Not legal advice. Educational only. Rules differ by jurisdiction and change; check the official text and talk to counsel. Vendor names are examples, not endorsements.
What the Travel Rule is
- Origin. FATF Recommendation 16 has long required banks and other payment providers to send payer and payee details with wire transfers. FATF extended its standards to virtual assets in 2018 and 2019 through Recommendation 15, which cross-references R.16. That cross-reference is what the industry calls the Travel Rule.
- The core duty. In FATF's words, the Travel Rule "requires VASPs and financial institutions to obtain, hold, and transmit specific originator and beneficiary information immediately and securely when engaging in payments or value transfers, including VAs and hybrid payment chains" (FATF, 2026).
- What it is not. It is not a ban on self-custody, and it does not by itself decide who needs a licence. It is an information-sharing duty that sits inside a firm's wider AML/CFT programme (customer due diligence, sanctions screening, suspicious-activity reporting).
Who has to comply
| Role | Plain-English meaning | Typical examples |
|---|---|---|
| VASP / CASP | A business that exchanges, transfers, holds or administers crypto for others. The EU term is crypto-asset service provider (CASP). | Exchanges, brokers, custodial wallets, some payment processors |
| Originator's VASP | The provider sending the transfer on its customer's behalf | Customer withdraws from Exchange A |
| Beneficiary's VASP | The provider receiving the transfer for its customer | Exchange B credits the customer |
| Intermediary VASP | A provider in the middle of the chain | Some OTC desks or routing providers |
| Not directly covered | Person-to-person transfers between self-hosted ("unhosted") wallets, with no regulated provider involved | Wallet-to-wallet transfers |
Thresholds differ by jurisdiction. Each country writes its own rule, so the amount at which the full information duty applies varies. The jurisdiction rows below come from the official texts.
How the major jurisdictions apply it
| Jurisdiction | Legal basis | Threshold | Since | Notes |
|---|---|---|---|---|
| United States | Bank Secrecy Act Funds Travel Rule, 31 CFR 1010.410(f) | $3,000 or more | Long-standing; FinCEN confirmed its application to convertible virtual currency in May 2019 (FIN-2019-G001) | Applies where a CVC transaction is a transmittal of funds by a financial institution such as a registered money transmitter. On 2026-10-06 FinCEN withdrew its 2020 unhosted-wallet proposal; the Travel Rule itself is unchanged (Federal Register). |
| European Union | Transfer of Funds Regulation, Regulation (EU) 2023/1113, plus EBA Travel Rule Guidelines | No minimum for CASP-to-CASP transfers; ownership/control checks for self-hosted address transfers over €1,000 | 30 December 2024 | The beneficiary's CASP decides whether to execute, reject, return or suspend a transfer with missing information. See also MiCA. |
| United Kingdom | Part 7A of the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 | As set in the MLRs (see FCA statement) | 1 September 2023 | The FCA expects firms to fully comply when the counterparty is in the UK or another Travel Rule jurisdiction, and to make risk-based decisions when it is not. Firms stay responsible even when they use a third-party supplier. Separate from the new FSMA crypto regime (see UK regulation). |
Data fields and exceptions are long and change; the linked official texts are the source.
Where it breaks down in practice
- The "sunrise" problem. A VASP in a Travel Rule jurisdiction sends to a VASP in a jurisdiction that has not yet implemented it, so the counterparty cannot receive or send the data. The FCA's approach: collect, verify and store the data before sending, and take a risk-based view on incoming transfers with missing data (FCA).
- Enforcement lags the law. 91 of 109 surveyed jurisdictions (83%) have legislation, up from 73% in 2025, and 11 more report it is under way. But 55 of the 91 (60%) had not yet issued findings, directives or enforcement or other supervisory actions focused on Travel Rule compliance (FATF, press release).
- Interoperability. VASPs use different messaging protocols and vendors. If two providers' tools cannot talk to each other, the sender may have no compliant way to pass the data.
- Self-hosted wallets. Transfers between self-hosted wallets involve no regulated party. FATF lists unhosted wallets among the risks jurisdictions still need to address (FATF).
- Stablecoins. FATF reports that "most identified on-chain illicit activity now involves stablecoins" (FATF, July 2026), which pulls stablecoin flows further into Travel Rule discussions. See stablecoins.
What changes next
- Revised R.16 (adopted June 2025). FATF updated its payment-transparency standard: clearer responsibilities along the payment chain, standardised information (name, address, date of birth) for peer-to-peer cross-border payments above USD/EUR 1,000, and new fraud-and-error tools such as recipient verification. The changes take effect by the end of 2030 (FATF).
- How it reaches crypto. How the revised R.16 applies to VASPs runs through Recommendation 15; check FATF's explanatory note and any FATF guidance for virtual assets before relying on a specific requirement.
- Watch list: FATF guidance on revised R.16 for VASPs; the next FATF targeted update (expected, not scheduled); any U.S. BSA rulemaking on CVC; EU AMLA build-out. Follow the regulation tracker.
What this means for builders
- If you run a custodial wallet, exchange or payment flow, budget for Travel Rule messaging from day one, including counterparty-VASP discovery, data storage, and a written policy for missing or incomplete data.
- If you sell into the EU, plan for no minimum on CASP-to-CASP transfers and ownership checks for self-hosted transfers over €1,000.
- If you serve UK users, read the FCA statement alongside the JMLSG guidance it points to.
- If you are non-custodial, whether you are a VASP depends on the facts and the jurisdiction. Get counsel; do not self-certify from this page.
- Travel Rule messaging and compliance providers are listed in the Compliance / KYT / Travel Rule directory (for example Notabene). Listing is not an endorsement.