Stablecoin Regulation in 2026: What Issuers and VASPs Need to Do Now

Stablecoins moved from the regulatory margin to the center of United States payments policy faster than most compliance teams expected. With the GENIUS Act now law, issuers and the virtual asset service providers that handle their tokens are operating under a federal framework rather than a patchwork of interpretations. This post covers what changed, what it means in practice, and the concrete steps to take now.

From ambiguity to a federal framework

For years, the core legal questions around stablecoins, what they are, who may issue them, and what reserves must back them, were answered by inference and enforcement rather than by statute. The GENIUS Act, signed into law in 2025, established the first comprehensive federal framework governing payment stablecoins in the United States. The practical effect is that compliance is no longer a matter of reading between the lines. There is now a defined set of expectations, and examiners have a shared reference for what good looks like.

Reserves, redemption, and disclosure

The framework centers on the promise a stablecoin makes: that a token can be redeemed for the value it claims to hold. That promise drives requirements around the quality and segregation of reserve assets, the ability of holders to redeem, and transparent disclosure of what backs the token. For issuers, this means reserve management and reporting are compliance functions, not just treasury operations. For the platforms that list and move these tokens, it means diligence on the issuer's backing is part of onboarding a stablecoin, not an afterthought.

AML and sanctions obligations do not shrink

A federal stablecoin framework sits on top of existing Bank Secrecy Act, anti money laundering, and sanctions obligations, it does not replace them. Issuers and VASPs still need risk based customer due diligence, transaction monitoring tuned to virtual asset typologies, and sanctions screening that accounts for the specific properties of blockchain data. If anything, clearer legitimacy for stablecoins raises the stakes for AML, because a regulated rail that criminals can still exploit draws sharper scrutiny than one operating in the shadows.

Blockchain data changes how you monitor

Stablecoins settle on public ledgers, which is both an advantage and a trap. The advantage is transparency: flows are observable and traceable in ways traditional payments are not. The trap is a false sense of anonymity. A wallet address that looks anonymous is often highly identifiable against public ledger and commercial attribution data. Monitoring programs for stablecoin activity should treat on chain analytics as a first class control, correlating addresses, clustering related activity, and connecting on chain flows to the off chain identities your institution already knows.

What to do now

First, confirm which stablecoins you issue, hold, or move, and document the reserve and redemption posture of each. Second, update your risk assessment so that it addresses stablecoin activity specifically rather than folding it into a generic virtual asset line. Third, tune monitoring and sanctions screening to on chain behavior, including patterns that traditional rules miss. Fourth, build a procurement and listing checkpoint so that adding a new token triggers a compliance review rather than a quiet default. The institutions that treat the GENIUS Act as a prompt to get ahead of examiner expectations will spend far less than those that wait to be told.

Where Orbis fits

Orbis Intelligence helps VASPs, fintechs, and financial institutions meet virtual asset compliance expectations with blockchain forensics, AML advisory, and open source intelligence investigations. The firm was founded by a former federal financial crime investigator, CAMS certified, with daily hands on work in blockchain analytics and BSA/AML compliance. We help teams turn a new regulatory framework into a program they can operate and defend.

This post is general information, not legal advice, and no framework guarantees a specific regulatory outcome. Confirm how any requirement applies to your organization with your own counsel and compliance leadership.