GENIUS Act Stablecoin Licensing: What Changes Now

The GENIUS Act, passed in 2025, set up a license-or-exit framework: only approved issuers can legally offer a "payment stablecoin" in the US after the law's backstop date of January 18, 2027. Issuers that already run through US-regulated structures, Circle's USDC being the clearest example, are broadly positioned to qualify. The harder question is for issuers operating offshore. Here's the catch for readers trying to plan around this: the rule isn't finished. Primary regulators, including the OCC, FDIC, NCUA and Treasury, already missed their own July 18, 2026 statutory deadline to finalize these rules, and Monday's release is a proposal, not a final regulation. It carries a 60-day public comment window that runs to roughly mid-October 2026, meaning the mechanics you'd actually have to comply with could still shift before anything is locked in.

Under the GENIUS Act's original text, the burden of getting licensed sat with issuers, and the $1 million fine and five-year prison term the statute attaches to unlicensed issuance target whoever is acting as the issuer, not a platform that merely lists someone else's token. What the NPRM adds is exposure for the platforms that list them: civil penalties of up to $100,000 per violation per day for exchanges and DASPs that knowingly facilitate trading in a non-compliant stablecoin. It also asserts jurisdiction over offshore activity that reaches US persons, an extraterritorial reach Treasury is explicitly inviting comment on because it's new legal territory. The mechanism here is straightforward: when a per-day penalty applies to the exchange itself rather than to a distant offshore issuer, compliance teams stop waiting for a final rule and start planning delistings now, against a proposal that might still change. That's the actual news. A distant deadline sitting on a calendar doesn't move markets or compliance teams; a per-day penalty clause that lands on a compliance desk in October does.

The stablecoin most exposed to this shift is also the biggest one. USDT's market cap sits around $183 billion versus roughly $72 billion for USDC, and together the two account for more than 80% of stablecoin supply and around 97% of stablecoin trading volume, according to recent market data. That means a rule aimed at exchange liability touches the plumbing almost all crypto trading runs through. The proposed safe harbor for foreign issuers depends on a "reciprocity" determination, essentially Treasury certifying that an issuer's home jurisdiction has comparable oversight. No jurisdiction has received one yet, including El Salvador, where Tether is domiciled. Until that happens, USDT's path to guaranteed US exchange access after January 2027 is genuinely undetermined, not just slow-moving paperwork. Tether's own actions are a signal worth reading: the company has been building out USAT, a separate US-compliant stablecoin issued through Anchorage Digital, which suggests Tether itself is preparing for USDT to need a workaround rather than assuming it clears reciprocity in time.

Expect the comment period, open through roughly mid-October, to turn into heavy lobbying on two specific fights rather than the core framework. The license-or-exit structure itself is settled statutory text and isn't really up for debate. What is contested is how far due-diligence duties for exchanges extend, and how the foreign-issuer reciprocity process actually works in practice. It's worth being precise about the calendar here: the GENIUS Act sets two separate deadlines, not one. Issuers must be licensed by January 18, 2027. The outright ban on DASPs offering or selling any unlicensed-issuer stablecoin doesn't take effect until three years after enactment, July 18, 2028 — a full year and a half later. That later date is confirmed in the Act's own text, not a rumor, and it means exchanges have more legal runway than the "2027" framing implies. Which is exactly why the NPRM's near-term civil penalties matter: they're pushing exchanges to act on a compliance timeline set by enforcement risk now, not by a 2028 deadline still two years out. The realistic range of outcomes runs from Treasury narrowing exchange liability and clearing a reciprocity pathway well before either deadline, avoiding disruption, to the rule finalizing close to its current form with no reciprocity determinations in place, pushing exchanges toward preemptive delisting or restriction of USDT pairs for US customers.

For anyone holding or building on stablecoins, the practical read is this: USDC and other already-compliant, US-domiciled issuers face little near-term disruption from this specific rule. USDT holders and platforms leaning on it face a live, unresolved question, not an abstract problem for a deadline still years out, because exchanges are the ones now facing new per-day civil exposure and will act on their own timelines to manage that risk. The trigger to watch isn't either statutory date itself; it's whether Treasury issues any reciprocity determination, for El Salvador or elsewhere, before exchanges start making delisting decisions on their own. If that determination lands well ahead of the deadlines, the disruption stays contained. If it doesn't, the risk is a fragmented US market for the world's most-traded stablecoin, with exchanges pulling back access before regulators finish writing the rule they're reacting to.