GENIUS Act compliance checklist: what payment stablecoin issuers and users must do

The GENIUS Act — the Guiding and Establishing National Innovation for US Stablecoins Act, signed into law on July 18, 2025 — requires payment stablecoin issuers to be federally or state supervised, to back every token one-to-one with cash and high-quality liquid assets, to publish regular reserve disclosures, to honour redemption at par, and to comply with the Bank Secrecy Act. Institutions that use stablecoins rather than issue them must ensure they transact only in compliant instruments and apply full AML controls to stablecoin flows. What follows is a practical checklist for both groups, reflecting the statute as of mid-2026 — informational, not legal advice.

Who does the GENIUS Act apply to?

The Act’s core prohibition is simple: after its effective date, it is unlawful to issue a payment stablecoin to US persons unless the issuer is a permitted payment stablecoin issuer. Permitted issuers come in three forms — subsidiaries of insured depository institutions, federally qualified nonbank issuers supervised at the federal level, and state-qualified issuers operating under a state regime certified as substantially similar to the federal one, a route generally available to issuers below a ten-billion-dollar threshold. Foreign issuers face their own conditions for serving the US market, including comparable home-country regulation. The compliance date is set by statute as the earlier of eighteen months after enactment or one hundred twenty days after the primary federal regulators finalise implementing rules — so timing depends on rulemaking that, as of mid-2026, is still in progress.

Compliance checklist for stablecoin issuers

For issuers, the statute reads as a supervisory regime familiar from banking law: capital and liquidity standards, examinations, and enforcement powers sit behind the headline reserve rules. The essential obligations can be organised as a checklist, and each item should map to an owner, evidence and a review cadence in the issuer’s compliance programme — regulators will examine the operation of these controls, not merely their existence on paper.

• Obtain permitted-issuer status: choose the federal or qualifying-state route, prepare the application, and demonstrate capital, liquidity and risk-management standards appropriate to the business.
• Reserve the instrument one-to-one: back every outstanding stablecoin with at least equivalent reserves held in permitted assets — coins and currency, insured deposits, short-term US Treasuries, certain repos and government money-market funds — and do not pledge or rehypothecate reserves except as narrowly permitted.
• Disclose and attest: publish the composition of reserves on a regular monthly basis, with executive certification and examination by a registered public accounting firm.
• Honour redemption: establish and publish clear procedures for timely redemption at par, and disclose all fees.
• Do not pay interest: permitted issuers may not pay holders interest or yield on the stablecoin itself.
• Build the BSA programme: implement a full AML and sanctions compliance programme — customer identification, transaction monitoring, suspicious-activity reporting and the technical capability to comply with lawful orders, including the ability to freeze or block tokens where legally required.
• Market honestly: comply with the Act’s marketing restrictions, including prohibitions on suggesting a stablecoin is legal tender or backed by the US government.

What must banks and MSBs that use stablecoins do?

Most institutions reading this will never issue a stablecoin. Their exposure to the GENIUS Act is indirect but consequential: the Act reshapes the set of instruments they may prudently touch and raises the supervisory expectation for how stablecoin activity is controlled. A bank or MSB integrating stablecoin settlement into cross-border payments or remittance flows should be able to evidence the following.

• Instrument due diligence: confirm that every stablecoin the institution holds or settles in is issued by a permitted payment stablecoin issuer (or is otherwise lawfully offered), and review its reserve disclosures periodically.
• AML parity: apply the same KYC, KYB, transaction monitoring, sanctions screening and SAR processes to stablecoin flows as to fiat payments, and document the mapping in the BSA/AML programme.
• Travel Rule readiness: ensure required originator and beneficiary information moves with stablecoin transfers between financial institutions.
• Licensing hygiene: confirm that the institution’s own registrations — FinCEN MSB registration, state money transmitter licences, or banking authorities — cover its stablecoin activities as conducted.
• Vendor and rail diligence: assess custody arrangements, blockchain selection and settlement providers with the same third-party risk discipline applied to any critical payments vendor.

The GENIUS Act did not invent new compliance disciplines; it extended familiar ones — reserves, disclosure, redemption, AML — to a new instrument. Institutions that already run regulated payments programmes are closer to compliance than they may think.

How does the GENIUS Act interact with existing licensing?

A common misconception is that the GENIUS Act replaces the licensing regimes MSBs and banks already operate under. It does not. FinCEN MSB registration, state money transmitter licences and banking charters continue to govern the business of moving money; the GENIUS Act governs the instrument being moved. A remittance company that settles in a permitted payment stablecoin still needs its own registrations and its own BSA/AML programme — the Act simply ensures the token in the middle of the flow is reserved, redeemable and supervised. In practice the two layers reinforce each other: examiners reviewing an MSB’s stablecoin activity will expect to see both the institution’s own controls and evidence that the instruments it touches meet the federal standard. Institutions operating internationally should also map the Act against foreign regimes such as the EU’s MiCA, since instrument eligibility can differ by market even when the underlying token is the same.

What is still unsettled as of mid-2026?

Statutes set frameworks; rules set details. As of mid-2026, federal regulators are still completing the implementing regulations that will pin down application procedures, the mechanics of state-regime certification, and supervisory expectations for issuers. Adjacent questions are also live in Congress — notably how market-structure legislation such as the CLARITY Act treats yield-like rewards offered by platforms rather than issuers. The practical guidance is unglamorous: track the rulemakings, but do not wait for them. Every clearly stated statutory obligation — one-to-one reserves, disclosure, redemption at par, BSA compliance — is already knowable and already worth building to, because none of it will be relaxed.

Meeting the GENIUS Act standard in practice

For institutions that use stablecoins for settlement, the fastest path to GENIUS Act alignment is to choose infrastructure that was designed for the regulated era rather than retrofitted to it. StableNet settles payments exclusively in regulated fiat-backed stablecoins and attaches KYC, KYB, KYT, sanctions screening and Travel Rule data to every transaction, with SWIFT MT and ISO 20022 connectivity into existing operations — so the controls this checklist describes are properties of the rail itself, not an integration project layered on top.