May 21, 2026

What the GENIUS Act PPSI Rule Means for Stablecoin Issuers

TRM Team

What the GENIUS Act PPSI Rule Means for Stablecoin Issuers

Key takeaways

A joint FinCEN-OFAC proposed rule classifies Permitted Payment Stablecoin Issuers (PPSIs) as financial institutions under the Bank Secrecy Act; public comments close June 9, 2026.
PPSIs in scope would build full BSA AML programs plus OFAC-aligned sanctions compliance programs — internal controls, designated compliance officer, training, independent testing, customer identification, suspicious activity reporting, risk assessment, screening, and recordkeeping.
The rule formalizes freeze and seizure as a technical requirement, vs. a policy commitment. Issuers in scope need the operational ability to act on OFAC designations on-chain, formalizing what major issuers like Tether already do voluntarily.
The rule's preamble cites TRM research identifying two UK exchanges that processed approximately USD 1 billion in IRGC-linked stablecoin flows before OFAC designated them in January 2026 — a concrete illustration of the sanctions evasion risk the proposed framework is designed to address.
Industry-led freezing capability is already operating at scale. The T3 Financial Crime Unit has frozen a cumulative 450 million USDT linked to illicit activity since its August 2024 launch (as of April 2026). And as of May 19, 2026, Beacon Network — the industry's first real-time tracking and enforcement network — has disrupted more than USD 8.74 million in illicit activity.

What is the GENIUS Act PPSI rule?

The GENIUS Act PPSI rule is a joint FinCEN and OFAC proposed rulemaking that classifies Permitted Payment Stablecoin Issuers (PPSIs) as financial institutions under the Bank Secrecy Act. Payment stablecoins now circulate widely for cross-border remittance, treasury management, and consumer transactions.

The GENIUS Act, enacted in 2025, created a federal licensing framework for the entities that issue these tokens, and this proposed rule sets the anti-money laundering (AML) and sanctions requirements that sit on top of that framework. Issuers in scope would build the same AML and sanctions controls long required of regulated financial institutions, applied to how stablecoins are minted, redeemed, and circulated on-chain.

Comments are open through June 9, 2026, after which the agencies will publish a final rule.

{{48-what-the-genius-act-ppsi-rule-means-for-stablecoin-issuers-callout-1}}

Who qualifies as a Permitted Payment Stablecoin Issuer?

A PPSI is an entity authorized under the GENIUS Act to issue a payment stablecoin for use in the US, either through a federal charter or through a qualifying state regulatory regime. The GENIUS Act draws a line between payment stablecoins — tokens redeemable one-to-one for US dollars and backed by qualifying reserve assets — and other digital assets such as algorithmic stablecoins, governance tokens, or non-payment tokens, which fall outside the PPSI definition and outside this rule.

Two paths lead to PPSI status: federally qualified issuers supervised by federal banking regulators, and state-qualified issuers operating under a state regime certified by the Treasury as substantially similar to the federal standard. Both paths trigger the same AML and sanctions obligations under the proposed rule.

What does the rule require operationally?

The GENIUS Act PPSI rule would require PPSIs to maintain a written AML program covering the four pillars established under the Bank Secrecy Act, plus a sanctions compliance program aligned with OFAC's published expectations.

The AML program elements include internal policies and controls, a designated compliance officer with sufficient authority, ongoing employee training, and independent testing of the program. PPSIs would also be subject to customer identification, beneficial ownership, suspicious activity reporting, and currency transaction reporting requirements applied to the issuer's direct customer base — typically institutional clients minting and redeeming tokens.

The sanctions program elements, addressed in OFAC's section of the joint rule, would require a documented risk assessment, sanctions screening of counterparties and on-chain destinations, escalation procedures for potential matches, and recordkeeping.

The notice of proposed rulemaking (NPRM) signals that AI can be an effective tool in AML compliance — directing attention toward higher-risk customers and activities.

What are the elements of an effective sanctions compliance program?

A PPSI sanctions compliance program must match the throughput and cross-chain reach of the networks the issuer operates across. Major payment stablecoins settle billions of dollars in transactions per day across multiple blockchains, with USDT and USDC together accounting for the majority of stablecoin volume. The rule does not prescribe a specific technical standard, but its risk-based framework indicates what supervisors will look for during examinations.

A program in scope would include:

A documented risk assessment covering the issuer's exposure to sanctioned jurisdictions, sanctioned persons, and high-risk typologies.
Sanctions screening that operates at the scale and speed of the issuer's transaction flows.
The ability to act on OFAC Specially Designated Nationals (SDN) designations on-chain, including freezing token balances at sanctioned addresses where the issuer retains that contractual capability.
Cross-chain visibility for flows that span Ethereum, TRON, Solana, and the layer-2 environments where stablecoins are minted and redeemed.

