US Regulators Propose Tougher AML and Sanctions Rules for Stablecoin Issuers

• OCC, FinCEN and OFAC move to bring permitted payment stablecoin issuers deeper into the US financial crime compliance framework under the GENIUS Act.

Meat of the Story…

US regulators are moving to impose a more formal anti-money laundering, counter-terrorist financing and sanctions compliance framework on permitted payment stablecoin issuers, bringing the rapidly expanding digital asset sector closer to the regulatory standards applied to traditional financial institutions.

The proposals implement provisions of the Guiding and Establishing National Innovation for US Stablecoins Act, known as the GENIUS Act, which directs that permitted payment stablecoin issuers be treated as financial institutions for purposes of the Bank Secrecy Act. FinCEN and OFAC’s April proposal would establish AML/CFT obligations and require issuers to maintain effective sanctions compliance programmes, while the OCC has proposed corresponding standards for issuers under its supervision.

Analysis

The regulatory push represents a significant development in the US approach to stablecoin oversight. Rather than treating stablecoin issuers primarily as digital asset businesses, the proposed framework places them within a tailored financial crime compliance regime.

FinCEN and OFAC proposed creating a dedicated BSA framework for permitted payment stablecoin issuers, requiring them to establish effective AML programmes, conduct appropriate risk assessments, maintain records and monitor transactions. The framework also includes sanctions compliance requirements administered by OFAC.

The OCC subsequently proposed corresponding BSA and sanctions compliance standards for permitted payment stablecoin issuers within its regulatory jurisdiction. The proposal applies to federal qualified payment stablecoin issuers and certain state qualified issuers subject to OCC regulatory or enforcement authority.

The wider rulemaking programme also includes customer identification requirements. A June 2026 joint proposal involving FinCEN, the OCC, Federal Reserve, FDIC and NCUA would require permitted payment stablecoin issuers to maintain customer identification programmes under the BSA and the GENIUS Act. The current comment period is scheduled to close on August 21, 2026.

The regulatory architecture is therefore developing on several fronts at the same time, covering AML/CFT programmes, sanctions compliance, customer identification, supervision and enforcement.

Compliance Implications

For stablecoin issuers, the proposals could significantly increase expectations around customer due diligence, transaction monitoring, suspicious activity detection, record keeping and sanctions screening.

The sanctions element is particularly important because the FinCEN and OFAC proposal would expressly require permitted payment stablecoin issuers to maintain an effective economic sanctions compliance programme. This represents a significant compliance development for a sector whose transactions can move across borders and blockchain networks at high speed.

Issuers and other businesses operating within the stablecoin ecosystem will need to understand how responsibility for compliance is allocated across issuers, wallet providers, intermediaries, banking partners and other participants.

The proposals also reinforce the importance of risk-based controls. The regulatory framework is intended to account for the size, complexity and business model of permitted payment stablecoin issuers rather than simply transplanting every traditional banking requirement without modification.

For banks and payment companies dealing with stablecoin businesses, enhanced counterparty due diligence will become increasingly important. Firms should understand the issuer’s regulatory status, AML/CFT framework, sanctions controls, customer identification processes and ability to monitor blockchain-based transactions.

Why the Update Matters

Stablecoins are increasingly being positioned as a bridge between traditional finance and digital assets. Their growing use in payments and settlement has also increased regulatory concern about money laundering, terrorist financing, sanctions evasion and other illicit financial activity.

The US proposals signal that regulators intend to address those risks by bringing stablecoin issuers into a more recognisable financial crime compliance structure.

The development is also significant for international compliance teams. US-regulated stablecoin issuers and their counterparties may create compliance exposure for businesses outside the United States, particularly where transactions involve US persons, US financial institutions, dollar-denominated stablecoins or activities subject to US sanctions jurisdiction.

For African financial institutions and fintech companies exploring stablecoin-based payments, the direction of US regulation provides an important benchmark. Partnerships involving US-linked stablecoin issuers may increasingly require stronger controls around customer identification, transaction monitoring, sanctions screening and counterparty risk.

Compliance Takeaway

Stablecoin compliance is moving beyond licensing and reserve requirements. AML/CFT and sanctions controls are becoming central elements of the regulatory framework.

Financial institutions, fintech companies and other businesses interacting with permitted payment stablecoin issuers should review their exposure and assess whether existing customer due diligence, transaction monitoring, sanctions screening and blockchain analytics controls are sufficiently robust for the emerging regulatory environment.

The key compliance question is no longer simply whether a stablecoin is regulated. It is whether the entities involved can demonstrate effective controls for identifying customers, detecting suspicious activity, managing sanctions risk and maintaining auditable compliance records.