Treasury's stablecoin rule turns a compliance question into a capital question, and the meter is already running.
What CFOs and compliance leaders need to know:
The clock is twelve months from rule finalization, with comments closing June 9 — short by enterprise standards for anything touching smart contract design. The rule's primary versus secondary market split is a system boundary, not just a legal one, and most existing stablecoin platforms were not built to draw it cleanly. Issuers must maintain the technical capability to freeze and block secondary market transactions even though they are not required to monitor them — a mandatory control plane regardless of monitoring posture. Default blockchain analytics tooling tends to surface more than the rule requires action on, and once surfaced, safe harbor logic pushes toward voluntary reporting and retention. For bank-affiliated issuers, the SAR-sharing provision reads like a coordination convenience but functions as an enterprise data architecture decision with lasting cost implications.
The Rule's Formal Mechanics
On April 8, FinCEN and OFAC jointly proposed the rules implementing the GENIUS Act's AML and sanctions requirements for permitted payment stablecoin issuers. Comments close June 9, with a twelve-month implementation window once the rule is final. The legal mechanics are well covered in Mayer Brown's analysis. What that coverage tends to understate is how much of the rule lands on systems rather than on policy. The proposal formally separates primary market activity, where full bank-style customer due diligence and SAR obligations apply, from secondary market activity, where users move tokens via smart contracts under a lighter monitoring regime. It also requires issuers to maintain the technical capability to freeze, block, and reject transactions on the secondary market, even though they are not required to monitor it. For bank-affiliated issuers, the rule permits SAR sharing and joint filing between the parent depository institution and its stablecoin subsidiary.
Build-or-Buy Questions With Capital Attached
For a CFO or compliance lead at any institution exploring stablecoin issuance, the practical translation is that several decisions previously framed as legal interpretation are now build-or-buy questions with capital attached. The boundary between primary and secondary market activity has to be drawn inside production systems with regulatory-grade precision, and most existing platforms were not designed with that boundary as load-bearing. Retrofitting it touches identity, account state, custody integration, and the token contract itself. The freeze-and-control capability is mandatory regardless of whether the institution chooses to monitor, which means smart contract governance, key management, and audit trails for lawful orders are now part of the standing cost of operating as a PPSI.
The Telemetry Decision and Data Architecture Implications
The telemetry decision is subtler and probably more expensive over time. Default blockchain analytics tooling tends to surface more than the rule requires institutions to act on, and once it is surfaced, the safe harbor logic pushes toward voluntary reporting and retention. Anyone who lived through GDPR data minimization debates will recognize the pattern. For bank-affiliated issuers, the SAR-sharing provision reads like a coordination convenience but functions as an enterprise data architecture decision: consolidate PPSI signals into the parent's existing AML platform, or stand up parallel infrastructure with a coordination layer. Both paths carry real cost, and the institution that picks by default rather than by design will pay for it inside the twelve-month window and well after.
For a CFO or compliance lead at any institution exploring stablecoin issuance, the practical translation is that several decisions previously framed as legal interpretation are now build-or-buy questions with capital attached. Both paths carry real cost, and the institution that picks by default rather than by design will pay for it inside the twelve-month window and well after.