Stablecoins Are Officially Not Securities The GENIUS Act and the New US Crypto Map

For most of the last decade, the single most important legal question in crypto was also the least answered: is this thing a security? The answer decided who could touch it, where it could trade, and whether building on it in the United States was a business or a subpoena waiting to happen. Regulators mostly answered by enforcement, one case at a time, and the industry mostly answered by moving offshore.

In 2025 and 2026 that changed. Congress passed a stablecoin law, and two regulators drew a map of the rest of the asset class. If you build or trade from inside the United States, this is the legal ground you now stand on, and it deserves to be understood at the level of plumbing, not press release.

What the GENIUS Act actually does

The GENIUS Act was signed into law on July 18, 2025. Its subject is narrow and deliberate: payment stablecoins, meaning tokens designed to hold a fixed value against a reference currency, such as the US dollar, and used for payment or settlement. It is not a law about Bitcoin, not a law about tokens broadly, and not a law about yield products. It is a law about dollars that live on a blockchain.

Its central legal move is a definition. A compliant payment stablecoin is categorically excluded from the definition of a security, and from the definition of a commodity. That single sentence retires years of ambiguity. A stablecoin issued under the Act is not an investment contract the SEC can reach, nor a commodity derivative the CFTC oversees. It is a regulated payment instrument, supervised the way you would supervise a money transmitter or a narrow bank, not a capital-markets product.

The exclusion is conditional, not automatic. You get it by being a permitted payment stablecoin issuer and playing by the rules. Those rules are strict, and they are the interesting part.

The reserve and issuer rules, in plain terms

Three requirements do most of the work.

Full 1:1 backing in high-quality liquid assets. Every token in circulation must be backed by at least one dollar of reserves, and the reserves are not the issuer's choice. Permitted assets are limited to cash, deposits at insured banks, short-dated Treasury bills, repurchase agreements backed by those bills, government money market funds, and central bank reserves. No corporate paper, no crypto collateral, no lending the reserves out for extra return. The reserve is meant to be boring on purpose, so that redemption at par is always possible.

No yield to holders. A permitted issuer cannot pay interest on the stablecoin. This is what keeps it a payment instrument rather than a deposit or a security; you hold it to move money, not to earn a return. The issuer can earn on the Treasury bills backing the float; you cannot.

The issuer is a regulated financial institution. Permitted issuers are treated as financial institutions under the Bank Secrecy Act, which means full anti-money-laundering and know-your-customer obligations, including customer identification (CIP) at the issuer level, sanctions screening, and the ability to freeze or seize tokens when legally required. The compliance burden sits on whoever mints and redeems the coin.

One more line matters for anyone who assumes a dollar token is as safe as a bank dollar: the FDIC has confirmed that stablecoin holders do not receive deposit insurance, even when the issuer is bank-affiliated. If the issuer fails, you are a claimant against the reserve, not an insured depositor. The reserve rules exist precisely because that reserve is your only backstop.

Where it actually stands right now

Here is the honest state of play as of July 13, 2026: the law is in force, but the detailed rules that operationalize it are not final yet.

The GENIUS Act delegated implementation to a set of federal agencies (the OCC, FDIC, and NCUA on the banking side, plus Treasury, FinCEN, and OFAC) each of which had to write its own regulations. All of them published proposed rules through early 2026, and the comment periods closed on June 9, 2026. The statute sets a one-year deadline, so final rules are due by July 18, 2026, five days from this writing. As of today they are still in the drafting-and-reconciliation phase, not published as final.

The proposals give you the shape of what is coming. The OCC's proposed rule sets a $5 million minimum capital floor for new federally approved issuers and a tiered liquidity requirement including same-day redemption capacity. Once final rules land, issuers get roughly 120 days to comply before the framework fully binds. So the correct summary is: the principle is settled law, the paperwork is landing this month, and the enforcement track record is still empty. Treat the fine print as pending.

The other four buckets: the SEC/CFTC map

Stablecoins were the easy case because Congress legislated them directly. Everything else got sorted on March 17, 2026, when the SEC and CFTC issued a joint interpretive release sorting crypto assets into five categories. This is the map that tells you which regulator, if any, owns a given token.

