Payment stablecoin custody rules establish how OCC-supervised institutions must safeguard stablecoins, reserve assets, and private keys. This guide covers GENIUS Act requirements, customer protections, and compliance obligations for issuers and custodians.
Payment stablecoin custody rules under the Office of the Comptroller of the Currency (OCC) require covered custodians to safeguard customer assets, maintain accurate ownership records, and protect assets from creditor claims. Established through the GENIUS Act, these requirements matter to banks, stablecoin issuers, and investors assessing the security of digital asset custody.
The OCC issued final regulations on October 21, 2026, effective January 18, 2027.
Key Takeaways
-
The GENIUS Act was enacted on July 18, 2025, establishing a federal regulatory framework for payment stablecoins.
-
OCC custody requirements cover asset segregation, customer ownership records, private keys, cybersecurity, and sub-custodian oversight.
-
Permitted payment stablecoin issuers must maintain reserve assets backing outstanding payment stablecoins on at least a 1:1 basis.
-
Covered custodians must protect customer assets against claims from their own creditors and applicable sub-custodian creditors.
-
The OCC's final custody regulations become effective January 18, 2027; separate anti-money laundering regulations remain subject to another rulemaking.
What Are the OCC Payment Stablecoin Custody Requirements?
The OCC's final GENIUS Act regulations establish custody standards under 12 CFR Part 15, Subpart C.
These requirements distinguish providing custodial services for customers from holding reserve assets supporting payment stablecoin issuance.
| Requirement |
OCC Standard |
| Asset segregation |
Separate covered customer assets from custodian property |
| Ownership records |
Maintain identifiable customer ownership and entitlement records |
| Safekeeping |
Implement appropriate internal controls and risk management |
| Private key protection |
Maintain effective control over covered digital assets |
| Sub-custodians |
Apply safeguards and continuing oversight |
| Custody agreements |
Maintain written agreements defining responsibilities |
| Omnibus accounts |
Permitted subject to segregation and recordkeeping requirements |
| Creditor protection |
Protect covered assets against custodian creditor claims |
The regulations allow custodial and safekeeping services for payment stablecoins, qualifying reserve assets, and private keys while requiring compliance with applicable federal law.
Who Must Comply With the GENIUS Act?
The Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act establishes requirements for permitted payment stablecoin issuers and certain custodians.
Its regulatory and supervisory regime involves several federal regulators.
| Regulator |
Primary Responsibilities |
| OCC |
National banks, federal savings associations, certain federal qualified payment stablecoin issuers, and foreign issuer oversight |
| Federal Reserve Board |
Relevant state-chartered banking subsidiaries and banking supervision |
| Federal Deposit Insurance Corporation (FDIC) |
Applicable insured depository institutions and subsidiaries |
| National Credit Union Administration (NCUA) |
Relevant federally insured credit union subsidiaries |
| State payment stablecoin regulators |
Qualified state issuers operating within authorized state frameworks |
The Stablecoin Certification Review Committee evaluates state regulatory frameworks against federal standards.
State qualified payment stablecoin issuers generally face a $10 billion consolidated total outstanding issuance threshold, after which transition to federal supervision may be required, subject to statutory exceptions.
A federal branch, uninsured national bank, federal savings association, or majority-owned subsidiary may have different authorization requirements.
The Securities and Exchange Commission and federal banking agencies retain their respective authority under other applicable federal laws, including the Federal Deposit Insurance Act and Investment Company Act.
Stablecoin Reserve Custody and Asset Protection
Permitted issuers must maintain qualifying reserve assets with an aggregate fair value at least equal to outstanding payment stablecoin issuance.
Eligible reserves include US dollars, Federal Reserve notes, qualifying Treasury bills, certain deposits or Federal Reserve Bank balances, and specified repurchase agreements or government money market funds.
Relevant assets must be protected through appropriate custody arrangements. Rehypothecation and reuse of required reserves are restricted, subject to limited statutory exceptions.
Importantly, issuer reserve custody is distinct from customer stablecoin custody.
