On this page
Key facts (as of 29 October 2026)
- Standard: FATF Recommendation 16 (wire transfers) applies to virtual assets through Recommendation 15 and its Interpretive Note, updated in 2019.
- Adoption: FATF's seventh targeted update (16 July 2026) found that 83% of surveyed jurisdictions had passed Travel Rule legislation, up from 73% in 2025. A further 11 jurisdictions said implementation was under way.
- Enforcement gap: most jurisdictions with laws had not yet taken Travel Rule-focused supervisory or enforcement action (FATF 2026, as summarised by Chainalysis: 60% of jurisdictions with Travel Rule laws had taken no supervisory or enforcement action on it).
- EU: Regulation (EU) 2023/1113, the recast Transfer of Funds Regulation, has applied to crypto-asset transfers since 30 December 2024. There is no de minimis threshold for CASP-to-CASP transfers.
- Self-hosted wallets (EU): for transfers over €1,000 to or from a self-hosted address, the CASP must verify that its client owns or controls the address.
- R.16 revision: FATF revised Recommendation 16 in June 2025 to strengthen payment transparency, with the changes to come into effect by the end of 2030 (FATF).
What the rule requires
When a VASP sends a virtual-asset transfer, it must obtain, hold and send the required originator and beneficiary information to the receiving VASP. The receiving VASP must obtain and hold it. Both must screen the information and act on missing or suspicious data. The aim is the same as for bank wires: following the money and screening the parties.
| Data | Originator | Beneficiary |
|---|---|---|
| Name | Yes | Yes |
| Account or wallet address | Yes | Yes |
| Address, ID number, or date and place of birth | Usually, depending on the regime | — |
The exact fields depend on the jurisdiction. The EU follows Regulation 2023/1113 and the EBA's Travel Rule Guidelines.
How a Travel Rule transfer flows
sequenceDiagram
participant O as Originator
participant OV as Originating VASP
participant BV as Beneficiary VASP
participant B as Beneficiary
O->>OV: Request to send USDC to address
OV->>OV: Is the address hosted by a VASP or self-hosted?
OV->>BV: Travel Rule message (originator and beneficiary data)
BV->>BV: Check beneficiary name matches, screen data
BV-->>OV: Accept or reject
OV->>BV: On-chain transfer
BV->>B: Credit after checksJurisdiction breakdown
| Jurisdiction | Threshold | Self-hosted wallets | In force |
|---|---|---|---|
| FATF standard | Countries may set de minimis of USD/EUR 1,000 with reduced data (FATF 2021 guidance, para. 191) | Risk-based | 2019 update to R.15 |
| European Union | None for CASP-to-CASP | Verify ownership or control above €1,000 | 30 December 2024 |
| United Kingdom | Applies under the Money Laundering Regulations (regs 64A–64H); for transfers involving a non-UK business, below €1,000 only names and account numbers must accompany the transfer | Risk-based requests for information (reg. 64G) | 1 September 2023 (SI 2022/860) |
| United States | Bank Secrecy Act funds-transfer recordkeeping and travel rule at US$3,000 or more (31 CFR 1010.410); FinCEN applies it to convertible virtual currency | Not specifically mandated | Long-standing; FinCEN 2019 guidance |
NoteCheck thresholds locally. They change, and data requirements below the threshold still apply in several regimes.
The EU approach
- No threshold for transfers between CASPs. Information must accompany every transfer.
- Self-hosted addresses. Above €1,000, the CASP must verify ownership or control. The originator's CASP does this before sending, and the beneficiary's CASP before making the assets available. The EBA Guidelines list methods such as attended verification, sending a predefined small amount from and to the address, and asking the customer to digitally sign a specific message with the address's key (EBA/GL/2024/11).
- Missing information. CASPs need risk-based procedures to reject, return or suspend transfers with missing or incomplete data.
The "sunrise" problem
Implementation is uneven across countries. A VASP in a Travel Rule jurisdiction may have to send funds to one in a country that has not implemented it yet. FATF's 2026 update highlighted continued problems with licensing, with identifying VASPs and with offshore providers. Interoperability between Travel Rule messaging protocols is a practical issue too.
| Problem | Practical response |
|---|---|
| Counterparty in a non-implementing country | Risk-assess the VASP; collect data anyway; consider limits |
| Unknown whether address is a VASP | Use analytics and counterparty discovery before sending |
| Different messaging protocols | Use a provider with broad interoperability |
| Missing beneficiary data | Hold, return or reject under written procedure |
Why it matters for stablecoin settlement
- B2B flows count. A PSP settling an operator in USDC through a VASP is making a virtual-asset transfer, and the data has to travel.
- Counterparty discovery. Before sending, you need to know whether the receiving address belongs to a VASP or is self-hosted.
- Stablecoins are the focus. FATF said in July 2026 that "most identified on-chain illicit activity now involves stablecoins". It also flagged a criminal-linked group developing a stablecoin designed to resist freezing.
