The State of Stablecoin Regulation: What the GENIUS Act Requires

A stablecoin backed by nothing but a promise has been the industry's open secret for years. The GENIUS Act closes that gap — not by banning stablecoins, but by telling issuers exactly what has to sit behind every token in circulation, who gets to issue them, and what happens if they don't comply.

For a market that has spent most of its existence operating in a gray zone — tolerated by regulators, occasionally investigated, never quite legal or illegal — that's a significant shift. For businesses, the change is practical rather than abstract. If you accept stablecoins from customers, pay contractors with them, hold them in treasury, or build payment products on top of them, the GENIUS Act decides which tokens you can treat as dependable, what your counterparties must disclose, and which compliance obligations will flow through to your own product. Getting this wrong means relying on an issuer that may never be licensed, or designing around rules that work differently once regulators finish the detail.

This piece walks through what the law actually requires, why the timing matters, and what it means for anyone building on or around payment stablecoins. It covers the core requirements (reserves, the yield ban, disclosures, audits, licensing, AML, and bankruptcy priority), who is in and out of scope, what changes for merchants, fintechs, and banks, a before-and-after comparison, the open questions, and what to watch as rulemaking continues.

What payment stablecoins are, and why they needed a law

A payment stablecoin is a crypto token designed to hold a steady value, typically pegged 1:1 to the US dollar, that's used to move money rather than to speculate. Unlike Bitcoin or Ether, whose prices swing constantly, a stablecoin like USDC or USDT is meant to always be worth roughly one dollar — making it useful for settling trades, paying contractors, moving money across borders, or parking cash inside crypto exchanges without cashing out to a bank account.

The problem is that "backed by a dollar" has meant very different things depending on the issuer. Some stablecoins have held their reserves in cash and short-term Treasuries, redeemable on demand. Others have held a mix of commercial paper, corporate debt, and other assets whose value can move — meaning the peg is only as strong as the issuer's willingness and ability to make holders whole. Before the GENIUS Act, there was no federal law requiring any of this to be disclosed, audited, or held to a consistent standard. Issuers self-reported. Attestations varied in rigor. And there was no single federal regulator with clear jurisdiction over stablecoin issuance itself.

That mattered less when stablecoins were a niche trading tool. It matters more now that stablecoins settle enormous transaction volume, get referenced as a tool for dollar-denominated payments in countries with unstable currencies, and are increasingly discussed as infrastructure for cross-border settlement and even retail payments. A token marketed as "as safe as cash" that isn't fully backed by cash-equivalent assets is a systemic risk waiting for a bad week.

The GENIUS Act — the Guiding and Establishing National Innovation for U.S. Stablecoins Act — is the federal government's answer: a dedicated regulatory framework for payment stablecoins specifically, separate from how securities, commodities, or bank deposits are regulated.

The core requirements, in plain terms

The law is built around a small number of non-negotiable pillars. Strip away the legal language and it comes down to this:

• 1:1 reserve backing. Every payment stablecoin in circulation must be backed by an equivalent value of high-quality, liquid assets — cash, insured bank deposits, and short-dated US Treasury instruments are the categories that qualify. Reserves can't be commingled with an issuer's operating funds, and they can't be rehypothecated (re-lent or reused as collateral elsewhere) except in narrow, regulator-approved circumstances.
• No yield paid directly by the issuer. Payment stablecoin issuers are barred from paying interest or yield to holders simply for holding the token. This is a deliberate line-drawing exercise: a yield-bearing dollar token starts to look like a bank deposit or a security, and the GENIUS Act is trying to keep payment stablecoins in their own regulatory lane rather than competing directly with insured deposits.
• Monthly public disclosure of reserve composition. Issuers have to publish what's backing their tokens on a regular cadence, broken down by asset type, so holders and counterparties can see the composition rather than taking a marketing claim at face value.
• Independent audits. Larger issuers are subject to regular third-party audits of their reserves and of the accuracy of their disclosures, with the audit obligation scaling based on the size of the stablecoin issued.
• Licensing through a federal or state pathway. Issuers need to be approved either through a federal regulator (for banks and larger nonbank issuers) or through a state regime that's certified as sufficiently equivalent — a dual-track structure similar in spirit to how money transmission is regulated today, but with a federal floor beneath it.
• Bank Secrecy Act and anti-money-laundering compliance. Stablecoin issuers are treated as financial institutions for BSA/AML purposes, meaning know-your-customer programs, suspicious activity reporting, sanctions screening, and the full compliance apparatus that banks and money service businesses already operate under.
• Bankruptcy priority for holders. If an issuer fails, stablecoin holders get priority claim on the reserve assets ahead of other general creditors — an explicit attempt to avoid the scenario where token holders end up in a bankruptcy line behind bondholders and vendors.

