U.S. Treasury to Propose AML and Sanctions Rules for Stablecoin Issuers

The U.S. Treasury Department has moved to impose anti-money laundering and sanctions compliance obligations on stablecoin issuers, issuing a Notice of Proposed Rulemaking on April 7, 2026, that outlines federal standards for state-level regulatory frameworks under the GENIUS Act. The proposal marks the first concrete enforcement step since the landmark stablecoin law was signed in July 2025, targeting issuers with requirements including 1:1 reserve backing, monthly disclosures, and full alignment with federal AML and sanctions rules.

What Treasury’s Proposed Stablecoin Rules Cover

The Treasury’s NPRM requests public input on what state-level stablecoin regulatory regimes must look like to satisfy federal standards under the GENIUS Act (Guiding and Establishing National Innovation for US Stablecoins Act), which was signed into law on July 18, 2025. The proposal includes a 60-day public comment period from its Federal Register publication date.

The rules apply specifically to stablecoins under $10 billion in market capitalization that fall under state regulation. Issuers above that threshold are subject to exclusive federal jurisdiction, a distinction that immediately places the largest stablecoins under direct federal oversight.

Separately, the Financial Crimes Enforcement Network submitted a proposed rule titled “Permitted Payment Stablecoin Issuer Anti-Money Laundering/Countering the Financing of Terrorism Program and Sanctions Compliance Program Requirements” to the Office of Information and Regulatory Affairs on March 23, 2026. This dual-rule structure creates overlapping enforcement mechanisms for both state-regulated and federally-regulated issuers.

The GENIUS Act classifies all permitted stablecoin issuers as financial institutions under the Bank Secrecy Act. This classification triggers comprehensive compliance obligations that go well beyond what most crypto-native companies have historically maintained, with a stablecoin market now processing trillions in annual volume and increasingly integrated into cross-border payment corridors.

AML Compliance Duties Stablecoin Issuers May Need to Implement

Under the proposed framework, stablecoin issuers would need to build out full AML/CFT programs. Core requirements include Customer Identification Programs (CIP), Customer Due Diligence (CDD), suspicious activity reporting, and sanctions screening at every stage of the stablecoin lifecycle.

Transaction monitoring represents a significant operational burden. Issuers would need systems capable of flagging suspicious patterns across minting, redemption, and transfer activity, then escalating those alerts through defined reporting workflows to FinCEN.

Recordkeeping and audit trail requirements mean issuers must maintain verifiable documentation of compliance activities. The Treasury emphasized that state regulatory regimes must enforce federal BSA/AML and sanctions rules rather than creating divergent state systems, with outcomes required to be “at least as stringent and protective as the Federal regulatory framework.”

For smaller issuers operating under state oversight, this means building compliance infrastructure comparable to traditional financial institutions. The cost and tooling implications are substantial, particularly for teams that have operated with minimal KYC requirements or relied on pseudonymous blockchain interactions.

Sanctions Screening Expectations and OFAC Risk for Stablecoin Flows

The sanctions compliance component requires issuers to screen at onboarding and maintain ongoing monitoring of wallet addresses and counterparties. This includes cross-referencing against OFAC’s Specially Designated Nationals list and other sanctions databases at the point of minting, redemption, and, potentially, secondary transfers.

Handling sanctioned addresses creates operational complexity unique to blockchain-based assets. Issuers would need blocking, freezing, or reporting workflows when exposure events occur, including governance procedures for communicating with regulators about sanctioned address interactions.

Civil liberties advocates have raised concerns about these requirements. Coin Center’s analysis highlighted privacy implications of mandating issuer collection of identifying information on public blockchains, warning of potential financial surveillance risks if the framework is implemented without adequate safeguards.

The incident response dimension is particularly relevant given that stablecoin transactions settle in real time. Unlike traditional banking where wire transfers can be intercepted during processing windows, on-chain transfers are final within seconds, placing the compliance burden heavily on pre-transaction screening rather than post-transaction remediation.

Who Is Most Affected and What Comes Next

USDT (Tether), with a market cap of $184.17 billion, and USDC, at $78.3 billion, both far exceed the $10 billion threshold. Both automatically fall under federal jurisdiction regardless of state framework outcomes.

USDT Market Cap

$184.17B

Smaller issuers face the steepest adjustment. Companies operating under state money transmitter licenses with limited compliance teams will need to either build out AML/sanctions programs from scratch or partner with compliance-as-a-service providers. The readiness gap between large issuers with existing banking relationships and smaller entrants is significant.

Exchanges, custodians, and DeFi access rails that interact with regulated stablecoins may face secondary effects. Liquidity routing could shift as issuers implement sanctions screening that restricts certain wallet addresses or geographic regions from accessing their tokens.

The regulatory timeline provides some runway. The 60-day comment period is the immediate next step, with implementing regulations required by July 18, 2026, and full enforcement beginning by January 18, 2027 at the latest. Market participants tracking on-chain signals and positioning should note that compliance costs could affect stablecoin yields and operational margins well before enforcement begins.

Treasury Secretary Scott Bessent framed the regulatory push in expansionist terms:

Source: @SecScottBessent on X

Senator Cynthia Lummis, a key architect of the GENIUS Act, emphasized the consumer protection rationale, noting the legislation requires all stablecoins to be backed 1:1, gives consumers strong rights in bankruptcy, and establishes strict marketing standards.

The Crypto Fear & Greed Index sits at 17, deep in “Extreme Fear” territory, reflecting broader market caution even as institutional voices promote stablecoins as drivers of Treasury demand and dollar dominance. The disconnect between regulatory optimism from officials and market-level anxiety suggests participants are pricing in compliance costs and uncertainty rather than the long-term adoption thesis.

Core requirements for state-regulated stablecoin regimes include 1:1 reserve backing using cash or high-quality cash equivalents, monthly reporting, full compliance with federal AML and sanctions policies, and a prohibition on token rehypothecation. These provisions mirror standards that well-funded crypto infrastructure projects are already building toward, but present a barrier for undercapitalized issuers.

FAQ: U.S. Treasury Stablecoin AML and Sanctions Proposal

When could these rules take effect?

The NPRM has a 60-day comment period. Final implementing regulations are required by July 18, 2026, with full enforcement starting no later than January 18, 2027. These dates are set by the GENIUS Act’s statutory deadlines.

Do the rules apply to non-U.S. issuers serving U.S. users?

The GENIUS Act’s BSA classification applies to “permitted payment stablecoin issuers,” which includes entities operating under either state or federal frameworks. Non-U.S. issuers seeking to serve U.S. markets would need to comply with the same AML/sanctions obligations, though the exact extraterritorial enforcement mechanisms remain subject to the final rule text.

How is this different from existing BSA/OFAC expectations?

Previously, stablecoin issuers operated in a regulatory gray area where BSA obligations were not explicitly applied to token issuance. The GENIUS Act formally classifies them as financial institutions, removing ambiguity and requiring full AML/CFT programs, CIP, CDD, suspicious activity reporting, and sanctions screening as baseline compliance, not optional best practice.

Which stablecoins fall under state versus federal oversight?

Stablecoins with market capitalizations under $10 billion may be regulated at the state level, provided the state’s framework meets Treasury’s federal standards. Issuers above $10 billion, including USDT and USDC, fall under exclusive federal jurisdiction.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.