If you work with stablecoin issuers or advise firms in the digital asset space, this joint proposed rule from FinCEN and OFAC represents the first concrete federal AML framework specifically targeting stablecoins. The proposed rule implements provisions of the Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act), and it signals that the Treasury is moving quickly on stablecoin regulation.
What the Proposed Rule Does
The joint rule brings stablecoin issuers into the Bank Secrecy Act framework. That means the usual AML program requirements—customer identification, transaction monitoring, suspicious activity reporting, and recordkeeping. No surprises for anyone who's built an AML program before.
Receive future blog posts by email. Leave categories blank to get every post.
What matters is the scope. The rule defines which entities qualify as stablecoin issuers subject to these requirements. It also addresses OFAC sanctions compliance, a critical piece given the enforcement actions we've seen targeting digital asset platforms over the past two years.
Key Compliance Obligations
- Implement a risk-based AML program with written policies and procedures
- Conduct customer due diligence and maintain CIP requirements
- File SARs for suspicious transactions meeting the threshold
- Screen transactions against OFAC sanctions lists
- Maintain records for the standard five-year period
None of this is new if you've run a BSA/AML program before. But for stablecoin issuers used to flying under the radar, this is a hard pivot into the regulated world.
Why This Matters Now
The GENIUS Act passed with bipartisan support, and Treasury is moving to implement it. This proposed rule is the first major piece of that implementation. It establishes that stablecoin issuers are financial institutions under the BSA, a classification that carries real obligations and real examination risk.
For broker-dealers and investment advisers who custody stablecoins or facilitate transactions in them, this changes the counterparty risk calculus. You'll need to understand which issuers are compliant and which aren't.
The Comment Period
Treasury's taking comments. If you've got real-world headaches, like how to handle transaction monitoring thresholds or customer ID on edge cases, now's your shot to get them on the record. This is when your operational pain points can actually move the needle.
What You Need to Do
First, identify your exposure. Do you custody stablecoins? Facilitate transactions? Advise issuers? Each relationship has different implications under this rule.
Second, if you work with stablecoin issuers, start asking questions now. What's their BSA/AML program look like? Do they have sanctions screening in place? The rule isn't final, but the direction is clear.
Third, watch the comment period deadlines. If you have substantive concerns about the proposed requirements, put them on the record. Treasury does read comments, and practical operational feedback from compliance professionals carries weight.
This rule has been a long time coming. Stablecoins have lived in a regulatory gap for years, but that window is closing fast. If you're still waiting for clarity, this is as clear as it's going to get for now.
Subscribe to Regulated Intelligence Brief
Get new compliance intelligence delivered to your inbox.
Key Takeaways
Does this rule apply to firms that just hold stablecoins, or only to issuers?
The proposed rule specifically targets stablecoin issuers, not holders. However, firms that custody or transact in stablecoins should evaluate their counterparty risk based on whether the issuers they work with are compliant.
What AML program elements will stablecoin issuers need?
Standard BSA requirements: written AML policies and procedures, customer identification program, ongoing transaction monitoring, SAR filing obligations, and OFAC sanctions screening. The rule brings them into the same framework as other financial institutions.
When does this rule take effect?
It's a proposed rule, not final. Treasury will accept public comments, then issue a final rule. Implementation timelines will be specified in the final version. Watch for the comment period deadline to track the timeline.
The content in this blog is for informational purposes only and does not constitute legal advice, regulatory guidance, or an offer to sell or solicit securities. GiGCXOs is not a law firm. Compliance program requirements vary based on business model, customer base, and regulatory classification.