United States – New York

The mechanics matter for market participants: a reserve-concentration limit constrains how issuer reserves may be composed, while a risk-management mandate imposes governance expectations on top of existing safety-and-soundness supervision. Framed against the federal backdrop, this is less a wholesale rewrite than a bridge — DFS is not discarding its own licensing architecture but is instead building a certification lane that lets in-scope issuers demonstrate GENIUS Act equivalence without leaving the state system.

That certification track supplements, rather than replaces, the base regime. BitLicense (23 NYCRR Part 200): Remains in force as the base licensing instrument for virtual-currency business activity. Covered businesses apply for a BitLicense or an approved Banking Law charter, in DFS's own framing of the regime; this baseline status carries an Assessed confidence rating on Tier-4 sourcing, reflecting its standing rather than newly-filed nature.

The state track sits alongside, not in place of, the federal one. Federal stablecoin framework took effect July 18, 2025; issuers below $10bn threshold still use state licenses/charters — precisely the population NY's new certification pathway is designed to formalise within DFS's supervisory perimeter. That claim, too, is Assessed-confidence, Tier-4 sourced, and rated HIGH impact by the Interpreter. The interaction between the two layers is the thing to track: a federal framework that already exists in force, and a state track that is still only proposed. Until the NY rule is finalised, the effective compliance reality for below-threshold issuers remains the state licensing regime as it stands today — BitLicense and the limited-purpose trust charter — with the certification proposal representing a forward commitment rather than a present obligation.

The strategic read on the filing is unambiguous. New York's DFS stablecoin certification proposal positions the state as an early mover for GENIUS Act state-regime certification, likely setting a template other states will reference. This is a High-confidence, HIGH-impact judgment resting on a single Tier-1 claim, and it frames NY's move less as a compliance update than as a first-mover bid to shape how other GENIUS Act state regimes are built. Institutionally, this places DFS in a position other GENIUS Act state regulators are likely to study closely, extending the state's established first-mover posture in virtual-currency licensing into the federal-preemption era of stablecoin regulation.

Outlook

Two forward milestones anchor this module. NYDFS GENIUS Act stablecoin certification rule expected finalization is provisionally dated to 2026-Q4, at quarter-level uncertainty and High confidence, per the regulatory horizon tracker. Ahead of it, Public comment period on NY DFS stablecoin certification proposal is expected in 2026-Q3, at the consultation stage. NY DFS regulation builds on the existing stablecoin framework, aligning with GENIUS Act federal certification requirements, per the tracker's own account of what changes. Both milestones share Tier-1 sourcing traced to the same DFS press release, though the finalization date carries a fuller consultation runway between now and Q4: the Q3 comment window is the point at which industry feedback — including from Paxos Trust Company, Gemini Trust Company, which Remain principal NY-supervised trust-chartered stablecoin issuers under the LPTC regime — would ordinarily surface before a final rule is adopted. Watch for the comment window to open before the Q4 finalization target, and for other GENIUS Act state regimes to reference NY's approach once the rule is finalised.

The analytical significance sits one level up from the individual filings. The extension of NY's unlicensed-gambling enforcement theory to crypto exchanges (Coinbase, Gemini) and a CFTC-registered exchange (Kalshi) creates a novel state-level compliance exposure vector for payments-adjacent platforms distinct from federal licensing. Read together, the two filings show an escalation in scope rather than merely in dollar terms: the earlier action targeted regulated crypto exchanges offering prediction-market-adjacent products, while the newer action was a Kalshi $36B civil suit filed following failed federal injunction bid — meaning the state theory is now being pressed against a CFTC-registered platform even after that platform's own attempt to enjoin state action at the federal level did not succeed. Pursuing the CFTC-registered entity under the same state theory used against the exchanges signals that DFS/AG coordination on this front is not treating federal registration, or a federal-court setback for the state, as a shield.

Both of the named claims in this module carry a dashboard-tier (D) content designation rather than standing-brief (SB) status, reflecting their nature as discrete, dated enforcement filings rather than an evolving policy framework — consistent with how this module distinguishes conduct/promotions enforcement activity from the licensing-and-authorisation policy track carried in the adjacent module. Both are also explicitly nonbank-side: Coinbase and Gemini are recorded with bank_or_nonbank status nonbank, placing the exposure squarely on the nonbank PSP/exchange side of the conduct-regulation ledger rather than on bank-charter entities.

The jurisdiction-level read reinforces the module-level one. New York's risk trajectory is recorded as escalating and its regulatory direction as tightening, with an overall risk level of ELEVATED, and this module — together with the licensing-track proposal and the correspondent-banking enforcement pattern — is named among the primary domains recorded as W1a, W1b and W12 driving that read.

None of this constitutes a compliance instruction for platforms operating in the state; it is a record of where enforcement lines are currently being drawn and where the underlying legal question — the reach of state gambling law over federally-regulated derivatives and virtual-currency exchange activity — remains open pending the 2027 merits ruling.

