Fintech & digital payments rules in United States (2026)

President Trump signed the Guiding and Establishing National Innovation for U.S. Stablecoins Act, creating the first comprehensive federal licensing framework for payment stablecoin issuers. It mandates 100% liquid-asset reserves, monthly public reserve disclosures, and subjects issuers to Bank Secrecy Act obligations, with OCC, Fed, and FDIC sharing supervisory authority; it explicitly excludes stablecoins from securities classification.

President Trump signed an executive order creating a Strategic Bitcoin Reserve capitalised with government-forfeited BTC and a separate Digital Asset Stockpile for other cryptocurrencies, directing Treasury and Commerce to develop budget-neutral acquisition strategies. The order formalises digital assets as government reserve holdings and signals a structural shift in U.S. sovereign digital-asset policy.

The executive order established a Presidential Working Group on Digital Asset Markets chaired by the AI & Crypto Adviser, prohibited development of a U.S. CBDC, and directed agencies to rescind guidance deemed hostile to the crypto industry; simultaneously, the SEC rescinded SAB 121, removing the balance-sheet liability treatment that had blocked banks from offering digital asset custody services.

The CFPB finalised a rule classifying providers of general-use digital payment applications handling ≥50 million annual U.S.-dollar transactions — including Apple Pay, Google Pay, PayPal, Venmo, and Cash App — as 'larger participants' subject to routine CFPB examination for EFTA/Reg E, GLBA privacy, and UDAAP compliance; the first time nonbank payment apps faced standing federal supervisory scrutiny. Congress repealed the rule via the Congressional Review Act in early 2025.

The CFPB finalised its Personal Financial Data Rights rule under Dodd-Frank §1033, requiring banks, credit unions, and payment apps to give consumers and authorised third-party fintechs free access to account and payment-initiation data on demand. The rule enables pay-by-bank and data portability for open banking but was subsequently stayed in litigation and placed under reconsideration by new CFPB leadership, with revised rulemaking initiated in 2025.

FinCEN assessed a landmark $1.3 billion civil penalty against TD Bank for systemic Bank Secrecy Act violations, including failures to monitor illicit transactions flowing through digital payment channels; the combined DOJ/OCC/FinCEN settlement exceeded $3 billion, the largest BSA enforcement action in U.S. history. The case established that BSA/AML obligations apply with full force to modern digital and real-time payment rails.

FinCEN invoked Section 311 of the USA PATRIOT Act to propose designating all transactions involving cryptocurrency mixing as a class of primary money laundering concern — the first use of Section 311 against a category of transactions rather than a specific institution. Any U.S. financial institution touching mixed crypto would face enhanced due-diligence obligations, directly affecting fintech payment firms handling digital assets.

The Federal Reserve launched FedNow, a perpetually available interbank instant-payment service enabling sub-10-second credit transfers between any participating U.S. depository institution at any time of day or night. FedNow provides a Fed-operated complement to the privately-run RTP network and creates the public-sector infrastructure backbone on which fintechs and banks can build real-time payment products.

The CFPB announced it was invoking a previously unused provision of Dodd-Frank allowing examination of any nonbank financial company whose conduct poses risk to consumers, regardless of asset size — directly targeting large payment apps and digital lenders that had operated outside routine federal examination. The move extended bank-equivalent supervisory oversight to the fintech sector for the first time.

The OCC began accepting fintech charter applications that would grant fintechs a federal bank charter with nationwide preemption of state money-transmitter licensing — a potential alternative to the state-by-state licensing patchwork covering 50+ jurisdictions. The charter faced immediate legal challenge from the New York DFS, and federal courts' rulings that deposit-taking is required for the 'business of banking' stalled uptake, but the initiative reshaped the licensing debate.

FinCEN issued the first federal regulatory guidance on digital currencies, classifying administrators and exchangers of convertible virtual currency as money services businesses subject to FinCEN registration, AML programme requirements, and suspicious-activity report filing obligations. This foundational guidance established the BSA/AML compliance framework that continues to govern crypto payment firms, exchanges, and wallet providers.

The Dodd-Frank Wall Street Reform and Consumer Protection Act created the CFPB as the primary federal consumer financial regulator and transferred Regulation E rulemaking from the Federal Reserve. The Durbin Amendment capped debit interchange fees for issuers with over $10 billion in assets, structurally lowering merchant costs and enabling Square, Stripe, and PayPal to offer stable take-rate pricing — catalysing the modern U.S. payments fintech industry.

Congress enacted the EFTA to establish consumers' rights and financial institutions' obligations for all electronic fund transfers — covering ATMs, debit cards, ACH, direct deposit, and later mobile payments — including error-resolution procedures, unauthorised-transfer liability limits, and disclosure requirements. Implemented through Federal Reserve Regulation E (subsequently transferred to the CFPB), EFTA remains the primary federal statute governing digital consumer payment products.