Daily Weekly Podcast Blog API Regulator Agent Subscribe
occstablecoingenius-actfintechnational-bankspayments

The Token in the Settlement Leg: SoFi Moved a $25 Billion Card Program Onto an Instrument Its Own Disclosure Says Is Not a Deposit

How SoFi Bank issues SoFiUSD as an insured national bank, why the OCC and GENIUS Act (12 U.S.C. 5901) require a subsidiary, and the 2027 compliance gap.

By Lex, LexRegPulse Analyst · ·10 min read
Primary-source research · AI-drafted · human-reviewed. Methodology

By Lex

On September 22, SoFi Bank, N.A. began settling its debit and credit card program over Mastercard's network in SoFiUSD, a token the bank issues itself, on a program SoFi expects to top $25 billion a year. The trade read was "first national bank stablecoin goes live." The more useful reading starts with a footnote in the OCC's own stablecoin proposal, where the agency says it "would not approve an insured national bank or a Federal savings association to issue a payment stablecoin directly (as opposed to through a subsidiary)" (91 FR 10232 n.93).

SoFi Bank is an insured national bank, and it is the issuer of record. The September 22 release says so, as do the SOFID Terms of Use. That structure has an expiration date. On January 18, 2027, the GENIUS Act makes it unlawful for anyone other than a permitted payment stablecoin issuer to issue a payment stablecoin in the United States. SoFi has prepared: the OCC approved a stablecoin operating subsidiary for the bank on July 23. What the market has not priced is that this approval is not the license. The settlement leg now runs across the gap between the two.

Which box SoFiUSD occupies

Under 12 U.S.C. 5901(23), a permitted payment stablecoin issuer is a U.S.-formed person that is (A) a subsidiary of an insured depository institution approved under section 5904, (B) a Federal qualified payment stablecoin issuer, or (C) a State qualified issuer. The Federal qualified category covers nonbank entities, uninsured national banks and Federal branches. The State category expressly excludes insured depository institutions. The OCC's proposed § 15.2 tracks the same three boxes.

An insured national bank issuing from its own balance sheet fits none of them. The proposal repeats the point in footnotes at 91 FR 10207, 10211 and 10232: an insured national bank "would, however, need to do so through a subsidiary, as required under the GENIUS Act." There is no hidden pathway.

SoFi's own paper closes the deposit exit. Section 5901(22)(B)(ii) excludes from "payment stablecoin" any deposit, "including a deposit recorded using distributed ledger technology." The Terms state that SOFID is not a deposit as defined in 12 U.S.C. 1813(l), is not FDIC-insured and carries no pass-through insurance on the reserves. The same document commits to par redemption for approved customers, and the release's disclosure calls it "a payment stablecoin issued by SoFi Bank, N.A." SoFi chose the stablecoin door on purpose. Re-papering the token as a tokenized deposit would change the legal nature of every outstanding unit.

So the answer is the pre-effective window and a restructuring, at once. Today SoFi can rely on existing national bank powers; the OCC's proposal notes that the activities described in Interpretive Letter 1174 (January 4, 2021) "remain permissible to the extent that they have not been superseded by the GENIUS Act." After the effective date, they will have been.

That date is now fixed. Section 20 of the Act sets it at the earlier of eighteen months after enactment or 120 days after the primary Federal payment stablecoin regulators issue "any final regulations." Beating January 18 required a final rule by September 20, 2026. None issued, and Treasury, whose certification rule was filed September 30, is not a primary regulator, as our September 30 brief noted. January 18 is less than four months out.

The drop-down is approved, but not licensed

OCC Corporate Decision #1388, published with the agency's September decisions, approves an application SoFi Bank filed on March 27, 2026. That was twenty-four days after the Mastercard partnership announcement; the approval letter is dated July 23. The subsidiary "will engage in the issuance and redemption of payment stablecoins," including coins "issued on behalf of third-party clients."

The OCC approved an operating subsidiary under 12 CFR 5.34(e), finding the activities permissible for a national bank. It did not approve a permitted payment stablecoin issuer under section 5904, which is what § 5901(23)(A) requires. Proposed § 15.30 would run that approval on its own factors, including redemption policy and officer felony screens. The letter's single condition makes the distinction explicit: the bank must "conform, cease, or divest" its stablecoin activities to comply with the GENIUS Act and its implementing regulations, "such compliance to be determined in the sole discretion of the OCC." The condition is enforceable under 12 U.S.C. 1818.

The bridge across January 18 is the statute's safe harbor for pending applications. Section 5904(f) lets the regulators waive the Act's requirements for up to twelve months for a subsidiary whose parent has an application pending on the effective date. Proposed § 15.30(f) limits it to a "pending substantially complete application under § 15.30," granted on a public-interest or extraordinary-circumstances finding. The OCC says it may begin reviewing waiver requests after the final rule issues but before it takes effect.

The application form is still in paperwork review. The OCC's notice on the licensing forms (91 FR 47032, July 27, 2026) closed its 60-day comment window on September 25 and promises a second, 30-day notice. A substantially complete filing by January 18 therefore depends on a final rule not yet issued and a form not yet cleared. Tight, not impossible.

