GENIUS Act for US iGaming: USDC, USAT In, USDT on a Clock

The GENIUS Act became Public Law 119-27 on July 18, 2025, and most iGaming-side coverage of it has stayed in the background-news category. The question for a US-licensed cashier in May 2026 is sharper. Which stablecoins survive the rule rollout, which integrations to run today, and what to rebuild before the prohibition on non-PPSI tokens activates on July 18, 2028. The Paysafe and MoonPay launch on April 8, 2026 is the first live test case for that planning window, and it accepts both USDC and USDT today. The fact that it does both, ten months after the Act became law, is itself the reveal about how the rule rollout is shaping operator-side decisions.

Three things this article does that the legal-memo coverage does not. It separates the dates that bind an issuer from the dates that bind an operator. It maps the live status of USDC, USAT, and USDT against what each one will actually clear under the rule. And it argues that monthly reserve disclosure under Section 4 of the Act flips the operator-side counterparty risk input from brand reputation to audit cadence as the underwriting variable.

Three dates that bite the US cashier

Three dates structure the planning window. The first is rulemaking. Federal payment stablecoin regulators (OCC, FDIC, NCUA), the Treasury Secretary, and state regulators are required to publish implementing regulations within 12 months of enactment, meaning by July 18, 2026, per Latham Watkins' GENIUS Act memo. As of early May 2026, none has gone final. OCC published its broad framework proposal in March 2026. FDIC published its substantive standards proposal on April 8, 2026 with a 60-day comment period. FinCEN and OFAC published the AML and CFT and sanctions program proposals on the same day. All are notices of proposed rulemaking, and final rules will follow public-comment review.

The second date is when the Act itself takes effect. Section 21 specifies the earlier of (i) 18 months after enactment or (ii) 120 days after final rules, per Sullivan and Cromwell's analysis of the Senate-passed text. The 18-month leg lands on January 18, 2027. The 120-days-after-rules leg lands later if rules slip past July 2026, which they appear poised to do in at least some agencies given the comment-period schedule. For practical operator planning, January 18, 2027 is the floor.

The third date is the prohibition. Section 3 of the Act prohibits any person other than a PPSI from issuing a payment stablecoin in the US, and prohibits digital asset service providers from offering or selling a payment stablecoin to a US person unless the issuer is a PPSI. The prohibition takes effect three years after enactment, per AmbCrypto's reading of the statutory text and the bill text on Congress.gov. That date is July 18, 2028. It is the only operator-relevant deadline in the cascade. The first two dates govern the regulatory plumbing. The third governs the cashier.

The relevant planning window for a US-licensed iGaming operator is therefore the 26 months between May 2026 and July 18, 2028. During that window, USDT settlement to US players is permitted at a digital-asset-service-provider layer, and the Paysafe and MoonPay rail accepts it. After that window, unless Tether secures one of the two foreign-issuer paths the Act provides, USDT settlement to US persons becomes prohibited at the gateway layer. That is the cliff this article is named after.

USDC, USAT, USDT: where each one clears

The three dollar-pegged stablecoins iGaming operators see at the cashier each have a different path through the GENIUS framework. The table below sets the dimensions; the paragraphs below it explain the fit.

USDC sits closest to compliant by construction. Circle has been publishing monthly attestations from Deloitte for years, holds reserves at BNY Mellon, and pursued a federal trust charter through OCC alongside its existing NYDFS BitLicense, per Circle's own GENIUS Act guidance. The reserve composition (cash, overnight Treasury repo, short-duration Treasuries) maps directly onto Section 4(a) of the Act, which permits cash, IDI deposits, short-term Treasuries, Treasury reverse repos, and money market funds. USDC is not yet a PPSI because no entity is yet a PPSI in May 2026, but the path from Circle's current operating model to PPSI status is the shortest of any incumbent issuer.

