Three stablecoin rule changes and what they demand

Key points

• The Bank of England took further steps towards dropping individual stablecoin holding caps in favor of a temporary £40B ($53B) issuance cap per systemic sterling stablecoin by end-2026

• US regulators continue moving stablecoin issuers onto bank-grade Bank Secrecy Act and sanctions compliance programs under the GENIUS Act, with enforcement set to be fully implemented in January 2027.

• MiCA’s final national transitional periods permitted under Article 143 expired July 1, 2026, and CASPs relying on them now require MiCA authorization where applicable.

• Each shift changes a different layer of your monitoring stack: exposure limits, program structure, and counterparty eligibility

Three regulators moved on stablecoins within weeks of each other. The Bank of England published its policy statement and draft Code of Practice for systemic sterling stablecoins on June 22, 2026, setting the framework that compliance teams will need to build against ahead of a 2027 launch.

US regulators are finalizing bank-grade anti-money laundering and sanctions rules for stablecoin issuers under the GENIUS Act. The EU’s MiCA transitional period ended on July 1, 2026, with no extensions.

For a VASP running one crypto transaction monitoring program across all three markets, that is not three headlines. It is three separate sets of obligations landing on the same desk within months or weeks of each other, with different triggers, thresholds and enforcement dates.

This post breaks down what is changing in London, Washington and Brussels, and what each change specifically demands of your monitoring, screening and reporting workflows.

UK: holding caps to go, issuance caps will be the new control by 2027

The Bank of England’s original proposal would have capped individual holdings of a UK stablecoin at £20,000, with a limit of roughly £10M ($13.2M) for businesses. Its new policy statement and draft rules on systemic stablecoin regulation, published June 22, 2026, will drop both limits entirely. Subject to feedback by September 22, the finalized Code of Practice will be in place by the end of 2026.

This will result in a single, temporary guardrail: total issuance of any systemic sterling stablecoin will be capped at £40B, reviewed regularly and removed once the Bank judges the risk to bank lending has eased.

The draft rules will also loosen reserve requirements. Issuers will be able to hold up to 70% of their reserve assets in short-term UK government debt, up from 60% under the earlier proposal. The remaining reserves will sit in non-interest-bearing deposits at the Bank of England. Redemption at face value will have to happen within 24 hours, and issuers won’t be able to pay interest to holders.

If you support a systemic sterling stablecoin under the draft rules, your monitoring will have to track outstanding issuance against the £40B ceiling, flag concentration among a small number of large holders since individual caps won’t be able to do that job for you, and speed up sanctions and identity checks at redemption, since a 24-hour face-value redemption window will leave a narrow gap to catch illicit, fast cash-out.

What this means for your monitoring desk within six months: With the Code of Practice due to be finalized by the end of 2026 and sterling stablecoins targeting a 2027 go-live, this is the window to get exposure monitoring built, not to wait for the final text. Per-holder threshold screening on sterling stablecoins will no longer be the control point. It’ll be replaced with exposure monitoring at issuance.

US: stablecoin issuers to become BSA-regulated entities

FinCEN and OFAC issued a joint proposed rule in April 2026 to implement the GENIUS Act’s anti-money laundering and sanctions requirements for permitted payment stablecoin issuers (PPSIs). The comment period closed June 9, 2026. Meanwhile, the statutory deadline for publishing final regulations under the GENIUS Act is July 18, 2026, with full enforcement expected to take effect in January 2027.

The proposal treats permitted payment stablecoin issuers (PPSIs) as financial institutions under the Bank Secrecy Act for the first time. FinCEN and OFAC’s piece requires PPSIs to build a sanctions compliance program on five elements: maintaining an AML/CFT program; suspicious activity reporting; procedures to block, freeze, and reject illegal or disallowed transactions; compliance with lawful orders; and maintaining sanctions compliance programs.

What this means for your monitoring desk: Stablecoin issuers you interact with will be moving to the same program structure that banks already operate under, and will have to implement the compliance program described above. That will raise the baseline for any VASP settling in these tokens. Expect issuers to request more from your own program, not less: documented risk assessments, audit trails on sanctions screening, and evidence that your monitoring can withstand independent testing. Build now for issuer-level due diligence that verifies whether a counterparty’s BSA/OFAC program is in place, not just whether the token itself appears low risk.

