DLT Regulatory Framework

State of play.

• The GENIUS Act has moved from statute to rulemaking cascade. Treasury, OCC, FDIC, FinCEN, and OFAC have each issued proposed rules implementing the 2025 stablecoin law, with comment periods closing through June 2026 and a January 2027 compliance deadline — the most concentrated federal digital asset rulemaking in U.S. history .
• The SEC and CFTC have jointly redrawn the securities/commodity line. The March 17 interpretive release designates Bitcoin, Ether, Solana, XRP, and a dozen other major assets as digital commodities outside the securities framework, superseding the 2019 guidance and resolving years of enforcement ambiguity — but SEC Chairman Atkins has warned the framework will not survive without statutory codification .
• The CLARITY Act is the next legislative battleground. The House has passed the bill with bipartisan support; Senate negotiators have reached agreement on the stablecoin yield provision; Treasury Secretary Bessent is publicly pressing for passage — but the 119th Congress window is finite and DeFi provisions remain contested .
• State licensing pressure is compressing timelines simultaneously. California's DFAL deadline is July 1, 2026; eight states have enacted crypto kiosk laws with Indiana banning kiosks outright; and nearly 30 states have active kiosk legislation — creating a multi-front state compliance obligation running parallel to the federal rulemaking .
• For counsel advising stablecoin issuers, exchanges, DeFi platforms, or financial institutions entering digital assets, the practical baseline is simultaneous exposure across federal prudential rules, BSA/AML/sanctions compliance, state licensing, and a shifting securities classification framework — all with hard deadlines in 2026 and 2027.

Where things stand.

• The GENIUS Act is the operative federal stablecoin statute. Signed July 2025, it requires all payment stablecoins to be issued by federally approved PPSIs fully backed by U.S. dollars or liquid assets. The OCC (March 2026), FDIC (April 7, 2026), Treasury/FinCEN/OFAC (April 8, 2026), and Treasury state-regime framework (April 1, 2026) have each issued implementing NPRMs; NCUA rules are also advancing; final rules are targeted for July 18, 2026 with compliance effective January 2027 .
• The FDIC and OCC proposals diverge on material points. The FDIC limits scope to IDI subsidiaries and retains discretion on capital failure consequences where the OCC mandates liquidation; the agencies also diverge on reserve diversification caps and affiliate transaction rules — creating compliance strategy decisions for issuers choosing their charter path .
• The SEC-CFTC interpretive framework establishes a five-category taxonomy. Digital commodities (Bitcoin, Ether, Solana, XRP, and others explicitly named), digital collectibles, digital tools, stablecoins, and digital securities — with only the last category inherently subject to securities regulation; the CFTC has endorsed the framework under the Commodity Exchange Act .
• The SEC has issued a five-year no-action safe harbor for non-custodial crypto UI providers. Qualifying "Covered User Interface Providers" — DeFi front-ends, wallet interfaces, DEX aggregators — are exempt from broker-dealer registration through April 2031 if they meet six strict neutrality conditions; platforms that route orders or solicit trades remain fully subject to registration .
• Coinbase has received conditional OCC approval for a national trust charter, joining Ripple and Circle — a structural shift that will reshape custody, settlement, and banking relationships for major crypto platforms .
• State licensing regimes are hardening. California's DFAL (July 1, 2026 deadline) mirrors New York's BitLicense model with NIST 2.0 cybersecurity requirements; eight states have enacted crypto kiosk laws with transaction limits, fee caps, and fraud disclosure mandates; Indiana has banned kiosks entirely .
• EU MiCA's transitional period expires June 30, 2026 (Spain) / July 1, 2026 (EU-wide). Banks now represent roughly 20% of all 177 EU CASP licensees, with a streamlined 40-day authorization pathway giving traditional institutions a structural advantage over crypto-native entrants .
• The UK has enacted the Financial Services and Markets Act (Cryptoassets) Regulations 2026, with FCA authorization required from October 25, 2027; the application window opens September 30, 2026; FCA CP26/13 perimeter guidance is in consultation through June 3, 2026; and OECD CARF reporting obligations are already live with penalties up to £300 per user .
• Hong Kong has issued its first stablecoin licenses to HSBC and Anchorpoint Financial (Standard Chartered JV) under the Stablecoins Ordinance — with the HKMA signaling licenses will remain "very limited" and favoring established financial institutions over crypto-native applicants .
• The ECB's comprehensive payments strategy accelerates DLT adoption through the Pontes (Q3 2026) and Appia initiatives for wholesale settlement, while fostering tokenized settlement assets anchored in central bank money alongside MiCA-regulated euro stablecoins .
• ESMA's EMIR 3 Active Account Requirement reporting templates are live, with the inaugural submission deadline of July 31, 2026 for EU counterparties with significant non-EU CCP exposure .
• The IMF has published a cautious tokenization framework diverging from the U.S. permissionless push — signaling that multilateral institutions will apply different standards than domestic U.S. regulators for cross-border tokenized asset infrastructure .

Latest developments.

