GENIUS Act Stablecoin Rules 2026: What the OCC Final Rule Means for the GCC

The OCC has finalised the first GENIUS Act stablecoin rule, effective 18 January 2027. What it requires, and what it changes for businesses in the UAE, Pakistan and the GCC.

3 November 2026 · Deixtra

On 21 October 2026, the US Office of the Comptroller of the Currency (OCC) issued its final rule implementing the GENIUS Act, the federal law that creates a licensing system for dollar payment stablecoins. It is the first final rule from any US federal banking agency under the Act. The rule sits in a new part of US banking regulations (12 CFR Part 15) and takes effect on 18 January 2027, the same day the GENIUS Act itself comes into force.

A week later the OCC posted draft licensing forms for comment, and the Federal Reserve and the FDIC still have their own proposals in progress. The US rulebook for dollar stablecoins is being written now, against a fixed date.

Why should a US banking rule matter to a shop in Dubai or an exporter in Lahore? Most stablecoin activity in our region uses US dollar tokens. The US rules decide what reserves sit behind those tokens, how fast they must be redeemed, whether issuers can pay yield and, from July 2028, which tokens US exchanges and wallets can offer at all. Below we explain what the OCC rule says, how it compares with the rules in the UAE and Pakistan, and what businesses here should check. Our sources are listed at the end.

What is the GENIUS Act and when does it take effect?

The GENIUS Act is a US federal law, signed on 18 July 2025, that sets up a licensing regime for payment stablecoins: tokens designed to be redeemed one-for-one for a fixed amount of money. It takes effect on 18 January 2027, and the OCC's final rule takes effect on the same day with no transition period.

Its effective date is the earlier of 18 months after enactment or 120 days after the main federal regulators issue final rules. The 18-month date comes first, so 18 January 2027 is the date that applies.

What does the OCC final rule require from stablecoin issuers?

The OCC rule requires issuers it supervises to hold reserves worth at least the full value of tokens in circulation at all times, redeem tokens within two business days, keep at least $5 million in capital plus 12 months of operating expenses as a backstop, and pay no interest or yield simply for holding the token.

The OCC announced its proposal on 25 February 2026 and published it in the Federal Register on 2 March 2026. The final version is lighter in several places. The table shows the main changes, based on the OCC bulletin and analyses by WilmerHale, Sidley Austin and Skadden.

Requirement	Proposal (early 2026)	Final rule (21 October 2026)
Reserve value	At least equal to outstanding tokens	At least equal to outstanding tokens at all times; a buffer may be required, but no fixed level
Daily liquidity floor	10% of reserves	5% of reserves
Weekly liquidity (within 5 business days)	30%	Removed
Single counterparty limit	40% per eligible financial institution	40% per counterparty, with exceptions for US government exposures, qualifying custodians and centrally cleared repos
Redemption	Two business days, with an automatic extension to seven days if requests passed 10% of issuance in 24 hours	Two business days; no automatic extension. Issuer must tell the OCC within 24 hours if requests pass 10% and may ask for an extension
Minimum capital	$5 million floor for new issuers	$5 million floor at all times
Operational backstop	Proposed	12 months of total expenses in liquid assets; up to 50% can be qualifying debt
Yield and interest	Statutory ban plus a presumption covering some affiliate and third-party arrangements	Statutory ban kept; presumption dropped; OCC keeps anti-evasion powers

Sidley Austin notes that an issuer that misses its capital requirement at quarter end cannot issue new tokens until it is fixed, and two missed quarters in a row means redeeming the tokens in circulation. The OCC also did not define "interest" or "yield." It will judge yield arrangements through application reviews and supervision.

The rule does not cover anti-money laundering, Bank Secrecy Act or sanctions requirements. The OCC bulletin says those will come in a separate rulemaking with the US Treasury.

Who does the OCC stablecoin rule apply to?

The OCC rule applies to stablecoin issuers under OCC jurisdiction: subsidiaries of national banks and federal savings associations, federal branches of foreign banks, nonbank companies seeking federal approval as qualified issuers, foreign issuers that register with the OCC to sell in the US, and some state-approved issuers where the OCC has authority.

The Federal Reserve issued its proposed rule on 29 September 2026, and the FDIC's April 2026 proposal is not yet final, according to Skadden. Under the Act, issuers with no more than $10 billion in outstanding stablecoins can choose a state regime if it is "substantially similar" to the federal one.

