Skip to main content

OCC Letter 1188: The Quiet Rule Letting US Banks Take Over Stablecoins

· 13 min read
Dora Noda
Dora Noda
Software Engineer

On May 1, 2026, the public comment window closed on the most consequential US stablecoin rule of the cycle. Almost no one outside the bank legal departments noticed that the regulatory unlock for the country's four largest banks had already happened five months earlier — and that the comment-period close converts a quiet 2025 interpretive letter into a live operational green light.

That earlier unlock is OCC Interpretive Letter 1188, published December 9, 2025. It runs 17 pages, uses the dry phrase "riskless principal crypto-asset transactions," and on its face just confirms an obscure brokerage permission. In practice, it is the legal hinge that lets JPMorgan, Citigroup, Bank of America, and Wells Fargo offer their corporate and retail customers crypto and stablecoin trading without ever registering as a money services business — the bottleneck that has blocked nationally chartered banks from this product line for the better part of a decade.

The combination of IL 1188, the OCC's GENIUS Act stablecoin framework whose comment period just closed, and a string of bank-side filings (Wells Fargo's WFUSD trademark, Citi's 2026 custody launch, the four-bank joint stablecoin discussions) means Q2 2026 is the quarter US banking quietly absorbs the stablecoin layer. Here is what the rule actually does, why it matters more than the headline rules everyone is watching, and what changes in the next ninety days.

What "riskless principal" actually means​

A "riskless principal" trade is the unsexy cousin of agency brokerage. The bank stands between two customers: it buys a crypto asset from one, then immediately sells the same asset to the other at a matched price. The bank never carries the position on its balance sheet beyond the few seconds of settlement. It collects a spread or fee, but it does not take directional market risk.

The OCC's analysis in IL 1188 is unusually direct. Riskless principal crypto trades are, in the agency's words, "the functional equivalent" of recognized bank brokerage activity and "a logical outgrowth" of the crypto custody activities that the OCC already permits under Interpretive Letter 1170. The agency leans on three of its four "business of banking" factors weighing "strongly in favor" of permission. There is no carve-out, no pilot, no sandbox — it is simply confirmed as part of what national banks are allowed to do.

The settlement-default risk the bank inherits is described as "nominal." That is the legally important word. Once the OCC frames a crypto activity as carrying only nominal risk, the regulatory perimeter that applied to the entire prior generation of bank-crypto rulemaking — capital surcharges, supervisory expectation letters, FedNow-style operational reviews — collapses into routine examination.

For context, IL 1188 was preceded by IL 1186 on November 18, 2025, which separately authorized national banks to pay blockchain network fees and hold the small principal balances of crypto needed to do so. Together, the two letters establish that a national bank can custody crypto, transact crypto for customers, and pay the gas to make the transactions land — the full stack a corporate-treasury or retail customer needs from their primary bank.

Why the MSB exemption is the actual breakthrough​

The reason Wells Fargo, Citi, and JPMorgan have not been competing with Coinbase and Robinhood for retail crypto trading is not technical. It is the federal Bank Secrecy Act. Most non-bank firms that buy and sell crypto for customers fall under FinCEN's "money transmitter" and "money services business" categories, with all the registration, state-by-state licensing, and BSA compliance overhead that brings.

The BSA explicitly excludes banks from the MSB definition. That has always been true, but until IL 1188 the OCC had not made clear that an in-bank crypto trading desk would benefit from the carve-out — supervisors could and did read prior guidance as requiring banks to push the activity into a separately licensed subsidiary. The 2020-2022 Brian Brooks-era guidance attempted this clarity and was partially walked back during the Hsu acting-chairman period; IL 1188 finishes the job that was started.

The competitive consequence is asymmetric. Coinbase, Kraken, and Gemini have spent years and tens of millions of dollars building money transmitter licenses across all 50 states, plus FinCEN registration, plus BitLicense, plus international equivalents. A national bank inherits the equivalent of that stack at near-zero marginal cost the day it opens its crypto trading desk. The bank's federal charter pre-empts state-by-state licensing for permissible banking activities, and the OCC's interpretive letter is the keystone that says crypto trading is one of those activities.

The GENIUS Act stablecoin framework that just closed for comment​

While the riskless-principal letter sits in the structural foundation, the rule everyone is actively watching is the OCC's Notice of Proposed Rulemaking implementing the GENIUS Act, published February 25, 2026. The 60-day comment window closed May 1.

The proposal does five things that matter for the bank-crypto integration story:

  1. Reserve composition rules. Every payment stablecoin in circulation must be backed dollar-for-dollar by reserves held separately from the issuer's own funds. Eligible reserves are US cash, insured deposits, short-term Treasury notes, government money-market funds, and tokenized versions of the same.
  2. Custody perimeter. Only national banks, federal savings associations, federal branches of foreign banks, and federally licensed payment-stablecoin issuers can serve as covered custodians for stablecoin reserves, pledged stablecoins, or private keys held on behalf of others.
  3. Yield prohibition. No interest, no rebates, no rewards programs that meaningfully echo yield. The American Bankers Association and 52 state banking associations filed a joint comment letter urging the OCC to harden this language even further to head off "stablecoin rewards" workarounds.
  4. Federal preemption of state issuers. Larger state-licensed issuers move into federal oversight, eliminating the patchwork that previously let issuers pick the most permissive state regulator.
  5. Foreign-issuer perimeter. Tether, Circle's offshore entities, and any non-US issuer touching the US distribution channel must clear an OCC recognition process.

