The Fintech Founder's Guide to New Federal Law

First, the GENIUS Act is no longer a bill. It is the law of the land, signed on July 18, 2025 as Public Law No. 119-27. The regulatory machinery is now in motion. The OCC published proposed GENIUS Act implementation rules in March 2026, covering everything from application procedures to reserve composition to private key management. Treasury, FinCEN, and OFAC followed on April 8, 2026, with a joint proposed rule implementing AML and sanctions compliance requirements for permitted payment stablecoin issuers. Final rules on both fronts are required by July 18, 2026. That deadline is closer than it feels.

Second, the OCC has already started granting charters. In December 2025, it conditionally approved national trust bank charters for Circle, Paxos, and three other nonbank firms. The OCC is open for business on stablecoin licensing.

Third, and perhaps most important for your immediate compliance posture: the SEC and CFTC jointly issued a landmark final interpretation on March 23, 2026 (Release Nos. 33-11412; 34-105020). This establishes a binding five-category taxonomy for all crypto assets under federal securities law. GENIUS Act payment stablecoins are expressly confirmed as not securities. Protocol mining, staking, wrapping, and airdrops are also clarified as non-securities activities. This interpretation supersedes the SEC's 2019 Framework for Investment Contract Analysis of Digital Assets, and it is in effect right now. It came out of Project Crypto, a joint SEC-CFTC initiative announced on January 29, 2026 by SEC Chairman Paul S. Atkins and CFTC Chairman Michael S. Selig, marking a clear pivot from the enforcement-first approach of previous administrations.

On the legislative side, the CLARITY Act passed the House in July 2025 and is working through the Senate, with a floor vote expected in April or May 2026. The INVEST Act passed the House in January 2026 by a 302-123 bipartisan margin and is awaiting Senate consideration. This guide covers all of it.

The GENIUS Act, the CLARITY Act, and the INVEST Act, taken together, represent the most significant overhaul of digital finance law in U.S. history. And they're arriving fast.

If you run a fintech company, issue stablecoins, build on a blockchain, or raise capital from investors, the rules governing your business are changing whether you pay attention to them or not. The founders who understand what changed, and get ahead of it before 2027, will have a structural advantage over those who don't.

This guide is written for founders, not compliance attorneys (though it will help your attorney too). The goal is a clear picture of what each law actually does, what it means for your company, and what you should be doing about it right now. No jargon walls. Just a clear, honest map of the terrain.

• GENIUS Act → Stablecoins finally get a federal rulebook
• CLARITY Act → Digital commodities get their own regulatory lane, separate from securities
• INVEST Act → Raising capital gets faster, broader, and more digital-friendly
• SEC/CFTC March 2026 Interpretation → A binding five-category crypto taxonomy, in effect right now, before any pending legislation passes

What makes this moment different from previous regulatory guidance? These three acts were designed to work together. They don't just legalize things individually — they create a coordinated operating framework for the entire digital finance ecosystem.

And layered underneath all three: the March 2026 SEC/CFTC joint interpretation provides immediate clarity on how crypto assets are classified right now, today, before the CLARITY Act is fully in force. It establishes a five-category taxonomy that ends the era of regulation by enforcement. You don't have to wait to understand where you stand.

Let's start with the most practical thing a fintech founder can do in 2026: partner with a modern sponsor bank. Not a legacy correspondent bank that treats you like a compliance risk. A purpose-built Banking-as-a-Service (BaaS) platform that is already configured for what you're trying to do.

Here's what a modern sponsor bank actually brings to the table:

• Pre-built AML/KYC compliance — they already run it every single day, because they're legally required to
• Direct Federal Reserve, OCC, and FDIC relationships — no cold-start application
• Existing examiner relationships — your audits go smoother
• Capital adequacy frameworks — stablecoin reserve requirements are, at their core, a capital and liquidity question that banks already know how to answer
• Payment rails and Treasury management — plug in via API, not months of build time
• Established audit trails — the kind regulators actually want to see

Under the GENIUS Act, a bank charter is Track 1 for stablecoin issuance. If a bank subsidiary becomes the issuer, there's no separate OCC application required. The federal examination happens at the bank level. This is the fastest path to market for a stablecoin operation, by a significant margin.