• Digital commodities: assets whose value comes from the operation of a functional network and ordinary supply and demand. The release names Bitcoin, Ether, Solana, XRP, Cardano, and Dogecoin among them. Not securities; they sit under the CFTC's commodity authority.
• Digital collectibles: tokens collected or used for their own sake, such as art, music, or trading cards, with no yield and no ongoing rights. Not securities.
• Digital tools: tokens that function as a credential, membership, ticket, domain, or identity marker, serving a practical purpose rather than an investment one. Not securities.
• Stablecoins: the GENIUS Act bucket. Compliant payment stablecoins are excluded from securities treatment by statute; anything calling itself a stablecoin but not issued under the Act still gets a case-by-case look.
• Digital securities: traditional instruments like stocks, bonds, or notes recorded on a blockchain. Putting a share of stock on-chain does not change what it is. These are always securities and sit squarely with the SEC.

The organizing logic is that economic substance governs, and format is irrelevant. A thing is not a security because it is a token, nor safe because it is a token; it is whatever its rights and mechanics make it. Only the last bucket, digital securities, falls fully under SEC jurisdiction. The release also expressly supersedes the SEC staff's 2019 investment-contract framework that guided nearly seven years of enforcement.

Note the status carefully. This is an interpretive release, not a formal rule. It reflects the current enforcement posture of both agencies and gives builders a far clearer read than they have ever had, but it does not carry the binding force of legislation, and real statutory market-structure reform for the non-stablecoin categories is still a work in progress. It is a map drawn in ink, not carved in stone.

The EU is arriving at the same place from the other side

The United States is not doing this in a vacuum. The European Union's MiCA regime got there first, and by a blunter route.

Under MiCA's stablecoin rules, an issuer must be authorized in the EU and meet reserve and governance standards to have its token offered on regulated European venues. Circle obtained an Electronic Money Institution license in France in mid-2024, making USDC and its euro token EURC compliant. Tether declined to seek authorization and publicly objected to MiCA's reserve requirements. The result was mechanical: between December 2024 and early 2025, EU-regulated exchanges including Coinbase, Crypto.com, and Binance delisted USDT for European users, because continuing to offer a non-authorized stablecoin put the venues' own licenses at risk. On those venues USDT volume collapsed while USDC volume climbed.

The through-line is that both jurisdictions are converging on the same policy: compliant stablecoins in, non-compliant stablecoins out. MiCA excludes non-authorized issuers from regulated venues. GENIUS excludes non-permitted issuers from the legal payment-stablecoin category. Different legal machinery, same destination. Tellingly, Tether's response has been to build a separate US-domiciled, GENIUS-aligned coin (USAT, with a chartered banking partner) rather than fight the trend, an issuer voting with its feet toward the compliant lane.

Why it matters

For builders. This is the environment 0xhades operates in. A clear line that says compliant dollar tokens are payment instruments, not securities, and a taxonomy that tells you which agency owns which asset, means US teams can build settlement rails, trading infrastructure, and on-chain products without treating every design decision as legal roulette. More compliant building happening onshore is not an abstraction; it is the ground under the infrastructure we build and investigate at the byte level.

For traders. Stablecoins are the settlement layer of crypto; they are how positions are funded, how value moves between venues, and how off-ramps work. The total stablecoin market sits near $315 billion in mid-2026, roughly double where it was two years earlier, and stablecoins carried the majority of crypto trading volume in early 2026. USDT still leads the overall market by a wide margin, around $186 billion to USDC's roughly $75 billion. But the metric that is turning is compliance-weighted: on regulated EU venues and across institutional flows, USDC has already overtaken USDT, precisely because it plays inside the rules. If the regulated lane is where the volume goes, the compliant coin is where you want your settlement.

The honest caveats. The rules are not finalized: final GENIUS regulations are days away, not behind us, and the 120-day compliance clock hasn't started. The SEC/CFTC taxonomy is interpretive guidance, not statute, and market-structure legislation for the non-stablecoin buckets is unfinished. Enforcement under the new framework has essentially no track record, so how regulators actually apply it is still unknown. The direction is clear and the legal principle is real; the operational reality is still setting.

Securing the unseen

The headline is true and worth saying plainly: under US law, a compliant payment stablecoin is officially not a security. But the substance is the framework behind the headline: 1:1 reserves in boring assets, no yield to holders, issuers regulated as financial institutions, and a five-bucket map that decides who oversees everything else. The US and the EU are converging on the same rule from opposite directions, and the compliant lane is where the settlement volume is heading. The work now is to build on that ground precisely, read the rules as they finalize this month, and not mistake a clear principle for a finished system.