July 18, 2026, arrived with the quiet thud of a bureaucratic milestone rather than the explosive crash of a compliance cliff. Under the GENIUS Act, this date serves as a critical rulemaking checkpoint. The reality is a lopsided architecture: we have a clear view of the front door, but the foundation is still being poured.
The Treasury, FinCEN, and OFAC have been the most industrious architects. In April 2026, they issued a joint NPRM that effectively treats Payment Stablecoin Issuers as financial institutions under the Bank Secrecy Act. It requires issuers to implement robust risk-based AML/CFT programs, file Suspicious Activity Reports, and maintain Customer Identification Programs. Perhaps most significantly, it demands that these issuers possess the technical capability to execute lawful orders — freezing, seizing, or burning assets on-chain to enforce OFAC sanctions.
While the Treasury’s AML rules are in hand, the structural integrity of the stablecoin remains trapped in NPRM purgatory. The OCC issued its own NPRM in March 2026 covering reserve backing, but it is still just a proposal. The Federal Reserve has yet to issue its piece on PPSI supervision.
For agent payment platforms, this creates a peculiar design challenge. They are currently trying to build stablecoin payment rails that are compliant by design, but they are forced to do so against a partial framework. This creates significant technical debt, as developers must build systems that are inherently speculative, requiring costly refactoring once final rules are codified.
The gap between the “done-ish” AML rules and the “pending” operational rules is the real story of this regulatory cycle. It is a structural mismatch that forces firms to prioritize compliance with the known while hedging against the unknown.