Under the five-category SEC/CFTC taxonomy that took effect March 23, 2026, GENIUS Act payment stablecoins issued by permitted payment stablecoin issuers are expressly confirmed as not securities. This removes the single biggest source of legal uncertainty that stablecoin operators have faced for years.

What It Does

The GENIUS Act (Public Law No. 119-27) creates the first comprehensive federal framework for payment stablecoins — digital assets pegged to fiat currency and used for payment or settlement, not investment. The core requirements apply to all issuers regardless of which track they choose.

The universal requirements: 100% reserves in high-quality liquid assets (U.S. Treasuries or central bank deposits). Daily reconciliation. Monthly public reporting. Independent monthly examinations. Redemption at par (1:1) within one business day, no exceptions. All issuers treated as financial institutions under the Bank Secrecy Act, meaning mandatory AML and CFT programs. Anti-tying provisions apply. No stablecoin yield to holders — only stablecoin rewards or activity-linked incentives are permitted.

The Big Tech prohibition: Publicly traded nonfinancial companies cannot become stablecoin issuers under any track. Non-publicly-traded nonfinancial companies have some discretion from the Treasury, Fed, and FDIC Stablecoin Certification Review Committee.

The $10 Billion Threshold: Choosing Your Issuer Track

The GENIUS Act creates three distinct paths to becoming a permitted payment stablecoin issuer (PPSI). The right path depends on your size, your existing relationships, and how much regulatory independence you want.

The $10 billion threshold is the key dividing line: nonbank issuers above this limit must submit to federal oversight, while smaller players can operate under state regulation if the state framework is "substantially similar" to the federal standard. That certification comes from the Stablecoin Certification Review Committee.

Track 2 is already in motion: The OCC conditionally granted national trust bank charters to Circle, Paxos, and three other nonbank firms in December 2025, proving this path works. If your outstanding stablecoin balance is below $10 billion, you get a 12-month safe harbor if your application is pending as of the effective date.

The Compliance Challenges

The March 2026 OCC Proposed Rules: What to Watch

The OCC published its proposed GENIUS Act implementation rules in March 2026. The key areas covered include application procedures for Track 2 PPSIs; permitted activities for national trust bank charter holders; explicit prohibition on yield payments to holders; detailed reserve asset composition requirements; daily reconciliation obligations; monthly public reporting standards; independent monthly examination requirements; private key management protocols; risk management standards; custody standards; capital adequacy metrics; and periodic reporting obligations.

Final OCC rules are required by July 18, 2026, exactly one year after the GENIUS Act's enactment. The comment period is still open as of April 2026. If your company has operational feedback on how the proposed rules would work in practice, now is the time to submit comments to the OCC.

Treasury/FinCEN/OFAC: The AML/Sanctions Rules

On April 8, 2026, Treasury, FinCEN, and OFAC published a joint proposed rule implementing BSA, AML, and sanctions compliance requirements specifically for PPSIs. This is the AML and sanctions piece of the GENIUS Act puzzle, separate from the OCC's prudential oversight rules.

The core requirements: all PPSIs are treated as financial institutions under the Bank Secrecy Act, meaning they must maintain full AML and CFT programs, including customer due diligence, suspicious activity reporting, and record-keeping. Sanctions compliance under OFAC is also required, including transaction screening and program implementation. Final rules are also due by July 18, 2026. Don't wait for the final rules to start building your AML program. The proposed rules preview what a compliant program looks like, and the time to implement is now.

Your Action Timeline

There are now two layers of regulatory clarity on crypto asset classification, and they operate on different timelines. Layer one is the March 23, 2026 SEC/CFTC joint interpretation (Release Nos. 33-11412; 34-105020). This is binding guidance, in effect right now. Layer two is the CLARITY Act (H.R. 3633), which passed the House in July 2025 and is still working through the Senate as of April 2026. The CLARITY Act is not yet law. The SEC/CFTC interpretation is.

