On this page · 10 sections
- Why the date is 18 January 2027
- Where each regulator stands on 12 November 2026
- Three ways to become a permitted issuer
- Platforms that never mint a token still have work
- The engineering build list
- Worked example: a $400 million issuer's first year
- Decision table by business type
- Dated checklist
- How eCorpIT can help
- References
Summary. The GENIUS Act (Public Law 119-27, signed on 18 July 2025) takes effect on 18 January 2027, 18 months after enactment. The alternative trigger, 120 days after a final rule, points to 18 February 2027 for the OCC's rule of 21 October 2026, so 18 January holds, and the OCC says its rule takes effect that day. On 12 November 2026 it is the only final rule from a primary regulator: FDIC, Federal Reserve and NCUA rules are proposals, and the OCC is not yet accepting applications or waiver requests. From 18 January, issuing a payment stablecoin in the US without approval can draw fines of up to $1,000,000 per violation and up to 5 years in prison. Issuers must hold at least 1:1 reserves in cash, insured deposits, short-dated Treasuries and similar assets, publish reserve composition monthly, give 7 days' notice of fee changes, pay no yield, and be able to freeze or burn tokens on a lawful order. Exchanges and wallets have until 18 July 2028 before offering non-permitted coins in the US becomes unlawful. Verdict: build to the statute and the OCC rule now; treat the other proposals as moving targets.
About this article. For product, engineering, treasury and compliance leads at US fintechs, wallets, exchanges, banks and platforms that issue, hold, list or settle in dollar stablecoins. We checked every date, section and status against the Act's text in the US Code, the OCC's releases, bulletins and final rule, and the Federal Register record of each proposal, on 12 November 2026. This is not legal advice; several rules are still proposals, so confirm your obligations with counsel and your regulator. Researched with AI assistance and reviewed by our editorial team.
Why the date is 18 January 2027
Section 20 of the Act sets the earlier of two dates: 18 months after enactment, which is 18 January 2027, or 120 days after the primary federal payment stablecoin regulators (the parent bank's federal banking agency, the NCUA for credit unions, and the OCC for federal qualified issuers) issue any final regulations implementing it. The Act told every regulator to finish its rules by 18 July 2026.
The OCC moved first. It announced a final rule on 21 October 2026, published on 23 October as a 195-page document (91 FR 67000) effective 18 January 2027. Counting 120 days from 21 October gives 18 February 2027; from 23 October, 20 February. Both fall after 18 January, so the 18-month backstop controls. Treasury's interim final rule of 30 September 2026 changes nothing: Treasury is not a primary regulator, and 120 days from 30 September is 28 January 2027 anyway.
The OCC's Bulletin 2026-51 says issuers must comply from 18 January 2027, with criminal penalties for non-compliance, and that the Act gives existing issuers no implementation period, which is why the waiver route below matters.
Where each regulator stands on 12 November 2026
The statute applies on 18 January regardless. The table follows the Federal Register record of the OCC's rules, the FDIC's proposals and comment extension, and the Federal Reserve's two proposals.
| Agency | Rulemaking | Federal Register action | Status |
|---|---|---|---|
| OCC | Issuance, reserves, redemption, capital, custody and licensing for its issuers | Final rule, 23 October 2026 | Final, effective 18 January 2027 |
| OCC, with FinCEN and OFAC | BSA and sanctions standards for OCC-supervised issuers | Proposed 24 June 2026 | Proposed |
| FDIC | Subsidiary approval procedures; standards, reserve deposit insurance and tokenised deposits; BSA and sanctions | Proposed 19 December 2025 (comments extended to 18 May 2026), 10 April 2026 and 5 June 2026 | Proposed |
| Federal Reserve | Board-supervised issuers and the tying ban for all issuers; application procedures for state member banks | Two proposals, 29 September 2026; comments due 30 November | Proposed |
| NCUA | Licensing and investment limits; issuance standards, share insurance, tokenised shares | Proposed 12 February and 18 May 2026 | Proposed |
| Treasury | Section 3 limits on issuance, offer and sale; principles for substantially similar state regimes | Proposed 18 August and 3 April 2026 | Proposed |
| Treasury, for the Stablecoin Certification Review Committee | Forms and procedures for state certifications | Interim final rule, effective 30 September 2026; comments due 30 November | In force; no certifications accepted before Paperwork Reduction Act approval |
| FinCEN, OFAC and the banking agencies | AML and sanctions programmes; customer identification programme | Proposed 10 April and 22 June 2026 | Proposed |
The NCUA, Treasury and FinCEN rows come from the same record. If the OCC supervises you, the prudential rulebook is settled and only the AML piece is pending. Under the FDIC, the Fed or the NCUA, build to the statute and the latest proposal, then adjust when final rules land.
