The Stablecoin Rule Is Final. Your Bank’s Position Isn’t.

On October 21, 2026, the OCC issued its final rule implementing the GENIUS Act (opens in a new tab), the 2025 law that creates federal licensing for payment stablecoin issuers. The rule takes effect January 18, 2027, the same day as the Act. On October 27, Comptroller Jonathan Gould told the Ohio Bankers League (opens in a new tab), “Community banks have a role in the future of payments.”

It’s easy to read that as an invitation to issue. Most community banks won’t, at least not soon. For most, the real change is that stablecoin questions will start arriving from customers, fintech partners, and directors, and the rule leaves the answers to the bank. The OCC says its rule “neither mandates that permitted payment stablecoin issuers use community banks nor requires community banks to take on permitted payment stablecoin issuers as customers.”

That leaves a business judgment call, and examiners will ask to see the judgment. This piece is for CCOs, BSA Officers, and partner oversight teams at community banks and sponsor banks.

What the final rule settles

An insured national bank can’t issue a payment stablecoin itself. It has to issue through a subsidiary, and the subsidiary needs OCC approval first. Under the Act, a state bank’s or credit union’s subsidiary answers to the parent’s own federal regulator instead. In Bulletin 2026-51 (opens in a new tab), the OCC says it expects new issuers to wait for that approval before they start operating. Applications open once OMB approves the forms.

The OCC will tell an applicant within 30 days whether its application is substantially complete, and it commits to a decision within 120 days of that finding. Issuers already operating in the U.S. that file a substantially complete application by January 18 can ask for a waiver of up to 12 months. So a bank’s first issuer customer in 2027 may be operating under a waiver with its application still pending.

On yield, the GENIUS Act (opens in a new tab) bars an issuer from paying interest or yield “solely in connection with the holding, use, or retention” of its stablecoin. The OCC dropped its proposed presumption that certain affiliate and third-party payments violate that ban. Commenters who wanted a broad ban warned of deposit flight from community banks. The OCC also conceded that reserve deposits may, for now, be less stable funding than other deposits.

The BSA piece isn’t final

The OCC rule leaves BSA/AML and sanctions to a separate rulemaking, but the statute already sets the baseline. A permitted issuer is treated as a financial institution under the Bank Secrecy Act. It needs an AML program with a risk assessment and a designated officer, suspicious activity monitoring and reporting, a customer identification program, and a sanctions program. It also needs “technical capabilities, policies, and procedures to block, freeze, and reject specific or impermissible transactions.”

The rules that spell out those duties are proposals. FinCEN and OFAC proposed (opens in a new tab) the program and sanctions rules on April 10, 2026, and the OCC proposed a companion rule (opens in a new tab) on June 24. Neither is final. FinCEN and OFAC also propose that their rules take effect 12 months after the final versions are issued. Bank programs face the same wait, as our side-by-side of the bank AML/CFT proposals shows.

For at least the first year, a bank reviewing an issuer’s AML program will have the statute’s list and the proposals, not a final standard. Write the diligence against the statute and note which proposal served as the benchmark.

Where will your bank meet stablecoins first?

Most banks will meet them through one of three doors.

The first is the boardroom. A director hears the Comptroller’s remarks and asks whether the bank should form an issuing subsidiary. It’s a strategy question, but the compliance facts shape it. The subsidiary becomes a BSA financial institution with its own program, officer, and freeze capability.

The second is the deposit desk. An issuer asks to open reserve accounts. That’s a regulated financial institution customer with large, concentrated balances that can leave fast in a redemption spike. Declining is allowed, but write the reason in risk terms. Debanking Is Now a Two-Sided Risk for Your Bank explains why that record matters.

The third is the partner program. A fintech wants to add stablecoin payouts or wallets. The Act makes it unlawful to represent that a payment stablecoin is federally insured or government guaranteed, and unlawful to market a product as a payment stablecoin unless it’s issued under the Act. Starting July 18, 2028, a digital asset service provider generally can’t offer or sell U.S. persons a stablecoin from an unapproved issuer. Insured-status claims are the same review problem as in Your Marketing Copy Is a Compliance Document.

What to do now

1. Put a written stablecoin position in front of the board. Cover all three doors. For each, state yes, no, or not yet, with the risk reason. The CCO drafts it with the BSA Officer and treasury, and the evidence is board or committee minutes approving it, with a review date tied to the final BSA rules.
2. Write the onboarding standard for an issuer customer before one applies. List what the bank will collect. The list should cover approval status (or waiver and pending application), the issuer’s AML/CFT and sanctions program, its block-and-freeze capability, and expected balance swings. Treasury or ALCO sets concentration limits for reserve deposits. The BSA Officer owns the EDD procedure, and the evidence is the approved procedure and a completed file template.
3. Make any stablecoin feature a change that needs bank approval. Partner agreements and change management should require approval before a partner adds stablecoin payouts, wallets, or related marketing. Review the copy against the insured-status ban and confirm which issuer stands behind the coin. The Fintech Partner Oversight Kit includes a deposit insurance representations policy and a marketing review procedure for partner communications. The partner oversight team owns the gate, and the evidence is the updated agreement or policy and the change log.

None of this commits the bank to stablecoins. It commits the bank to answering the first request with a standard, which is ordinary BSA and partner oversight work applied to a new customer type.

Banks that decide now will spend 2027 applying a standard. The rest will write one under pressure, one request at a time.

Sources

• Implementing the Guiding and Establishing National Innovation for U.S. Stablecoins Act for the Issuance of Stablecoins by Entities Subject to the Jurisdiction of the OCC, Final Rule, 91 FR 67000 | OCC (Oct. 23, 2026) (opens in a new tab)
• Guiding and Establishing National Innovation for U.S. Stablecoins Act, Public Law 119-27 | govinfo (July 18, 2025) (opens in a new tab)
• GENIUS Act: Waivers and Application Submission Guidance, Bulletin 2026-51 | OCC (Oct. 21, 2026) (opens in a new tab)
• Permitted Payment Stablecoin Issuer AML/CFT Program and Sanctions Compliance Program Requirements, Proposed Rule, 91 FR 18582 | FinCEN and OFAC (Apr. 10, 2026) (opens in a new tab)
• Permitted Payment Stablecoin Issuer AML/CFT and Sanctions Compliance Risk Management, Proposed Rule, 91 FR 37840 | OCC (June 24, 2026) (opens in a new tab)
• Comptroller Gould Discusses Efforts to Support Community Banks, NR 2026-94 | OCC (Oct. 27, 2026) (opens in a new tab)