# The final OCC GENIUS Act rule: what a stablecoin backend actually needs to change

> A 195-page federal rule is mostly about issuers. A few of its definitions and deadlines still reach anyone who credits deposits, reads balances or watches supply on-chain.

- Canonical: https://triport.io/blog/news-stablecoin-occ-genius-final-rule-2026-10
- Published: 2026-11-06
- Updated: 2026-11-06
- Author: Triport Engineering
- Category: Research
- Networks: Ethereum

## TL;DR

- The OCC's final rule implementing the GENIUS Act was issued on 2026-10-21 and published in the Federal Register on 2026-10-23. It is effective 2027-01-18, the date after which only a permitted payment stablecoin issuer may lawfully issue a payment stablecoin in the United States.
- A law-firm summary reports a redemption deadline of two business days, reserve minimums of 5 percent in liquid deposits or Federal Reserve balances and a 40 percent single-counterparty cap, and removal of the proposed yield presumption. The Federal Register text defines a business day as excluding weekends and federal holidays, and 2027-01-18 is itself a federal holiday.
- For a backend the work is reconciliation, not compliance: separate burned supply from frozen supply, expect issuer allow-lists to matter, and do not assume that on-chain supply and the rule's outstanding issuance value are the same number. Anti-money-laundering rules are still to come.

On 2026-10-21 the Office of the Comptroller of the Currency issued its final rule implementing the GENIUS Act, the US statute for payment stablecoins. The Federal Register published it on 2026-10-23 as document 2026-21706: 195 pages, a new 12 CFR Part 15, effective 2027-01-18. Most commentary is aimed at issuers and banks. This post is aimed at the engineer who credits deposits, reads token balances or tracks supply, and who wants to know which sentences in a federal rule turn into tickets.

Two caveats up front. We are engineers, not lawyers, and this is not legal advice. And the OCC's own pages (the news release and the bulletin) refused our connection on 2026-11-01, so the primary text we read is the Federal Register entry and its metadata, supplemented by a law-firm summary for provisions we could not reach in the 842,000-character body.

## What we could confirm in the primary text

From the Federal Register entry fetched on 2026-11-01: the rule is final, published 2026-10-23, effective 2027-01-18, and it applies to payment stablecoin issuance and related activities by entities under OCC jurisdiction. In the definitions at § 15.2 we read the following:

- **Distributed ledger** is adopted as proposed, defined as technology in which data is shared across a network that creates a public digital ledger of verified transactions. The proposed separate term for software deployed to a ledger, which would have covered smart contracts, was dropped because the final rule does not use it.
- **Freeze and seize.** The OCC states that "the final rule does not use these terms," declined to define them, and said it may do so in the forthcoming rulemaking on anti-money-laundering and sanctions.
- **Burning.** Once an issuer "permanently removes a payment stablecoin from circulation," the token stops counting toward outstanding issuance value.
- **Restricted holders.** A stablecoin whose "holder access has been restricted pursuant to applicable law, regulation, or court order" remains a payment stablecoin.
- **Business day** means any day other than a Saturday, Sunday or federal holiday.
- **Nonpublic personal information** excludes "publicly available information, including information broadly accessible through a distributed ledger," so a public wallet address is not nonpublic by itself, while private data linking a customer to an address is.

## What a law-firm summary adds

Morrison Foerster's summary of the final rule, which we read on 2026-11-01 and treat as secondary, reports these provisions. The figures are theirs, and you should check them against the rule before relying on them.

- **Redemption** must happen "no later than two business days following the date of requested redemption." The proposal's automatic extension to seven calendar days after a surge of redemption demand was removed; issuers must report such surges to the OCC, which keeps discretion to impose limits.
- **Reserves** must be diversified, with at least 5 percent in demand deposits, insured shares or Federal Reserve Bank balances, and no more than 40 percent with a single counterparty, with a custodian carve-out above that cap. Stress testing must show reserves continue to equal or exceed outstanding issuance in stressed conditions.
- **Yield.** The statutory ban on payments made solely for holding a stablecoin is incorporated and the proposal's rebuttable presumption is eliminated, while the OCC keeps authority over evasion including indirect payments, and declined a categorical safe harbor.
- **Capital** uses GAAP tangible equity, with a $5 million floor, and an operational backstop of 12 months of expenses.
- **Transition.** After the effective date only a permitted payment stablecoin issuer may lawfully issue in the United States, and an OCC bulletin generally waives that for existing issuers that file a substantially complete application before 2027-01-18.

## Worked arithmetic: what the numbers mean in practice

Reserve limits become concrete with a round number. For $1 billion of outstanding issuance the 5 percent floor means at least $50 million in demand deposits, insured shares or central bank balances, and the 40 percent cap means no more than $400 million with one counterparty before the carve-out is needed. Those are issuer-side numbers, but they decide how much of the backing a bank failure could freeze, which is the risk a treasury team is pricing when it picks a stablecoin.