The SEC/CFTC Five-Category Framework (Effective March 23, 2026)

On January 29, 2026, SEC Chairman Paul S. Atkins and CFTC Chairman Michael S. Selig announced Project Crypto, a joint initiative to harmonize federal oversight of digital assets and formally end the era of regulation by enforcement. The March 23, 2026 final interpretation is the first major output of that initiative. It supersedes the SEC's 2019 Framework for Investment Contract Analysis of Digital Assets.

The interpretation also clarifies specific activities: protocol mining is not a security offering; protocol staking is not a security offering (including staking receipt tokens); wrapping a non-security crypto asset is not a security; and airdrops do not involve an "investment of money" under the Howey test and are therefore not securities.

The Investment Contract Lifecycle

This is one of the most practically important concepts in the March 2026 interpretation. A token project can start out as subject to an investment contract (a security) if it was sold by inducing the investment of money in a common enterprise with representations or promises that the team would undertake essential managerial efforts from which buyers would reasonably expect to profit. Think: "buy our token now, we're building the network, you'll profit when we ship." That's an investment contract.

But an investment contract is not permanent. The interpretation clarifies that the investment contract terminates — and the token reverts to non-security status — when either the issuer fulfills its representations and promises (network is live, decentralized, and operating as described), or the issuer fails to satisfy those representations and promises. This is the graduation pathway. A project can begin life as a security, complete the build, step back from essential management, and have the token graduate to commodity status. That path is now clearly mapped.

For founders who have already launched a token: if you made promises during your raise and you've now fulfilled them, document that transition carefully. If you haven't fulfilled them yet, you're still subject to investment contract treatment and should be talking to qualified counsel.

What the CLARITY Act Adds (When Passed)

The CLARITY Act (H.R. 3633) is the statutory companion to the SEC/CFTC interpretation. When it passes, it will establish three statutory categories: digital commodities (CFTC-regulated), investment contract assets (SEC-regulated at launch, with a graduation pathway), and permitted payment stablecoins (banking regulators under GENIUS Act).

It gives the CFTC exclusive jurisdiction over spot and cash markets for digital commodities — something the March 2026 interpretation cannot accomplish on its own. It creates a formal 18-month provisional registration period for exchanges, brokers, and dealers. It includes a formal maturity certification process (SEC has 60 days to approve, stay, or rebut; silence equals approval by default). And it eliminates SAB 121, the accounting rule that forced banks to list client digital assets as liabilities on their own balance sheets.

How to Certify Your Blockchain Is "Mature"

Your project needs to demonstrate all of the following:

• Value flows from actual blockchain use, not speculative investment
• Functionality — users can actually transact, validate, and participate in governance
• Open-source code — no one can unilaterally lock out participants
• Programmatic rules — the system runs on transparent, pre-established code
• Decentralized governance — no single party controls more than 20% voting power
• No special privileges — except routine maintenance via decentralized governance
• Distributed ownership — issuers and affiliates hold less than 20% of total units

Senate status as of April 2026: The CLARITY Act is working through the Senate Banking Committee (SEC-related elements) and Senate Agriculture Committee (CFTC-related elements). Markup was delayed in January 2026 due to over 100 amendments. A Senate floor vote is expected in April or May 2026.

How a Bank Partner Helps

Your Action Timeline

The INVEST Act (H.R. 3383, the Incentivizing New Ventures and Economic Strength Through Capital Formation Act of 2025) modernizes how fintech companies raise money and reach investors. It expands digital delivery, broadens investor access, and streamlines the capital formation process for early-stage companies.

The Accredited Investor Expansion

Today, qualifying as an accredited investor requires either $1 million net worth (excluding primary residence) or $200,000 individual annual income ($300,000 joint). The INVEST Act opens two new pathways:

• Professional license pathway: Via the Fair Investment Opportunities for Professional Experts Act component, individuals can qualify through "professional expertise or experience" even without meeting income or net worth thresholds. This already covers holders of Series 7, 65, and 82 FINRA licenses. The INVEST Act will add broader professional experience criteria.
• SEC Certification Exam: Via Section 203 (the Equal Opportunity for All Investors Act), the SEC must create an exam/certification process. Pass the test, demonstrate investment sophistication, become an accredited investor — regardless of income or net worth. This democratizes access to private markets.