Outlook

The forward marker for this module runs on a longer clock than the licensing-track proposal covered elsewhere this cycle. Kalshi $36B NY litigation — merits ruling on state-gambling-law vs CFTC-preemption defence is the horizon item to track, expected in 2027 at year-level uncertainty. Litigation outcome will determine whether federally-regulated derivatives exchanges are shielded from state gambling law, and the eventual ruling will settle — at least for New York — whether the state-gambling-law theory now being applied to Kalshi, Coinbase and Gemini can survive a CFTC-preemption defence. Until then, expect the AG's office to continue treating the theory as live and to potentially extend it to other prediction-market or crypto-exchange platforms operating in the state.

This state regime is now overlaid by the federal GENIUS Act, signed into law July 18 2025, establishing the first US federal payment-stablecoin framework. Some NY-regulated issuers — Paxos, Circle, Ripple — have applied for OCC national trust charters. However the Act permits state-chartered issuers with $10bn or less in issuance to remain under state supervision where the state framework is certified substantially similar, so any shift to federal oversight is not automatic or universal. The state-versus-federal supervision choice is now a strategic decision for NY issuers, not a forced conversion. This claim was de-overstated in interpretation, with the original framing that OCC charters convert or replace NYDFS oversight corrected and held below Confirmed.

Outlook

Implementation of the GENIUS Act state-framework certification will determine, through 2026, whether NY-supervised issuers (at or below $10bn) remain under NYDFS or migrate to federal supervision. This is the defining forward question for the module and is tracked in the regulatory horizon.

The Second Amendment (effective November 1 2023) added operational-resilience and BCDR scope, heightened Class A Company requirements, ransomware and extortion-payment notice obligations including a 24-hour ransom-payment notice, and CISO-plus-CEO material-compliance certification. The final phased requirements — universal MFA and written information-system asset-inventory procedures — took effect November 1 2025, with a limited MFA exemption for smaller covered entities. This was a recent, binding compliance step taken during the trailing window before baseline collection.

Outlook

With the final phase-in now in force, the W3 baseline is fully established. Forward attention should track NYDFS's reported 2026 cybersecurity priorities, which may tighten requirements further across the covered population that spans both bank PSPs and non-bank transmitters and VC businesses.

Outlook

The §518 surcharge regime is baselined and stable. The cross-cutting operational detail of how processors implement compliant surcharging is carried in the W8 merchant-acquiring module, where it intersects with onboarding and POS configuration cost.

An emerging corridor channel is scheme-rail stablecoin settlement. Mastercard is rolling out stablecoin settlement across multiple blockchains with initial deployments in the US and Latin America, signalling stablecoin rails as an emerging corridor settlement channel for NY-regulated entities. This signal carries a verify-before-publish flag: the cited source is stale and the current state is a June 2026 expansion across additional blockchains, so confidence is held at Assessed pending re-anchoring to the more recent announcement.

Outlook

The federal remittance floor is durable. The live variable is whether scheme-operated stablecoin settlement matures into a material corridor channel for NY-supervised entities, which should be re-anchored to the current June 2026 expansion before any forward claim is published.

The NY MTL is one of the 'Big 3' MTLs alongside California and Texas, difficult to obtain but among the most valued in the US. Major crypto firms — Bitfinex, Kraken, Paxful — departed NY when the BitLicense was instituted in 2015, shaping a concentrated high-bar market; recent BitLicensees include Galaxy (May 2026) and Anchorage (late 2024). The high bar is itself a competitive moat for incumbents.

Outlook

Market structure is consolidating, with the VCE count discrepancy carried as an open data gap. Structural M&A trends feeding this consolidation are analysed here, while discrete announced deals are carried in W13.

On settlement-access litigation, courts have upheld Federal Reserve Bank discretion over access: the Tenth Circuit upheld the master-account denial in Custodia Bank v. Federal Reserve Board, and the Second Circuit upheld the New York Fed's account termination in Banco San Juan Internacional over BSA/AML concerns. This judicial confirmation of Fed discretion is the legal backdrop to the 2025-26 nonbank settlement-access wave and constrains NY trust-charter firms' Fed-rail ambitions.

Outlook

Enforcement intensity is a standing feature of operating in NY. The master-account precedents bridge directly into W12, where the practical contours of nonbank settlement access are being tested through new account structures.

This module's standing position rests on T3-heavy sources for the §518 operational detail, even though §518 itself is T1-anchored elsewhere, so module confidence is Assessed. Merchant-acquiring operations and US state-level divergence are flagged WPM under-index vectors.

Outlook

The acquiring picture is established but under-evidenced on operational detail relative to the dominant digital-asset coverage. Strengthening primary-source anchoring on processor-level compliance configuration is the priority for the next cycle.

