Can a bank issue its own stablecoin? How a community bank launches one, step by step
Yes. Under the GENIUS Act, signed on 18 July 2025, a US bank can issue its own payment stablecoin through a subsidiary its regulator approves, and it can already offer, hold and safeguard stablecoins for its customers.
The pressure to act is in the deposits. On 15 December 2025 ICBA, the community bankers’ trade body, estimated that letting crypto firms pay interest on stablecoins would pull $1.3 trillion of deposits out of community banks and cut their lending by $850 billion.
I’m Mo Tawfik Khalifa, chief product officer and forward deployed engineer at Instruxi. I have built the customer side of this twice: dollars, stablecoins and tokenized gold in one balance, with a checkpoint in front of every move. This is what the law allows, the four ways in, the part a bank has to build itself, and a 90-day pilot.
What does the GENIUS Act allow banks to do?
The parts of the law’s text a bank needs first:
- Who may issue. Only a “permitted payment stablecoin issuer” can issue a payment stablecoin in the US. For a bank, that means a subsidiary approved under section 5. Nonbank issuers get a federal or state licence instead.
- A clock on approval. The regulator has to decide within 120 days of receiving a substantially complete application.
- One for one reserves. Every coin is backed at least one to one by cash, deposits at insured banks, Treasury bills of 93 days or less, and a short list of similar assets.
- Monthly disclosure. The issuer publishes the size and makeup of its reserves every month, an accounting firm examines the report, and the CEO and CFO certify it.
- No interest. An issuer may not pay holders interest or yield just for holding the coin.
- No deposit insurance. Stablecoins are not insured, and saying they are is unlawful.
- Full anti-money laundering duties. The issuer counts as a financial institution under the Bank Secrecy Act: customer identification, a sanctions programme, suspicious activity reporting, and the technical ability to block, freeze and reject transactions.
- Timely redemption. The issuer must publish clear redemption procedures, and only regulators can put discretionary limits on redemption.
- Tokenized deposits are separate. The definition of a payment stablecoin excludes a deposit, “including a deposit recorded using distributed ledger technology”. Section 16 keeps a bank’s power to issue digital assets that represent its deposits.
When it starts. The Act takes effect on the earlier of 18 January 2027, 18 months after signing, or 120 days after the regulators issue final rules. The OCC proposed its rule on 25 February 2026, the FDIC on 7 April 2026 and the Federal Reserve on 24 September 2026. On 19 August 2026 the Comptroller said the OCC would have a final rule out by November.
What is allowed already. On 7 March 2025 the OCC confirmed that crypto custody and certain stablecoin activities are permissible for national banks. On 28 March 2025 the FDIC said the banks it supervises may do permissible crypto activities without asking first, as long as they manage the risks.
What are the four ways a bank can offer stablecoins?
From the most work to the least.
- Issue. The bank sets up a subsidiary, applies to its federal regulator, holds the reserve, publishes it monthly and runs the full compliance programme. A bank that wants a digital dollar without a new subsidiary can tokenize its own deposits instead, and those stay deposits under the law.
- Partner. A white-label stablecoin: an issuer that is already permitted issues the coin, and the bank puts its brand and its customers on it. The law is clear that the issuer of record must be a permitted issuer, so the contract decides who answers for what.
- Distribute. The bank lets customers buy, hold and send existing stablecoins and tokenized gold inside the app they already use. Section 16 says regulated banks may act “as a principal or agent” with any payment stablecoin. From 18 July 2028, three years after signing, a digital asset service provider may only offer US customers stablecoins from permitted issuers, with narrow exceptions for some foreign issuers, so choose the coin with that date in mind.
- Hold. The bank safeguards coins and keys for customers, which section 16 confirms banks may do. It can also hold another issuer’s reserves as deposits, since cash at an insured bank is an eligible reserve asset. That one brings deposits back in.
A bank does not have to pick one. Distributing and holding can start now, and issuing can wait for the final rules.
Tokenized gold sits outside the GENIUS Act. A payment stablecoin has to be redeemable for “a fixed amount of monetary value”. A gold token is redeemable for a weight of metal, so it does not meet that definition. Its rules come from elsewhere, and the bank’s counsel should map them before launch.
What does a bank have to build that it cannot buy?
Access is easy to buy. Large providers already resell custody and stablecoin payments to thousands of banks. What a bank cannot buy off the shelf is the decision: who passed identity checks, who may send, mint or redeem, up to what limit, checked before the money moves, and written into a record an examiner will accept. Those rules are the bank’s, so the layer that applies them has to be the bank’s too.
