, which means custody arrangements and account structures designed so that reserves are never available to the issuer’s general creditors.¹

If your reserves include corporate bonds, longer-duration Treasuries, money-market positions outside the government-fund category, or any crypto collateral, that book has to be rebuilt before you can issue a permitted payment stablecoin. The 93-day maturity ceiling is the constraint to design around.

Which Registration Pathway Fits You?

The GENIUS Act offers three ways to become a permitted issuer, and the choice drives your regulator, your capital posture, and your timeline.¹

• Federal qualified nonbank issuer. A nonbank can seek approval from the OCC to issue as a federal qualified payment stablecoin issuer --- one primary federal regulator, nationwide reach, and the heaviest federal supervision.
• Insured-depository-institution subsidiary. A subsidiary of an insured bank issues under the bank’s primary federal regulator (OCC, Federal Reserve, or FDIC). This fits issuers already inside, or able to access, a chartered bank.
• State-qualified issuer. An issuer can stay under its home-state regime if that regime is certified “substantially similar” to the federal standard by the Stablecoin Certification Review Committee --- a federal body chaired by the Treasury Secretary with the Federal Reserve and FDIC. As of mid-2026 the Committee has not certified any state regime, and state-certification submissions are due by July 18, 2026.¹

The pathways are not permanent. An issuer whose stablecoin in circulation exceeds $10 billion must transition to the federal framework within 360 days, or stop issuing, absent a waiver.¹ So the state route is a viable home for a smaller or regional issuer, but a fast-growing one should plan its federal transition before it hits the threshold.

The strategic shape of the federal-versus-state decision is familiar: the federal route offers a single regulator and nationwide certainty at the cost of higher capital and more intensive examination; the state route offers a lower entry cost and a closer supervisory relationship at the cost of a ceiling and an eventual forced migration if you scale. What has changed from the early commentary is that none of these pathways is open for business yet --- the OCC’s nonbank-issuer rule and the state-certification rule are both still proposals.

Pick your target pathway now and build toward it, but file when the rule that governs it is final --- not before. An issuer that expects to cross $10 billion should design for the federal framework from the start rather than migrate under a 360-day clock later.

What Are the Disclosure, Attestation, and Audit Duties?

Every permitted issuer owes ongoing transparency, but the heaviest audit obligation is reserved for the largest issuers. Three duties form the core.¹ First, monthly reserve disclosure: the issuer must publish, each month, the composition of its reserves. Second, examination: that monthly reserve report must be examined by a registered public accounting firm, and the issuer’s CEO and CFO must certify it. Third --- and only for the largest issuers --- annual audited financial statements: an issuer with more than $50 billion in stablecoins outstanding that is not already an SEC-reporting company must produce audited annual financials.¹

The distinction matters for budgeting. A mid-size issuer owes monthly reserve reporting and examination, not a full annual financial-statement audit; the universal-annual-audit framing that circulated in early commentary overstated the obligation for all but the $50-billion-plus issuers.

Build for monthly reserve reporting and examination as the baseline every issuer owes. Treat the full annual financial-statement audit as a large-issuer obligation that arrives at $50 billion outstanding --- size your compliance budget to where you actually are.

What Are the Penalties for Non-Compliance?

Issuing a payment stablecoin in the United States without GENIUS Act authority carries a civil penalty of up to $100,000 per day.¹ That is the figure for domestic unregistered issuance; the higher $1,000,000-per-day penalty that appears in some summaries is the statute’s penalty for foreign issuers, not domestic ones, and conflating the two overstates the domestic exposure tenfold. On the criminal side, a person who knowingly issues a payment stablecoin in violation of the Act may be fined up to $1,000,000 per violation, imprisoned up to five years, or both.¹ There is no separate multimillion-dollar, ten-year criminal tier --- a figure that has circulated but appears nowhere in the Act.

The practical exposure is still substantial, and it compounds daily, but it should be sized to the real numbers. Beyond statutory penalties, the market consequences --- exchange delistings, lost banking relationships --- are what tend to end a non-compliant issuer, and those operate regardless of the penalty math.

The honest civil number for unregistered domestic issuance is up to $100,000 per day, not $1 million. Size your risk to the statute, not to the scariest figure in circulation --- and remember the market consequences bite before the penalties do.

What Should You Actually Be Doing in 2026?

