Blockchain payments made in stablecoins are legal for businesses in the United States, the European Union, the United Kingdom, Brazil and Mexico, and none of the five bans the payment itself. The law licenses or registers the token issuer and the provider that exchanges, holds or transfers it. Mainland China is the clear exception.
So the working question is which entity moves your money in each country and what status it holds there. This guide goes country by country with the norm, the date and the primary text we could read. The stablecoin explainer covers the token.
How do the rules compare by country?
What each jurisdiction regulates, who needs authorization and the next date that matters, as of November 1, 2026.
Jurisdiction | Main rules | Who needs authorization | Next date | A paying business |
United States | GENIUS Act, Public Law 119-27; FinCEN registration and state money transmission | Issuers; companies that move money for others | Issuer rules by January 18, 2027; token restriction for providers from July 18, 2028 | Uses a registered provider and follows sanctions rules |
European Union | Issuers (banks or e-money institutions) and crypto-asset service providers | In force; provider transition ended by July 1, 2026 | Uses an authorized provider and a token from an authorized issuer | |
United Kingdom | FSMA 2000 (Cryptoassets) Regulations 2026 and FCA policy statements of June 2026 | Registration today; FCA authorization under the new regime | Application window closes February 28, 2027; regime from October 25, 2027 | Uses an FCA-registered firm now |
Brazil | Law 14.478/2022 and BCB Resolutions 519, 520, 521 of 2025 and 589 of 2026 | The provider, authorized as a PSAV licence by the Central Bank of Brazil | Transition filing deadline passed on October 30, 2026; from November 6, 2026, Art. 91 of Res. 520/2025, as amended by Res. 589/2026 | Asks the provider in writing how it is covered under Art. 91, and follows the foreign exchange rule |
Mexico | Licensed fintechs and banks, under Banxico limits; others are reported under the anti-money-laundering law | No stablecoin-specific date | Pays in pesos through a provider | |
Mainland China | PBoC Yinfa [2026] No. 42 | Not available to foreign providers | In force since February 6, 2026 | Pays in USD by SWIFT, never in stablecoin |
Every regime splits the subject in two. One layer governs who may issue a stablecoin and what backs it. The other governs who may exchange, hold or transfer it for clients, the activity the FATF calls a VASP (virtual asset service provider). The VASP explainer maps the definition.
Rails per country are on the coverage page, and the entity behind each leg on the operator map.
United States: the issuer law and FinCEN registration
The GENIUS Act (Public Law 119-27, signed July 18, 2025) is an issuer law. Section 3(a) makes it unlawful for anyone other than a permitted payment stablecoin issuer to issue one in the United States. Section 20 sets the effective date at the earlier of January 18, 2027 or 120 days after final regulations. From July 18, 2028, Section 3(b)(1) bars a digital asset service provider from offering a payment stablecoin not issued by a permitted issuer, subject to the foreign issuer route in Section 18.
The act does not license the company that moves the token. That stays with 31 CFR 1022.380, under which each money services business must register with FinCEN, licensed by a state or not. FinCEN's registration page states the form: Form 107, filed within 180 days of establishment and renewed every two years. Registration is a filing, not an approval.
Lumx does not issue a stablecoin. On the US side, Lumx US OP LLC, in Wyoming, is a FinCEN-registered MSB (money services business), and regulated money transmission runs through licensed partners.
European Union: MiCA and the authorized provider
MiCA (Regulation (EU) 2023/1114) applies to stablecoins from June 30, 2024 and to the rest of the regulation from December 30, 2024, under Article 149. A stablecoin that references one official currency is an e-money token, and Article 48 allows only a credit institution or an electronic money institution to issue one to the public. Providers that exchange, custody or transfer these tokens need authorization as crypto-asset service providers under Article 59, unless Article 60 exempts a bank or an e-money institution. The transition for earlier providers ended by July 1, 2026.
Euro payouts run through a banking partner, and the Coverage page lists SEPA as of November 1, 2026.
United Kingdom: registration now, authorization from October 25, 2027
Today, firms dealing in cryptoassets for UK customers are registered with the FCA under the Money Laundering Regulations. The new regime sits on the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, passed on February 4, 2026. The FCA's policy statements overview puts the full scope of regulated activities at October 25, 2027, with stablecoin issuance rules in PS26/10.
The date a firm can act on is the application window, scheduled from September 30, 2026 to February 28, 2027.
