Travel rule (crypto)

The travel rule in crypto is the duty for an exchange or other crypto-asset service provider to collect the names and account details of both sender and recipient and pass them to the next provider, so the identifying data travel with the coins. FATF presents it as Recommendation 16, its payment transparency standard, applied to virtual assets.

From 1995 wire transfers to crypto exchanges

The idea comes from banking. In the US, the Recordkeeping Rule and the Travel Rule for funds transfers date from rulemakings of January 1995 and apply from $3,000; the Travel Rule sits in 31 CFR 1010.410(f). FATF wrote the same logic into Recommendation 16.

Crypto joined in two steps. FATF amended Recommendation 15 in 2018, and in June 2019 its Interpretive Note to that recommendation applied the travel rule to virtual asset service providers (VASPs).

How the travel rule works in the EU

In the EU the rule comes from Regulation (EU) 2023/1113, the Transfer of Funds Regulation, which applies from 30 December 2024. It is a separate text from MiCA. A transfer between two providers runs like this:

1. The sender’s provider attaches the originator’s name and ledger address, plus either a postal address with an official document number and customer number, or a date and place of birth.
2. It adds the beneficiary’s name and ledger address or account number, and a legal entity identifier where the format allows one and the customer gave it.
3. The data go before the transfer or at the same time, sent securely and in line with the GDPR. They can use a separate messaging channel rather than the transaction.
4. The receiving provider checks whether anything is missing and, before releasing the funds, verifies the beneficiary’s details, a step already met if that person passed its KYC identity checks.

Article 14 sets no amount condition on these data. A euro figure appears only for self-hosted addresses.

A worked example: 0.02 BTC sent two ways

The figures here are hypothetical: assume 1 BTC is worth €65,000 and €1 buys $1.10, so 1 BTC is $71,500. Marie holds a verified account at an EU exchange.

First, she sends 0.02 BTC to an account at a US exchange. That is 0.02 × 65,000 = €1,300, or $1,430. Her exchange sends her details and the beneficiary’s, whatever the sum. On the US side, the threshold written in the federal rule is $3,000, which at these prices is $3,000 ÷ 1.10 = €2,727, or 2,727 ÷ 65,000 = about 0.042 BTC. The same 0.02 BTC sits inside the EU duty and below the US figure.

Second, she moves 0.02 BTC to her own wallet app. No provider sits at the other end, so her exchange holds the information and makes the transfer individually identifiable. Because €1,300 is above €1,000, it must also take adequate measures to assess whether Marie owns or controls that address.

At the assumed price, the €1,000 line falls at 1,000 ÷ 65,000 = 0.0154 BTC.

Travel rule crypto in 2026: laws passed, little enforcement

FATF’s targeted update of July 2026 counts 91 of 109 responding jurisdictions with travel rule legislation, against 85 of 117 a year earlier, and 11 more in the process. Of the 91, 55 had not yet issued findings or directives or taken supervisory or enforcement action focused on compliance.

The United States went the other way on a tighter version. In a notice published on 9 November 2026, FinCEN and the Federal Reserve Board withdrew their October 2020 proposal to lower the threshold from $3,000 to $250 for transfers that begin or end outside the country, which also meant to clarify that “money” covers convertible virtual currency. The agencies cited the five years since the proposal and the GENIUS Act of July 2025. The withdrawal leaves the $3,000 threshold in the written rule and drops that clarification, as our report on the abandoned $250 threshold explains.

Where the travel rule stops

The rule binds providers, not people. FATF notes that peer-to-peer transfers between unhosted wallets happen with no regulated intermediary and fall outside anti-money-laundering obligations. For someone who keeps coins in self-custody, the data are recorded only at the moment coins enter or leave an exchange.

Data also need a regulated counterparty able to receive them. US crypto firms told regulators in 2020 that there was no international messaging standard for these transfers. Privacy is the other objection raised by US commenters.

Travel rule crypto: questions readers ask

Is there a minimum amount for the travel rule in the EU?

No amount condition applies to the data requirements of Article 14 for transfers between two providers, so a €20 transfer carries the same sender and recipient details as a large one. The €1,000 figure in the regulation only triggers the check on who owns or controls a self-hosted address.

Does the travel rule apply to self-hosted wallets?

Partly. Your exchange must collect and keep the sender and beneficiary information for a transfer to or from your own wallet, and above €1,000 it must assess whether you own or control that address. The data are held by the exchange; nothing is sent to the wallet. Transfers between two private wallets are outside the rule.

How does the crypto version differ from the banking travel rule?

The principle is the same: identifying data follow the payment from one institution to the next. Crypto adds ledger addresses and self-hosted wallets with no institution at the other end, and in the EU the data may travel through a separate messaging channel rather than with the transaction.

Can you avoid the travel rule?

Not through a regulated provider. The duty sits with the exchange, which must detect missing data and decide how to handle the transfer. In the EU, splitting a sum changes nothing between providers, since there is no amount condition. Wallet-to-wallet transfers are not covered, but a later deposit at an exchange brings its checks back.