What this means for fintech founders: Your investor pool just got bigger. Friends, advisors, and sophisticated colleagues who don't clear the wealth threshold may be able to qualify via the exam. Your Reg D raise can tap a broader audience.

Digital Delivery Modernization

The INVEST Act modernizes how offering materials are delivered. Digital and electronic delivery becomes the standard, not the exception. This matters for Reg D, Reg A, and Reg CF raises, where physical delivery obligations have created unnecessary friction. Documents, disclosures, and offering memoranda can be delivered and received digitally with full legal standing.

The Banking Partner's Role in INVEST Compliance

A banking partner's role here is infrastructure: electronic delivery compliance, investor KYC verification and accreditation documentation, payment rails for capital calls, audit-ready subscription documentation, and SAR filing infrastructure. Everything regulators will want to see — already in place.

Think of it as a stack. The March 2026 SEC/CFTC joint interpretation sits at the foundation, defining which assets fall into which regulatory bucket right now, today, before any pending legislation is fully in force. On top of that:

• The GENIUS Act builds the stablecoin operating layer — issuer licensing, reserve management, AML/CFT, redemption
• The CLARITY Act formalizes the commodity vs. security distinction in statute and hands CFTC jurisdiction over spot markets
• The INVEST Act modernizes the capital formation layer that funds the companies building on top of all of it

Here's the cross-act picture in practice:

• A fintech can issue a stablecoin (GENIUS Act, Track 1 via bank partner) backed by reserves held at the bank. That stablecoin is confirmed not a security under the March 2026 SEC/CFTC taxonomy.
• That same stablecoin can be used to settle digital commodity trades (CLARITY Act) on CFTC-registered platforms. The commodity being traded falls into Category 1 of the SEC/CFTC taxonomy.
• The company can then raise expansion capital through modernized investor channels (INVEST Act), with bank-grade audit trails satisfying every disclosure requirement. The new accredited investor pathways broaden who can participate.

Classification Documentation

The single most important thing you can do right now is document your analysis of how your token or product maps to the SEC/CFTC five-category taxonomy from the March 23, 2026 joint interpretation. Examiners will expect to see this analysis. "We are a digital commodity because..." needs to be a written, reasoned document in your compliance files, not an assumption. A well-reasoned, documented analysis demonstrates good faith, which matters significantly in any enforcement context.

Project Crypto Posture

The SEC under Chairman Atkins has made clear that the enforcement-first approach of the previous administration is over. The March 2026 interpretation is the framework. But "over" does not mean "gone." Keep records of your classification analysis, your legal counsel's reasoning, and any updates you make as your product evolves. When a token graduates from investment contract status to commodity status, document that transition contemporaneously.

Core Examiner Checklist

• Documented compliance programs with BSA officer, training logs, and policy manuals
• Transaction monitoring records with SAR filing history
• Reserve reconciliation reports — daily, monthly, independent
• Customer due diligence files — complete KYC documentation, beneficial ownership identification
• Governance records for mature blockchain claims
• Capital adequacy calculations relative to reserve and custody obligations
• Private key management policy with technical controls and tested recovery procedures
• OFAC transaction screening — documented program and records
• Token classification analysis — how your product maps to the SEC/CFTC five-category taxonomy

A sponsor bank that already operates under examination makes this process vastly smoother. Their examiner relationships are already established. Their controls are already documented. You benefit from that infrastructure from day one.

The SEC's March 2026 joint interpretation with the CFTC is not a rumor or a proposal. It is effective now. If you haven't mapped your product to the new five-category taxonomy, that is the first thing to do this week. Everything else builds from there. Your classification determines your regulator, your compliance program, your banking relationships, and your investor conversations.

The GENIUS Act is law. The OCC is issuing rules. The AML framework is being finalized. The CLARITY Act is moving through the Senate. The INVEST Act passed the House with strong bipartisan support. This is not a moment for "wait and see." It's a moment for building.

The GENIUS, CLARITY, and INVEST Acts are the best thing that's happened to fintech legitimacy in a decade. But clear rules also mean no more hiding in gray areas. If you're not compliance-ready when these acts take full effect in 2026-2027, you will be at a structural disadvantage to the operators who are.

The fastest, most capital-efficient path to readiness runs through a modern sponsor bank.