CyberEyeQ Daily Briefing — Friday, May 1, 2026
Today's Focus: Financial Regulation & Compliance
Today's Top Story
OCC Stablecoin Rule Comments Close Tonight
The OCC's Notice of Proposed Rulemaking implementing the GENIUS Act for federally-chartered Permitted Payment Stablecoin Issuers (PPSIs) reaches its comment deadline today, May 1, 2026. Bulletin 2026-3 sets capital, reserve composition, redemption, AML, and risk-management standards, with the underlying GENIUS Act effective on the earlier of January 18, 2027 or 120 days after final regulations are issued. Industry comment volume is expected to be heavy given the parallel FinCEN/OFAC and FDIC proposals running in lockstep. If your firm has a comment letter in flight, it must be filed before today's close.
Also Today
FinCEN + OFAC pull stablecoin issuers into the BSA — comment due June 9. The April 8 joint NPRM would treat permitted payment stablecoin issuers as "financial institutions" under the Bank Secrecy Act and impose the standard five-pillar AML/CFT program (risk-based policies, independent testing, designated AML officer, ongoing training, CDD). It also imposes the first explicit "effective sanctions compliance program" requirement on a defined category of US persons. Action: map current AML and sanctions controls against the dual-program requirement, and draft a comment letter on customer-identification scope for self-hosted-wallet transfers. Federal Register →
EU MiCA transition window closes July 1 — 61 days out. EU Member State transitional regimes under the Markets in Crypto-Assets Regulation expire on July 1, 2026. After that date, any entity providing crypto-asset services to EU clients without a MiCA licence (CASP authorisation) must cease offering those services or face fines up to €5M / 5% of annual turnover. ESMA has signalled intensifying supervision and EU officials are debating whether oversight of major crypto firms should shift centrally to ESMA. Action: confirm CASP licence status across all EU operating subsidiaries. ESMA MiCA hub →
Fed, OCC, and FDIC retire SR 11-7 with new model-risk guidance. SR 26-2, issued April 17, supersedes SR 11-7 (the 2011 model-risk standard) and SR 21-8 (the 2021 BSA/AML systems addendum) — the first major refresh in fifteen years. The new guidance introduces a formal materiality construct so banks can calibrate governance to actual risk, and explicitly carves out generative and agentic AI for separate governance frameworks ahead. Action: review whether your model inventory and validation tiers map to the new materiality construct. Federal Reserve SR 26-2 →
⏰ Deadline Alert
Two near-term filings to watch this week:
Today, May 1 — OCC GENIUS Act NPRM comments close.
May 10 (9 days) — EBA IFRS 18 FINREP comments close (the IFRS 18 portion of the broader EBA CRR supervisory-reporting simplification consultation; the general consultation runs to July 10).
One Thing to Do Today
File or finalize any in-flight comment letter on the OCC GENIUS Act NPRM before today's close — and put June 9 on every relevant calendar for the parallel FinCEN/OFAC PPSI AML/sanctions and FDIC GENIUS Act comment windows.
Tomorrow's Focus
Saturday — no daily briefing. Monday: Cybersecurity, Data Security & Cloud Security.
CyberEyeQ — Actionable Regulatory Intelligence
Reply to this email or write to [email protected] with feedback.
cybereyeq.com