Treasury Just Made Stablecoin Issuers Subject to the Bank Secrecy Act. Here's What That Means.

FinCEN and OFAC published a joint proposed rule on April 8 that would treat permitted payment stablecoin issuers as financial institutions under the Bank Secrecy Act for the first time. If finalized, every stablecoin issuer operating under the GENIUS Act framework — Circle, Paxos, and anyone else minting dollar tokens — must build the same anti-money laundering infrastructure that banks have maintained for decades.

Treasury Secretary Scott Bessent framed it as balance: "This proposal will protect the U.S. financial system from national security threats without hindering American companies' ability to forge ahead in the payment stablecoin ecosystem."

What Issuers Must Do

The rule requires permitted payment stablecoin issuers (PPSIs) to stand up full AML/CFT compliance programs: suspicious activity reporting, customer due diligence, and record-keeping obligations that mirror traditional banking requirements. The sanctions component is more aggressive — issuers must deploy technical controls to block, freeze, and reject transactions that violate U.S. sanctions in real time.

That last part is significant. Freezing a stablecoin transaction isn't the same as freezing a bank wire. It requires on-chain enforcement tooling that most issuers have built ad hoc. This rule would make it a formal obligation.

The $10 Billion Line

There's a carve-out for smaller issuers. PPSIs with consolidated outstanding issuance under $10 billion can elect state-level regulation instead of federal oversight, provided the state regime is "substantially similar." Treasury issued a separate rule on April 1 defining what "substantially similar" means.

In practice, this splits the market. Circle and Tether-scale issuers face full federal BSA oversight. Smaller, state-licensed issuers get a lighter regime — assuming their state passes muster.

The 60-Day Clock

The proposed rule enters a 60-day public comment period once published in the Federal Register. The comment period matters — it's where Circle, Coinbase, the ABA, and crypto advocacy groups will argue over the details. The core question: how prescriptive should on-chain compliance tooling requirements be, and who bears the cost?

This is the GENIUS Act moving from law to regulation. The framework exists. Now Treasury is filling in what compliance actually looks like.