NoteFor businesses receiving stablecoin settlement, the simplest path is to receive from, and hold with, licensed providers that already run Travel Rule messaging. Self-hosted receipt triggers verification steps.
WarningSplitting transfers to stay under thresholds is structuring. In the EU there is no CASP-to-CASP threshold to avoid anyway.
Illustrative example: weekly operator settlement
Illustrative example. The parties and figures are invented.
An EU PSP settles a Malta-licensed operator €900,000 a week in EURC. Both use authorised CASPs. Each payment carries originator and beneficiary data through the CASPs' Travel Rule messaging, with no threshold. When the operator asks for one payment to go to a new self-hosted treasury wallet, the PSP's CASP asks the operator to sign a message with that wallet's key before releasing funds. The payment arrives a day later than usual, but is clean.
Timeline
| Date | Event |
|---|---|
| May 2019 | FinCEN guidance applies BSA rules to convertible virtual currency |
| June 2019 | FATF extends R.15 and its Interpretive Note to virtual assets |
| 1 Sep 2023 | UK Travel Rule for cryptoassets applies |
| 30 Dec 2024 | EU recast Transfer of Funds Regulation applies to crypto-asset transfers |
| June 2025 | FATF revises Recommendation 16 |
| 16 Jul 2026 | FATF seventh targeted update: 83% of surveyed jurisdictions have legislation |
| End-2030 | Revised R.16 changes to come into effect (FATF) |
Q/A
Does the Travel Rule apply to self-custody?
Transfers between two self-hosted wallets with no VASP involved are outside the VASP obligation. As soon as a CASP is on one side, its obligations apply, including ownership verification above €1,000 in the EU.
Is there a FATF threshold?
FATF standards allow countries to set a de minimis threshold of USD/EUR 1,000 for virtual-asset transfers, with reduced data requirements below it. The EU chose not to.
Who sends the data, the PSP or its CASP?
The VASP or CASP making the transfer. A PSP using a provider should confirm that the provider handles messaging and that the PSP supplies accurate customer data.
What if the receiving VASP will not accept Travel Rule data?
Treat it as a risk signal. Many VASPs restrict or decline transfers to counterparties that cannot receive the data.
Does the Travel Rule apply to stablecoins specifically?
It applies to virtual-asset transfers in general, and stablecoins are virtual assets.
Does it replace sanctions screening?
No. Travel Rule data feeds sanctions screening; both are needed.
Sources
- FATF, seventh targeted update on virtual assets and VASPs (16 July 2026): https://www.fatf-gafi.org/en/news/targeted-updated-va-vasps-2026.html
- FATF, report PDF: https://www.fatf-gafi.org/content/dam/fatf-gafi/reports/7th-targeted-update-on-implementation-fatf-standards-vas-vasps-2026.pdf
- FATF, targeted update (26 June 2025): https://www.fatf-gafi.org/en/publications/Fatfrecommendations/targeted-update-virtual-assets-vasps-2025.html
- FATF, update to Recommendation 16 (June 2025): https://www.fatf-gafi.org/en/publications/Fatfrecommendations/update-Recommendation-16-payment-transparency-june-2025.html
- EBA, Travel Rule Guidelines: https://www.eba.europa.eu/activities/single-rulebook/regulatory-activities/anti-money-laundering-and-countering-financing-terrorism/guidelines-information-requirements-relation-transfers-funds-and-certain-crypto-assets-transfers
- EUR-Lex summary, Regulation (EU) 2023/1113: https://eur-lex.europa.eu/EN/legal-content/summary/information-accompanying-transfers-of-funds-and-certain-crypto-assets.html
- FinCEN, guidance on convertible virtual currencies (FIN-2019-G001, 9 May 2019): https://www.fincen.gov/resources/statutes-regulations/guidance/application-fincens-regulations-certain-business-models
- Chainalysis, FATF seventh targeted update: https://www.chainalysis.com/blog/fatf-7th-targeted-update-crypto-compliance/
- UK, Money Laundering and Terrorist Financing (Amendment) (No. 2) Regulations 2022, regs 1 and 5: https://www.legislation.gov.uk/uksi/2022/860/regulation/5/made
- eCFR, 31 CFR 1010.410: https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1010/subpart-D/section-1010.410
- EUR-Lex, Regulation (EU) 2023/1113 (full text): https://eur-lex.europa.eu/eli/reg/2023/1113/oj
- EBA, Travel Rule Guidelines final report (EBA/GL/2024/11): https://www.eba.europa.eu/sites/default/files/2024-07/6de6e9b9-0ed9-49cd-985d-c0834b5b4356/Travel%20Rule%20Guidelines.pdf
- FATF, Updated Guidance for a Risk-Based Approach to Virtual Assets and VASPs (October 2021): https://www.fatf-gafi.org/content/dam/fatf-gafi/guidance/Updated-Guidance-VA-VASP.pdf
FiatDesk Wiki is educational. Not financial or legal advice.