You are comparing treasury and payment options for your company, and a new category keeps surfacing: stablecoin accounts, marketed as instant, borderless dollars that move on weekends and cross borders without the wire fees. Underneath that pitch, you are really asking two questions: is my money safe, and is a "dollar" token actually worth a dollar?

A stablecoin account's legal and risk profile depends on who issued the token, who provides the account, how your assets are held, and which jurisdiction governs the arrangement. US law now settles some of that, though not all of it, and the rest comes down to three things a founder can verify: who holds the assets, who verifies the reserves, and what happens when something breaks.

Are stablecoins legal for business?

Yes, and for the first time there is a federal framework behind that answer. The GENIUS Act, signed into law in July 2025, is the first US federal law to create a regulatory framework for payment stablecoins. It cleared the House 308-122 and the Senate 68-30 before signing.

The law defines who may issue a stablecoin, how it must be backed, and which regulator oversees it. Compliant payment stablecoins are treated as neither securities nor commodities, which removes ambiguity about what these tokens legally are.

Only "permitted payment stablecoin issuers" may issue in the US. There are two tracks: a federal path for issuers with an OCC charter, and a state path open to issuers under $10 billion outstanding, provided the state regime is certified "substantially similar" to the federal framework. Foreign issuers face separate requirements, including a Treasury comparability determination and OCC registration, so the jurisdiction behind a token matters.

The Act becomes effective on the earlier of 18 months after enactment or 120 days after final implementing regulations. Regulators have up to a year from enactment to write those rules. Through 2026, you are operating in a regime that is defined on paper but not fully implemented. Paul Hastings' guide to the law's reserve and issuer requirements lays out that staged timeline in detail.

Who holds the assets

When people say "custody," they can mean two different things: reserve custody, where the issuer holds the dollars backing every token in circulation, and account custody, which covers who holds your business's tokens or cash. The two are separate arrangements, and a stablecoin can be perfectly backed at the reserve level while your account sits behind a provider whose failure is your problem.

Most stablecoin business accounts fall into one of three models, and each comes with its own due-diligence questions.

Direct issuer redemption

You hold the tokens yourself and redeem them 1:1 with the issuer, according to its published redemption policy. Under the GENIUS Act, permitted issuers must publish that policy, provide timely redemption, and state fees in plain language, with any fee change requiring seven days' notice. Your counterparty risk here is the issuer.

Third-party provider account

If a provider sits between you and the token, ask direct questions before funding anything:

• Who is the legal custodian of your assets?
• Do assets sit in an omnibus account pooled with other customers, or in a segregated account?
• Is legal title to the assets yours?
• What happens to your balance if the provider, not the issuer, fails?

For context, the GENIUS Act limits a permitted issuer's activities to issuing and redeeming its stablecoin and holding custody of the stablecoin, its reserves, and the private keys. A provider layered on top of that is a separate entity with its own risk.

Self-custody

Here you hold the private keys directly. Ask what recovery options exist if keys are lost, and what support or recourse the provider offers when something goes wrong. Nobody can freeze your funds, but nobody can restore them if the keys are gone either.

Across all three models, a stablecoin balance is not FDIC-insured the way a bank deposit is.

How reserve backing works, and what "1:1" means

"Backed 1:1" is a claim you can check, and USDC, issued by Circle, makes a useful worked example because its disclosures are public. Circle states that USDC is "backed 100% by highly liquid cash and cash-equivalent assets and is always redeemable 1:1 for US dollars."

Where the reserves sit

According to Circle's published reserve disclosures, the majority of USDC reserves are held in the Circle Reserve Fund (USDXX), an SEC-registered 2a-7 government money market fund managed by BlackRock. That fund holds cash, short-dated US Treasuries, and overnight Treasury repurchase agreements. The remainder is cash, held mostly at a handful of the world's largest banks. Circle holds the reserves separately from its own operating funds, for the benefit of holders.

What "1:1" now means under the law

The GENIUS Act requires permitted issuers to back outstanding stablecoins at least 1-to-1 with eligible assets: US currency, insured demand deposits, Treasury bills maturing in 93 days or less, overnight repos and reverse repos, and government money market funds. Those reserves must be segregated, not commingled with the issuer's own funds, and not rehypothecated.

