U.S. Crypto Regulation in 2027: What Businesses Should Prepare for Now

For businesses operating in the cryptocurrency sector, changes to U.S. regulations have direct practical implications. Regulatory requirements shape how digital assets can be traded and transferred, how payments are processed, which counterparties companies can work with, and whether they can offer services to customers in the U.S.

The connection between regulation and business operations is particularly evident in crypto payments. According to a study by McKinsey and Artemis Analytics, actual stablecoin payments reached an estimated annualized volume of around $390 billion by early 2026, with about 60% attributable to business-to-business transactions. Against this backdrop, regulatory developments are becoming increasingly relevant to payment providers, financial infrastructure companies, and businesses operating internationally.

However, new requirements are being introduced gradually and apply to different market participants. To determine how best to prepare, businesses need to understand which rules have already been finalized, which remain under discussion, and how they interact with existing obligations. 

What’s Changing in U.S. Crypto Regulation in 2027?

Digital asset regulation in the U.S. remains complex, with oversight divided between federal agencies and state regulators. The applicable legal framework depends on the characteristics of each digital asset and the nature of the transactions involving it.

As of late October 2026, three major areas of regulatory change stand out:

1. Payment stablecoin regulation. The GENIUS Act, enacted in July 2025, established the foundation for federal stablecoin regulation. Regulators are gradually clarifying its provisions through implementing rules. In October 2026, the Office of the Comptroller of the Currency (OCC) finalized rules for entities under its supervision.
2. Clarification of crypto assets’ legal status. The U.S. Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) are working to clarify how securities and commodities laws apply to digital assets. Some guidance is already in effect, while new frameworks for token issuance and trading remain under discussion.
3. Evolving requirements for crypto infrastructure. Alongside new regulations, businesses must account for existing obligations related to anti-money laundering (AML), sanctions compliance, money transmission licensing, and tax reporting.

The OCC’s final rules don’t mark the completion of the broader regulatory framework. The Federal Deposit Insurance Corporation (FDIC) also proposed its own GENIUS Act implementing rules for supervised institutions, while the Federal Reserve opened several provisions for public comment. 

GENIUS Act: The Key Regulatory Change for 2027

The GENIUS Act is the first comprehensive federal law in the U.S. to establish a dedicated regulatory framework for payment stablecoins. Its primary purpose is to ensure adequate reserve backing, reliable redemption, and regulatory oversight of issuers. Under the law, payment stablecoins can be issued by entities authorized under either the federal framework or a qualifying state-level supervisory regime.

Authorized issuers must meet several key requirements:

1. Reserve backing of at least 1:1. Reserves must equal or exceed the value of outstanding stablecoins. Eligible reserve assets include certain highly liquid instruments, such as cash, bank deposits, and short-term U.S. Treasury securities.
2. Redemption rights. Issuers must redeem stablecoins at par value. Under the OCC’s final rules, redemption requests generally must be processed and fund transfers initiated within 2 business days, subject to applicable conditions.
3. Reserve transparency. Issuers must disclose the amount of outstanding stablecoins and the composition of their reserves on a monthly basis. They must also comply with reporting and independent verification requirements.
4. Restrictions on yield payments. The law prohibits issuers from paying holders interest or other returns solely for holding, using, or retaining payment stablecoins.

The final requirement is particularly relevant to products offering rewards programs. The OCC clarified that the prohibition may also apply to payments made through intermediaries acting on behalf of an issuer. The legal treatment of independent third-party rewards programs, however, depends on how those payments are structured.

GENIUS Act Requirements Take Effect in 2027 and 2028

The GENIUS Act establishes 2 main implementation stages:

1. January 18, 2027: Restrictions on issuing payment stablecoins in the U.S. without the required authorization take effect.
2. July 18, 2028: A broader restriction takes effect, generally prohibiting digital asset service providers from offering or selling payment stablecoins to persons in the U.S. unless the issuers meet the applicable authorization requirements, subject to statutory exceptions.

The authorization requirements for issuers and the restrictions on stablecoin distribution by other businesses therefore take effect on different dates.