The US and UK alignment news is context only. Lumx holds no FCA, HKMA or MAS licence. It onboards UK, Hong Kong and Singapore clients by reverse solicitation, with no marketing or prospecting in those countries. For a UK payer or recipient, GBP runs through a banking partner. Coverage lists Faster Payments (the UK's real-time bank transfer network) as of November 1, 2026, and the USDC to GBP page shows the corridor.
Brazil: a licensed provider and the foreign exchange rule
Law 14.478/2022 requires virtual asset services to be provided by an authorized legal entity, and the Central Bank of Brazil (BCB) grants that authorization. BCB Resolutions 519, 520 and 521 of 2025 set the process. The company type that holds it is the SPSAV (Sociedade Prestadora de Serviços de Ativos Virtuais). Companies already operating filed under the Article 88 transition regime by October 30, 2026.
Resolution 561/2026, published April 30, 2026, bars virtual assets from closing the eFX cycle, the fiat route for payment institutions, but leaves the virtual asset route under Article 76A untouched. Payment institutions using stablecoins inside eFX have until May 31, 2027 to move or return to fiat.
The date that matters for the provider layer is November 6, 2026. Article 91 of Resolution 520/2025, as amended by Resolution 589 of September 23, 2026, bars banks and payment institutions from carrying out or enabling virtual asset operations with providers the BCB has not authorized. Resolution 589 removed "or in the process of authorization", so how the BCB and the banks treat pending applicants is a question for counsel. Lumx keeps its bank access because it filed the authorization request with the BCB, and a business should still ask its provider in writing how its access is covered after that date.
The Brazilian entity, Lumx Sociedade Prestadora de Serviços de Ativos Virtuais Ltda, has applied for the SPSAV authorization, operates under the Article 88 transition regime and is not yet authorized. An external transfer from a Brazilian customer is identified and reported to COAF, held through a transactional RFI (request for information) when needed, and Lumx asks whether the destination wallet is self-custody. A recipient in Brazil gets reais over Pix (Brazil's instant payment system), as the USDC to BRL page shows.
Mexico: limits on banks and fintechs, reporting for the rest
Mexico has no stablecoin law. Its Fintech Law of March 9, 2018 defines a virtual asset in Article 30 and lets Banxico decide which ones licensed fintechs and banks may operate with (Articles 30, 32 and 88). Banxico set them in Circular 4/2019 on March 8, 2019, amended by Circular 37/2020.
Everyone else falls under the anti-money-laundering statute. Article 17, section XVI, makes the habitual exchange or custody of virtual assets by non-financial entities a vulnerable activity, with client identification and records plus notices to the Finance Ministry.
Lumx pays a Mexican recipient in pesos over SPEI (Mexico's interbank transfer system, run by Banxico) to the recipient's CLABE (the 18-digit bank account number), as the USDC to MXN page shows.
Where are stablecoin payments not allowed?
Mainland China is closed outright, and sits in the High-Risk tier of the Lumx docs. The PBoC's Yinfa [2026] No. 42 of February 6, 2026 prohibits foreign cryptoasset services to people in mainland China, so a supplier there gets USD by SWIFT.
Three cases stay closed in every country above: sanctioned parties and places; providers without the registration their country requires; and pooling other people's money without a licence.
The Lumx docs sort every country into Supported, High-Risk with Enhanced Due Diligence, or Restricted, and a customer with a restricted nexus is rejected at onboarding. See the supported countries page for the list.
How does a business check its provider and what does it still own?
I recommend three questions before the first payment, in this order. Which legal entity is the counterparty on each leg of the payment, and what is its status in that country: registered, authorized or in a transition. Who answers if a regulator or a bank asks about a payment. And what the provider will do when it cannot complete a payment in a country. I would write the answers into the contract rather than accept them on a call, because a provider that cannot name its entity per leg is asking you to carry a risk it has not shown you.
Then check the contract entity in each country's register. Our guide to who owns compliance splits the duties between client and provider.
The provider carries the licence. The client still carries five things:
Accurate onboarding data: company documents, owners above 25% and account users.
A stated purpose and source of funds.
No pass-through. Routing money for parties the provider has not onboarded is the pattern that gets accounts closed.
A fast answer when a payment is held.
Your own sanctions judgment, since provider screening does not excuse paying someone you know is listed.