EU: MiCA moved from a risk score to a pass/fail gate

MiCA’s grandfathering clause allowed firms that were registered under national law before December 30, 2024, to continue operating without full authorization. That clause expired on July 1, 2026, and the European Securities and Markets Authority confirmed there would be no extension across the 27 member states. Any entity providing crypto-asset services to EU clients without MiCA authorization must now stop.

The compliance gap is wide. Roughly 280 of the more than 1,200+ VASP entities that held pre-MiCA national registrations converted to full authorization, leaving over 900 entities still outside of the regime by the July 1 deadline, representing a conversion rate of 23% (the number of conversions surged by 33% from 210 in the weeks approaching the deadline). On the stablecoin side, the picture is just as stark: major issuers that never sought e-money token authorization, including Tether, are not compliant assets for any MiCA-regulated venue. Circle’s USDC and EURC remain the only large-cap stablecoins with full e-money token authorization, alongside a smaller group of regional tokens authorized across France, the Netherlands, Finland, Malta, Luxembourg and Germany.

What this means for your monitoring desk: MiCA has turned stablecoin eligibility into a binary check rather than a risk-weighted decision for affected CASPs. Their transaction monitoring should be supplemented with issuer and CASP verification authorization from an allowlist for EU-facing flows, not a risk score, since an unauthorized token is not permitted regardless of the transaction’s individual risk profile. Counterparty due diligence now needs to confirm a venue’s CASP authorization status directly, given that most pre-MiCA-registered entities have not converted. And with major exchanges having already delisted non-compliant stablecoins from EEA markets, expect displaced volume to look for new rails. Your monitoring should be tuned to detect clients attempting to circumvent the gate.

The one-desk problem

London is set to remove a threshold and add a ceiling; Washington is moving issuers onto bank-grade AML and sanctions programs; and Brussels has turned a risk decision into a pass/fail gate. This will amount to three different mechanisms, which one compliance desk will have to operate without missing a deadline

Crystal Expert gives your team real-time visibility into transaction monitoring, entity due diligence and sanctions screening across 330+ blockchains, so counterparty and asset eligibility checks do not depend on manual lookups. Crystal Foresight adds the stablecoin-specific layer: real-time mint and burn tracking and cross-chain liquidity visibility across 99% of the stablecoin market, so you can see issuance exposure and flow patterns as they happen, not after a filing deadline.

Frequently asked questions

Will the Bank of England’s £40B cap apply per issuer or per stablecoin?
The cap applies per systemic sterling stablecoin, not per issuer. An issuer with more than one systemic sterling stablecoin would need to monitor each token’s outstanding issuance against its own £40B ceiling.

When does the GENIUS Act’s AML rule take effect for stablecoin issuers?
The GENIUS Act rules are to be finalized by July 18, 2026, and full enforcement will take effect in January 2027 (approximately 120 days), giving permitted payment stablecoin issuers a defined runway to build BSA and sanctions compliance programs.

Is USDT compliant under MiCA?
No. Tether has not obtained e-money token authorization, so USDT is not a compliant asset on any MiCA-regulated trading venue. Several major EU and EEA exchanges delisted USDT and other non-compliant stablecoins from spot markets ahead of the July 1, 2026, deadline.

What should a VASP operating across all three markets prioritize first?
Start with counterparty and asset eligibility checks, since MiCA’s pass/fail gate carries immediate exposure if you are still settling in non-authorized tokens or with unconverted counterparties. Then start building exposure monitoring for UK systemic sterling stablecoins and document your program structure ahead of US BSA enforcement.

Do these three regimes require separate monitoring systems?
Not necessarily. The underlying data you need, entity attribution, transaction-level tracing, and issuer and reserve visibility, overlap across all three regimes. A single monitoring platform that maps to each jurisdiction’s specific thresholds and eligibility rules avoids the need to run three disconnected programs.