The redemption clock is the figure that reaches customer support. Two business days sounds like two days, and it often is not. Take a redemption requested on Friday 2027-02-12. Monday 2027-02-15 is a federal holiday, so the two business days after the request are Tuesday the 16th and Wednesday the 17th. Five calendar days pass. The same request a week earlier, on Friday 2027-02-05, is due Tuesday the 9th. If your product tells customers when they will have fiat, derive the date from a federal-holiday calendar, not from "plus two."

There is a small irony in the effective date. 2027-01-18 is the third Monday of January, which is a federal holiday, so by the rule's own definition it is not a business day.

## What a backend should reconcile

The rule does not tell you how to write code, but its definitions point to places where code and law can disagree.

**Supply is not one number.** The rule counts a token as outstanding issuance until the issuer permanently removes it from circulation. A token held in a restricted wallet is still a payment stablecoin. So a reserve proof divided by `totalSupply()` compares like with like only if you know how the issuer treats frozen and burned balances. If you track supply for risk limits, store burned amounts, transferred-to-issuer amounts and frozen balances as separate series. You can read supply with `eth_call` and reconstruct movements from logs; start from the [event log glossary entry](https://triport.io/learn/glossary/event-log) if the topic layout is unfamiliar.

**Do not guess at freeze semantics.** The OCC chose not to define freezing or seizing in this rule. Tokens differ in how they implement blocking, and the rule does not standardize it. The practical consequence is that an address that cannot send is a state you detect, and the cause may be a contract-level blocklist, an issuer action or a court order. Log it as an event with a source, not as an error.

**Plan for an allow-list.** After 2027-01-18 the set of lawful US issuers is defined by approvals, and a waiver exists for applicants. If you accept stablecoins from US users, expect to maintain a list of token contracts you will credit, with a reason and an effective date, and expect it to change. That list is cheap to keep in a config table and expensive to reconstruct after the fact.

**Reorg depth still applies.** Crediting a deposit after one block on a chain that can reorganize is a risk the rule does not change. Keep the confirmation rule you have, and compare it against [finality across chains](https://triport.io/learn/glossary/finality) before you shorten it.

## When this is the wrong approach

If you do not serve US users, none of the regulatory deadlines may apply to you, and building an allow-list around them is wasted effort; ask counsel before assuming either way. If you only forward payments and never hold balances, supply reconciliation is the issuer's problem, not yours. And do not read this post as a statement about stablecoins you handle today: the Treasury's separate anti-money-laundering and sanctions rulemaking is still to come, and the OCC said it will announce separately when it accepts applications. Any hard-coded rule in your system that depends on a provision we have summarized from a secondary source should wait until someone has read the primary text.

## Sources

All fetched 2026-11-01.

- Federal Register, "Implementing the Guiding and Establishing National Innovation for U.S. Stablecoins Act for the Issuance of Stablecoins by Entities Subject to the Jurisdiction of the OCC", document 2026-21706, published 2026-10-23: https://www.federalregister.gov/documents/2026/10/23/2026-21706/implementing-the-guiding-and-establishing-national-innovation-for-us-stablecoins-act-for-the
- Federal Register full text (HTML, first 100,000 characters read): https://www.federalregister.gov/documents/full_text/html/2026/10/23/2026-21706.html
- Morrison Foerster, "OCC Finalizes Rule Implementing the GENIUS Act" (secondary): https://www.mofo.com/resources/insights/261028-occ-finalizes-rule-implementing
- Goodwin, "OCC Issues Final Rule Implementing the GENIUS Act" (secondary; confirms effective date and 12 CFR Part 15): https://www.goodwinlaw.com/en/insights/blogs/2026/10/occ-issues-final-rule-implementing-the-genius-act-setting-the-federal-framework-for-payment-stableco
- Decrypt, "OCC Finalizes GENIUS Act Stablecoin Rules Ahead of January Deadline", 2026-10-21 (secondary; links the OCC release NR-OCC-2026-92 and Bulletin 2026-50, which refused our connection): https://decrypt.co/381502/occ-finalizes-genius-act-stablecoin-rules-ahead-of-january-deadline
- Triport documentation: [eth_getLogs](https://triport.io/docs/eth/json-rpc/eth_getLogs) and [Ethereum limits](https://triport.io/docs/eth/limits), read 2026-11-01.

## Try it

- Reference: [Ethereum eth_getLogs: ranges, filters and limits for event reconciliation](https://triport.io/docs/eth/json-rpc/eth_getLogs)
- Network: [Ethereum RPC: one key for logs, calls and archive reads](https://triport.io/ethereum-rpc)