Who actually has to comply

Not every dollar-denominated crypto token is caught by this. The law is specifically aimed at payment stablecoins — tokens designed for payments and redeemable at a fixed value, generally $1. Algorithmic stablecoins that maintain their peg through code and market incentives rather than hard asset backing, and tokens that are primarily used for speculation or as a component of a more complex financial product, sit outside — or in a more ambiguous zone relative to — the core GENIUS Act framework. That distinction matters, because it means the law is not a blanket crypto rulebook; it's a targeted regime for the specific product category that already dominates real-world stablecoin usage.

Benefits of the GENIUS Act for Stablecoin Users

Regulation is often framed as a cost. For the businesses and people who use payment stablecoins, the GENIUS Act's requirements also deliver concrete gains.

A common baseline for due diligence

Before the law, comparing stablecoins meant reading attestation reports of varying quality and forming your own view of reserve assets. A licensed issuer now has to meet a shared floor: one-to-one backing in qualifying assets, segregation, monthly disclosure, and audits at scale. That gives treasury and risk teams a checklist they can apply consistently across issuers instead of a research project for each one, and it makes internal approval of a new stablecoin far easier to document.

Stronger protection if an issuer fails

Priority claims on segregated reserves change what happens in a worst case. Holders are no longer expected to queue with general creditors in a bankruptcy, and the reserve assets backing their tokens are kept apart from the issuer's operating money. That does not make failure impossible, but it improves the odds that holders recover their funds, which matters for any business holding stablecoin balances overnight.

Visible reserves instead of marketing claims

Monthly public disclosure of reserve composition lets counterparties see what actually backs a token and spot changes over time. Combined with independent audits for larger issuers, that turns "fully backed" from a slogan into something that can be checked by anyone accepting or holding the token. Regular reporting also makes deterioration visible early, rather than only after a crisis.

Clear compliance expectations for institutions

Treating issuers as financial institutions under the Bank Secrecy Act gives banks, payment companies, and auditors a familiar framework. Institutions that stayed away because they could not assess an issuer's AML controls now have a defined standard to evaluate against, which lowers one of the main barriers to working with stablecoin rails.

Room to build with confidence

A defined licensing pathway gives banks and fintechs a basis for investing in stablecoin products. Teams can plan settlement, payout, and treasury features around rules that, once rulemaking finishes, are known in advance rather than subject to sudden enforcement-driven change. Clear rules also make it easier to explain stablecoin features to boards, auditors, and banking partners.

Payment Stablecoin Use Cases Under the GENIUS Act

The law does not create new uses for stablecoins so much as make existing ones easier to justify. These are the areas where businesses use them today.

Cross-border business payments

A company paying suppliers abroad faces correspondent banking delays and fees. Paying in a regulated dollar stablecoin lets the supplier receive value quickly and convert locally or hold dollars. With licensing and disclosure in place, the payer's finance team can document why the chosen token meets its risk policy, which was often the sticking point before. Faster settlement can also free up working capital that would otherwise sit in transit.

Contractor and marketplace payouts

Platforms that pay freelancers or sellers in many countries use stablecoins to reduce payout times and costs. The GENIUS Act makes issuer choice a compliance decision, so platforms pick licensed issuers and build onboarding and monitoring that align with the issuer's AML obligations. The outcome is faster payouts with a clearer story for regulators and banking partners.

Merchant acceptance

Online merchants accept stablecoins at checkout, often through a payment processor that settles to fiat or holds the tokens. Knowing which tokens come from licensed issuers simplifies the processor's and merchant's risk assessment, and the reserve disclosures give finance teams something concrete to point to when deciding whether to hold balances or convert immediately.

Corporate treasury and settlement balances

Companies and trading platforms hold stablecoin balances for settlement or as working capital on-chain. The no-yield rule means these balances do not earn interest from the issuer, so the case for holding them rests on speed and availability rather than return. Segregated reserves and holder priority make short-term holding easier to approve, and monthly disclosures give treasury teams a regular checkpoint for reviewing limits.

Machine and agent payments

Early experiments with software agents and devices paying each other for data, compute, or services often use stablecoins as the settlement asset. These are pilots rather than mainstream deployments, but builders in this area now have a regulatory baseline for the tokens their protocols rely on, including the expectation that issuers can freeze tokens tied to illicit activity.

