Compliance Guide · May 2026

FATF Travel Rule in 2026: Complete Guide for Crypto Businesses

The FATF Travel Rule is no longer just a regulatory recommendation — it is actively enforced in the US, EU, UK, UAE, Singapore, and 40+ other jurisdictions. This guide explains exactly what it requires, who it applies to, and the fastest way to stay compliant.

What is the FATF Travel Rule?

The Financial Action Task Force (FATF) Travel Rule — formally FATF Recommendation 16 — requires Virtual Asset Service Providers (VASPs) to collect and share originator and beneficiary information when transferring crypto assets above a defined threshold. The rule extends to crypto the same identification requirements that traditional banks have applied to wire transfers since 1996 under the original "Travel Rule."

FATF updated its guidance specifically for virtual assets in 2019 and again in 2021, clarifying that the rule applies to VASPs regardless of whether the receiving party is another VASP or an unhosted (self-custody) wallet. For transactions involving unhosted wallets above threshold, VASPs must apply enhanced due diligence and may need to delay or block the transfer until the counterparty identity is verified.

The core requirement is straightforward: when a VASP sends or receives a crypto transaction above the threshold, it must collect the full name, wallet address, and physical address (or national ID) of both the originator and the beneficiary — and transmit that information to the receiving VASP before or simultaneously with the transaction.

Which countries enforce the Travel Rule in 2026

Jurisdiction Legal framework Threshold Status 2026
United StatesFinCEN / BSA$1,000Enforced
European UnionMiCA / TFR€1,000Enforced
United KingdomFCA / MLR 2017£1,000Enforced
UAEVARA / CBUAEAED 3,500Enforced
SingaporeMAS / PS ActSGD 1,500Enforced
SwitzerlandFINMA / AMLACHF 1,000Enforced

Japan, Canada, South Korea, Hong Kong, Australia, and 35+ additional FATF member states have either enacted or are in active implementation of equivalent Travel Rule regulations as of 2026.

Which crypto businesses must comply (VASPs)

FATF defines a VASP as any natural or legal person that conducts virtual asset activities as a business. In practice, Travel Rule compliance obligations apply to:

  • Centralized exchanges (CEX) — any platform allowing users to buy, sell, or swap crypto
  • OTC trading desks — bilateral crypto-to-fiat or crypto-to-crypto brokers
  • Custodial wallet providers — services that hold private keys on behalf of users
  • Crypto ATM operators — physical kiosks facilitating cash-to-crypto conversion
  • Payment processors — businesses enabling merchants to accept crypto payments
  • DeFi front-ends — increasingly under scrutiny, especially those with admin keys or fee capture

Self-custody (non-custodial) wallet users are generally not classified as VASPs and are not directly subject to Travel Rule obligations. However, when a self-custody user transacts with a regulated VASP, the VASP must apply its screening requirements to that counterparty wallet.

Threshold amounts by jurisdiction

The threshold determines when Travel Rule obligations are triggered. Below the threshold, standard AML monitoring still applies but full originator/beneficiary data transmission is not required:

  • United States: $1,000 USD per transaction
  • European Union: €1,000 per transaction (no de minimis exception under MiCA Transfer of Funds Regulation)
  • United Kingdom: £1,000 per transaction
  • UAE: AED 3,500 (~$950 USD)
  • Singapore: SGD 1,500 (~$1,100 USD)
  • Switzerland: CHF 1,000 (~$1,100 USD)

Note that some jurisdictions — including the EU under MiCA — removed the de minimis threshold entirely in 2024, meaning all crypto asset transfers between VASPs now require Travel Rule data transmission regardless of amount.

How to check counterparty wallet compliance

Checking the counterparty wallet before a transaction is the first step in Travel Rule compliance. Before transmitting funds, VASPs must verify that the receiving address is not linked to sanctioned entities, darknet markets, or other flagged activity.

The fastest way to screen a counterparty wallet is via @scorechain_amlbot in Telegram — paste the wallet address and receive a full risk assessment in 8 seconds, including OFAC sanctions status, FATF typology exposure, and a 0–100 risk score. The same dataset powers the CryptoAML.ai web checker for teams that prefer a browser interface.

For automated screening at scale, the Scorechain API allows businesses to integrate wallet checks directly into their transaction processing pipeline — flagging high-risk addresses before any funds move, with a full audit trail for regulatory documentation.

Penalties for non-compliance

Regulators across jurisdictions have moved from guidance to active enforcement. Key enforcement actions in 2024–2026 have included:

  • License revocation — VASPs operating without Travel Rule compliance have lost operating licenses in Singapore, the UK, and several EU member states
  • Civil monetary penalties — FinCEN penalties for Travel Rule violations have ranged from $100,000 to over $3 billion in cases involving systemic non-compliance
  • Criminal liability — Individual executives face criminal exposure for willful non-compliance in the US, EU, and UK
  • Transaction blocking — Correspondent banking relationships for non-compliant VASPs have been severed by major US and EU banks

The cost of implementing compliance tools — screeners, Travel Rule messaging protocols, KYC automation — is a fraction of a single penalty. The operational risk of operating without them is no longer acceptable in any major jurisdiction.

FAQ

What is the FATF Travel Rule for crypto?

The FATF Travel Rule (Recommendation 16) requires VASPs to share sender and receiver identification information for crypto transactions above $1,000 (US) or €1,000 (EU). It mirrors traditional wire transfer rules and applies to exchanges, OTC desks, custodial wallets, and other regulated crypto businesses.

Which countries follow FATF Travel Rule?

US, EU (MiCA), UK, UAE, Singapore, Switzerland, Japan, and 40+ other FATF member states. Each jurisdiction has set its own enforcement threshold and implementation timeline, but the core identification sharing requirement is effectively global among regulated markets.

How to comply with FATF Travel Rule?

Use compliant wallet screening tools before each transaction above threshold. Check the AML status of counterparty wallets via @scorechain_amlbot or the CryptoAML.ai checker. Collect and transmit originator and beneficiary data using a FATF-compliant Travel Rule messaging protocol. Document all screening decisions with timestamps for audit purposes.

What is VASP in crypto?

VASP stands for Virtual Asset Service Provider. Under FATF guidance, VASPs include cryptocurrency exchanges, OTC trading desks, crypto ATM operators, custodial wallet providers, and any business that facilitates crypto transfers on behalf of customers. Self-custody wallets used by individuals are generally not classified as VASPs.

FATF compliance

Screen wallets for FATF compliance

OFAC, FATF typologies, darknet, and sanctions lists — checked in 8 seconds. Free first 3 checks.