Lumx runs KYB (know your business) and KYC (know your customer) through Sumsub and screens every transaction before it moves, in both directions. Chainalysis KYT monitors blockchain activity, and fiat is monitored with Lumx's own systems plus its banking partners. Its Nested Payments rule ties every transaction to an onboarded customer using their own funds. A held payment is an RFI (request for information, a hold that asks for a document), and an unanswered transaction RFI may be refunded to the sender after 24 hours.
The Travel Rule moves sender and recipient data with a transfer between providers. The Travel Rule workflow covers when a transfer is held or returned, and Lumx says it is aligned with the Travel Rule.
What this looks like for a payer in stablecoins and a recipient in Brazil or Mexico
Lumx is stablecoin payments infrastructure for businesses that move money between Latin America and the rest of the world: one API to collect, hold, convert, and pay out in BRL, MXN, COP, USD, EUR, and GBP or in USDC and USDT, over local rails such as PIX, SPEI, PSE, Bre-B, ACH, FEDWIRE, SEPA, and Faster Payments, with SWIFT and on-behalf-of payments and collections (POBO and COBO) in USD, EUR, and GBP, plus named virtual accounts, custodial wallets, and KYB/KYC built in.
A payer pays in stablecoins, Lumx converts, and the recipient receives local currency by Pix in Brazil or SPEI in Mexico. POBO and COBO run in USD, EUR and GBP, while a SWIFT payout is USD only, and the global payments product shows the route. See are stablecoin payments reversible on reversal.
Methodology and sources
On November 1, 2026 we read the GENIUS Act text on govinfo.gov, FinCEN's registration page, the FCA overview of its cryptoasset policy statements and the index of Banxico Circular 4/2019. eur-lex.europa.eu returned a bot challenge and bcb.gov.br needs JavaScript, so MiCA and the BCB resolutions are cited by number and date and linked to the official pages we could not read, with Brazilian dates taken from our own guides. The Law 14.478 page loaded for our checker, but its provisions are cited from our Brazil guide. Lumx statements come from docs.lumx.io pages read the same day, Coverage, Supported countries, Prohibited activities, Nested Payments, Request for Information and Identity Verification. Entity statements come from the Legal page on lumx.io. This is not legal advice and does not cover tax.
Verified on November 1, 2026. Operational context, not legal, tax, or investment advice. Regulation (EU) 2023/1114, Law 14.478/2022, BCB Resolutions 519, 520, 521/2025, 561/2026 and 589/2026 and PBoC Yinfa [2026] No. 42 cited by number and date, linked where an official page exists; the primary hosts did not serve a readable text to our checker on November 1, 2026.
Are blockchain payments legal?
Yes, for businesses in the United States, the European Union, the United Kingdom, Brazil and Mexico. None of them bans paying or getting paid with stablecoins. They license or register the issuer and the provider that exchanges, holds or transfers the token. Lumx is a provider in that second layer: a FinCEN-registered MSB in the US, with a Brazilian SPSAV authorization applied for.
What anti-money-laundering rules apply to a stablecoin payment?
The provider identifies the client, monitors transactions and, between providers, passes sender and recipient data under the Travel Rule. The business supplies accurate onboarding data and answers requests when a payment is held. On Lumx, Sumsub runs KYB and KYC, every transaction is screened before it moves, and a held payment becomes an RFI.
Does a business need its own licence to use stablecoin payments?
Usually not, when it only pays and gets paid for its own business through an authorized provider. A licence question starts when it exchanges or holds stablecoins for other people, or forwards their money. On Lumx, every transaction belongs to an onboarded customer using their own funds, so a platform onboards each of its own customers.
Which countries do not allow stablecoin payments?
Mainland China prohibits foreign cryptoasset services to people there, under PBoC Yinfa [2026] No. 42 of February 6, 2026. Sanctioned countries and parties are closed everywhere. Lumx sorts countries into Supported, High-Risk and Restricted tiers, rejects a customer with a restricted nexus, and pays mainland China in USD by SWIFT.
How can a business check that its provider is allowed to operate?
Take the legal entity from the contract and search the register of each country: FinCEN's registrant list, the FCA register, the EU national authority's register. For Brazil and Mexico, ask for the authorization or filing reference. Lumx US OP LLC is registered with FinCEN as an MSB (#31000316459619, as shown on the lumx.io legal page), and Lumx SPSAV Ltda operates under the Article 88 transition, so ask for each entity's reference in the contract.