The OCC's final rule covers everything it must write except Bank Secrecy Act, anti-money laundering and OFAC sanctions rules. Against the proposal, it gives more flexibility on reserve asset management, accommodates special purpose vehicle (SPV) issuer structures meant to protect holders, and adds capital and operational backstop requirements with simplified capital elements.
Three ways to become a permitted issuer
From 18 January 2027, 12 U.S.C. 5902(a) makes it unlawful for anyone other than a permitted payment stablecoin issuer to issue a payment stablecoin in the United States. Knowing participation in a violation carries a fine of up to $1,000,000 per violation, up to 5 years in prison, or both. Section 5901 defines three routes to permitted status.
| Path | Who it suits | Primary regulator | Key condition |
|---|---|---|---|
| Subsidiary of an insured depository institution | Banks and credit unions issuing through a subsidiary | The parent's federal banking agency; NCUA for credit unions | Approval under 12 U.S.C. 5904 |
| Federal qualified issuer | Nonbank firms, uninsured national banks, federal branches of foreign banks | OCC | OCC approval under 12 U.S.C. 5904 |
| State qualified issuer | State-approved issuers that are not insured banks, with $10 billion or less outstanding | State regulator | State regime certified as substantially similar to the federal framework |
The state route has a ceiling of $10 billion in consolidated outstanding issuance. Above it, an issuer has 360 days to move into the federal framework, run jointly with its state regulator, or must stop issuing new coins until it is back under the line, unless the federal regulator grants a waiver. State regulators must file initial certifications by 18 January 2028, and the review committee accepts none until its forms clear Paperwork Reduction Act approval.
Applications and waivers
The OCC's clock is published. Within 30 days of receiving an application, it says whether the file is substantially complete. If not, the applicant fills the gaps, the OCC responds within another 30 days, and a file still incomplete is returned within 60 days of the first notice. A decision follows within 120 days of the completeness finding. Under the Act, a complete application not decided in time is deemed approved.
On 12 November 2026 the OCC is not accepting applications or waiver requests. It will open once the Office of Management and Budget approves the application forms, and will announce the date in a press release. Comments on those forms, and on proposed weekly and quarterly reporting forms, are due by 23 November 2026.
Waivers bridge coins already in circulation. Section 5(f) lets the regulator waive requirements for up to 12 months from 18 January 2027 for a bank subsidiary or federal qualified applicant with a pending application. The OCC generally expects to waive the prior-approval requirement for existing US issuers that file a substantially complete application before the effective date. It sees no general case for waiving anything else, since issuers have had 18 months to prepare, and expects new entrants to start only after approval. A subsidiary of an insured bank can get a waiver; the insured bank itself cannot.
Platforms that never mint a token still have work
Most US fintechs will hold, move, list or accept coins someone else issued. The Act reaches them in four ways.
The offer-and-sale ban, from 18 July 2028. Three years after enactment, a digital asset service provider may not offer or sell a payment stablecoin to a person in the US unless a permitted issuer issued it. The definition covers businesses that, for compensation, exchange or transfer digital assets, act as custodians or take part in issuance, and excludes protocols, self-custodial software interfaces, validators and liquidity pool participants. Treasury's proposal of 18 August 2026 would implement these limits. Section 5902(b)(2), on foreign issuers' coins, has no three-year delay: a provider may not make one available in the US unless that issuer can and will comply with lawful orders and any reciprocal arrangement under section 5916.
Accounting and settlement, from 18 January 2027. A payment stablecoin from a non-permitted issuer may not be treated as cash or a cash equivalent in accounts, count as cash-equivalent margin or collateral at futures commission merchants, derivatives clearing organisations, broker-dealers, registered clearing agencies and swap dealers, or settle wholesale payments between banking organisations. Systems that tag stablecoin balances as cash need an issuer-status field, including agent-payment rails that settle in stablecoins, such as x402 and AWS AgentCore payments.
Custody, from 18 January 2027. Only firms supervised by a federal payment stablecoin regulator, the SEC, the CFTC, or a state bank or credit union supervisor may run a custody business for stablecoin reserves, stablecoins used as collateral, or the private keys used to issue permitted coins. Customer assets must be treated as the customer's property and kept apart from the custodian's own, with an omnibus-account exception at banks and trust companies, and customer claims rank ahead of other creditors.
