Las Vegas spent three days asking who carries the risk when money moves itself. On the last morning, the first federal stablecoin rule gave part of an answer.
For three days in Las Vegas, the sessions I recorded kept returning to one question: when money moves itself, who carries the risk? Day one asked it about stablecoins and AI agents. Day two showed the industry writing its own answers into standards, certificates and code. On Wednesday, the closing half-day, a regulator wrote part of the answer down. A few hours before the Money Hall opened for the last time, the Office of the Comptroller of the Currency (OCC) became the first agency to finalise its rule under the GENIUS Act.
The rulebook lands on the last morning
The OCC’s rule sets out how banks and non-bank companies can become permitted payment stablecoin issuers. Issuers must hold reserves that fully back the coins in circulation and will generally have to meet redemptions within two business days, with standards for custody, capital, audit and foreign issuers alongside. It takes effect in January, and the regulator will say separately when it starts accepting applications. Anti-money laundering and sanctions obligations are left to later rulemaking with the Treasury.
The argument that follows will be about yield. The rule keeps the ban on issuers paying holders interest simply for holding a stablecoin, but it drops the proposal’s presumption that certain arrangements with affiliates and third parties are attempts to get round that ban. The OCC will judge rewards programmes case by case and keeps the power to act against evasion. Comptroller Jonathan Gould called it a clear, practical framework. Banks see a door left open for platforms to pay rewards that draw deposits away from community lenders, and the American Bankers Association was quick to criticise the rule, The Block reported.
That puts a date on the contest the show spent the week taking apart. On Tuesday Citi‘s Ryan Rugg said tokenised deposits and stablecoins were “an and”, and Coinbase‘s Shan Aggarwal argued that the blocker is now coordination between custodians, clearing houses and banks, not technology. A federal rulebook is one piece of that coordination. The other piece is still to come: a week before the show, FDIC Chairman Travis Hill said the agency will have more work to do on tokenised deposits once the GENIUS Act rules are written, including how to resolve a failed bank whose deposits move at weekends.
Controls written into the payment
The liability question did not wait for the regulator either. Visa announced on Wednesday new controls for commercial card payments: a check that money is going to the supplier it should, 3-D Secure authentication for virtual card users, and limits a business can set on spend, merchant category, location and timing. The payment controls are available now to eligible issuers; the supplier validation and authentication tools are in pilot and due for general release in 2027. The same announcement folded in Tuesday’s live pilot with BILL and Billtrust, in which trusted AI agents pay approved invoices through supplier portals using tokenised credentials instead of shared logins.
Ninth Wave, which connects banks and credit unions to fintech apps and aggregators, applied the same thinking to account data. Its new Agentic Control Layer ties every agent to a registered, accountable operator before it can connect, checks the customer’s consent on each request rather than once per session, and masks account numbers before they reach the AI model. The first release is read-only, with money movement on the roadmap.
Set beside Monday’s launches, from Mastercard‘s risk score for stablecoin payments to Evervault‘s short-lived agent tokens on Tuesday, the pattern is hard to miss. Day one asked who holds the bag. By the close, the industry’s working answer was that nobody hands an agent the bag without a named operator, a limited mandate and a record of every request. On liability itself, Hill said on Tuesday that the deeper questions are probably outside the FDIC’s purview.
Trust as the closing argument
The closing morning’s programme read like a summary of the week. The Meridian Stage opened with the chief marketing officers of Early Warning, JPMorganChase and PNC on the case that trust is a growth strategy rather than a soft metric, followed by a session on how an explainable AI deployment got through an audit. On the Intersection Stage, Intercontinental Exchange vice chairman Michael Harris and DTCC‘s Jason Emery were billed to discuss taking digital assets out of the sandbox and into core operations, and Siegel+Gale presented new research arguing that complexity, not a shortage of innovation, is what erodes trust in financial services.
A session on small business finance made the same point from the customer’s side: for an owner, a funding product decides whether payroll clears. That is the customer the week kept coming back to, the one who does not care which rail carries the money. Stripe‘s Neetika Bansal said on Tuesday that customers rarely ask for stablecoins any more; they ask for cross-border payments that arrive. On Monday, Alex Garn of Borderless gave the one-word version of what the industry has to get right: invisible.
The Fintech Times in Las Vegas
My recorder ran on the Meridian, Intersection and Exchange stages on Monday and Tuesday, and four lines from those sessions sum up the week. Ann Johnson, who runs security solutions at Mastercard, set the terms on Monday: “the thing that allows innovation to scale is trust.” Hill, describing the standard-setting body the FDIC has been helping banks and fintechs design for vetting third parties, stressed that it would be led by the industry and that “this would be completely voluntary”. Bansal called stablecoins “agent native money”. And Aggarwal, asked where tokenisation ends up by 2030, hoped the category simply disappears: “I think we just talk about assets.”
Read together, they describe the shift from Riyadh and Miami to Las Vegas. The technology arguments are largely settled. What remains is who vouches for the participants, who sets the standards they are held to, and whether the customer ever needs to know.
What the next conversations will be
Three questions leave Las Vegas unanswered. The first is rewards. The OCC has chosen case-by-case judgement over a blanket presumption, the banks have said they do not like it, and the other agencies still have their own GENIUS Act rules to finish. With the wider market structure bill stalled in the Senate, the line between a stablecoin reward and a deposit rate will be drawn rule by rule and case by case.
The second is who accredits an agent. Visa’s Trusted Agent Protocol, Ninth Wave’s registered operators and the FDIC’s proposed voluntary standards body for bank partners are all versions of the same idea: a named party that vouches for whoever, or whatever, is moving the money. Whether those schemes converge or each network keeps its own register will decide how much friction an agent meets crossing from one to the next.
The third is the move from pilot to profit and loss. Visa’s supplier tools reach general release next year, Ninth Wave’s layer starts read-only, and the OCC has yet to open its application window. The show ended on the question of operating these systems at scale, and the answers will come in the quarterly numbers rather than on stage.
The next chapter of Money20/20 USA. Money20/20 USA is moving to the Las Vegas Convention Center (LVCC) and Resorts World on October 19-21, 2027. Take a first look at the future of money.
The post Money20/20 USA wrap: the rulebook arrives on the final morning appeared first on The Fintech Times.