Attestation is not an audit

Marketing copy tends to blur the difference between an attestation and an audit, and the difference matters for how much comfort you can take from each. Circle publishes monthly third-party assurance from a Big Four accounting firm confirming that reserve value exceeds USDC in circulation, prepared under AICPA attestation standards. An attestation is a point-in-time examination of one specific assertion, not a full financial-statement audit. Separately, Circle's independent auditor is Deloitte & Touche LLP, which has audited Circle's financials since fiscal 2022 (Grant Thornton did so before that). The monthly reserve attestation and the company audit are separate exercises, and reading one as the other overstates what has been verified.

The new law pushes disclosure in the same direction. It requires monthly public reserve disclosures examined by a registered public accounting firm, a monthly certification from the issuer's CEO and CFO, and a full GAAP annual financial statement for issuers with more than $50 billion outstanding.

The real risks: depeg, issuer, and evolving rules

A legal framework and a public attestation reduce risk without removing it, and three risks remain worth weighing, in roughly this order.

Depeg risk

A stablecoin can trade below a dollar even when it is fully backed. USDC briefly lost its peg during the 2023 SVB collapse. After Silicon Valley Bank was closed on March 10, 2023, Circle disclosed that $3.3 billion of USDC reserves, about 8% of the total, were held at SVB. USDC fell to $0.8726 on March 11 and recovered to $0.9918 on March 13, after the FDIC ensured SVB depositors would be made whole. The episode showed that even a fully-backed, transparent stablecoin can wobble when a reserve bank fails, especially over a weekend when banking rails are closed and redemption cannot clear.

Issuer and reserve risk

A stablecoin's value depends on the issuer's solvency and how it manages reserves. Concentration in a single bank, or reserves parked in less-liquid or opaque assets, creates the exposure. Read the issuer's published reserve composition rather than trusting the "backed 1:1" line on the landing page.

Evolving-regulation risk

Because the framework is still being implemented, confirm that the issuer behind your account is on a permitted path, and check which jurisdiction governs the account itself. A foreign issuer or an out-of-state provider changes the rules that apply to you.

Two provisions in the law cut the other way and reduce, though do not eliminate, these risks. In an issuer insolvency, reserve assets are excluded from the bankruptcy estate, and stablecoin holders receive a super-priority claim ahead of other creditors. And issuers are barred from claiming that a stablecoin is federally insured, government-backed, or legal tender.

A founder's due-diligence checklist

Before you move money, verify four things. Each ties back to a section above.

1. Is the issuer permitted? Confirm the token's issuer is a permitted or qualified issuer under the emerging federal or state framework.
2. Where are the reserves, and in what assets? Find the published reserve composition and check where the dollars actually sit.
3. Who examines the reserves, and how? Determine whether the reserve review is an attestation or a full audit, and who performs it.
4. What are the redemption terms? Read the redemption policy: timing, fees, and how much notice is required to change them.

This clarity serves the founder weighing treasury and payment options who wants an honest read on what a stablecoin account actually is. The federal framework is real and still being implemented, so the safety of any given account comes down to who holds the assets, who verifies the reserves, and what happens when something breaks. Run the four checks above before you fund an account, and you will be deciding on the facts rather than the pitch.

Flexbase Technologies, Inc. (“Flex”) is a financial technology company, not a bank. Flex Business Banking and banking services provided by Column N.A., Member FDIC. The Flex Business Reward Card is a Visa® charge card issued by Column, N.A., Member FDIC, pursuant to a license from Visa U.S.A. Inc. Payment of account balance is due in full daily. See Flex Terms of Service.

Payment Services: Payment services for U.S. customers are provided through Airwallex US, LLC (NMLS #1928093). Airwallex is licensed or authorized to do business as a money transmitter in most states. For details about Airwallex’s regulatory status, customer service, and how to make a complaint, see here. For some U.S. customers, Airwallex partners with Evolve Bank & Trust (member FDIC) to provide payment services.

Flex Capital refers to financing products offered by Flexbase Technologies, Inc. Financing may be structured as a loan or as a purchase of future receivables, depending on the product and the applicant's eligibility. Financing is subject to approval. Availability, terms, and conditions may vary by product, applicant, and state.

Flexbase Technologies, Inc. (Flex) is a financial technology company and is not a bank. The Flex Business Credit Card is issued by Lead Bank, pursuant to a license from Visa U.S.A. Inc. and is only available to eligible commercial entities. Fees and terms and conditions apply. Applicants are subject to eligibility requirements.

Bill Pay Later is a product of Flexbase Technologies, Inc. and is subject to eligibility and approval. Availability may vary by state, and not all applicants will qualify. Program limits are determined at approval and may vary by customer. Fees, terms, and conditions apply.