The application process is not open yet. The OCC will announce when it starts accepting filings. Skadden reports that the OCC posted draft licensing and registration forms on 28 October 2026 with comments due on 23 November 2026. Once an application is substantially complete, it is treated as approved on day 120 unless the OCC denies it. Issuers with an application pending on 18 January 2027 can ask for a waiver of up to 12 months.

What does the GENIUS Act mean for foreign stablecoins?

From 18 July 2028, exchanges, custodians and wallet providers serving US persons can generally offer only stablecoins from permitted issuers. A foreign issuer's token qualifies only if its home regime is judged comparable by the US Treasury, it registers with the OCC, it can follow US freeze and seizure orders, and it holds enough US reserves for US customers.

For people outside the US, the effect is indirect. Large global issuers will shape reserves, redemption terms and freeze procedures around these rules. The ability to freeze tokens on a lawful order is already used in practice. After the Binance breach we covered in our post on the $6.3 billion Binance hack, CNBC reported that Circle, working with law enforcement, froze more than $1.1 billion in USDC linked to the incident.

How do UAE stablecoin rules compare with the US rules?

The UAE regulates stablecoins through the Central Bank's Payment Token Services Regulation (Circular No. 2/2024). Dirham tokens need a Central Bank licence, foreign tokens need registration, and on the mainland a merchant can accept a foreign stablecoin only from a registered issuer and only when the customer is buying a virtual asset.

According to CMS's summary of the regulation, licences for dirham payment tokens are only available to UAE-incorporated companies (including free zones, but not DIFC and ADGM, which have their own financial regulators). Algorithmic stablecoins and privacy tokens are banned. Issuers cannot pay holders interest or any other benefit tied to how long they hold a token, which is close to the US yield ban. The big difference is use: the US lets permitted dollar stablecoins work for payments, while the UAE limits everyday payments to licensed dirham tokens.

Question	United States (GENIUS Act and OCC rule)	UAE (CBUAE Payment Token Services Regulation)	Pakistan (Virtual Assets Act 2026)
Main regulator	OCC, Federal Reserve, FDIC, state regulators	Central Bank of the UAE for payment tokens; VARA, DFSA and FSRA for other virtual asset activity in their areas	PVARA
Who can issue	Permitted issuers; foreign issuers only under the comparable regime route	Licensed UAE companies for dirham tokens; registered foreign issuers for foreign tokens	Prior PVARA authorisation needed for stablecoin services involving Pakistani users
Reserves and redemption	1:1 at all times; redemption within two business days	Reserve and safekeeping rules set by the Central Bank	No stablecoin-specific reserve rules published, per CryptoSlate's review
Interest to holders	Banned for issuers	Banned for issuers	Not addressed in published material we reviewed
Paying for goods and services	Allowed with permitted stablecoins	Licensed dirham tokens only; foreign tokens only for buying virtual assets	No published framework for retail stablecoin payments
Key dates	18 January 2027 (in force); 18 July 2028 (offer limits)	Issued June 2024	Gazetted 5 March 2026

What does this mean for crypto and stablecoin users in Pakistan?

In Pakistan, stablecoin services fall under PVARA, which the Virtual Assets Act 2026 made a permanent federal regulator. PVARA's April 2026 advisory says issuing, transferring, holding or exchanging stablecoins for users in Pakistan needs its authorisation, and unlicensed activity can bring fines of up to PKR 50 million and up to five years in prison.

The Block reported that parliament passed the Act in March 2026, with separate penalties of up to PKR 25 million and three years in prison for unauthorised virtual asset offerings or promotion. CryptoSlate's review of PVARA material says full licensing is still being rolled out, with firms using the NOC route, a regulatory sandbox or no-action letters in the meantime. It also reports that a State Bank circular from April 2026 lets banks open accounts for PVARA-licensed service providers, with customer rupees kept in separate client money accounts.

What should businesses in the UAE, Pakistan and the GCC do now?

Start by writing down every place a stablecoin touches your business, then check each one against local rules and the provider's licence. Most of the work is records and contracts, not technology.

