#
CFPB's Section 1033 (Personal Financial Data Rights / open-banking) rule remains enjoined and under full reconsideration; a new reconsideration NPRM was submitted to OIRA in August 2026. The original phased compliance schedule beginning April 2026 for the largest data providers did not take effect as a binding obligation.
The state Money Transmitter Licence regime imposes an NMLS application, FBI fingerprint checks, surety bonds in the range of roughly $25,000 to $2,000,000 or more, and minimum tangible net worth typically between $100,000 and $500,000; bonds themselves range from $250 in Montana to $500,000 or more in California. This state-level cost divergence is a material and under-indexed factor in US market-access economics for non-bank payment service providers. A licence is required in 49 states, with Montana the canonical exemption case; the sub-national nesting runs from US-FED down to states such as Montana, New York and California. This specification rests on Tier-3 vendor and law-firm sourcing and is asserted at Assessed confidence.
The live development this cycle is the maturation of the Merchant Acquirer Limited Purpose Bank route. Stripe was granted an MALPB charter by Georgia in July 2025, with the application accepted on 31 March 2025, enabling direct Visa and Mastercard access without sponsor banks; the charter is now operative. This corrects an earlier research position that had presented the matter as a pending April 2025 application — the verified position is that the charter was granted and is operative. Direct scheme access without sponsor-bank reliance is a structural shift in non-bank acquiring, mirroring the Fiserv precedent as the first entity to process under an MALPB charter in April 2025. This is a non-bank PI/EMI development: it concerns how a non-bank operator achieves direct scheme access that has historically been mediated by bank sponsors.
Outlook
The MALPB charter route is maturing as a recognised pathway for non-bank acquirers to obtain direct scheme access, and Georgia has now demonstrated the route operationally through both Fiserv and Stripe. State-level money-transmitter divergence remains an under-indexed area: bond and net-worth data is currently sourced from vendor and law-firm guides rather than NMLS primary data, and primary-source confirmation would strengthen confidence above Assessed. The dual federal/state model is established standing knowledge and is unlikely to converge toward a unified regime in the near term.
Licensing, Authorisation & Market Access
The licensing picture for payment stablecoin issuance under the GENIUS Act continues to assemble on a multi-regulator timetable rather than through a single licence. The Office of the Comptroller of the Currency, which has emerged as the most advanced of the three principal implementing regulators, now intends to publish its final GENIUS Act stablecoin-issuer rule by the end of October 2026, moved forward from an earlier November target. This acceleration was attributed to Comptroller Jonathan Gould in remarks made 15 October 2026 at DC Fintech Week, and covers the licensing, activities and prudential-framework conditions applicable to OCC-regulated payment stablecoin issuers.
This single-regulator acceleration should be read against the wider market-access picture rather than in isolation. The statutory effective date for the full GENIUS Act regime remains no later than 18 January 2027, and the OCC's rule, even if finalized on its stated end-of-October target, is one component among several still-unfinished pieces, including Treasury's parallel Section 3 implementing proposal on issuance, offer and sale, which itself closed for comment on 19 October 2026. A prospective issuer seeking market access therefore faces a compliance stack that is converging but not yet complete: the prudential and licensing conditions may settle before the broader statutory framework does, creating a sequencing question for any entity planning to enter the market as a permitted payment stablecoin issuer in the near term.
The acceleration itself is also informative as a signal of regulatory intent. Moving a target date forward, rather than extending it, suggests the OCC views the underlying rule as sufficiently mature to finalize ahead of its own prior schedule, which in turn may put pressure on Treasury and other implementing regulators to similarly firm up their own timetables as the January 2027 statutory deadline approaches. Market participants assessing when a GENIUS Act licence pathway will be fully operable should treat the OCC's rule as the leading indicator rather than the complete picture.
Outlook
Whether the OCC in fact meets its end-of-October 2026 target, as scheduled, is the most immediate marker to watch in this module. Separately, whether Treasury's Section 3 proposal proceeds to a final rule on a comparable timetable, or lags behind the OCC's own schedule, will determine how complete the overall market-access picture is well ahead of the outer 18 January 2027 statutory deadline.
3 earlier distinct update(s)
Licensing, Authorisation & Market Access
Maryland enacted SB0261 as Chapter 21, effective 1 October 2026, altering the definition of money transmitter under the Maryland Money Transmission Act. The amendment excludes a person designated as an agent of a payor, for purposes of that agent's provision of payroll-processing services, from the licensing definition under certain specified circumstances. The effect is to remove a defined category of payroll-processing activity from Maryland's money transmitter licensing perimeter rather than to alter the licensing regime generally.
Outlook
The carve-out is narrow and targeted at payroll-processing agents specifically, so its near-term effect is confined to that business model within Maryland. Watch for whether other states adopt a similar exclusion for payroll-processing agents as they revisit their own money transmitter definitions.