For existing issuers, the OCC introduced a process for obtaining temporary, case-by-case waivers from certain requirements, primarily the need to secure prior approval before continuing issuance. Eligible applicants with substantially complete applications may receive a waiver for up to 12 months beginning January 18, 2027. These waivers aren’t automatic and don’t replace full authorization. As of late October 2026, the OCC hadn’t begun accepting applications, pending completion of the necessary administrative procedures.

What Does the GENIUS Act Mean for Foreign Companies?

Incorporation outside the U.S. doesn’t exempt an issuer from U.S. regulatory requirements if its activities involve the U.S. market. The GENIUS Act establishes a specific framework for foreign payment stablecoin issuers. Among other conditions, it requires the U.S. Treasury Department to determine that the issuer’s home-country regulatory regime is comparable to the U.S. framework, the issuer to register with the OCC, and sufficient reserves to be maintained at a U.S. financial institution unless an applicable exception applies.

Another condition for foreign stablecoins to be offered in the U.S. concerns issuers’ ability to comply with lawful orders from U.S. authorities, including restrictions on certain transactions. Digital asset service providers are prohibited from offering these stablecoins in the U.S. if the issuer doesn’t meet this requirement.

In August 2026, the Treasury Department proposed additional rules clarifying which activities constitute the issuance, offering, or sale of payment stablecoins in the U.S. Until those definitions are finalized, companies operating across borders need to assess the law’s applicability based on their actual business activities, not solely on where they’re incorporated. 

SEC, CFTC, and the CLARITY Act: What Remains Unresolved? 

Unlike payment stablecoin regulation, a comprehensive federal framework for overseeing crypto markets has yet to take shape. The Digital Asset Market Clarity Act (CLARITY Act) remains a key legislative proposal aimed at defining the respective responsibilities of the SEC and CFTC and establishing rules for digital asset market participants.

In September 2026, the bill failed to advance following a procedural vote in the Senate. As of this article’s publication, the CLARITY Act hadn’t become law, although legislative efforts could continue.

Meanwhile, regulators are exercising their existing authority. In March 2026, the SEC issued an interpretation distinguishing several categories of crypto assets, including digital commodities, digital collectibles, digital tools, payment stablecoins that meet GENIUS Act requirements, and digital securities. The interpretation also clarified that a crypto asset may not itself constitute a security, while certain transactions involving it may still fall under securities laws governing investment contracts. That same month, the CFTC clarified how it would apply the Commodity Exchange Act in line with the SEC’s interpretation.

The SEC took another step in August 2026, when it proposed Regulation Crypto Assets. The proposal provides for specific exemptions from registration requirements for certain crypto asset offerings involving investment contracts. However, it remains a proposal and doesn’t establish an effective framework for token offerings.

In September 2026, the CFTC began developing new rules for crypto asset transactions and eased certain regulatory requirements for software providers offering access to regulated derivatives markets. In October, the agency initiated preliminary discussions on rules governing certain retail crypto asset transactions and the trading platforms that facilitate them. These initiatives aim to strengthen oversight under the existing Commodity Exchange Act.

Businesses can already assess the legal classification of tokens and related trading activities using the latest regulatory guidance. However, basing business decisions on the anticipated passage of the CLARITY Act or rules that haven’t been finalized would be premature. 

Existing U.S. Regulatory Requirements Businesses Can’t Ignore 

Preparing for 2027 involves more than addressing new legislation. Many regulatory obligations for crypto businesses in the U.S. have been in place for years and remain applicable.

Anti-Money Laundering and Sanctions Compliance

Depending on its activities, a crypto company may qualify as a Money Services Business (MSB) and fall under the requirements of the Bank Secrecy Act (BSA).

Businesses subject to these requirements must register with the Financial Crimes Enforcement Network (FinCEN), implement an anti-money laundering (AML) program, monitor transactions, maintain records, and file required suspicious activity reports (SARs). In 2019, FinCEN clarified how these requirements apply to various business models involving convertible virtual currencies.

