On October 21 the Office of the Comptroller of the Currency issued its final rule implementing the GENIUS Act, the first federal regulator to finish one. The release is short. The rule covers permitted payment stablecoin issuers and foreign payment stablecoin issuers under OCC jurisdiction, plus custody activities by OCC-supervised entities. It sets standards for reserve backing, redemption and risk management. It takes effect January 18, 2027, the same day the statute's licensing requirement bites. Bank Secrecy Act, anti-money-laundering and sanctions requirements are not in it. Those come separately.

Comptroller Jonathan Gould's line in the release: "We are providing a clear, practical framework for payment stablecoin innovation, with strong standards for reserve backing, redemption, and risk management."

That sentence is the whole public posture. The agency had missed a July target, promised November in August, promised the end of October on October 15, and delivered on the 21st. For anyone who has been tracking this file since September, the date matters more than the adjectives. Issuers now have 89 days.

The law said who may issue. The rule says what that costs. The part everybody wanted settled, whether an exchange or a wallet can pay rewards on a coin the issuer cannot pay interest on, is now a case-by-case question with no safe harbor.

What the rule is, and what it replaced

The OCC proposed this framework on February 25, 2026, a 376-page notice creating a new Part 15 of its regulations: licensing, reserves, redemption, risk management, examination and reporting for the issuers it supervises. Comments closed May 1. The final rule is the same architecture with the comments worked through.

The statute already fixed the big numbers. One dollar of permitted reserves for every dollar issued, in cash, insured deposits, short Treasuries, Treasury repo or government money funds. An issuer may not pay interest or yield to holders for holding the coin. The rule turns those into supervisable obligations: how reserves are held and reported, how fast a redemption must be honored, what capital and liquidity an issuer carries as a backstop, who audits it, and how a foreign issuer gets in.

I have read the release. I have not read the rule text itself, which the OCC publishes as a PDF that would not load for me on the day, and the bulletin page would not load either. Where the detail below goes beyond the release, it is attributed.

The rewards question got smaller, not settled

The provision the industry was watching was never reserves. It was rewards. Jason Mikula named the gap the week the law passed, in July 2025: GENIUS "prohibits issuers from paying interest or other material consideration," he wrote in Fintech Business Weekly, but "it doesn't block other entities from doing so," and Coinbase was already passing rewards to USDC holders. The February proposal tried to close that door with a rebuttable presumption that rewards paid through an affiliate or third party were interest by another name.

The final rule drops the presumption. According to TokenPost and DeFi Prime, which read the rule text, the OCC will instead review each arrangement on its facts and circumstances, asking whether the payment is made solely for holding the stablecoin. Direct interest from an issuer stays prohibited. Programs already running get no safe harbor and no cure period. The agency reportedly declined a commenter's request for one.

So Mikula's loophole is neither closed nor blessed. It is now a supervisory judgment, made one program at a time, by an examiner. That is a worse answer for a lawyer and a better one for the OCC, which keeps every rewards program on a short lead without having to defend a bright line in court.

What it means for the rails underneath agents

This is a payments publication, so here is the payments reading. The Trust Layer Model splits an agent transaction into discovery, authorization and settlement. Stablecoins are a settlement-layer bet, and the bet has been running ahead of its rules: 21 banks committed to a dollar coin in September, Circle launched a chain with USDC as gas, and the x402 protocol settled 138 million agent payments on Base through Q3, almost all in USDC and almost all under a dime.

What the OCC rule changes for that stack is narrow and real. From January 18, the coin an agent spends has a supervised issuer behind it or it does not, and by July 2028 a US platform may not offer the ones that do not. Reserves and redemption are now examinable, which is what a merchant or a treasurer means by "settled." And the FDIC's Bank Secrecy Act standards for the issuers it supervises are the other half of the same frame, with the OCC's own AML rule still to come.

What it does not change is anything above settlement. Nothing in Part 15 tells a merchant who the agent is, what it is allowed to buy, or who pays when it buys wrong. The rule is a floor under the money. The middle layer is as empty as it was yesterday.

What to watch between now and January 18

Three things. Whether the Federal Reserve and the FDIC finish their own issuer rules before the statutory date, since the OCC covers only its slice. Whether the Treasury finalizes the section 3 rule on what counts as issuing a stablecoin in the United States, whose comment period closed on October 19. And which rewards programs the OCC looks at first, because the facts-and-circumstances test only means something once there is a first case.

Mikula's other prediction from July 2025 was that most of the 200-plus issuers then in circulation would never apply. The rule now exists to apply under. The count of applications, not the count of pages, is the number to keep.

If the first federal stablecoin rule leaves rewards to an examiner's judgment, which program would you want to be the first case, and which would you rather never be?

Charlie Major is a Product Development Manager at Mastercard. The views and opinions expressed in Major Matters are his own and do not represent those of Mastercard.