Stablecoins: Opportunities & Risks forCommunity Banks & Credit Unions

Dr. Zoya Faynleyb, Managing Principal, VB Sentry April 9, 2026

Financial Times has listed “Stablecoin” as one of its “2025 Year in a Word” highlights for a reason: it is one of the most rapidly developing concepts in the U.S. financial industry. While community banks historically are conservative with adopting the new types of customers or payment methods, they cannot ignore the Stablecoin infrastructure any longer.

Regulatory background

The Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act signed into law on 7/28/2025 created the foundation for payment stablecoins in the United States and mandated financial industry regulators to take steps in establishing the framework.

National Credit Union Administration (NCUA) on February 11, 2026, was the first federal regulator to propose a rule outlining the framework for applicants seeking NCUA approval to become a permitted payment stablecoin issuer, as outlined in the GENIUS Act.

It was quickly followed by the Office of the Comptroller of the Currency (OCC), which on February 25, 2026, released Bulletin 2026-3, a landmark 376-page Notice of Proposed Rulemaking (NPRM) designed to implement the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act.

In his March 11, 2026, remarks, FDIC Chairman Travis Hill emphasized the agency’s focus on establishing a clear, prudential framework for payment stablecoins under the GENIUS Act, aiming to integrate them into the banking system safely. Since one of the main postulates of GENIUS Act is that stablecoins are not “subject to deposit insurance” or guaranteed by the U.S. government, the FDIC is developing specific capital, liquidity, and risk management requirements for supervised stablecoin issuers to ensure financial stability.

Concurrently, The US Treasury released the 2026 National Money Laundering Risk Assessment, recognized the stablecoins risks and emphasized that “effective and clear regulation coupled with law enforcement actions against malicious actors can build confidence among U.S. users and firms seeking to grow domestically and ensure American innovators lead the digital asset industry.”

International financial bodies also consider stablecoins governance among top emerging priorities. In 2025, Wolfsberg Group issued Guidance on the Provision of Banking Services to Fiat-backed Stablecoin, providing practical recommendations for financial crime compliance practitioners. In March 2026, Financial Action Task Force (FATF) issued a Targeted report on Stablecoins and Unhosted Wallets – Peer-to-Peer Transactions, highlighting financial crime risks of stablecoins and expected mitigation.

On April 8, the joint rule proposed by FinCEN and OFAC – titled Permitted Payment Stablecoin Issuer Anti-Money Laundering/Countering the Financing of Terrorism Program and Sanctions Compliance Program Requirements – created the framework to protect the U.S. financial system. Upon finalization, the rule will transform stablecoin issuers into regulated financial institutions with AML/CFT requirements that match or exceed those of traditional banks.

This is no longer a wait-and-see technology. The recent regulations and guidance signal that payment stablecoins are being brought into a bank-like supervisory framework that emphasizes reserve integrity, capital adequacy, and strict liquidity discipline. For community banks, the message is clear: whether you intend to issue your own stablecoin or simply defend your deposit base, the regulatory floor has been set.

Assuming that the regulatory framework is being finalized, a community bank/CU will be able to operationalize the stablecoin in 3 ways (sorted from most progressive to conservative):

I. Becoming a Permitted Payment Stablecoin Issuer (PPSI);
II. Using on-chain stablecoin rails to facilitate instant settlement of fiat
transactions; and
III. Providing traditional banking services to PPSIs that are non-bank financial
institutions.

I. The Core Framework: Becoming a “Permitted
Issuer”

The OCC’s proposal creates a formal pathway for national banks and federal savings associations to become Permitted Payment Stablecoin Issuers (PPSIs). While the “Wildcat banking” era of the 1800s saw private currencies flourish with little oversight, the 2026 framework is built on a foundation of “one-to-one” backing by safe, liquid assets.