Licensing, Authorisation & Market Access
The Section 1033 open-banking rule, promulgated under the Consumer Financial Protection Act's data-rights provisions, remains procedurally unsettled. A federal court in the Eastern District of Kentucky enjoined CFPB enforcement of the October 2024 final rule while the Bureau conducts a full reconsideration, and as a direct consequence the phased compliance schedule that would have begun in April 2026 for the largest covered data providers did not take effect as a binding market-access obligation. This affects both bank and non-bank participants in the open-banking data-sharing chain: the rule as originally written applied to data providers regardless of charter type, so the injunction's practical effect is to leave the entire covered population, banks and non-bank account-information intermediaries alike, without an enforceable compliance deadline.
Rather than abandoning the underlying mandate, the CFPB has continued to advance a revised approach. In August 2026 the Bureau submitted a new proposed rule, Personal Financial Data Rights Reconsideration, to the Office of Information and Regulatory Affairs for review, a step that precedes Federal Register publication and public comment. This signals institutional intent to preserve some form of consumer financial-data access right, even as the specific compliance architecture, timelines, and scope for both bank and non-bank market participants remain to be determined through the reconsideration process. A lower-tier tracker separately corroborated that the original April 1, 2026 deadline for the largest data providers lapsed without triggering enforcement, consistent with the injunction.
Outlook
The determinative event to track is the Federal Register publication of the CFPB's reconsideration NPRM, which will disclose the substantive scope of any revised open-banking access obligations. Until that publication and the subsequent comment period conclude, market-access planning for both bank and non-bank data providers in the open-banking space cannot be anchored to a fixed compliance date.
Licensing, Authorisation & Market Access
The United States operates a dual federal/state licensing model for payment firms that has no unified EMI/PI equivalent to the UK or EEA regimes. At the federal layer, money transmitters and other money services businesses (MSBs) must register with FinCEN under the Bank Secrecy Act; at the state layer, the same firms typically also require a Money Transmitter Licence (MTL) in each state where they operate, with 49 states requiring an MTL and only Montana exempting most money transmission activity from state licensing — the canonical case of US federalised divergence. Critically, FinCEN registration via Form 107, which must be completed within 180 days of commencing MSB activity, does not substitute for state licensing: operators need both tracks simultaneously to be compliant nationally.
The state MTL track itself carries a materially heavier compliance burden than federal registration alone. Applicants must complete NMLS applications, undergo FBI fingerprint background checks, and post surety bonds ranging from approximately $25,000 up to more than $2,000,000 depending on the state, while maintaining minimum tangible net worth typically between $100,000 and $500,000. Bond requirements alone diverge enormously by state — from as little as $250 in Montana to more than $500,000 in California — making state-level cost divergence a materially under-indexed factor in US market-access economics for non-bank payment service providers assessing where to establish operations.
Set against this fragmented backdrop, the clearest structural development of the period is Stripe's Merchant Acquirer Limited Purpose Bank (MALPB) charter from the state of Georgia. Stripe's application was accepted March 31, 2025, and — correcting earlier reporting that had characterised the charter as still pending — the charter was in fact granted in July 2025 and is now operative. The MALPB charter enables Stripe to obtain direct Visa and Mastercard scheme access without relying on a sponsor bank, mirroring the precedent set by Fiserv, which became the first entity to process transactions under a MALPB charter in April 2025. This is a structural shift in how non-bank acquirers can access card networks in the United States, reducing dependence on the sponsor-bank model that currently defines market access for the large majority of non-bank PSPs.
Outlook
The MALPB charter route is likely to mature further as a market-access channel for other non-bank acquirers seeking to replicate Stripe's and Fiserv's direct-access model, while the underlying federal/state licensing patchwork — and its associated state-by-state bond and net-worth divergence — remains a standing structural feature of US market entry with no unification currently in prospect. Montana's exemption will continue to stand as the reference case for federalised regulatory divergence in this space.
1 further periodic run re-emitted the standing brief unchanged and is not shown.
Sources and findings (5)
- T2Wolters Kluwer / FinCEN — At the federal level, money transmitters are treated as Money Services Businesses (MSBs); with few exceptions, every MSB must register with the US Treasury via the BSA e-Filing System using FinCEN Form 107 within 180 days of establishment.
- T1FinCEN Fact Sheet on MSB Registration Rule — FinCEN MSB registration does NOT satisfy state licensing; firms need both FinCEN registration AND state money transmitter licences in every state where they operate.
- T3Remitso state-by-state guide — An MTL is required in 49 US states to send or receive money on behalf of others; Montana exempts most money transmission from state licensing — the canonical federalised divergence case (nest US-FED -> US-MT/US-NY/US-CA).
- T2State money transmitter laws / MTL (NMLS) — primary statutes — State MTL requirements include NMLS application, FBI fingerprint background checks, surety bonds ranging from roughly $25,000 to $2,000,000+, and minimum tangible net worth typically $100,000–$500,000; bonds/fees range from $250 (Montana) to $500,000+ (California).
- T3Mordor Intelligence US Payments Market — Stripe applied in April 2025 for a Merchant Acquirer Limited Purpose Bank (MALPB) charter in Georgia to reduce reliance on sponsor banks and gain direct access to Visa and Mastercard networks, mirroring Fiserv's precedent.