What is exempt. Direct transfers between two individuals without an intermediary, transfers between an individual's own US and overseas accounts at the same parent company, and transactions through self-custody wallets fall outside section 5902. Supplying self-custody hardware or software does not by itself bring a firm under the custody rules.
The engineering build list
Each row maps a requirement in 12 U.S.C. 5903, or the custody rules in section 5909, to the systems that usually change.
| Requirement | Statutory source | What engineering builds |
|---|---|---|
| Reserves at least 1:1 in eligible assets | 5903(a)(1)(A) | Reserve ledger, eligibility rules per asset class, daily supply-versus-reserve reconciliation |
| Monthly public reserve report | 5903(a)(1)(C) | Report generator: coins outstanding, amount and composition, average tenor, custody location |
| Monthly accountant examination and CEO and CFO certification | 5903(a)(3) | Evidence store, immutable month-end snapshots, sign-off workflow |
| Published redemption policy and fees | 5903(a)(1)(B) | Redemption API and queue, plain-language fee schedule, 7-day change-notice scheduler |
| No pledging or reuse of reserves, with narrow exceptions | 5903(a)(2) | Treasury controls that block reuse outside permitted repo and custody cases |
| Treated as a financial institution under the BSA | 5903(a)(5) | AML programme, risk assessment, suspicious activity monitoring, customer identification with enhanced due diligence, sanctions screening |
| Ability to comply with lawful orders | 5903(a)(6)(B) | Contract-level freeze, burn and block functions, key ceremony, order intake and audit trail |
| No interest or yield for holding | 5903(a)(11) | Review of rewards engines and promotional logic |
| No names or marketing implying US government backing (USD is allowed) | 5903(a)(9) | Copy and naming review across apps, docs and marketing pages |
| No tying | 5903(a)(8) | Onboarding flows that never condition service on buying another product |
| Annual audited statements above $50 billion outstanding, unless already an SEC reporting company | 5903(a)(10) | Financial reporting pipeline and public disclosure page |
| Custody segregation | 5909 | Sub-ledgers per customer, omnibus reconciliation, creditor-priority records |
For OCC-supervised issuers, the final rule adds timing and triggers, set out below.
Reserves and the monthly report
Eligible reserves are US coins and currency or Federal Reserve balances, insured demand deposits, Treasury bills, notes or bonds with 93 days or less to maturity, certain overnight repos and reverse repos, registered government money market funds holding only those assets, other similarly liquid federal assets a regulator approves, and tokenised forms of most of these. So check every position daily: a Treasury note with 94 days left to run does not qualify until it reaches 93.
A registered public accounting firm must examine each month-end report, and the CEO and CFO must certify it to the regulator; a knowingly false certification carries the criminal penalties of 18 U.S.C. 1350(c). Under the OCC rule, by noon on the last day of each month the issuer publishes its reserve composition as of noon on the last day of the previous month, in the OCC's template, with the accountant's examination report alongside. It must notify the OCC on any day reserves fall below the minimum, stop new issuance until they recover, and begin liquidation and fee-free redemption after 15 consecutive business days below the minimum. The OCC has also proposed weekly confidential reserve and activity reports and a quarterly condition report.
Redemption and fees
The statute requires clear procedures for timely redemption, lets only regulators impose discretionary limits, and requires plain-language disclosure of all purchase and redemption fees, which can change only on at least 7 days' notice. It sets no number of days; the OCC rule does. Timely redemption may not exceed two business days after the request, and the issuer must redeem any amount of one coin or more, subject to screening and onboarding. If redemption requests for a coin exceed 10% of its outstanding issuance in a single 24-hour period, the issuer must tell the OCC within 24 hours and may ask for more time. Fee changes need at least seven calendar days' notice, delivered to current customers.
Build fee versioning with effective dates, a notice log, a deployment check that blocks any fee change dated less than 7 days out, and a rolling 24-hour redemption monitor.
Freeze, burn and block
An issuer may issue only if it has the technical capability to comply, and will comply, with any lawful order, which the Act defines as an order to seize, freeze, burn or prevent the transfer of its coins. On public chains that means administrative functions in the token contract, protected by hardware security modules or multi-party computation, with separate people receiving and signing orders, and every invocation logged with the order reference. Treasury need not warn an issuer before blocking a foreign person's property, so order intake must run around the clock.
