GENIUS Act stablecoin compliance is crawling downstream, past the issuer

The money already moved before the rule did#

Regulators drew a tidy line under the 2025 stablecoin law: the issuer runs the checks, the issuer carries the risk, the issuer answers for the coin. Money, being money, never agreed to stay inside that line. The chart above shows why the argument has moved: stablecoin-linked card spending roughly tripled in a year, reaching $1.04 billion in July 2026 alone, according to PYMNTS, citing Paymentscan data. Every one of those transactions passed through a wallet, a card programme or an exchange rail that the original GENIUS Act stablecoin rule barely mentions.

That gap is precisely what the newest federal proposal is fighting over. PYMNTS reports that the customer identification debate has moved past the issuer's own front door and out into the wider thicket of exchanges and wallet providers who never mint a coin but move millions of them. Extending genius act stablecoin KYC duties down that chain would turn a narrow issuer obligation into something closer to a whole-market compliance standard, and every exchange and custodian in the undergrowth knows it.

Why the chain matters more than the coin#

A stablecoin issuer can run a flawless customer identification programme on its own primary-market clients and still watch an unverified wallet pass the same coin through six hands before anyone checks who is actually holding it. That is the scent the rule is now following, not the mint but the trail the coin leaves after it. Whether that trail runs through an exchange, a custodial wallet or a card programme, the proposal under discussion asks the same blunt question of each: who is checking, and how far down the chain does genius act stablecoin compliance actually reach.

None of this is abstract for the businesses actually holding the coin. A genius act stablecoin issuer who assumed the rule stopped at its own front door is about to discover how much of its risk profile was quietly delegated to partners it never audited. That is not a reason for alarm, it is a reason to read the comment file rather than wait for the press release.

What GENIUS Act stablecoin rules already require, and what's still open#

Passed in 2025, the law is doing exactly what it was built to do: every stablecoin issuer with a payment licence already runs a customer identification programme, checks who it is dealing with at the point the coin is minted or redeemed, and keeps the paperwork a bank examiner would recognise. That much is settled. What is not settled is how far genius act stablecoin obligations extend once the coin leaves the issuer's own ledger, which is the exact question the newest interagency proposal was written to answer.

A Federal Register notice filed jointly by FinCEN, the Office of the Comptroller of the Currency, the Federal Reserve, the FDIC and the National Credit Union Administration formally opened that question on 22 June 2026, and its public comment window closed on 21 August 2026. Its precise scope language is still being argued over in the comment file rather than settled in public, so treat it as the primary document to read rather than a line to quote, but its existence tells you the regulators themselves think current digital asset regulation leaves a gap worth closing.

Issuers versus everyone downstream#

PYMNTS's reporting on the debate is the clearest public account of where the argument actually sits: not whether issuers should keep checking their own customers, which nobody disputes, but whether that same duty should reach exchanges and wallet providers who hold, move or cash out the coin without ever touching the issuer's primary market. Widen the definition and a digital asset regulation built for a handful of issuers suddenly covers thousands of downstream platforms. Narrow it, and the identity check a coin picks up at birth can simply evaporate three hops later. Neither outcome is hypothetical, it is the live argument closing out its comment period this fortnight.

Read plainly, the practical stakes are simple. A digital asset regulation that only binds issuers lets identity data evaporate the moment a coin changes hands; a genius act stablecoin regime that reaches exchanges and wallets keeps that data alive all the way to the cash-out. Regulators appear to want the second outcome, and the comment period that closed this fortnight was the industry's last formal say on how far that reach should extend.

The rule-writing itself is running behind schedule#

FinCEN's own press release, dated 18 June 2026, confirms the joint proposal treats permitted payment stablecoin issuers as financial institutions under the Bank Secrecy Act and directs a separate, parallel rulemaking to cover the GENIUS Act's other anti-money laundering obligations. The OCC's own bulletin on its parallel rulemaking confirms the wider deadline: regulations must be finalised by 18 January 2027, eighteen months after the law's original enactment. The Conference of State Bank Supervisors' own one-year review, published 20 July 2026, found the agencies missed that anniversary deadline for most rules, and flagged a genuine gap worth watching: the OCC's draft would let an issuer hold as little as $6 million to $25 million in capital, far below the $300 million-plus some state money-transmission laws already require of the largest issuers. Genius act stablecoin compliance, in other words, is not one settled bar to clear, it is several regulators clearing different bars at different speeds.

