The National Credit Union Administration published a proposal on October 9 that would require federally insured credit unions to report detailed stablecoin activity through 26 new data fields on their quarterly Call Reports.
The proposal, printed in the Federal Register, adds a Schedule J to Form 5300. The 26 fields fall into four buckets: eight for custody of reserve assets held on behalf of third-party permitted payment stablecoin issuers, nine for custody and control of cryptographic keys, five for direct financial exposure to stablecoin issuers, and four for payment stablecoins held on the credit union’s own balance sheet. The structure is deliberate. It separates assets held for others from exposure to issuer risk and both of those from what an institution owns outright, because each carries a different risk profile and each needs its own examination path.
Who has to file
The NCUA estimates the revisions would apply to all 4,224 federally insured credit unions, though only institutions engaged in stablecoin activity would have data to report. The agency says the changes would not materially increase the existing reporting burden, which it already pegs at an average of 47 hours per quarterly Call Report for the full form. That estimate implies well over 790,000 reporting hours across the sector each year, most of it on the traditional form rather than the new schedule. Comments are open for 60 days from publication, closing December 8. The agency wants feedback on whether the data collection is useful, whether it is accurate, and whether automation could cut the workload, an invitation aimed squarely at compliance officers who think the form is too heavy.
Where the rule comes from
This proposal is the credit union piece of the GENIUS Act implementation. The act, which takes full effect January 18, 2027, mandates one-to-one reserve backing and restricts issuance of payment stablecoins to authorized issuers. Federal regulators have been filling in the perimeter since the law passed. The NCUA proposed a licensing and investment framework for credit union-affiliated issuers in February, a 269-page proposal on reserves, liquidity, cybersecurity and operational safeguards in May, and a joint customer-identification and anti-money-laundering proposal developed with other federal regulators in June. The Treasury added an interim final rule on September 30 that sets a $10 billion threshold separating state and federal regulatory pathways for issuers.
Until this filing, the NCUA was the last major federal financial regulator without standardized stablecoin data collection. The OCC, the FDIC and the Federal Reserve had each moved earlier, leaving the credit union system, which serves roughly 140 million members, as the one supervised channel regulators could not see into. The new Schedule J closes that gap and cross-references the application framework from earlier rulemaking, under which a credit union subsidiary can apply to become a permitted payment stablecoin issuer with a 120-day review timeline. The reporting schedule and the application track are designed to work as a closed loop: an institution applies to issue, and if approved, reports its activities through the same granular lens.
What it means in practice
The filing does not authorize new stablecoin activities or set operating standards. It only collects data. A credit union that provides custody services for an issuer, holds stablecoins on its own books, or establishes financial relationships with authorized issuers would face new reporting requirements; one that ignores digital assets entirely will file nothing under Schedule J. But the existence of the fields changes the calculus for institutions weighing entry. Building the mapping between core systems and the 26 account codes before launch costs less than retrofitting after an examination finds gaps, and the agency’s preference for early visibility suggests examiners will ask about the schedule’s items even at institutions that have yet to touch stablecoins.
Industry reaction split by size. InvestiFi chief executive Kian Sarreshteh called the proposal an important step toward integrating stablecoin operations into traditional credit union practice, arguing that knowing the reporting expectations up front lets boards approve products without introducing unknown risk into an NCUA audit. The Defense Credit Union Council said it had anticipated Call Report changes tied to the GENIUS Act. Compliance staff at smaller institutions, where the 47-hour quarterly estimate represents a real share of the budget, are more likely to use the comment period to push for a shorter form or automatic data feeds.
Timeline
If the proposal clears the Office of Management and Budget and survives the comment process, the first Schedule J filings would come with the March 31, 2027 Call Report. That gives credit unions roughly one quarter after the GENIUS Act’s full effect to build internal reporting. Institutions with existing stablecoin custody work will have an easier time than those starting fresh, since the nine cryptographic key custody fields in particular assume operational practices, key generation, split custody, access logging, that only firms already handling digital assets will have documented.
The proposal lands in a week when stablecoin oversight has been moving everywhere else too. The European Securities and Markets Authority told EU-licensed platforms on October 8 to stop selling non-compliant stablecoins, USDT the largest name affected, with balances wound down by January 8, 2027. A Senate subcommittee opened an inquiry into Cantor Fitzgerald’s Tether relationship the same day. The Japan Financial Services Agency told banks and crypto exchanges to accelerate a switch to chip-based identity checks after breaches exposed customer ID images. The direction of travel is uniform: every regulator with jurisdiction over dollar tokens wants granular data on who holds them, who issues them, and who stands behind the reserves.