The $5 Million Entry Fee

For community banks considering a de novo stablecoin subsidiary, the OCC has proposed an individualized capital requirement with a minimum floor of $5 million. This capital is intended to absorb losses not covered by reserves, ensuring the institution remains solvent even during periods of extreme volatility.

The Reserve Rigor

Stablecoins under this rule must be backed 100% by “high-quality, liquid instruments”.

Eligible Assets: Cash, balances at the Federal Reserve, short-term U.S. Treasury
securities, and qualifying repurchase agreements.
Liquidity Tiers: The OCC proposes that at least 10% of reserves be held as demand
deposits or at a Federal Reserve Bank, with 30% available within five business days.
Concentration Limits: No more than 40% of reserve assets can be held at any single
eligible financial institution.

Actionable Risk Management for Community Banks

The OCC’s framework isn’t just for issuers; it’s a risk management blueprint for any bank operating in a digital economy. To align with the proposed standards, community banks must take the following actions:

Address the “Yield” Prohibition

The GENIUS Act strictly prohibits PPSIs from paying interest or yield to stablecoin holders. The OCC’s new proposal goes further, establishing a rebuttable presumption that an issuer
is violating this ban if an affiliate or “related third party” (like a partner exchange) pays yield to holders.

Bank Action: Review all fintech partnerships and “white-label” agreements to ensure no
marketing rewards or interest-bearing features are inadvertently tied to stablecoin holdings.

Establish “Timely” Redemption Mechanics

Confidence in a stablecoin relies on the ability to exit at par. The OCC proposes a two-business-day standard for redemptions.

Bank Action: If acting as a custodian or issuer, banks must develop automated, “fail-safe” redemption policies. The rules allow for an extension to seven days only if redemption demands exceed 10% of the total issuance in 24 hours.

Implement Monthly “Gold Standard” Disclosures

The proposal mandates that PPSIs publish a monthly report on their website detailing the composition and fair value of their reserves.

Bank Action: These reports must be certified by the CEO and CFO and reviewed by a registered public accounting firm. Banks must treat these disclosures with the same level of internal control as a Call Report.

Manage the “Operational Backstop”

Beyond reserves and regulatory capital, the OCC introduces a new “operational backstop,” a separate pool of highly liquid assets equal to 12 months of total expenses.

Bank Action: Calculate quarterly expenses and ensure a dedicated liquidity buffer is maintained in U.S. currency or short-term Treasuries to ensure continuity during business disruptions.

The Strategic Outlook: Opportunity or Threat?

Community banks face a “substitution risk” where deposits may migrate toward stablecoins, especially among digital-native segments. However, the ABA’s Conference for Community Bankers highlighted that stablecoins also offer a path to modernize payment systems and reduce reliance on ACH or Fedwire.

By embracing the OCC’s rigorous standards, community banks can position themselves as trusted intermediaries: holding reserves as custodians for other issuers or providing the “fiat-to-digital” bridge for small business customers.

II. Stablecoin Rails for Payments

Issuing own stablecoin may sound innovative and suitable for large global institutions, but this might not be the most efficient step for a credit union or a community bank. There is no mechanism for exchanging stablecoins of different issuers, and it will take a while until the industry builds consortiums for clearing of digital asset payments.

However, community banks and credit unions will soon be able to take advantage of “Stablecoin Sandwich” – a transaction that starts and ends in fiat (traditional) currency but is briefly converted into a stablecoin in between to be transferred between institutions.

The idea of the “sandwich,” where blockchain is the rails of traditional money transfer, has been floating for a while now. This was possible from the technology standpoint, but with volatility of exchange rates of Bitcoin and other cryptocurrencies, it was impractical.

As the regulations implementing GENIUS Act are being finalized, banks and credit unions should start considering using PPSIs as vendors for alternative payment rails. A sandwich transaction will look the same to a customer and the frontline personnel, the conversion happens at the back end and in theory should be automatic.