The proposed rule treats this freeze and seizure capability as a technical requirement, not just a policy commitment — issuers in scope need the operational ability to act on designations, formalizing what some major issuers (notably Tether) already do voluntarily.

In considering different compliance processes, issuers may look to consider adopting programs where the industry has previously seen operational effectiveness in freezing assets. For instance, since its August 2024 launch, the T3 Financial Crime Unit — a joint effort with Tether and the TRON Foundation — has frozen a cumulative 450 million USDT linked to illicit activity (as of April 2026). As of May 19, 2026, Beacon Network — the industry's first real-time tracking and enforcement network — has also disrupted more than USD 8.74 million in illicit activity. These figures illustrate the operational capability the rule expects of PPSIs in scope — currently exercised voluntarily. Under the proposed rule, that capability would be required rather than discretionary.

When does the rule take effect, and what should issuers do now?

The GENIUS Act PPSI rule's public comment period closes June 9, 2026, with a final rule expected later in 2026 and implementation deadlines to be set in the final text. Compliance teams can use the comment period to map their current AML and sanctions posture against the program elements in the proposed rule, identify gaps in screening coverage across the chains where their tokens circulate, and document the operational specifics of stablecoin compliance for the public comment record. Practitioners with operational evidence — throughput numbers, screening latencies, cross-chain coverage gaps — can use the comment period to inform how the final rule's risk-based language is interpreted.

Frequently asked questions

1. When was the GENIUS Act PPSI rule proposed?

The joint FinCEN and OFAC proposed rule was published in the Federal Register on April 10, 2026.

2. When does the comment period close?

The comment period closes on June 9, 2026. Comments may be submitted through the Federal eRulemaking Portal referenced in the Federal Register notice.

3. Does the GENIUS Act PPSI rule apply to USDT?

Tether's USDT is a foreign-issued stablecoin and would not automatically fall under US PPSI registration without a US issuance entity. The GENIUS Act and its implementing rules set up a permitted-issuer regime for stablecoins intended for US use; foreign issuers seeking US market access would face separate equivalence determinations under the broader framework. The proposed AML rule applies to entities qualifying as PPSIs under the GENIUS Act.

4. Are foreign stablecoin issuers covered?

Foreign issuers are addressed through equivalence and reciprocity provisions in the GENIUS Act framework rather than direct PPSI registration. The proposed AML rule covers PPSIs as defined under the Act; foreign issuers without US PPSI status remain subject to OFAC sanctions enforcement and to the existing BSA obligations that apply to US counterparties they transact with.

5. What is the difference between a PPSI and a money services business (MSB)?

A PPSI is a Permitted Payment Stablecoin Issuer authorized under the GENIUS Act to mint payment stablecoins, while an MSB is a money transmitter, exchanger, or other entity regulated by FinCEN under existing BSA rules. The categories sit at different points in the stablecoin value chain: PPSIs are issuers, MSBs typically distribute or exchange. The proposed rule applies to PPSIs; existing MSB rules continue to apply to exchanges and money transmitters.

6. What is the difference between FinCEN's and OFAC's obligations under the rule?

FinCEN's portion of the joint rule covers the AML program requirements — internal controls, designated officer, training, independent testing, customer identification, and suspicious activity reporting. OFAC's portion covers sanctions compliance — risk assessment, screening, escalation, and recordkeeping. The two were issued jointly because PPSIs sit at the intersection of both regulatory mandates.

7. Do PPSIs need to file SARs?

Yes. Under the proposed rule, PPSIs would be subject to suspicious activity reporting obligations under the Bank Secrecy Act, applied to the issuer's direct customer relationships and to on-chain activity the issuer has visibility into through its compliance program.

8. How does the rule interact with state-level money transmitter licenses?

The GENIUS Act allows state-qualified PPSIs to operate under state regulatory regimes certified by the Treasury as substantially similar to the federal standard. State money transmitter licensing remains relevant for other crypto businesses, but PPSI status is a distinct federal-or-state-equivalent regulatory category established by the Act.

9. What happens if a PPSI fails to freeze an OFAC-designated address?

Failure to act on OFAC sanctions designations exposes the issuer to civil and potentially criminal liability under existing sanctions enforcement authorities. The proposed rule requires PPSIs to maintain the operational capability to identify and act on sanctioned addresses, with screening and freeze actions documented as part of the compliance program rather than handled ad hoc.

10. Is the comment period a chance to push back on the scope?

The public comment period is the formal mechanism for industry to respond to the proposed rule. Comments can address scope, definitions, proportionality, implementation timelines, and operational specifics. The agencies typically address substantive comments in the preamble of the final rule and adjust the regulatory text where the record supports a change.