For years, U.S. digital-asset compliance meant reasoning by analogy across agencies that disagreed with each other. That changed partially in July 2025, when the GENIUS Act was signed into law, creating the first federal statutory framework for payment stablecoins. Partially is the operative word: the Act covers one product category, its implementing regulations were still being built out through 2026, and everything else in the digital-asset stack still runs through the older, overlapping regimes.
So the honest state of play is a checklist, not a single rulebook. Classification comes first, because the same token can be a payment instrument to one regulator, a commodity to another, and a security in the wrong fact pattern.
Step zero: classify before you comply
Every downstream obligation depends on classification, and classification depends on facts: what the token represents, what buyers were promised, how it is marketed, and how it moves. A stable-value token redeemable one-to-one for dollars is analyzed differently from a token sold with statements about a team's efforts driving its value. Products that add yield, staking rewards, or profit-sharing move toward securities analysis; pure payment instruments move toward money-transmission and the GENIUS Act framework.
Watch out: classification is not a branding decision. Calling a product a "stablecoin" or a "utility token" does not control; regulators and courts look at economic reality, marketing statements, and redemption mechanics. Some of the costliest enforcement actions in this space began with a label the facts did not support.
The GENIUS Act: a federal lane for payment stablecoins
In general terms, the Act establishes a federal regulatory framework for issuers of payment stablecoins — digital assets designed for payments and redeemable at a fixed dollar value. Its central features, described at the level the statute makes clear:
- Permitted issuers only. Issuing a payment stablecoin to U.S. persons is restricted to entities approved under the framework — including subsidiaries of insured depository institutions, federally qualified nonbank issuers, and issuers approved under state regimes certified as meeting comparable standards.
- Full reserve backing. Issuers must back outstanding coins one-to-one with high-quality liquid reserve assets, keep reserves segregated from operating funds, and publish regular disclosures about reserve composition.
- Redemption rights. Holders get clear rights to redeem at par, under disclosed policies.
- No interest to holders. The framework restricts permitted issuers from paying interest or yield on the stablecoin itself — a line drawn deliberately between payment instruments and investment products.
- AML obligations. Permitted issuers are treated as financial institutions under the Bank Secrecy Act, with the compliance-program duties that follow.
- Phased effectiveness. The regime takes effect on a statutory schedule tied to enactment and the completion of implementing regulations by Treasury and the banking agencies.
Because the federal banking agencies and Treasury were writing the implementing rules after enactment, specifics — application mechanics, capital and liquidity detail, the treatment of foreign issuers — should be confirmed against current agency publications rather than summaries frozen in 2025.
The SEC and CFTC overlay has not gone away
The GENIUS Act addresses one product. For everything else — exchange tokens, governance tokens, tokenized funds, staking programs, derivatives — the classic dividing lines remain the working analysis:
| Activity | Primary lens | Key questions |
|---|---|---|
| Token sale to raise capital | SEC — securities analysis | Investment of money in a common enterprise with expected profits from others' efforts? |
| Spot trading of non-security tokens | CFTC anti-fraud and anti-manipulation; evolving market-structure legislation | Is the asset a commodity? Is there leverage, margin, or financing? |
| Derivatives, futures, perpetuals | CFTC registration regimes | Are U.S. persons trading? Is the platform registered appropriately? |
| Yield, lending, staking-as-a-service | SEC — repeated enforcement focus | Is a return being promised from pooled efforts? How is it marketed? |
| Compliant payment stablecoin | GENIUS Act framework; banking agencies | Is the issuer permitted? Reserves, redemption, disclosures in order? |
Market-structure legislation allocating spot-market jurisdiction between the SEC and CFTC continued to move through Congress after the GENIUS Act passed. Until that settles, dual-track analysis remains the safe practice for anything that is not a compliant payment stablecoin.
AML and sanctions: the layer with no safe harbor
Whatever the classification outcome, money-laundering and sanctions rules apply to digital-asset businesses serving U.S. customers:
- Determine money services business status. Under long-standing FinCEN guidance, exchangers and administrators of convertible virtual currency are generally money transmitters, requiring MSB registration, an AML program, recordkeeping, and suspicious-activity reporting.
