Crypto banks with OCC charters must meet strict capital, liquidity, governance, and compliance standards. Ongoing federal supervision shapes how these institutions handle custody, AML, and digital asset activities in the U.S.
Crypto banks that receive a charter from the Office of the Comptroller of the Currency (OCC) do not simply gain a license to operate-they enter a complex regulatory environment that brings ongoing federal scrutiny. For digital asset companies and compliance teams considering the national trust bank model, the OCC's requirements go far beyond initial approval, shaping every aspect of governance, risk management, and permitted activities.
Supervision and Conditional Approvals
OCC-chartered crypto banks are subject to continuous oversight, with prudential and compliance obligations that persist after the charter is granted. The OCC tailors capital and liquidity requirements to each institution's business plan and risk profile, often imposing specific conditions in the approval letter. For example, Ripple National Trust Bank's December 2025 conditional approval mandated at least $11.7 million in Tier 1 capital and required liquid assets to cover 180 days of operating expenses for the first three years. These figures are not universal but illustrate how the OCC translates business risks into enforceable standards.
National trust banks focused on digital asset custody are not automatically subject to every rule that applies to traditional deposit-taking banks. Instead, the regulatory perimeter depends on the institution's actual activities, with additional requirements layered on for specific services. The OCC's recent conditional approvals for First National Digital Currency Bank, Ripple National Trust Bank, BitGo, Fidelity Digital Assets, and Paxos highlight the agency's evolving approach to crypto-native institutions.
Governance, AML, and Custody Controls
Effective governance is a continuing obligation. Directors and senior management must understand the bank's digital asset activities, approve risk limits, and ensure internal controls remain aligned with the approved business plan. In some cases, such as Ripple's charter, the OCC requires advance notice and a letter of no objection for board and executive appointments during the initial years of operation. Material changes to the business plan or risk profile also require OCC engagement.
OCC-chartered banks must comply with the Bank Secrecy Act (BSA) and anti-money laundering (AML) rules, including customer identification, due diligence, transaction monitoring, and suspicious activity reporting. For crypto banks, this means adapting controls to the unique risks of blockchain transactions, such as rapid cross-border transfers and interactions with self-hosted wallets. The OCC expects written, board-approved BSA/AML programs with independent testing and staff training.
Custody of digital assets introduces additional operational risks. Banks must implement controls for private key management, transaction authorization, asset segregation, and recovery procedures. Outsourcing custody technology or blockchain infrastructure does not relieve the bank of responsibility-third-party risk management and ongoing oversight remain essential. These requirements are distinct from the proof-of-reserves practices used by centralized trading platforms, which, as discussed in EgonCoin's coverage of crypto ATM operator compliance, address different regulatory questions.
Permissible Activities and Stablecoin Regulation
The OCC has clarified the scope of permissible digital asset activities through interpretive letters. In November 2025, Interpretive Letter 1186 confirmed that national banks may hold limited amounts of crypto assets as principal when necessary to pay blockchain network fees or test platforms, provided the activity is conducted safely and in compliance with law. Interpretive Letter 1188, issued in December 2025, allowed riskless principal crypto transactions-where the bank acts as an intermediary without maintaining crypto inventory.
In April 2026, a final OCC rule expanded the range of non-fiduciary activities allowed for national trust banks, amending federal regulations to reflect the broader statutory concept of trust company operations. This change is particularly relevant for digital asset firms seeking to offer custody and related services under a national charter, but it does not remove licensing, risk management, or supervisory requirements.
Stablecoin activity adds another regulatory layer. The GENIUS Act, enacted in July 2025, established a federal framework for payment stablecoin issuers, with OCC proposals addressing reserve assets, redemption, custody, audits, and capital backstops. As of August 2026, key OCC implementing measures-including AML and customer identification rules-remain in the rulemaking process and are not yet final.
According to OCC documentation, the agency continues to examine crypto banks on a regular cycle, reviewing compliance with capital, liquidity, governance, BSA/AML, cybersecurity, custody, and third-party risk management standards. The exact requirements depend on the institution's charter, business plan, and the conditions imposed by the OCC at approval.
As of August 2026, the OCC has conditionally approved five national trust bank charters for crypto-focused institutions, with each approval letter specifying unique capital, liquidity, and governance requirements. The GENIUS Act's stablecoin framework, while enacted in July 2025, is still being implemented, and final OCC rules on AML and customer identification for stablecoin issuers are pending. These developments reflect the ongoing evolution of federal oversight for digital asset banks and payment stablecoin providers in the U.S.
OCC-chartered crypto banks operate under a federal regulatory framework that is distinct from state-level licensing. While a national trust bank charter may preempt some state requirements, it does not eliminate all state-law issues, and institutions must remain attentive to both federal and state obligations. The OCC's approach emphasizes ongoing supervision, risk-based requirements, and the need for banks to demonstrate that each digital asset activity fits within their approved business plan and can be conducted safely and soundly.
National trust banks differ from FDIC-insured commercial banks in several respects. Most do not accept insured deposits and are not covered by federal deposit insurance. The OCC's interpretive letters and recent rule changes have clarified the boundaries of permissible digital asset activities, but banks must still meet rigorous standards for capital, liquidity, governance, and compliance to maintain their charter and avoid enforcement action.
For U.S. crypto users, investors, and companies, the evolving OCC framework means that digital asset banks face a higher bar for operational resilience, risk management, and regulatory compliance than many non-bank crypto service providers. As the regulatory landscape continues to shift, institutions seeking to operate as OCC-chartered crypto banks will need to adapt to new rules, supervisory expectations, and market realities.
National trust banks chartered by the OCC are required to maintain robust capital and liquidity buffers, with specific requirements set during the conditional approval process. For example, Ripple National Trust Bank was required to hold at least $11.7 million in Tier 1 capital and maintain liquid assets equal to 180 days of operating expenses for its first three years. These figures are tailored to each institution and reflect the OCC's risk-based approach to digital asset banking supervision.
OCC supervision of crypto banks highlights the difference between federal and state regulatory frameworks. While a national charter can provide certain advantages, such as federal preemption of some state laws, it does not guarantee uniform treatment across all jurisdictions. Crypto banks must navigate a patchwork of federal and state requirements, with the OCC's ongoing examinations focusing on capital, liquidity, governance, BSA/AML compliance, cybersecurity, custody, and third-party risk management. The evolving regulatory environment means that institutions must remain agile and proactive in addressing new rules and supervisory expectations.
