The GENIUS Act Didn't Change How We Build. It Changed Who Can.
On July 18, 2025, President Trump signed the GENIUS Act into law — the first comprehensive federal framework for stablecoin issuers in U.S. history. It passed 68-30 in the Senate and 308-122 in the House. That bipartisan margin doesn't happen for legislation that doesn't matter.
We've written a detailed explainer on what the GENIUS Act actually says — the reserve requirements, the monthly attestations, the BSA treatment, the sanctions program mandates. If you want the technical breakdown, that post is here.
This post is about something different: what the GENIUS Act means for everyone who wasn't already building this way.
What the Law Now Requires
Here is the short version of what every stablecoin issuer in the United States must now have to operate legally:
- Full Bank Secrecy Act treatment — customer identification programs, transaction monitoring, suspicious activity reporting
- A designated compliance officer supervising the AML program
- A certified AML program submitted to regulators within 180 days of licensure and annually thereafter
- An economic sanctions compliance program, including sanctions list screening
- The technical capability to freeze, block, or burn tokens on-chain when legally required
- Monthly reserve reports with CEO and CFO certifications, independently examined
- 1:1 reserve backing in high-quality liquid assets — no fractional reserve, no crypto as collateral
None of this is optional. None of it can be built retroactively after you've already onboarded users. And none of it is cheap or fast to build from scratch.
The Problem This Creates for Late Movers
The stablecoin space has attracted a lot of capital, a lot of founders, and a lot of products built on the assumption that compliance could come later — after product-market fit, after the Series A, after scale.
The GENIUS Act ended that assumption.
Every platform that built first and planned to comply later now faces a specific problem: they have to rebuild or retrofit compliance infrastructure that was never designed to be load-bearing. KYC flows that were designed for speed rather than rigor. Transaction monitoring that was configured to minimize friction rather than maximize detection. AML programs that exist on paper but haven't been operationally tested. Sanctions screening that was added as a feature rather than built as a foundation.
Retrofitting compliance onto a product that wasn't designed for it is one of the most expensive and time-consuming things a fintech company can do. I know this because I've spent significant portions of my career doing exactly that — arriving at institutions where the compliance program had failed silently for years, and rebuilding it from the ground up while the business kept running.
It is the hardest version of this work. And it is now the mandatory minimum for every stablecoin issuer in the United States.
What This Means Competitively
We are in the early stages of a regulatory shakeout.
Some platforms will comply and continue. Some will comply at the minimum viable level and face examination findings that expose the gaps. Some will discover that the compliance infrastructure they need is more expensive than their runway allows and will exit the market. Some will simply stop operating in the United States and try to serve U.S. users through offshore structures — which the GENIUS Act's extraterritoriality provisions are specifically designed to address.
What the GENIUS Act creates, in practice, is a compliance barrier to entry that didn't exist before July 2025.
For Scurry — FinCEN-registered from day one, BSA program operational before our first user, OCC National Bank charter in process, founded by a thirty-year BSA Officer who has designated compliance officers at four prior fintech companies — that barrier is infrastructure we already have.
We didn't build it because the GENIUS Act required it. We built it because it's the right foundation for a financial institution. The GENIUS Act confirmed that our founding conviction was correct — and made it a legal requirement for everyone else.
The Specific Provisions That Create the Most Friction for Competitors
Not all compliance requirements are equally difficult to build. Three provisions of the GENIUS Act create disproportionate operational difficulty for platforms that weren't designed around them:
The designated compliance officer requirement. This isn't a title you give to your General Counsel on a Friday afternoon. A designated BSA/AML compliance officer is a specific professional role with specific regulatory obligations, specific examination exposure, and specific personal liability. Finding and retaining qualified BSA Officers is one of the most competitive talent markets in financial services. The ACFE reports consistent shortages of qualified anti-fraud and compliance professionals across the industry. Platforms that need to hire this function from scratch, after the fact, will find it is neither fast nor inexpensive.
The 180-day AML program certification. Within 180 days of licensure, every permitted stablecoin issuer must submit a certification of AML program effectiveness to their regulator. This is not a checkbox. It is a formal regulatory assertion that your program is operational, tested, and effective — the kind of assertion that, if wrong, produces exactly the enforcement actions we saw at American Express and Bank of America last week. Building a program that can be certified in 180 days, from scratch, while also building a product and serving users, is a serious operational challenge.
The sanctions technical capability requirement. Issuers must maintain the technical capability to freeze, block, seize, or burn tokens on-chain in response to lawful orders. This is not a policy requirement — it is an engineering requirement. The smart contract architecture, the admin key management, the operational procedures for executing a freeze in real time while maintaining security — these need to be designed in from the beginning. Adding them to a live product that wasn't designed for them is a significant engineering lift with significant security surface area.
All three of these are solved problems for Scurry. None of them require us to change how we build.
Why We're Pursuing an OCC National Bank Charter
The GENIUS Act created a federal licensing pathway for stablecoin issuers. We are pursuing it.
An OCC National Bank charter is not the minimum viable compliance posture. It is the highest regulatory standard available to a U.S. financial institution. It means operating under the direct supervision of the Office of the Comptroller of the Currency — the same regulator that just issued the largest civil money penalty in its history against Bank of America.
We believe the most defensible position in the stablecoin market is to operate at the highest regulatory standard, not the minimum viable one. Not because we have to. Because it is the right foundation for the payment infrastructure we are building — and because the businesses and banking partners who will rely on our rails deserve a counterparty that has been built that way from the beginning.
The OCC charter process is rigorous. It is slow. It is expensive relative to a minimum viable compliance posture. It is also the clearest possible signal to banking partners, correspondent banks, enterprise customers, and regulators on both sides of the U.S.-Mexico border that Scurry is the platform they can rely on.
The Window Is Now
The GENIUS Act's compliance requirements apply to everyone. But the window to build compliant stablecoin infrastructure for the U.S.-Mexico corridor — to be the first platform in this specific corridor that is fully GENIUS Act-compliant, OCC-chartered, and purpose-built for business payment flows rather than consumer remittance — is open now and will not stay open indefinitely.
Every month that passes, more capital flows into this space. The compliance barrier the GENIUS Act created is real, but it is not infinite. Well-funded competitors will eventually build the compliance infrastructure the law requires. The question is who gets there first, with the best product, serving the right customers.
We registered with FinCEN before our first user. We designated a compliance officer before we built anything else. We completed our OCC pre-application meeting in August 2026. We are in the Fall 2026 AltaLab cohort. We are closing our pre-seed before Thanksgiving.
The GENIUS Act didn't change how we build.
It changed who can.
Build right. Move far.