• BlackRock's Stablecoin Reserves Portfolio (MSNXX) — a government money market fund structured to satisfy GENIUS Act reserve requirements — is live, enabling stablecoin issuers to generate yield on reserves while meeting federal backing standards; JPMorgan, BofA, Citi, Wells Fargo, and PNC have formed a stablecoin working group .
• Senate negotiators reached agreement on the stablecoin yield provision in pending federal crypto legislation, removing a key obstacle to the CLARITY Act's advancement .
• Eight states have enacted crypto kiosk laws in 2026 — Wisconsin, Utah, South Dakota, Illinois, Iowa, Maine, Oklahoma, and Wyoming — with Indiana becoming the first state to ban kiosks outright; nearly 30 states have active legislation .
• The UK's Financial Services and Markets Act (Cryptoassets) Regulations 2026 are finalized, with FCA authorization required by October 25, 2027 and OECD CARF reporting obligations already in force .
• SEC Chairman Atkins warned Congress that the March 17 crypto interpretive framework will not survive without statutory codification via the CLARITY Act .
• FDIC published its GENIUS Act NPRM on April 7, 2026, diverging from the OCC on reserve diversification caps and capital failure remedies; comment period closes June 9, 2026 .
• FinCEN and OFAC jointly proposed AML/sanctions rules classifying PPSIs as BSA financial institutions, with a $5,000 SAR threshold, Travel Rule compliance, and technical controls to freeze or burn tokens; comment period closes June 9, 2026 .
• FCA published CP26/13 perimeter guidance clarifying which cryptoasset activities require authorization under the UK's new regime; consultation closes June 3, 2026 .
• SEC issued interpretive guidance designating Bitcoin, Ether, Solana, XRP, and other major assets as digital commodities, superseding the 2019 framework; CFTC endorsed the approach .
• SEC Division of Trading and Markets issued a five-year no-action safe harbor for neutral crypto UI providers, expiring April 13, 2031 .
• Treasury issued the first GENIUS Act proposed rule on April 1, 2026, establishing the "substantially similar" standard for state regime certification, with a Stablecoin Certification Review Committee chaired by Secretary Bessent .
• HKMA granted its first stablecoin licenses to HSBC and Anchorpoint Financial from 36 applicants; HSBC targeting retail launch via PayMe, Anchorpoint targeting Q2 2026 public blockchain launch .
• CaixaBank obtained MiCA CASP authorization, bringing banks to roughly 20% of all EU licensees ahead of the July 2026 transitional deadline .
• Coinbase received conditional OCC approval for a national trust charter .
• CFTC Chairman Selig launched an Innovation Task Force covering crypto, AI, and prediction markets .
• UBS, PostFinance, and other Swiss banks launched a CHF stablecoin sandbox .
• California DFAL licensing portal opened March 9, 2026; July 1, 2026 deadline for non-exempt digital asset businesses .
• ECB published its comprehensive payments strategy accelerating DLT adoption through Pontes and Appia initiatives targeting Q3 2026 .
• ESMA released EMIR 3 Active Account Requirement reporting templates; inaugural submission deadline July 31, 2026 .
• Ireland signed statutory instruments transposing AIFMD II into national law effective May 1, 2026 .

Active questions and open splits.

• Sub-statutory framework durability. SEC Chairman Atkins has explicitly acknowledged that the March 17 interpretive release and the five-year UI no-action letter are vulnerable to reversal by a future administration without CLARITY Act codification — the central risk for clients building compliance programs on the current guidance .
• FDIC vs. OCC charter arbitrage under GENIUS Act. The two agencies diverge on reserve diversification caps, affiliate transaction rules, and capital failure consequences — creating a genuine structural choice for issuers between IDI subsidiary and national bank/non-bank charter paths, with materially different operational constraints .
• "Substantially similar" state regime certification. Treasury's proposed standard for state-supervised issuers (under $10B) remains undefined in operational terms — the Stablecoin Certification Review Committee's criteria will determine whether state licensing offers a viable compliance alternative or merely deferred federal oversight .
• Smart-contract freeze/burn obligations and custody law. FinCEN/OFAC's requirement that PPSIs implement technical controls to freeze, reject, or burn tokens pursuant to lawful orders raises unresolved questions about asset custody, property rights in tokenized instruments, and issuer liability for smart-contract execution failures .
• DeFi broker-dealer perimeter. The SEC's five-year UI no-action letter draws a sharp line at order routing and trade solicitation — but the boundary between "neutral facilitator" and "broker" for hybrid DeFi products remains untested, and the 2031 sunset creates long-term product planning uncertainty .
• Cross-border regulatory divergence. The U.S. permissionless-friendly approach, EU MiCA's CASP licensing model, UK's FCA authorization regime, and HKMA's bank-first stablecoin framework are structurally incompatible in several respects — creating genuine compliance architecture questions for firms operating across jurisdictions .
• Stablecoin yield treatment. The Senate deal on the yield provision in the CLARITY Act has not been publicly detailed — the final language will determine whether yield-bearing stablecoin products trigger securities or banking regulation, a structurally significant question for product design at every major institution now entering the space .

What to watch.

• June 9, 2026 comment deadline for both the FDIC GENIUS Act NPRM and the FinCEN/OFAC AML/sanctions NPRM — comment letters will surface the industry's most contested compliance questions and signal where final rules will land.
• July 1, 2026 California DFAL deadline — enforcement posture against non-compliant operators will establish the template for state-level digital asset licensing enforcement nationally.
• July 1, 2026 EU MiCA transitional period expiration — whether unlicensed crypto operations actually cease or regulators grant informal extensions will determine the credibility of the EU licensing regime.
• CLARITY Act Senate floor action — whether the stablecoin yield deal holds and whether DeFi provisions can be resolved before the 119th Congress concludes; failure to pass leaves the SEC's interpretive framework sub-statutory and reversible.
• FCA final perimeter guidance (expected autumn 2026) and opening of the UK authorization application window (September 30, 2026) — firms missing the February 28, 2027 gateway close face enforcement exposure from October 2027.
• Final GENIUS Act rules (targeted July 18, 2026) — the OCC/FDIC divergences on reserve requirements and capital failure consequences will either be harmonized or locked in, determining charter strategy for every institution entering the stablecoin market.