- Build the program before launch. A written AML program, a designated compliance officer, training, and independent testing are baseline expectations, scaled to the business's risk.
- Screen for sanctions continuously. OFAC has sanctioned digital-asset addresses, mixers, and platforms; wallet-screening and geofencing of embargoed jurisdictions are now standard controls, and strict liability applies to prohibited dealings.
- Mind the Travel Rule. Funds-transfer recordkeeping and transmittal rules apply to qualifying virtual-currency transactions, and cross-border counterparties may operate under different thresholds.
The state layer: licensing did not disappear in 2025
Federal legislation narrowed some questions but did not preempt the whole field. Businesses that exchange, transmit, or custody digital assets for customers generally still face state money-transmitter licensing analysis in each state where they serve customers, plus specialized virtual-currency regimes in states that have them — New York's licensing framework being the most prominent. The methodology is the same one we describe for conventional products in following the flow of funds for money-transmission analysis: map who holds value, for whom, and when, then survey the states.
Companies embedding stablecoin rails into consumer products through bank or issuer partnerships should also allocate compliance responsibility contractually, using the discipline covered in our guide to embedded finance compliance risk. And if the product moves customer financial data between institutions, the data-access rules discussed in our Section 1033 open-banking article may run alongside.
Practical step: keep a one-page register listing every token your business touches, its current classification rationale, the date of the last review, and the regulatory contact points. In an area where the law moved every quarter of 2025 and 2026, a dated register is the cheapest defense against stale assumptions.
The working checklist
- Classify. Document what each asset is, how it is marketed, and which regime governs it — with the analysis dated and revisited on a schedule.
- Issuer status. If the product is a payment stablecoin, confirm the issuer is (or is becoming) a permitted issuer under the GENIUS Act framework, and verify reserve, redemption, and disclosure practices.
- Securities and commodities screens. Run the investment-contract analysis on anything with yield, profit expectation, or promotional promises; check derivatives exposure separately.
- FinCEN registration and AML program. Confirm MSB status, register if required, and stand up the written program.
- Sanctions controls. Wallet screening, jurisdiction blocking, and an escalation path for hits.
- State licensing survey. Money transmission and virtual-currency licenses, state by state, before serving customers there.
- Consumer-facing terms. Redemption policies, fee disclosures, custody terms, and complaint handling that match what the product actually does.
- Monitoring cadence. Assign someone to track Treasury, banking-agency, SEC, and CFTC releases quarterly — this checklist has a shelf life.
Quick answers
Did the GENIUS Act legalize all stablecoins?
No. It created a permission-based federal framework for payment stablecoins issued by approved entities, with reserve, redemption, and disclosure requirements. Stablecoins outside the framework are not blessed by it, and tokens that pay yield or function as investments fall outside the payment-stablecoin lane entirely, where securities analysis still applies.
Can a stablecoin issuer pay me interest on my holdings?
Under the GENIUS Act framework, permitted issuers are restricted from paying interest or yield on the payment stablecoin itself. Products that offer returns on stablecoin balances through separate arrangements raise their own regulatory questions, often under securities law. Read the offering terms carefully and treat advertised yield as a signal that a different regime may govern.
Is simply accepting stablecoin payments a regulated activity for a merchant?
Accepting a digital asset as payment for your own goods or services generally does not, by itself, make a merchant a money transmitter under FinCEN guidance. Holding, converting, or transmitting assets for others is where obligations attach. Tax reporting on receipts and any state-specific rules still deserve a check.
Do state licenses still matter now that there is a federal stablecoin law?
Yes. The federal framework governs who may issue payment stablecoins, but exchanging, transmitting, and custodying digital assets for customers remains subject to state money-transmission and virtual-currency licensing analysis in most states. State regimes certified under the federal framework add a compliance path for issuers, not a general exemption for intermediaries.
Your next moves
Run classification first, and write it down. If you issue or plan to issue a payment stablecoin, track the implementing regulations at Treasury and the banking agencies and sequence your application path early — permitted-issuer status is the gate everything else depends on. If you intermediate, prioritize FinCEN, OFAC, and the state survey. And put a quarterly review on the calendar: in this field, the checklist that was current at signing in July 2025 has already been amended by rulemaking since. Related guides live in the banking, payments, and fintech pathway.