Why this matters now

The reason this matters now isn't a single headline event — it's the grinding, months-long process of rulemaking that turned the GENIUS Act from a signed law into an operational regime. Through 2026, federal and state regulators have been working through the detailed rulemaking that translates the statute's broad requirements — 1:1 reserves, audits, licensing, BSA/AML — into the specific forms, thresholds, and procedures issuers actually have to follow.

That gap between "law passed" and "law enforceable" is where a lot of the real decisions get made. A statute can say issuers need "high-quality liquid assets" in reserve; a rulemaking has to define exactly which Treasury maturities qualify, how often disclosures must be filed, what counts as an acceptable audit firm, and how the state-versus-federal licensing pathways actually interoperate. Every one of those details changes compliance cost, and compliance cost changes who can realistically operate as an issuer.

This is also the period where the practical shape of the market gets set. Existing large issuers have had to map their existing reserve and disclosure practices against the new statutory floor and figure out where they already comply and where they need to change custodians, reporting cadence, or reserve composition. Banks evaluating whether to issue their own stablecoins have had to weigh the licensing pathway against existing bank regulatory relationships. And any business that touches stablecoins — as a payment rail, a treasury tool, or a settlement layer, including emerging machine-to-machine payment and agentic payment protocol use cases — has had to figure out which counterparties are actually going to be compliant issuers once the rulemaking settles, versus which ones are legacy players in a transition period.

What it means for businesses building on stablecoins

If your business touches stablecoins — as a payment method, a treasury instrument, or infrastructure — the GENIUS Act changes the due diligence questions you need to be asking, even if you never issue a token yourself.

For companies accepting or holding stablecoins

A business accepting stablecoin payments, or holding them as part of a treasury strategy, now has a much cleaner way to distinguish issuers. Before the law, "which stablecoin is safest" was a research project involving reading attestation reports and forming your own judgment about reserve quality. After the law takes full effect, licensed issuers are held to a common floor: 1:1 backing, disclosed monthly, audited, with bankruptcy priority for holders. That doesn't eliminate risk — operational failures, fraud, and mismanagement are still possible — but it gives businesses a regulatory baseline to check against rather than relying entirely on issuer marketing.

Practically, this means updating vendor and counterparty risk assessments to ask a direct question: is this stablecoin issued by an entity licensed under the GENIUS Act framework (or an equivalent certified state regime), and can they point to their current reserve disclosure? That single question does a lot of the diligence work that used to require deeper investigation.

For companies building payment infrastructure

Fintechs and payment companies building stablecoin rails — whether for cross-border settlement, merchant payouts, or embedded finance — now have to design around a licensing reality rather than a regulatory vacuum, much as pay-by-bank infrastructure had to mature around its own regulatory environment. That has a few concrete implications:

1. Issuer selection becomes a compliance decision, not just a technical one. Which stablecoins your product supports is now partly a legal question about which issuers hold valid licenses.
2. KYC/AML obligations flow through the stack. Because issuers are subject to BSA/AML requirements, platforms built on top of their tokens should expect issuer-level monitoring and potential freezing or blocking capabilities to be part of how the token behaves in practice — not purely a base-layer, permissionless asset.
3. State-federal licensing interoperability affects go-to-market. A product operating across many US states needs to understand which state regimes are certified as equivalent to the federal standard, since that affects which issuers and structures are viable in which jurisdictions.

For banks and financial institutions

Banks face a genuinely new strategic question: issue a stablecoin under the new licensing pathway, partner with an existing licensed issuer, or stay out of the space entirely — a decision worth weighing against tokenized deposits and CBDCs as alternative paths. The no-yield rule is relevant here — a bank-issued stablecoin can't compete with a savings account by paying interest, which changes the value proposition banks would need to offer (speed, integration with existing rails, corporate treasury tooling) if they enter the market.

Comparing the pre- and post-GENIUS Act landscape

Common GENIUS Act Compliance Mistakes

Businesses that touch stablecoins without issuing them still make avoidable errors as the framework comes into force.

Assuming every dollar token is covered

A token that calls itself a stablecoin is not necessarily a payment stablecoin issued under the framework. Algorithmic designs and tokens from unlicensed or foreign issuers may fall outside it. Treating all dollar-pegged tokens as equally protected exposes a business to exactly the reserve and bankruptcy risks the law was written to address. Check the issuer, not the label.

Treating a licence as a risk-free guarantee

Licensing sets a floor, not a ceiling. Operational failures, fraud, cyber incidents, and mismanagement remain possible at licensed issuers. Businesses that stop monitoring disclosures once an issuer is licensed lose early warning of problems such as changes in reserve composition or delayed reports.