Sanctions administered by the Office of Foreign Assets Control (OFAC) also apply to digital asset transactions. In April 2026, FinCEN and OFAC proposed additional rules aimed at preventing illicit financial activity involving permitted payment stablecoin issuers. As of late October 2026, these rules remained proposals.

State-Level Licensing

Federal regulation in the U.S. doesn’t eliminate the need to comply with state laws. Businesses engaged in money transmission may also need licenses in the states where they operate.

Regulatory requirements are gradually becoming more standardized. According to the Conference of State Bank Supervisors, 31 states had adopted the Money Transmission Modernization Act, in whole or in part, by September 2026. However, differences in how these rules are applied remain.

Digital Asset Tax Reporting

Crypto payment processors warrant particular attention. The Internal Revenue Service (IRS) classifies certain processors as brokers if they regularly receive digital assets from payers and transfer funds to other parties. Whether reporting requirements apply depends on the payment structure and applicable exceptions.

Form 1099-DA reporting applies to certain categories of digital asset brokers for transactions beginning in 2025. Starting with transactions in 2026, brokers must also report the cost basis of certain digital assets. This includes qualifying assets acquired after 2025 and held in custody by the broker before their sale. 

What Regulatory Changes Mean for Different Types of Businesses 

The impact of regulatory changes depends largely on a company’s business activities. Two businesses dealing with the same stablecoin may face different obligations if one issues the asset while the other only facilitates its transfer.

Investment advisers and regulated funds face another area of potential regulatory change. In October 2026, the SEC proposed revisions to crypto asset custody rules, including provisions allowing self-custody under certain conditions and the use of state-chartered trust companies. The proposal doesn’t apply to all cryptocurrency wallet developers and operators. 

Key Steps Businesses Should Take Before 2027 

Effective preparation starts with identifying applicable regulatory requirements and addressing gaps in existing procedures. There’s no universal checklist for every market participant, but several areas deserve priority attention. Businesses should:

1. Assess their presence in the U.S. market. Identify which legal entities serve U.S. customers, where transactions take place, what services are provided, and which parties are involved in the flow of funds. This assessment helps determine which federal and state regulations apply to the company’s activities.
2. Review the digital assets they use and their issuers. Companies working with stablecoins should assess whether their issuers comply with applicable regulations, examine reserve composition and redemption terms, and identify potential restrictions on the assets’ circulation. They should also establish procedures for responding to changes in a stablecoin’s legal status or a partner’s decision to discontinue support for it.
3. Review compliance with existing requirements. Companies should verify that their activities align with their registrations and licenses, and assess customer identification, suspicious transaction detection, and sanctions screening procedures. Any identified violations of existing requirements should be addressed first.
4. Strengthen accounting and reporting processes. Operators subject to IRS requirements need to ensure the collection and retention of transaction records, customer information, and asset cost data. Issuers also need reliable systems for preparing reserve reports and verifying reserve adequacy.
5. Review contractual and operational arrangements. Key considerations include how responsibilities are allocated among participants in the payment chain, refund terms, procedures for handling blocked transactions, and contingency plans for disruptions involving issuers or liquidity providers.

Businesses should also establish a systematic process for monitoring regulatory developments. This includes assigning responsibility for tracking the CLARITY Act’s legislative progress and changes to rules issued by the Treasury Department, FinCEN, the SEC, and the CFTC. For each development, companies should document its scope, effective date, and any internal actions required. 

U.S. Crypto Regulation Will Continue to Evolve in 2027 

In 2027, U.S. crypto regulation will become more clearly defined, particularly for payment stablecoins. Meanwhile, the legal framework governing trading activities, infrastructure services, and the circulation of certain token categories will continue to evolve.

The gradual development of the regulatory framework requires businesses to take a systematic approach to monitoring regulatory changes and assessing their legal implications. This will help them identify potential risks early and determine which areas of their operations may require closer attention.

At the same time, preparing in advance to comply with every possible future regulatory requirement isn’t practical. Businesses should focus on identifying the rules that apply to their activities, ensuring compliance with existing obligations, and preparing their internal processes for changes that have already been finalized and have established effective dates.