The next phase of U.S. stablecoin regulation is not just about who can issue a stablecoin. It is increasingly about who can distribute one.

On August 17, the U.S. Department of the Treasury issued a Notice of Proposed Rulemaking (“NPRM”) implementing Section 3 of the GENIUS Act, addressing the issuance, offer, and sale of payment stablecoins in the United States.

While much of the regulatory attention surrounding the GENIUS Act has focused on reserve requirements and issuer regulation, Treasury’s proposal deserves particular attention from exchanges, fintech platforms, wallet providers, DeFi interfaces, and other businesses that sit downstream from stablecoin issuers.

The reason is simple: you may not issue a stablecoin and still find yourself within the regulatory perimeter.

What the Proposed Rule Would Do

Beginning July 18, 2028, digital asset service providers (“DASPs”) would generally be prohibited from offering or selling payment stablecoins to U.S. persons unless the stablecoin is issued by either:

• a permitted U.S. payment stablecoin issuer; or

• a qualified foreign payment stablecoin issuer satisfying applicable U.S. requirements.

The foreign-issuer pathway is particularly important for platforms that currently support stablecoins issued outside the United States. Qualification is not simply a matter of an issuer being regulated somewhere else.

Among other requirements, foreign issuers may need the technological capability—and corresponding intent—to comply with lawful U.S. orders.

That seemingly technical requirement could become a significant product and infrastructure consideration for both issuers and the platforms that rely on their stablecoins.

Comments on Treasury’s proposal are due October 19.

Why the Distribution Rule May Matter More Than the Reserve Rules

Much of the discussion around implementation of the GENIUS Act has understandably focused on issuer-side regulation, including regulatory tracks involving the OCC, FDIC, and Treasury.

But Section 3 raises a different question:

What happens after the stablecoin leaves the issuer?

Treasury’s proposal extends the regulatory analysis downstream by placing restrictions on digital asset service providers that offer or sell payment stablecoins to U.S. persons.

That means a company does not necessarily need to mint, redeem, or manage the reserves backing a stablecoin for the GENIUS Act to become relevant to its operations.

A platform facilitating stablecoin transactions, offering users the ability to acquire a particular stablecoin, or incorporating stablecoins into a payment or trading flow may need to determine whether the assets it supports remain permissible under the new framework.

For founders, that makes stablecoin compliance increasingly an architecture question, not simply an issuer diligence question.

The DeFi Boundary Is Where Things Get Interesting

The definition of “digital asset service provider” may become one of the most consequential parts of the rulemaking.

The GENIUS Act contains important exclusions relating to activities such as self-custodial software, validators, and certain liquidity-pool activity.

For decentralized finance projects, those exclusions matter enormously.

The practical question is how Treasury applies them at the margins.

Consider a protocol where the underlying liquidity pool operates autonomously, but a company maintains the primary interface through which users interact with it.

Or a product that includes a simple:

“Swap into USDC”

function.

The underlying protocol activity may look very different from the activity occurring at the application layer. Depending on how the final rules interpret “offering” or “selling” a payment stablecoin and who qualifies as a DASP, the front-end operator could face a different regulatory analysis than the protocol itself.

That distinction deserves careful attention.

DeFi teams should read Treasury’s proposed DASP definition against their actual technical architecture rather than assuming that “decentralized” automatically means outside the rule.

The 2028 Deadline Is Not as Far Away as It Looks

The distribution restrictions are scheduled to take effect beginning July 18, 2028.

Two years may sound like a generous implementation period. For companies building products around stablecoins, it may not be.

Stablecoin integrations can become deeply embedded in product architecture, treasury operations, liquidity arrangements, smart contracts, payment flows, and counterparty relationships.

A company that waits until 2028 to determine whether the stablecoins it relies on can still be offered to U.S. users may discover that compliance requires more than updating a policy.

It may require redesigning the product.

What Stablecoin and DeFi Teams Should Be Doing Now

Companies that hold, integrate, distribute, or facilitate transactions involving payment stablecoins should begin mapping their exposure now.

That means identifying which stablecoins are used across treasury operations and products, determining who issues them and under what jurisdiction, and assessing whether those issuers appear capable of satisfying the permitted-U.S.-issuer or qualified-foreign-issuer pathways.

Teams should also begin asking counterparties about their GENIUS Act implementation plans.

For foreign issuers in particular, the requirement to maintain technological capabilities necessary to comply with lawful U.S. orders should not be treated merely as a future compliance certification. It may influence how systems are designed today.

For DeFi-native companies, Treasury’s NPRM also presents an opportunity to engage directly with the rulemaking process.

If your business depends on the statutory exclusions for self-custodial software, validators, liquidity pools, or related decentralized infrastructure, the boundaries of the DASP definition are not academic. They may determine whether your product sits inside or outside a significant portion of the stablecoin regulatory framework.

Build to the Statute, Not Just the Final Rule

There is another timing consideration that should not be overlooked.

The GENIUS Act is scheduled to become effective on January 18, 2027, regardless of whether every implementing regulation has been finalized by that date.

Companies therefore should not treat unfinished rulemakings as permission to postpone implementation planning.

The more useful exercise is to start with the statute, map the business against its requirements and exclusions, and then track how Treasury and the banking regulators define the edges through rulemaking.

For stablecoin businesses, exchanges, fintech companies, and DeFi projects, the broader message is becoming increasingly clear:

Stablecoin regulation is no longer only about the issuer.

As the GENIUS Act moves toward implementation, regulatory obligations may increasingly follow payment stablecoins through the distribution chain—and reach companies that historically may not have considered themselves part of the regulated stablecoin ecosystem.

For teams building stablecoin-enabled products today, understanding where they sit in that chain could become just as important as choosing which stablecoin to integrate.

Learn more

This blog post is for informational purposes only and is not legal advice. Please consult with a Launch Legal attorney regarding your specific situation.