Tether built USAT specifically for the GENIUS regime. Launched January 27, 2026, USAT is issued by Anchorage Digital Bank, N.A., the first OCC-chartered federal digital asset bank, with Cantor Fitzgerald custodying the collateral. The architecture exists to satisfy the PPSI structural requirements at issuance rather than retrofit later. Anchorage stated publicly it expects to qualify for PPSI status once final rules go effective. USAT does not have the secondary-market depth of USDC, and operator-side adoption in May 2026 is thin, but the legal posture is the cleanest of any token launched after the Act was signed.

USDT is the cliff. Tether Limited is foreign-domiciled (originally BVI, with corporate restructuring placing parts of operations in El Salvador and the UAE), and the GENIUS Act's foreign-issuer carve-out requires a Treasury determination that the issuer's home jurisdiction has a "comparable regulatory and supervisory framework," plus the issuer's demonstrated capacity to comply with US lawful orders including asset freezes and sanctions, plus OCC registration with US-held reserves. Treasury has not made a comparable-jurisdiction determination for any non-EU jurisdiction as of May 2026, and Tether's reserve composition is approximately 86 percent GENIUS-aligned per the Q1 2026 BDO attestation, with roughly 14 percent of liabilities sitting in gold, bitcoin, and secured loans that the Act does not permit. Tether has 26 months to either change reserve composition wholesale, secure a comparable-jurisdiction determination from Treasury, or build a new US-domiciled entity. None is a small project, and the realistic path looks like USAT absorbing US-facing volume while USDT continues serving non-US markets.

The Paysafe and MoonPay test case (April 2026)

Paysafe announced its "Pay with Crypto" product on April 8, 2026, and the launch is the first live deployment of crypto deposits across regulated US iGaming and daily fantasy sports operators, per SBC Americas' coverage and Paysafe's own announcement. MoonPay supplies the conversion infrastructure through its Commerce Checkouts product. Paysafe handles the merchant side and operates the cashier integration, processing the resulting US-dollar deposits across its $167 billion 2025 transaction footprint.

The integration shape is what an operator needs to understand. A player at a US-licensed cashier selects Pay with Crypto, connects a custodial or self-custody wallet (MetaMask, Coinbase Wallet, and Trust Wallet are supported at launch), and MoonPay executes an instant conversion from the deposited token into US dollars. The dollar amount funds the player's account in fiat. The operator never holds the stablecoin. The MID is a card MID equivalent on the operator side, with MoonPay sitting between the wallet and the operator's bank as the digital asset service provider of record.

The accepted-token list is the operator-relevant detail. At launch, Pay with Crypto accepts USDC, USDT, Bitcoin, Ethereum, and a rotating selection of top-50 altcoins. USDC and USDT are both supported on day one of the integration, in May 2026, ten months after the GENIUS Act became law. That is the actual signal. The integration shipped against the 26-month planning window, not against the January 2027 effective date or some earlier prohibition framing. MoonPay and Paysafe are running with USDT on the assumption that the rail can support the token until July 2028 and that the rebuild path is manageable inside that window.

Two consequences for an operator picking up the rail in mid-2026. First, US-player USDT volume on Pay with Crypto produces fiat dollars to the operator's account; the operator's regulator-facing exposure is to the dollar, not to the stablecoin. The MoonPay layer absorbs token-level risk for the duration of the conversion. That means the GENIUS Act prohibition does not directly prohibit the operator from accepting Pay with Crypto deposits funded by USDT, because the operator is not "offering or selling" a stablecoin to the US person. It is receiving a dollar deposit from a digital asset service provider that converted on the player's behalf.

Second, MoonPay's posture as a digital asset service provider does land within Section 3's prohibition scope. After July 18, 2028, MoonPay cannot offer USDT to a US person at the wallet-to-cashier handoff unless Tether is a PPSI or qualifies under the foreign-issuer carve-out. The likely shape of the post-2028 product is that MoonPay drops USDT from the supported-tokens list at the US-cashier checkout and substitutes USAT, or leaves only USDC, BTC, and ETH. Operators integrating Pay with Crypto today should treat the USDT line as a 26-month feature, not a permanent rail.