The 200+ public-comment questions the OCC seeded into the NPRM signal that the agency expects substantial back-and-forth before a final rule, but the core design — banks issue, banks custody, banks distribute, no yield — is already locked. The rule's center of gravity is exactly where IL 1188's center of gravity is: putting the licensed national-bank rail at the heart of the stablecoin stack.

Why this lands now: the bank-side filings tell the story​

If IL 1188 had landed in 2022, it would have been a curiosity. Landing in late 2025 with the GENIUS Act framework about to lock in, it is a starter pistol. The bank-side filings since December tell you the largest US institutions read the letter the same way:

None of these moves make sense in isolation. Together with IL 1188 and the GENIUS Act NPRM, they form a coherent stack: the OCC clears the activity, the GENIUS framework defines the product, and the four largest US banks build the distribution.

What changes operationally in Q2 2026​

For corporate treasurers, the pitch from a relationship bank changes from "we can refer you to a custodian for crypto exposure" to "we offer custody, on-ramp/off-ramp, and 24/7 stablecoin settlement directly through your existing cash-management portal." For the first time, a Fortune 500 CFO can open a stablecoin balance, settle a cross-border supplier invoice, and reconcile it against a primary-bank statement without ever touching a crypto-native fintech.

For the existing crypto exchanges, the competitive pressure goes vertical. Coinbase's institutional business has been the fastest-growing segment of its revenue base; that growth was always premised on banks not being allowed in the lane. With IL 1188 plus charter approvals — Coinbase itself received conditional national trust bank approval on April 2, alongside BitGo, Paxos, and others — the regulatory moat that protected crypto-native institutional business shrinks fast.

For Tether and Circle, the GENIUS Act framework's foreign-issuer perimeter combined with bank-issued domestic stablecoins creates a two-front competitive squeeze. Tether's USAT launch on January 27, 2026 was an explicit acknowledgment that the offshore USDT footprint cannot, by itself, compete for US institutional flow under GENIUS. Circle's compliance-first positioning becomes less of a unique selling proposition the moment Wells Fargo, Chase, Citi, and BofA each issue their own.

The infrastructure shift this implies​

The technical surface a bank needs to ship a stablecoin product is unrecognizable from the surface a typical mid-market bank IT shop has built out. Real-time on-chain transaction monitoring, multi-chain RPC and indexing, sanctions and OFAC screening on every wallet address, programmable settlement APIs, and qualified-custody-grade key management all become first-class banking infrastructure rather than crypto-vendor add-ons.

The big four banks will mostly buy this rather than build it. The Aon insurance settlement above ran on standard public-chain infrastructure; bank-issued stablecoin products will need the same RPC reliability, indexing, and compliance layers that every regulated crypto issuer already buys. The 36 stablecoin license applications pending with the Hong Kong Monetary Authority point to a global pattern: every regulated stablecoin issuer needs the same plumbing, and that plumbing is increasingly the constraint, not the regulation.

BlockEden.xyz provides enterprise-grade RPC, indexing, and transaction infrastructure for stablecoin issuers and institutional builders across 25+ chains. Explore our API marketplace to build on infrastructure designed for the bank-grade products coming online in 2026.

Why the timing is the story​

The under-noticed move in US crypto policy is rarely the headline rule. The CLARITY Act has slipped from April to May markup with Polymarket odds dropping from 64% to 47%. The SEC's covered-UI exemption took most of the regulatory-clarity oxygen in mid-April. Treasury's FinCEN-OFAC stablecoin AML NPRM consumed the compliance press cycle. Each of those rules matters, but each will require months of follow-on rulemaking before it changes a single bank product roadmap.

IL 1188 is different precisely because it is small, dry, and operational. It does not need a markup, a comment period, or a follow-on rule. It is in force. The May 1 close of the GENIUS Act comment period removes the last "we'll wait for the regulators" excuse. A bank that wanted to build stablecoin products had a complete legal foundation as of December 9, 2025; today it has the complete product framework. The next move is product launches, and the joint-stablecoin and trademark filings strongly suggest those launches arrive before the end of Q3 2026.

The structural prediction that follows: by year-end 2026, a meaningful share of US corporate-treasury stablecoin balances sits inside relationship-bank products rather than in Coinbase Prime, Anchorage, or Fireblocks accounts. The crypto-native infrastructure providers do not disappear — they sell more shovels than ever — but the customer of record shifts up the stack to the banks. The riskless-principal letter is the small print that lets this happen, and Q2 2026 is the quarter the small print becomes the headline.

Sources​

Share on Twitter