AML, sanctions and customer identification
Every permitted issuer is a financial institution for Bank Secrecy Act purposes. The statute lists the elements: risk assessment and a designated officer, record retention, suspicious activity monitoring and reporting, the ability to block, freeze and reject impermissible transactions, a customer identification programme covering high-value transactions with enhanced due diligence, and sanctions list screening. FinCEN and OFAC proposed the programme rules on 10 April 2026, and FinCEN and the banking agencies proposed the customer identification rule on 22 June 2026; neither is final. Build monitoring and screening as configurable rules rather than hard-coded thresholds. Firms that also serve EU customers face a parallel rebuild, covered in our EU AMLR guide.
Worked example: a $400 million issuer's first year
Take a hypothetical US nonbank fintech that plans to issue a dollar stablecoin as an OCC federal qualified issuer and expects $400 million outstanding by mid-2027. It is not issuing today, so under the OCC's approach it launches only after approval.
Reserve arithmetic. At $400 million outstanding it needs at least $400 million of eligible reserves. One eligible mix: $120 million in demand deposits at insured banks (30%), $240 million in Treasury bills with 93 days or less to maturity (60%) and $40 million in a registered government money market fund (10%). Total: $120 + $240 + $40 = $400 million, a 1:1 ratio. If $5 million is redeemed in a day, coins and reserves both fall to $395 million. The reconciliation job should flag any day eligible reserves dip below outstanding supply, since under the OCC rule that triggers a notice and an issuance halt. Requests above $40 million (10% of $400 million) in 24 hours mean telling the OCC within 24 hours.
Licensing timeline. Suppose the OCC is accepting filings and the fintech files on 1 February 2027. The completeness notice is due within 30 days, by 3 March 2027. If the file is found substantially complete that day, the decision is due within 120 days, by 1 July 2027. Each round of missing information adds up to a month. Plan for no US issuance before July 2027.
Growth trigger and fees. Under a state licence, crossing $10 billion on 1 September 2027 would give the firm until 26 August 2028 (360 days, counting 29 February 2028) to move into the federal framework, or force a halt on new coins until it fell back under the threshold. To raise its redemption fee from 15 March 2028, it must notify holders by 8 March 2028.
Decision table by business type
| If you are | Do this | By |
|---|---|---|
| An existing US issuer | File a substantially complete application and waiver request once filings open | Before 18 January 2027 |
| A bank planning a subsidiary issuer | Track your regulator's final procedures | Now, then on each final rule |
| A nonbank fintech new to issuing | Prepare an OCC or state application and plan launch after approval | 2027 |
| An exchange, broker or hosted wallet | Record issuer status for every stablecoin you list | Before 18 July 2028 |
| A merchant or treasury platform holding stablecoins | Add issuer status to accounting, collateral and settlement logic | Before 18 January 2027 |
| A custodian of reserves or issuing keys | Confirm supervision, segregation and priority records | Before 18 January 2027 |
Dated checklist
These dates sit alongside the other US and UK deadlines in our 2027 compliance calendar for software teams.
- By 23 November 2026. Comment, if you wish, on the OCC's application and reporting forms; OMB approval of the application forms opens OCC filings.
- By 30 November 2026. Comments close on the two Federal Reserve proposals and the Treasury interim rule.
- December 2026. Run a gap assessment against 12 U.S.C. 5903 and, if OCC-supervised, the final rule. List every stablecoin your product touches and who issued it.
- Before 18 January 2027. Existing issuers file application and waiver request once the OCC opens; platforms add issuer-status flags; custodians assemble segregation evidence.
- 18 January 2027. The Act and the OCC rule take effect.
- During 2027. Watch for final FDIC, Fed, NCUA, Treasury and FinCEN rules, and for the review committee to start accepting state certifications.
- 18 January 2028. Section 5(f) waivers run out at the latest, and initial state certifications are due.
- 18 July 2028. The offer-and-sale ban for digital asset service providers starts.
How eCorpIT can help
eCorpIT is a Gurugram-based technology organisation, founded in 2021, assessed at CMMI Level 5 and MSME certified, with senior-led engineering teams working across AWS, Microsoft and Google platforms. We build the reserve ledgers, monthly reporting pipelines, redemption APIs and token administration controls this Act touches through our application development services. Talk to us at /contact-us/.
Last updated: 12 November 2026.
