GENIUS Act compliance for payment companies: what applies to you and when
Most of what gets written about the GENIUS Act is aimed at the handful of companies that will issue stablecoins. Most payment companies never will. Here is what the law actually asks of you instead.
The short answer: the GENIUS Act's heavy obligations — licensing, reserves, redemption — fall on stablecoin issuers. A payment company that only uses a third party's regulated stablecoin is not an issuer; its list is: (1) confirm the token qualifies as a covered payment stablecoin from a compliant issuer, (2) keep existing money-transmission/MSB licensing current, (3) expect BSA/AML refinements once FinCEN's proposed rules finalize. Status: Treasury's proposed rule published 18 August 2026, comments due 19 October 2026, phase-in from 18 January 2027 — not yet final.
The GENIUS Act, signed 18 July 2025, is a federal issuer-licensing regime. Read the coverage and you would think every payment company in America needs a banking charter by next quarter. In practice, the Act draws a sharp line between the entity that issues a payment stablecoin and everyone downstream who merely accepts, holds briefly, or settles in one, and the compliance burden differs enormously depending on which side of that line you sit.
If you are a PSP, merchant or remittance company using a regulated third-party stablecoin, such as USDC or PYUSD, rather than minting your own, this is the article written for you.
The line the Act actually draws
A payment stablecoin issuer under the GENIUS Act must be a permitted entity, a subsidiary of an insured depository institution, a federal-qualified nonbank, or a state-qualified issuer under a regime the Treasury deems equivalent, and must meet reserve, redemption, disclosure and capital requirements. That is a heavy licensing regime, and it applies to the handful of companies that will actually mint tokens.
A company that accepts payment stablecoins from customers, settles merchant payouts in them, or converts them to and from fiat as part of a payment flow is not issuing anything. It is using an instrument someone else issued, in roughly the same posture as a business that accepts dollars without being the Federal Reserve. That does not mean no obligations apply; it means a different, generally lighter, set applies.
What actually applies to a using-not-issuing payment company
- Confirm the token is a "covered payment stablecoin." Treasury's August 2026 proposed rule defines when a token is issued or offered in the United States and by whom, which determines whether it is compliant to use in a US payment flow at all. Using a stablecoin from an issuer that has not secured the right US licensing status could expose your flow to the Act's sales restrictions once they phase in.
- Existing money-transmission and MSB obligations do not go away. If your business already requires state money-transmitter licences or federal MSB registration for handling customer funds, using stablecoins as a settlement instrument inside that flow does not remove those requirements. The GENIUS Act is additive to, not a replacement for, existing payments regulation.
- Bank Secrecy Act and sanctions screening apply as they already do. FinCEN and OFAC issued proposed AML rules in April 2026 addressing stablecoin-specific illicit-finance risk, and a Customer Identification Program proposal followed in June 2026, with the comment period closing 21 August 2026. These extend existing BSA obligations to stablecoin flows rather than inventing a parallel regime; if you already run KYC and sanctions screening as a licensed money transmitter, expect refinement, not a rebuild.
- Custody and disclosure practices still need scrutiny, even without issuer status. If your business holds customer stablecoin balances even briefly, prudent practice, and likely eventual guidance, points toward segregation, reserve-quality diligence on your chosen issuer, and clear customer disclosure, echoing principles the Act imposes directly only on issuers.
The rulemaking is still moving. As of this writing, Treasury's Notice of Proposed Rulemaking on payment stablecoin issuance, offer and sale was published 18 August 2026 with comments due 19 October 2026. This is a proposed rule, not final law. Provisions are expected to phase in starting 18 January 2027, with broader sales restrictions by 18 July 2028, and enforcement generally expected no later than January 2027. Anything built against today's proposal should be built to flex as the final rule lands.
A practical compliance checklist, in order
- Classify your role. Are you issuing anything, even incidentally, such as a wrapped or platform-specific token? If yes, you are in scope for the full issuer regime and need counsel immediately. If no, you sit in the lighter using-not-issuing category below.
- Audit your issuer choice. Confirm the stablecoin(s) your flow touches are issued by an entity positioned to be a compliant "covered payment stablecoin" issuer once rules finalise. This is a due-diligence question on your vendor, not a licensing question on you.
- Map onto existing licensing. Confirm your current money-transmission and MSB registrations cover the stablecoin-settlement activity you are adding; most well-run PSPs will find they already do, with amendments rather than new licences required.
- Refresh BSA/AML procedures for the token type. Once the FinCEN/OFAC and CIP rules finalise, expect specific guidance on stablecoin transaction monitoring and identity verification; get ahead of it by asking your compliance counsel what a stablecoin-aware update to existing procedures would look like.
- Watch the comment periods. The October 2026 and August 2026 comment deadlines are where the final shape of these rules gets set. A company with real operational stakes in the outcome has a channel to weigh in through counsel or industry associations before the rule locks.
Where this connects to the EU side
Companies operating in both the US and EU face a second, structurally different regime in MiCA, with its own PSD2 overlap that took effect 2 March 2026. The two regimes do not map onto each other cleanly, and a settlement architecture built purely around US assumptions will need rework for European flows. We cover the practical reconciliation in GENIUS Act vs MiCA: one settlement design for two regimes.
The honest bottom line
For a payment company that is not issuing anything, the GENIUS Act is real but manageable: it mostly asks you to be more careful about which stablecoin you use and to expect your existing BSA and money-transmission obligations to be refined rather than replaced. The bigger practical risk is not the Act itself; it is building a settlement architecture today around a proposed rule that changes shape by the time it finalises. That is a design decision worth getting independent eyes on before it is locked into a vendor contract.
We help payment companies read the current rulemaking against their specific flow and decide what, if anything, needs to change now versus what can wait for a final rule. That scoping is what we do, alongside your counsel, not instead of them.
Common questions
Does the GENIUS Act apply to a payment company that only uses stablecoins, rather than issuing them?
The heaviest obligations, reserve requirements, redemption rights and issuer licensing, fall on payment stablecoin issuers. A PSP, merchant or remittance company that accepts, settles or distributes a third party's regulated stablecoin is not itself an issuer, but it still faces money-transmission licensing, Bank Secrecy Act obligations as a money services business, and, under the Treasury's August 2026 proposed rule, must confirm the token it uses qualifies as a covered payment stablecoin issued by a compliant entity.
What is the current status of GENIUS Act rulemaking as of August 2026?
The GENIUS Act was signed 18 July 2025. Treasury issued a Notice of Proposed Rulemaking on 18 August 2026 covering payment stablecoin issuance, offer and sale, with public comments due by 19 October 2026. Separate proposed rules on illicit finance and AML from FinCEN and OFAC were issued in April 2026, and a Customer Identification Program proposal followed in June 2026 with comments due 21 August 2026. None of these are final rules yet.
When do GENIUS Act rules actually take effect?
Based on the August 2026 proposed rule, licensing and issuance provisions are expected to begin taking effect in stages starting 18 January 2027, with broader restrictions on selling non-compliant stablecoins phasing in by 18 July 2028. These dates are proposed, not final, and Treasury has indicated enforcement will begin no later than January 2027.
North Settlements provides business advisory services, not legal advice. This article summarises public rulemaking as of August 2026, which is a proposed and not final regulatory framework, and is not a substitute for counsel. Confirm current status and applicability to your business with qualified legal counsel before acting.
Need this mapped against your specific flow?
We help payment companies classify their GENIUS Act exposure and build a compliance roadmap alongside your counsel. Fixed fee, independent of any vendor.
Book an intro call