The 2027 effective date is far enough away that a panic sprint is the wrong response and doing nothing is also wrong. The work that pays off now is the work that does not depend on the final rules: a reserve-composition gap analysis against the 93-day standard, a decision on your target registration pathway, the custody and segregation architecture, and the governance and disclosure plumbing you will need regardless of how the rules land. Hold the rule-specific steps --- the actual application, the precise examination procedures --- until the governing rule is final, and track the proposed rule in your pathway so you are ready to file when it is.

Three developments worth watching as you plan: the five proposed rules moving toward their July 18, 2026 finalization deadline; whether and when the Stablecoin Certification Review Committee certifies any state regime; and the federal charter activity already underway --- the OCC conditionally approved several national trust-bank charters for digital-asset firms in December 2025, an early signal of how the federal pathway will take shape.⁴

The high-value 2026 work is rule-independent: fix your reserves, choose your pathway, and build your custody and disclosure infrastructure. Save the rule-specific filing steps for when the rule that governs them is final.

A Compliance-Cost Reality Check

GENIUS Act compliance is expensive, and honest budgeting beats optimistic budgeting. The ranges below are planning estimates for a mid-market issuer ($100 million to $500 million outstanding), not statutory figures, and they will move as the final rules set the actual procedural requirements.

A smaller issuer ($10M—$100M) can reasonably plan toward the lower end or below with managed-service providers; a large issuer ($1B+) should expect the upper end and beyond, with a full annual audit once outstanding crosses $50 billion.

Budget to your size and your pathway, and treat every figure here as a planning estimate that the final rules will sharpen --- not a quote.

Need Stablecoin Compliance Guidance?

Astraea Counsel advises stablecoin issuers on GENIUS Act pathway selection, reserve and custody structuring, the disclosure and examination regime, and the proposed-rule landscape as it moves toward final form. Explore our Digital Assets & Blockchain legal services.

Related Resources

• SEC Innovation Exemption: A Founder’s Decision Guide --- When a yield-bearing or crypto-backed token routes to securities law instead
• Money Transmitter Licensing: State-by-State Strategy --- State licensing for payment stablecoins
• Treasury Management for Crypto Companies --- Reserve architecture and custody
• SEC/CFTC Token Taxonomy --- Where stablecoins sit in the broader classification
• Contact Us --- Discuss your compliance roadmap

---

Footnotes

1. Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act), Pub. L. No. 119-27, S. 1582, 119th Cong. (2025), approved July 18, 2025, codified at 12 U.S.C. § 5901 et seq.; effective date § 20 (earlier of 18 months after enactment or 120 days after final regulations); reserve assets § 4(a)(1)(A); $10 billion federal-transition trigger § 4(d); reserve examination § 4(a)(3), audited financials for issuers over $50 billion § 4(a)(10)(A); secondary-market phase-in § 3(b)(1); civil penalty § 6(b)(5)(A) (domestic) and § 8(b)(4)(B) (foreign); criminal penalty § 3(f)(1). PDF ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸ ↩⁹ ↩¹⁰ ↩¹¹ ↩¹² ↩¹³ ↩¹⁴ ↩¹⁵ ↩¹⁶ ↩¹⁷

2. Department of the Treasury, Notice of Proposed Rulemaking, state regulatory regime “substantially similar” certification under the GENIUS Act, 91 Fed. Reg. 16844 (Apr. 3, 2026), https://www.federalregister.gov/documents/2026/04/03/2026-06489/genius-act-broad-based-principles-for-determining-whether-a-state-level-regulatory-regime-is. ↩ ↩²

3. Office of the Comptroller of the Currency, Notice of Proposed Rulemaking, federal qualified nonbank payment stablecoin issuers, 91 Fed. Reg. 10202 (Mar. 2, 2026); see also FDIC NPRM, 91 Fed. Reg. 18534 (Apr. 10, 2026), and FinCEN NPRM (AML/CFT and sanctions), 91 Fed. Reg. 18582 (Apr. 10, 2026). OCC NPRM available at https://www.federalregister.gov/documents/2026/03/02/2026-04089/implementing-the-guiding-and-establishing-national-innovation-for-us-stablecoins-act-for-the. ↩ ↩²

4. Office of the Comptroller of the Currency, News Release 2025-125, conditional approval of national trust-bank charters for digital-asset firms (Dec. 12, 2025), available at https://www.occ.gov/news-issuances/news-releases/2025/nr-occ-2025-125.html. ↩