Designing as if tokens are permissionless

Because issuers are subject to AML obligations, regulated stablecoins can be frozen or blocked. Products that assume tokens will always move freely can fail awkwardly when that happens, leaving customer funds stuck with no process for handling it. Build for the possibility from the start, including how support staff explain it to customers.

Recreating yield through your own product

The ban applies to issuers, but businesses that wrap stablecoins in their own yield-paying features can stray into lending, deposit, or securities territory with separate regulatory consequences. Offering returns on customer stablecoin balances needs its own legal analysis rather than an assumption that the token's regulated status covers it.

Assuming US compliance travels abroad

A token compliant under the GENIUS Act is not automatically compliant under the EU's MiCA framework or other regimes. Businesses serving customers outside the US need to check each jurisdiction's rules for the tokens they support, and plan for supporting different tokens in different markets. A single global token list rarely survives contact with several regulators.

Stablecoin Compliance Best Practices

For businesses that accept, hold, or build on payment stablecoins, these practices help turn the new framework into lower risk rather than new surprises:

• Inventory every stablecoin you touch. List each token your product accepts, holds, or routes, the issuer behind it, and where it is used, so nothing slips through review.
• Verify licensing and disclosure for each issuer. Confirm the issuer's federal or certified state licence and read its latest monthly reserve disclosure and audit, then record the check in your counterparty risk file.
• Monitor disclosures on a schedule. Assign someone to review reserve reports each month and flag changes in composition, late filings, or qualified audit opinions.
• Design for freezes and blocks. Build processes and user messaging for tokens that are frozen or blocked by an issuer, including how customer balances are handled and who is notified.
• Align your own AML controls. Make sure your customer onboarding, transaction monitoring, and sanctions screening fit alongside the issuer's obligations rather than assuming the issuer covers everything.
• Map state and international requirements. Check which state regimes are certified as equivalent where you operate, and which rules apply to the tokens you support in other countries.
• Get legal review on yield features. Treat any feature that pays returns on stablecoin balances as a separate regulatory question requiring advice before launch.
• Set exposure limits per issuer. Decide how much value you will hold with any one issuer and for how long, and convert or rebalance when limits are reached, so a single issuer's problems cannot threaten your operations.
• Document decisions for auditors and partners. Keep a short written rationale for each supported token and each policy choice, which makes bank, auditor, and regulator reviews faster.
• Track rulemaking as it lands. Assign ownership for following final rules on audits, disclosures, and qualifying reserve assets, and update policies when details change.

Real limitations and open questions

The GENIUS Act sets a federal floor, but it doesn't resolve everything, and some of the hardest questions are still being worked out in the rulemaking and early enforcement process.

• The algorithmic stablecoin gap. Tokens that maintain their peg through algorithmic mechanisms rather than hard reserves sit outside the core framework, which means a meaningful category of "stablecoin-like" products isn't cleanly covered by the same protections. That leaves open the question of how regulators will treat products that blur the line between an asset-backed token and an algorithmic one.
• State-federal interoperability is complex in practice. A dual licensing track sounds clean in principle, but certifying that a state regime is "equivalent" to the federal standard is a judgment call, and inconsistent certification could create regulatory arbitrage — issuers choosing the jurisdiction with the lightest practical enforcement rather than the one that's formally compliant.
• Global fragmentation remains. The GENIUS Act governs US-issued and US-marketed payment stablecoins. Other jurisdictions — the EU's MiCA framework, various Asian regimes — have their own rules, and a stablecoin compliant in one jurisdiction isn't automatically compliant in another. Global businesses still face a patchwork.
• Enforcement capacity is unproven. A rulebook is only as strong as the regulator's ability to actually monitor compliance, catch violations, and act on them before a failure occurs rather than after. That capacity is still being built out.
• The no-yield rule pushes innovation to the edges. Because issuers can't pay yield directly, expect financial products that wrap stablecoins — lending protocols, money market-like structures, tokenized Treasuries — to become the place where yield-seeking behavior migrates. Those wrapper products may not carry the same protections as the underlying regulated stablecoin.

What to watch next

A few developments will show how this framework actually plays out in practice:

• Finalized rulemaking details on audit standards, disclosure formats, and the specific list of qualifying reserve assets — the technical layer that determines real compliance cost.
• Which state regimes get certified as equivalent, and how consistent that certification process turns out to be across states with very different existing money transmission laws.
• Bank entry decisions — whether major banks choose to issue their own stablecoins, partner with existing issuers, or sit out, and what that signals about where they see the competitive opportunity.
• The first real stress test — how an issuer failure, a depegging event, or a reserve shortfall gets handled under the new bankruptcy priority rules, which will show whether the holder protections work as intended under pressure.
• Enforcement actions, if any, against issuers that operate without proper licensing or misrepresent reserve composition — the clearest signal of how seriously the framework is being applied.

