How the GENIUS Act's New AML Framework is Reshaping the Stablecoin Market

The Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act of 2025 promised to legitimize digital dollars by bringing them into the traditional financial fold. But its proposed Anti-Money Laundering (AML) framework reveals a fundamental tension. By treating stablecoin issuers exactly like banks, federal regulators are forcing decentralized infrastructure to adopt centralized surveillance. The result will either be the institutionalization of stablecoins—paving the way for mass corporate adoption—or the strangulation of the very utility that makes them valuable.[8]

Passed with bipartisan support in July 2025, the GENIUS Act created the first comprehensive federal regulatory framework for payment stablecoins in the United States. It established a central prudential requirement: stablecoins must be backed one-to-one with high-quality, short-duration reserve assets that cannot be rehypothecated. This reserve requirement was designed to prevent run risks and ensure that digital dollars function reliably as a medium of exchange rather than speculative assets.[1][7]

However, the most consequential aspect of the legislation was its approach to illicit finance. The GENIUS Act explicitly mandated that "permitted payment stablecoin issuers" (PPSIs) be treated as financial institutions for the purposes of the Bank Secrecy Act (BSA). This meant that issuers would no longer be able to treat compliance as an afterthought; they would be subject to the same rigorous federal laws regarding economic sanctions, money laundering prevention, and customer due diligence as traditional banks.[3][4][6]

In April 2026, the Financial Crimes Enforcement Network (FinCEN) and the Office of Foreign Assets Control (OFAC) issued a joint proposed rule to implement these requirements. The proposal outlined the substantive core of the new AML and Countering the Financing of Terrorism (CFT) framework, subjecting issuers to expectations that include comprehensive risk assessments, internal controls, independent testing, and designated compliance personnel.[1][3]

For stablecoin issuers, this represents a massive operational shift. Compliance can no longer be a manual process added near the end of product development. Instead, AML controls, sanctions screening, transaction monitoring, and regulatory reporting must be built directly into the company's technology and daily operations. Screening systems must connect seamlessly to transaction execution, and Suspicious Activity Report (SAR) workflows must link blockchain activity with real-world customer data.[5]

The technical implications are profound. Under the proposed rules, issuers must possess the technological capability to block, freeze, and reject prohibited transactions in real-time. While this satisfies the demands of law enforcement and national security officials, it introduces a layer of centralized control over bearer instruments that were originally designed to move across borders with little friction.[5][7]

The tension escalated in June 2026, when FinCEN and federal banking agencies jointly issued a Notice of Proposed Rulemaking (NPR) to implement Customer Identification Program (CIP) requirements for PPSIs. The GENIUS Act requires issuers to maintain an "effective customer identification program, including identification and verification of account holders." The proposed rule seeks to impose obligations comparable to existing CIP requirements for broker-dealers and futures commission merchants.[4]

The CIP proposal defines an "account" as a "formal relationship" between a PPSI and a customer established to provide services such as issuing or redeeming stablecoins, managing reserves, or providing custodial services. This definition covers a wide range of capacities and could have broad implications for other U.S. persons serving in those roles who do not currently maintain BSA compliance programs.[4]

The most difficult questions, however, involve stablecoins traded between third parties on the secondary market. Because stablecoins are bearer instruments, they frequently change hands through decentralized exchanges or unhosted wallets without the direct involvement of the issuer. The current proposals focus customer identification obligations primarily on "direct" customers rather than every downstream holder.[3][5]

Yet, the boundary between direct issuance and secondary market liability remains a gray area. If regulators eventually interpret the rules to mean that issuers bear responsibility for downstream illicit finance, issuers might be forced to implement "whitelisting"—restricting stablecoin transfers only to pre-approved, identity-verified wallets. Such a move would effectively end the permissionless nature of stablecoins, strangling their utility in decentralized finance (DeFi) and cross-border remittances.[8]

Beyond the technical challenges, the implementation of the GENIUS Act has sparked a jurisdictional battle between state and federal regulators. The Conference of State Bank Supervisors (CSBS) has publicly called on the Treasury to reconsider its approach, arguing that federal agencies are failing to honor the Act's statutory goal of permitting variety and innovation among state regulatory regimes.[7]

State regulators point out that the GENIUS Act explicitly preserves a state pathway for approving stablecoin issuers and retains the applicability of state consumer protection laws. However, critics argue that the Office of the Comptroller of the Currency (OCC) has misinterpreted the law by seeking to excuse national trust charters from the clear activity-based limits the GENIUS Act imposes, potentially allowing risky activities that could transmit contagion into the broader financial system.[7]

The OCC, for its part, issued its own proposed rulemaking in June 2026 to create a supervision and enforcement framework for OCC-supervised PPSIs. This framework establishes consultation protocols between the OCC and FinCEN for initiating AML enforcement actions, signaling a highly coordinated federal approach to policing the stablecoin sector.[2]

The one-year anniversary of the GENIUS Act in July 2026 marked the statutory deadline for the Treasury and federal banking regulators to issue most of the implementing regulations. While the agencies managed to issue proposals for the core requirements, the final rules remain pending. The industry now waits in regulatory limbo, parsing the proposals to benchmark their controls and review their reliance on intermediaries.[3][5][7]

Ultimately, the GENIUS Act's AML framework forces a reckoning. If the final rules strike a balance that satisfies national security concerns without requiring total surveillance of the secondary market, stablecoins could achieve unprecedented institutional integration, cementing the U.S. dollar's dominance in the digital age. But if the compliance burden proves incompatible with blockchain architecture, the framework may simply strangle the domestic industry, pushing innovation—and liquidity—offshore.[8]