The Paysafe and MoonPay launch is the test case because it shipped first, accepts both regulatory paths, and reveals what the live integration shape actually looks like before the rule cascade resolves. Operators waiting for "the regulatory dust to settle" before integrating are waiting for July 2028. Operators integrating now are working inside the 26-month window with a known rebuild date.

Reserve disclosure flips the counterparty risk input

The reserve and disclosure regime under Section 4 of the Act reshapes how operators evaluate stablecoin counterparties. The operator-side approach today is mostly brand-driven. The big-name token has the deep secondary market, so its peg holds; the smaller-name token has thinner liquidity and gets a haircut. That model produces decisions like "USDT for breadth, USDC for compliance" and treats reserve composition as something the issuer self-publishes when it wants to.

Section 4 breaks that model. PPSIs must publish monthly reports of reserve composition on their website. The reports must be examined by a registered public accounting firm. The CEO and CFO must certify the reports to regulators and submit to perjury liability for misstatements, per Latham Watkins' summary of Section 4 obligations. Issuers above $50 billion in outstanding stablecoins must additionally publish annual audited financial statements. Custody of reserves is restricted to entities subject to federal or state banking-regulator oversight, and yield or interest payments to stablecoin holders are prohibited.

The operator-side implication is that the input variable for stablecoin counterparty underwriting flips from brand-and-volume to audit-cadence-and-reserve-composition. A US iGaming operator's risk team in 2027 onwards has access to a monthly attestation, signed by a PCAOB-registered firm, with the issuer's CFO on the line for accuracy. That is structural underwriting visibility no current stablecoin gives, including USDC. Circle's existing Deloitte attestations are voluntary; the GENIUS regime makes them mandatory at a tighter cadence, on a defined reserve-composition perimeter, with personal liability for the executives signing. The data quality is different, and the comparison gets quantitative for the first time.

That changes the iGaming operator's specific decisions in three measurable ways. Concentration risk in any one stablecoin becomes a number, not an opinion. Reserve-composition drift between monthly reports becomes a leading indicator the risk team can act on. Audit-cadence delays become a triggering event for restricting acceptance. The math operators run on Tether's 81.5 percent compliance number today is unstructured commentary; the same operators in late 2027 will have monthly audited compositions for every PPSI they accept, and the comparison against thresholds becomes routine treasury work.

The action items between May 2026 and July 18, 2028 fall in a clear sequence:

1. Build a stablecoin acceptance policy with three tiers. PPSI-eligible (USDC, USAT, and any other US-domiciled candidate the operator can identify), foreign-issuer-pending (USDT until Treasury makes a comparable-jurisdiction determination or Tether restructures), and excluded (anything else). Re-evaluate quarterly as final rules ship.
2. Wire your cashier integration to expose the source-token field at deposit time, even if the gateway settles in fiat. Without that field, your treasury team cannot run the concentration-risk math when monthly attestations become available in late 2027.
3. Treat the Paysafe and MoonPay rail as the rebuild template, not the final product. The rail accepts USDT today; assume the supported-tokens list narrows by Q2 2028. Plan player communications and retention treatment for the change.
4. Add reserve-composition deltas to the counterparty-risk dashboard you already run for card acquirers. Monthly attestation drift greater than five percentage points on any covered token, or any audit-cadence delay, should be a flag-review event for treasury.
5. Coordinate with your state regulator (NJ DGE, PA PGCB, MI MGCB, or equivalent) on whether the regulator wants prior approval of stablecoin acceptance or only post-fact reporting. State postures vary, the GENIUS framework does not preempt state cashier-side rules, and the regulators are working through their own positions in parallel.

The GENIUS Act is the rare regulatory cascade that gives operators visibility on the deadline, the obligations, and the architecture, all at once. Operators who plan to July 18, 2028 with the Paysafe and MoonPay rail as a calibration reference, who treat USDT as a 26-month feature rather than a permanent rail, and who add reserve-composition cadence to their counterparty-risk math, will be set up for the post-2028 cashier without an emergency rebuild. The operators who wait for the rules to "settle" are accepting a 2028 emergency rebuild instead.