For businesses navigating how stablecoin compliance fits into their payment or treasury stack, Woyce Technologies can help assess what the new rules mean for your specific setup.

FAQ

What is the GENIUS Act?

The GENIUS Act is US federal legislation that creates a dedicated regulatory framework for payment stablecoins, requiring 1:1 reserve backing, regular disclosures, independent audits, and licensing through either a federal or certified state pathway. It also treats issuers as financial institutions for anti-money-laundering purposes, bars them from paying yield to holders, and gives holders priority over reserve assets if an issuer fails. Detailed rules on audits, disclosures, and qualifying assets are being set through regulatory rulemaking.

Does the GENIUS Act apply to all cryptocurrencies?

No. It's specifically targeted at payment stablecoins — tokens designed to maintain a fixed value, typically pegged to the US dollar, and used for payments. Bitcoin, Ether, and other non-pegged crypto assets aren't covered, and algorithmic stablecoins sit in a more ambiguous position relative to the core framework. It is a targeted regime for the product category that dominates real-world stablecoin usage, not a blanket crypto rulebook.

Can stablecoin issuers pay interest to holders under the GENIUS Act?

No. The law prohibits issuers from paying yield or interest directly to holders simply for holding the token, which is meant to keep payment stablecoins distinct from bank deposits and securities. Yield has not disappeared from the market, though. Expect it to show up in separate products that wrap stablecoins, such as lending platforms or tokenised Treasury funds, which may not carry the same protections as the regulated token itself.

What happens to stablecoin holders if an issuer goes bankrupt?

Holders get priority claim on the issuer's reserve assets ahead of general unsecured creditors, which is designed to make holders more likely to be made whole in a failure than they would be under standard bankruptcy rules. Priority only helps if the reserves are actually there, which is why the segregation, monthly disclosure, and audit requirements matter. How smoothly this works in a real failure will not be clear until the first test case.

How are stablecoin reserves required to be held?

Reserves must be held in high-quality, liquid assets — cash, insured bank deposits, and short-dated US Treasury instruments — segregated from the issuer's own operating funds, with restrictions on reusing those assets as collateral elsewhere. Issuers must publish the composition of these reserves monthly, and larger issuers face independent audits, so holders and business counterparties can check backing for themselves rather than relying on marketing claims.

Are stablecoin issuers subject to anti-money-laundering rules?

Yes. The GENIUS Act treats stablecoin issuers as financial institutions for Bank Secrecy Act purposes, meaning they must run KYC programs, screen for sanctions, and file suspicious activity reports like banks and money service businesses. In practice, that means issuers can monitor, freeze, or block tokens tied to illicit activity, so platforms built on regulated stablecoins should design for that possibility.

How is the GENIUS Act different from state money transmission laws?

State money transmission laws vary widely and weren't built specifically for stablecoins. The GENIUS Act creates a federal standard with a dedicated stablecoin licensing pathway, plus a mechanism for state regimes to be certified as equivalent, aiming for more consistency than the prior state-by-state patchwork. For products operating across many states, it is worth checking which state regimes are certified as equivalent, since that affects which issuers are viable where.

Conclusion

For most of their history, payment stablecoins asked users to trust that each token was backed by a dollar without any federal rule defining what that meant. The GENIUS Act replaces that trust with a framework: one-to-one reserves in cash, insured deposits, or short-dated Treasuries, segregation of those reserves, monthly disclosure, audits for larger issuers, a federal or certified state licence, full AML obligations, no yield paid to holders, and priority for holders if an issuer fails.

For businesses, the main shift is in due diligence. "Is this issuer licensed under the framework, and where is its latest reserve disclosure?" now replaces much of the guesswork. Payment builders also need to treat issuer selection as a compliance decision and expect freezing and monitoring as part of how regulated tokens behave. The limits remain significant: algorithmic designs sit outside the core rules, state equivalence will be judged case by case, MiCA and other regimes still apply abroad, and enforcement capacity has not been tested. This article is an explainer, not legal advice; confirm obligations with counsel as rulemaking concludes.

A useful next step is to list every stablecoin your product touches and check each issuer's licensing path and disclosure practice. If you are building payment or settlement features on stablecoin rails, our API development team can help you design integrations that adapt as the rules settle.