The first build was a bank-in-a-box for a listed gold company: a white-label app where a bank’s customers hold dollars, stablecoins and tokenized gold in one balance. Every send or purchase goes through a checkpoint of 11 ordered rules with three outcomes: allowed, held, or unavailable when a fact the checkpoint needs, such as the gold price, has gone stale. The second was a partner-bank app: customers keep the keys to their own wallet, the bank chooses what is on the menu, and every move is checked before it happens. The full story is in forward deployed engineer: four AI and fintech builds.
The rules that matter, in the order a checkpoint should read them:
- Identity. Has this person passed the bank’s identity check? I wrote about proving who someone is without exposing their whole file in how to prove who someone is.
- Sanctions. A match freezes the money and goes to a person. The app never clears it on its own.
- Funds and limits. The balance is there and the bank’s daily limit is respected, except on redemption, where the law gives that power to regulators only.
- Fresh facts. A stale price makes the answer “unavailable”. The checkpoint does not guess.
- Reserve. No new coin is issued unless every coin already out is covered one for one.
- The record. Every decision is written down, including the ones that stopped, with the rule that stopped it.
Try it below. Pick an action, switch facts off, and watch where the money stops.
Try it
Pick what the customer does, set the facts, then send it through. The checkpoint reads the rules in order and stops at the first one that fails.
1 · What the customer does
- Tokenized gold12.50 g
- Bank stablecoins1,000
- Held for review$0.00
With every fact switched on, the money moves. Switch one off and it stops at the checkpoint with a reason.
2 · What the checkpoint knows, in order
- 1Identity check passedWho the customer is, verified
- 2Sanctions screen clearNo match on a sanctions list
- 3Customer has the fundsAlways checkedAlways
- 4Under the daily limit$10,000 a day, set by the bank
- 5Gold price is freshUnder 60 seconds old
- 6Reserve covers every coinOne dollar held for each coin out
Bank · example
Ledger · newest first
| Ref | Decision | Entry |
|---|---|---|
| Nothing yet. Every decision lands here, including the ones that stop. | ||
Send something through to see the record the checkpoint writes.
Example customer, limits and prices. A real bank writes its own rules, and the order it checks them in is part of the rule.
The order is part of the rule. If the sanctions screen runs after the limit check, a sanctioned customer gets a polite “held for approval” when the money should be frozen and reported. Compliance sets the order once, in plain English, and the checkpoint follows it every time.
What does a 90-day stablecoin pilot look like?
How I would run it: small, measured, and easy to stop.
- Days 1 to 15: pick one route and one use. For example: distribute one permitted stablecoin to staff accounts only. Write the rules in plain English with the compliance officer, in order, with the outcome for each.
- Days 16 to 45: wire the checkpoint. Connect it to the identity check, the sanctions screen and the core ledger the bank already runs. Nothing gets ripped out. Every rule gets a test that breaks it on purpose.
- Days 46 to 75: go live with low limits. Staff first, then a small group of customers. Track holds, refusals and time to decide weekly.
- Days 76 to 90: review and decide. Walk compliance through the record, then widen, change the rules or stop, with the numbers in front of you.
Ship a test with every claim on the screen, so what the customer sees never drifts from the rules behind it.
Questions people ask
Can a community bank issue its own stablecoin?
Yes, through a subsidiary approved by its federal regulator under the GENIUS Act. The regulator has 120 days to decide on a complete application. The detailed rules are still being finalised, so distributing or holding stablecoins is the faster start.
Is a tokenized deposit the same as a stablecoin?
No. The Act excludes deposits from the definition, including deposits recorded on a blockchain. The FDIC’s April 2026 proposal says deposit insurance does not depend on the technology used to record a deposit. Stablecoins cannot be insured.
What is a white-label stablecoin?
A coin that carries the bank’s brand while a permitted issuer issues it and holds the reserve. The bank brings customers and the decision layer. The contract sets who handles redemption, disclosure and compliance.
Is tokenized gold a stablecoin?
Not under the GENIUS Act. A gold token redeems for metal, and the definition needs a fixed amount of money. A bank can still offer it, with the same checkpoint in front of every purchase.
When does the GENIUS Act take effect?
On 18 January 2027 at the latest, or 120 days after the regulators issue final rules if that comes first.
If you need this built, write to m@tawfik.tv, or see how I work as a fractional CPO.