List the flows: customer payments, supplier payouts, remote staff payroll and any balances held in tokens.
If you sell goods or services on the UAE mainland or in a commercial free zone, do not take foreign stablecoins as payment. If you want token payments, look at licensed dirham tokens through a licensed provider and check the Central Bank's register first.
In Pakistan, deal only with providers that hold a PVARA licence or authorisation, and keep their licence details on file.
For any dollar token you hold, read the issuer's redemption terms and reserve reports. After 18 January 2027, issuers under US rules must redeem within two business days, so compare that with what your provider actually offers you.
Plan for freezes. A token can be blocked by its issuer on a lawful order, so keep counterparty records good enough to explain where funds came from.
Make your software able to switch providers. Payment integrations should log the token, network, issuer, provider and customer reference for every transaction, so a rule change does not mean rebuilding your checkout.

If stablecoins are not a fit yet, regulated card and wallet gateways still cover most needs. Our guide to Shopify payment gateways in Pakistan covers the local options.

What scams and mistakes should you watch for around the new stablecoin rules?

Expect sellers to use the GENIUS Act as a sales line. The OCC has not started accepting applications under the final rule, so any claim that a token is already "approved" under it deserves a close look. Watch for these patterns.

"GENIUS Act approved" or "OCC licensed" badges on tokens or platforms. Ask for the approval and check it with the regulator.
High yield on stablecoin balances. Issuers in the US and the UAE cannot pay holders interest, so any return comes from a third party taking a different risk with your money.
"Regulated dirham stablecoin" offers from firms you cannot find on the Central Bank of the UAE's register.
Peer-to-peer desks in Pakistan that are not licensed by PVARA. Operators face fines and prison terms under the 2026 Act.
Treating a stablecoin balance as a bank deposit. It is a claim on an issuer and its reserves, not money in an account in your name.

Key takeaways

The OCC issued the first final GENIUS Act rule on 21 October 2026, and it takes effect on 18 January 2027.
Issuers must hold reserves at least equal to tokens in circulation at all times and redeem within two business days.
Capital starts at a $5 million floor plus 12 months of expenses as a backstop, and issuers cannot pay yield for holding tokens.
From 18 July 2028, foreign stablecoins can reach US users only through a comparable regime, OCC registration and US reserves.
On the UAE mainland, only licensed dirham tokens can pay for goods and services; foreign tokens are limited to buying virtual assets.
In Pakistan, stablecoin services need PVARA authorisation under the Virtual Assets Act 2026.

Frequently asked questions

When do the GENIUS Act stablecoin rules take effect?

The GENIUS Act and the OCC's final rule both take effect on 18 January 2027. The limits on which stablecoins US exchanges and wallets can offer start later, on 18 July 2028.

Can stablecoin issuers pay interest under the GENIUS Act?

No. Issuers cannot pay interest or yield solely for holding, using or keeping a payment stablecoin. The OCC dropped a proposed presumption about affiliate arrangements but kept powers to act against attempts to get around the ban.

How quickly must a US stablecoin be redeemed?

Under the OCC rule, within two business days. If redemption requests pass 10% of a token's outstanding issuance in 24 hours, the issuer must notify the OCC within 24 hours and can ask for more time.

Is it legal to accept USDT or USDC as payment in the UAE?

On the UAE mainland and in commercial free zones, a merchant can accept a foreign stablecoin only if a registered issuer issued it and the customer is using it to buy a virtual asset. Ordinary payments for goods and services need a licensed dirham token. DIFC and ADGM have separate rules.

Is crypto legal in Pakistan in 2026?

Crypto services are regulated under the Virtual Assets Act 2026, and providers need a PVARA licence or authorisation to serve users in Pakistan. Unlicensed operators face fines of up to PKR 50 million and prison terms.

Does the GENIUS Act apply to companies outside the US?

It applies to stablecoins issued or offered to people in the US. A foreign issuer that wants its token offered to US users after July 2028 needs a home regime the US Treasury judges comparable, OCC registration and enough US reserves.

Need a compliant payment or stablecoin integration?

We build payment, POS, e-commerce and ERP integrations for businesses in Pakistan, the UAE and the GCC, including the logging and provider switching that changing rules call for. Send us your current setup on WhatsApp: which gateways or token providers you use, where you operate and what you want customers to be able to do. We'll come back with a written scope and a fixed quote.

This post is for information only and isn't financial or investment advice. Rules and dates can change; check the regulator's current guidance or speak to a licensed adviser before acting.