The framework also provides special bankruptcy protections for qualifying reserve assets and priority claims for payment stablecoin holders, including protections concerning deficiencies and expedited judicial proceedings.
These protections do not make stablecoins eligible for federal deposit insurance or National Credit Union Administration share insurance.
Cybersecurity, Private Keys, and Sub-Custodian Requirements
Banks providing custodial or safekeeping services must apply risk management controls proportionate to their activities.
Key operational safeguards include:
-
Reconciliation of blockchain balances with internal custody records.
-
Protection against unauthorized transfers, compromised private keys, and ledger vulnerabilities.
-
Written custody agreements defining customer rights and custodian responsibilities.
-
Ongoing monitoring of sub-custodians and third-party service providers.
-
Incident response, access controls, and business continuity procedures.
Technology such as multi-signature wallets may support secure control, provided custody arrangements satisfy applicable legal and operational requirements.
Customer assets cannot simply be treated as the custodian's own property. Properly structured omnibus custody remains permissible.
Redemption, Reporting, and Issuer Restrictions
The GENIUS Act also imposes requirements beyond custody.
Permitted issuers must publicly disclose clear and conspicuous procedures for timely redemption, including fees and applicable limitations.
The OCC's final rule generally defines timely redemption as processing and initiating payment within two business days.
Where redemption requests exceed 10% of a stablecoin's outstanding issuance value within 24 hours, the issuer must notify the OCC and may request an extension. The final rule does not automatically extend redemption to seven days.
Issuers must publish monthly reserve-composition reports and satisfy applicable financial reporting and audit obligations, including independent examinations by registered public accounting firms and annual financial statements where required.
Payment stablecoin issuers cannot directly pay interest or yield merely for holding their payment stablecoins. Activities are principally restricted to issuance, redemption, reserves, and authorized supporting services.
Misleading government-affiliation claims and deceptive names are prohibited.
The Bank Secrecy Act and anti-money laundering requirements remain important, although the OCC's June 2026 AML proposal is separate from its October custody final rule.
Foreign Issuers and Regulatory Enforcement
A foreign payment stablecoin issuer seeking authorized US market access must satisfy statutory eligibility requirements, including applicable OCC registration, comparable foreign supervision, and compliance with lawful US orders.
The Treasury Secretary determines foreign regulatory comparability. Additional US reserve and supervisory safeguards may apply.
Federal payment stablecoin regulators possess enforcement authority, including civil monetary penalties and restrictions on issuance.
Violations involving unpermitted issuance can carry substantial civil or criminal consequences, depending on the statutory provision and conduct involved.
Banks and other covered financial institutions should review their custody arrangements, capital requirements, contractual safeguards, and compliance systems before January 18, 2027.
What Changed Recently?
On October 21, 2026, the OCC finalized its primary GENIUS Act implementing regulation, including custody, redemption, reserves, capital requirements, and supervision.
The OCC also released application guidance and revised proposed weekly and quarterly reporting forms. The forms remained subject to their separate approval process.
The final rules strengthen the federal framework while leaving certain Bank Secrecy Act and sanctions implementing requirements to separate regulatory proceedings.
Frequently Asked Questions
Does the OCC regulate payment stablecoin custody?
Yes. The OCC regulates qualifying custodial and safekeeping activities conducted by entities under its jurisdiction, including applicable customer asset protection and recordkeeping requirements.
Are payment stablecoin reserves required to be fully backed?
Yes. Permitted payment stablecoin issuers generally must maintain qualifying reserve assets with an aggregate fair value at least equal to their outstanding issuance value.
Can stablecoin custodians use sub-custodians?
Yes. Covered custodians may use sub-custodians when permitted by applicable law, provided appropriate safeguards, monitoring, and customer asset protections are maintained.
Are payment stablecoins covered by FDIC insurance?
No. Payment stablecoins are not insured deposits simply because their issuer or custodian is associated with an insured financial institution.
When do the OCC stablecoin custody rules take effect?
The OCC's final GENIUS Act custody regulations take effect on January 18, 2027, alongside the statute's effective date.
* The information is not intended to be and does not constitute financial advice or any other recommendation of any sort offered or endorsed by Gate.