Make sure that all relevant vendor management and third-party risks are properly addressed. The banks that participate in a “sandwich” transaction should consider specific questions, such as:

Is this transaction type feeding into all relevant auxiliary systems, including AML, fraud, and watchlist filtering?
Does the information about the parties of transaction travel with the payment?
How does the vendor PPSI assure OFAC compliance on their end?
What assurances are provided for data privacy and security?
How are Regulation E implications addressed?
What mechanisms exist for fraud mitigation and funds recovery?

If PPSI has good answers to these and other questions – let the fintechs do the hard work and enjoy the low cost and high speed of the transactions.

III. Traditional Banking Services to NBFI PPSIs

Great news for community banks or credit unions is that stablecoin operations require the non-bank issuers to set 1:1 reserve in highly liquid assets, including bank accounts. Setting a welcoming infrastructure to establish such reserve accounts can be a way for community banks to get acquainted with the stablecoin industry and acquire core deposits.

The major risks will be money laundering and OFAC violations, so it is critically important to expand bank’s customer due diligence procedures. The bank not only needs to know its PPSI customer (KYC), but also their customers’ customers (KYCC), counterparties, vendors, and networks.

Most importantly, before onboarding and through the relationship, the bank should question the use cases of the stablecoin minted by the PPSI.

According to 2026 National Money Laundering Risk Assessment, “many illicit actors using digital assets prefer stablecoins due to the relative stability compared to other digital assets as well as the liquidity in stablecoin markets.” Moreover, 2026 National Terrorist Financing Risk Assessment states that “terrorist groups demonstrate a preference for U.S. dollar-denominated stablecoins, perhaps due to price stability, availability, or liquidity.”

If the PPSI prospect vaguely explains their Go-to-Market plan with “any lawful purpose,” has minimal restrictions on geographies of their customers, rudimentary customer due diligence and acceptance criteria, asks “What is OFAC?”, does not have a qualified AML officer on staff – they may become a comfortable engine of choice for illicit actors. Such risk might not be manageable for a small community bank.

A PPSI that mints stablecoins for cross-border payments may be bankable for community banks with higher risk tolerance. Mitigating factors can be strong internal AML and OFAC program, qualified personnel, regular audits that can catch an issue early and full transparency with the servicing bank. Non-transactional reserve accounts may be a particularly sweet spot for banking of such entities.

The lowest AML risk stablecoin issuers are those that target only regulated banks and credit unions to offer payment mechanisms using on-chain technologies. Such fintechs in many cases are not required to register as money transmitters, and additional AML/OFAC controls at their institutional clients provide additional comfort to their servicing banks. However, each servicing bank needs to apply own due diligence even to lower risk PPSIs.

An additional group of risks and costs to consider when servicing a PPSI is operational. There likely will be a reporting requirement to the bank beyond monthly account statements to ensure PPSI’s adherence to daily liquidity promises – which may require a customized software tool and carry bank’s liability for inaccurate reporting. The bank may receive regular information requests from the auditors and examiners of PPSI which will take resources to respond.

FDIC insurance of PPSI accounts is a separate concern. FDIC Notice of Proposed Rulemaking RIN 3064-AG07 will likely be revisited to address stablecoins. The Rule, nicknamed “Synapse Rule,” which was proposed in 2024 in reaction of the collapse of Synapse Technology that harmed many consumers, is still in proposal stage. If finalized, the rule will require banks to institute recordkeeping for certain custodial accounts that will include attribution of the balances to the sub-customers of third-party non-bank customers.

Conclusion

The finalized GENIUS Act, NCUA proposal, FinCEN/OFAC NPRM, and OCC rulemaking will establish a regulated, bank-like framework for stablecoins, requiring institutions to ensure high-quality reserve backing, capital adequacy, and strict liquidity discipline. Community banks and credit unions should start treating stablecoins as a strategic, non-optional component of banking, and consider what role they are willing to take in the emerging stablecoin infrastructure