The awkward part is a drafting gap. The statute lets regulators waive "the requirements of this chapter." Proposed § 15.30(f) speaks only of Section 4, the issuer standards codified at 12 U.S.C. 5903. The issuance ban sits in Section 3. A waiver that relieves a pending applicant of Section 4 while leaving the ban standing would be useless, so the OCC plainly intends more. The final rule should say so. Neither version reaches SoFi Bank itself, because both attach to the subsidiary.

What breaks when the issuer changes

The Terms already anticipate the move. SoFi may designate "another authorized entity as an additional or substitute issuer of SOFID" without holder consent, expressly including changes driven by payment stablecoin law. The token contract survives. Four things around it do not.

Reserves. The Terms allow reserves to be held "directly by the Issuer or its affiliates." Proposed § 15.11(a)(1) requires a subsidiary issuer's reserves to be segregated, held directly or with an eligible financial institution. Option B of the proposal's diversification test, like the safe harbor in Option A, caps reserves at any one eligible financial institution at 40 percent. If the subsidiary's natural home for cash is a deposit at its parent, Option B forces most of it elsewhere. For this program, that choice is the line in the final rule that matters most.

Insolvency. In an FDIC receivership of the bank, 12 U.S.C. 1821(d)(11)(A) pays "any deposit liability" before "any other general or senior liability," and the Terms warn that SOFID claims "may be treated as general unsecured obligations of the Issuer." After the drop-down, 12 U.S.C. 5911(2) says a subsidiary issuer "may be considered a debtor under title 11," where the Act's amendments to the Bankruptcy Code apply. The holder's rank stops turning on depositor preference and starts turning on the Code as amended.

Capital. Subpart E of the proposal applies its own capital and operational-backstop calculation to subsidiaries of insured national banks. That means new capital at a new legal entity.

Third-party issuance. The March 3 release said Galileo would offer its issuing-bank clients SoFiUSD settlement, and the subsidiary approval covers coins issued for third-party clients. Under proposed § 15.10(c)(4)(ii)(B), anyone on whose behalf or under whose branding an issuer issues is a "related third party." If the issuer pays that party interest or yield and the party pays holders, the OCC presumes the issuer is paying holders. Only a written showing rebuts it. Every white-label partner running rewards on a branded coin sits one contract away from that presumption.

The yield question is narrower than it looks

The float in the card leg does not raise it. Proposed § 15.10(c)(4) bars an issuer from paying holders interest or yield "solely in connection with the holding, use, or retention" of the coin. Keeping reserve income is the opposite of paying it, and the Terms tell holders they are "not entitled to any interest or other returns earned on such funds." Merchants never touch the token. In CEO Anthony Noto's words, they "do not need to hold stablecoins" and receive funds "in a SoFi Bank account." Interest on that account is deposit interest. The presumption bites on the white-label book, not the card program.

Bank paper is not safer paper yet

Mastercard's June 3 announcement lists USDC, PYUSD, USDG, USDP, RLUSD and SoFiUSD as supported settlement coins. It names five early participants: ARQ, CBW Bank, Cross River, Lead Bank and Nuvei. The instinct is to treat the one bank-issued coin as the conservative choice. In a failure today, the opposite holds. A SoFiUSD holder ranks behind depositors with no insurance, while a coin from a permitted nonbank issuer will be backed by reserves that must be identifiable and segregated.

The strongest counterargument is duration. Settlement balances sit in the leg for hours, the issuer is a supervised national bank and the odds of failure inside that window are small. On probability, that is right. What it misses is that settlement contracts exist to allocate tail risk, and the Terms put all of it on the holder, capping SoFi's liability at the greater of $100 or twelve months of fees.

The second risk is not probabilistic. After the effective date, 12 U.S.C. 5902(g) bars treating a coin from a non-permitted issuer as a cash equivalent for accounting purposes. Nor may it be "acceptable as a settlement asset to facilitate wholesale payments between banking organizations or by a payment infrastructure to facilitate exchange and settlement among banking organizations." Card settlement between issuers and acquirers across Mastercard is close to the paradigm case. If the issuer on January 18 is SoFi Bank, or an unwaived subsidiary, the rail loses its legal footing that day.

What counterparties should ask for now

Acquirers, Galileo issuing banks and Big Business Banking merchants should negotiate these before volume grows:

What to watch

The OCC's final part 15, which Comptroller Gould has targeted for November, as covered in our September 23 brief. Three questions in it decide this program: whether final § 15.30(f) reaches the Section 3 ban, which diversification option survives, and whether the related-third-party presumption stays as proposed. Watch the second licensing-form notice and SoFi's notice designating the subsidiary as issuer. The subsidiary approval lapses if the entity is not established by July 23, 2027, unless the OCC grants an extension. Treasury's ordinary safe harbor under § 5902(c)(1) is limited to de minimis volume, which $25 billion is not. The Federal Reserve, FDIC, NCUA and OCC all have GENIUS Act rulemakings moving (September 29 brief); none can create a direct-issuance route the statute omits.

Bottom line

SoFi is not using a pathway the rulebook hides. There isn't one. It is issuing in the pre-effective window, with a successor entity approved under the operating subsidiary rule rather than licensed under the GENIUS Act. The drop-down is certain; whether it is licensed or waived by January 18 is not. Until then, every bank, acquirer and merchant in that settlement leg holds an uninsured claim that ranks behind depositors, on a rail with a statutory stop date. Price that now, while SoFi still needs your volume.

Sources