The live product example is on-chain settlement under NY supervision. Mastercard's US money transfer subsidiary, MTS US, was granted a NYDFS BitLicense allowing it to support settlement using stablecoins and tokenized deposits. A major scheme building on-chain settlement under NY supervision validates the BitLicense as a product-innovation channel for tokenized-deposit settlement.

Outlook

The supervised-build-out model is the standing characterisation of NY product innovation. The MTS US BitLicense (granted May 27 2026) cross-references the commercial event carried in W13 and illustrates how the prior-approval surface accommodates scheme-led on-chain settlement products.

There is no NY mandatory APP-fraud reimbursement regime equivalent to the UK PSR scheme; redress runs via DCP and the Attorney General, the CFPB remittance rule, and DFS channels.

Outlook

The consumer-protection module is tightening through complaint-reporting and insolvency-custody safeguards, both recent. The absence of a NY APP-fraud reimbursement mandate is a structural distinction from the UK and is carried as an under-evidenced vector to monitor.

Any original illicit-finance, sanctions-evasion or financial-crime analysis of NY VC platforms is a cross-reference to the Financial Intelligence Monitor, not a WPM conclusion.

Outlook

The payments-context AML signal — state VC transaction-monitoring enforcement over a federal BSA layer — is baselined via Sentinel. Original analysis remains routed to FIM, and the bank-versus-non-bank supervision overlay is the structural feature to track.

NYDFS continues active AML/cybersecurity enforcement against money-transmitter/VC licensees (Block $40M; Robinhood Crypto $30M precedent), evidencing a persistent supervisory-expectation gap. Read against the module's structural spine, that gap is instructive: it is nonbank money-transmitter and virtual-currency licensees — not bank-chartered correspondent institutions — that are absorbing the visible enforcement load in New York's payments-supervision architecture this cycle. NYDFS's sequential AML/cybersecurity fines against Robinhood Crypto and Block Inc. establish a repeatable supervisory playbook for transaction-monitoring and BSA/AML program deficiencies among licensed fintech/crypto platforms, which — on the access-asymmetry spine this module tracks — reads as DFS calibrating a nonbank-specific supervisory template rather than extending the same enforcement intensity to bank-charter correspondent relationships in the same period.

The instruments at issue differ slightly across the two actions: Block Inc.'s Cash App product is tagged instrument_type account-to-account, reflecting its peer-to-peer and person-to-person transfer rail, while the Robinhood Crypto action is tagged instrument_type other, reflecting the virtual-currency exchange activity underlying that supervisory finding. Both entities are recorded as entity_kind PSP in the underlying claims — payment/exchange service providers rather than deposit-taking banks — which is the concrete expression, in this cycle's evidence, of the bank/nonbank access line this module exists to track: PSPs and VC exchanges face a distinct, and on this evidence more active, AML/cybersecurity enforcement track than bank-chartered correspondent counterparties in the same New York supervisory perimeter this cycle.

Both actions sit at Assessed confidence on Tier-3 sourcing in the Interpreter's structured claims, with impact rated ELEVATED in each case — a step below the HIGH-impact, Tier-1 licensing and litigation items covered elsewhere this cycle, but still sufficient to move this module's status to material_change and its trajectory to escalating this cycle. This is consistent with the guardrail this monitor observes across modules: illicit-finance use of any instrument is a cross-monitor (FIM) concern, not a WPM conclusion in itself, and the AML-programme deficiencies cited in both actions are logged here strictly as payments-supervision and market-access findings.

Outlook

No forward-dated regulatory milestone specific to correspondent-banking or settlement access was identified for New York this cycle; the regulatory horizon items surfaced this cycle sit in the licensing (W1a) and conduct (W1b) modules rather than here. This module's near-term trajectory is instead carried by the enforcement pattern itself and by the jurisdiction-wide read: New York's trajectory as escalating and its regulatory direction as tightening apply to this module as one of the named primary domains. Expect further AML/cybersecurity enforcement actions against nonbank money-transmitter and virtual-currency licensees to be the more likely near-term signal in this module than any change to bank-side correspondent access arrangements, on the evidence available this cycle.

On the charter side, on December 12 2025 the OCC conditionally approved five digital-asset firms — Circle, Ripple, Paxos, BitGo and Fidelity Digital Assets — for national trust bank charters, with Paxos, BitGo and Fidelity's NY state charters converting to national ones. This charter-migration wave is the structural payments event driving the 2025-26 settlement-access shift. On funding, VC investment in stablecoin-related companies exceeded $1.5 billion in 2025 (up from under $50 million in 2019), flowing to firms such as Tempo and MeshConnect, with Paxos a $2.5 billion VC-backed issuer minting stablecoins for PayPal and Fiserv.

Outlook

Commercial consolidation into NY-supervised stablecoin and crypto-payments infrastructure is accelerating. The Zero Hash bid remains rumoured pending NYDFS change-of-control approval, and the funding trend signals capital concentration in the segment NY regulates most heavily — both carried forward as live commercial-intelligence threads.