Building crypto compliance before the rule lands#

Waiting for the final text is the expensive option. Every operator folkfox has advised through a licensing cycle learns the same lesson: fintech and crypto businesses that build crypto compliance into their onboarding now, ahead of any final rule, are the ones who do not have to rebuild it under a deadline later. The pattern is dull and it works: know your customer once, document it properly, and keep that record ready to show whichever agency ends up owning the final answer.

None of that is exotic advice. It is the same brush-clearing work payment providers were already doing when compliance stopped being someone else's problem, and the same discipline crypto marketing teams learned the hard way once an exchange lost its licence overnight. Stablecoin compliance is not a legal department's private hobby, it is a marketing and product decision too: the platforms that can already answer who their customer is in one clean sentence are the ones a nervous partner bank keeps working with.

The compliance question a marketing team can actually answer#

Content that states the compliance posture plainly is not decoration, it is the fastest way to prove crypto compliance to a partner, an auditor or a regulator skimming a hundred pages a week. Say the jurisdiction. Say who is checked and when. Say what happens when a wallet cannot be verified. A sentence a compliance officer can quote without editing is worth more than a page of reassurance nobody can act on.

The wider political economy behind the paperwork#

Compliance rules do not write themselves in a vacuum, and this one is landing inside a genuinely contested political moment for crypto. Reuters reports that Stand With Crypto, the advocacy group backed by Coinbase, has endorsed 32 candidates ahead of the US midterms, a scale of political spending that only makes sense if the industry expects Washington's digital asset regulation and market-structure fights to run for years, not months.

The same Reuters reporting notes that the CLARITY Act, the industry's other headline priority and a market-structure bill distinct from the GENIUS Act itself, remains stalled in the Senate. That stall matters here: a market-structure bill decides who regulates what, while the genius act stablecoin question is narrower and more urgent, because its comment period has already closed and an agency now has to write something. Paperwork rarely waits for Congress to finish arguing. For an operator, that is a brand question as much as a legal one: how you position a compliance story now will outlast whichever exact rule lands in the autumn.

A parallel push from the SEC#

Separately, and on its own timetable, the SEC has proposed Regulation Crypto Assets, the first bespoke US offering regime built specifically for crypto investment contracts, part of Chair Paul Atkins' wider Project Crypto reform push and open for a 60 day comment period. It sits beside, not inside, the genius act stablecoin KYC debate, but the direction is the same: regulators are building purpose-made rules for digital assets rather than forcing them through frameworks written for equities and bank deposits.

Read together, three separate processes, a stablecoin KYC rule, a market-structure bill and a securities-offering regime, are converging on the same conclusion: digital assets are getting bespoke rules, not borrowed ones, and a genius act stablecoin business that treats any one of the three as background noise is reading the room wrong.

Stablecoins are payment rails now, not just trading chips#

The clearest sign that stablecoin payment rails have stopped being a trading instrument and become plumbing is who is now building on them. Yahoo Finance reports that X, formerly Twitter, is exploring stablecoin-based payouts to creators through its Original Content Rewards Programme, the same pattern payments infrastructure keeps eating categories that used to belong to somebody else. A social platform does not experiment with a settlement rail for fun, it does so because the rail has become cheap, fast and, increasingly, watched.

That growth is not evenly spread across the stablecoins doing the moving. Within the dollar-backed share of tracked card transactions, PYMNTS's Paymentscan data puts USDC at around half of that volume and Tether's USDT at 20.3%, up sharply from roughly 7% a year earlier. The remainder sits with smaller stablecoins nobody is proposing to regulate by name.

Regulators reading that same chart see exactly what folkfox sees: money that used to sit quietly in a wallet is now buying groceries, paying creators and clearing invoices, and every one of those uses runs through a rail that genius act stablecoin rules were never quite finished mapping. Whichever way the exchanges-and-wallets question is finally settled, the volume behind it will not wait, and neither should your compliance story. The scale involved is not small: DefiLlama's live aggregate tracker puts the total stablecoin market above $303 billion, with USDT alone accounting for over 60% of that supply, a different slice of the same growth PYMNTS measured in card spend.

Card spend is the visible layer. Underneath it sits exactly the same genius act stablecoin question this whole piece has been circling: who checked the wallet that bought the groceries, and who checked the exchange that cashed the creator out. Volume like this does not wait politely for a comment period to close.

Where folkfox fits in the paperwork#

None of this is a reason to panic quietly in a compliance folder nobody reads. It is a reason to say the true, dull, defensible sentence in public: who your business checks, how, and when, published somewhere a partner or regulator can actually find it. That is the whole of crypto compliance done well, not clever, just visible.

Frequently asked questions#