Last reviewed: 1 October 2026
In brief
- The Travel Rule makes crypto exchanges and custodians send the name and account details of the sender and recipient along with a transfer, as banks do for wires.
- In the EU there is no minimum amount between providers. In the US the funds-transfer rule applies to transmittals of $3,000 or more by covered institutions, including crypto money transmitters.
- Transfers to or from your own wallet are where most users and businesses notice it: expect questions about who owns the address.
You withdraw coins from an exchange and it asks for the recipient’s name. Or a customer pays your business in USDC from their exchange account and the exchange holds the funds until someone answers a form. Both are the Travel Rule at work. It is an anti-money-laundering rule, and it is the reason a crypto transfer through a regulated provider now carries more than a wallet address.
What is the Travel Rule?
The rule began in banking. When a bank sends a wire, information about the person sending it and the person receiving it has to travel with the payment. In 2019 the Financial Action Task Force (FATF), the body that sets global anti-money-laundering standards, extended the same idea to crypto service providers. Its 2021 guidance on virtual assets explains how: the provider sending a transfer collects details on the originator and the beneficiary and passes them to the provider receiving it. Under the interpretive note to Recommendation 15, countries may apply a lighter requirement below USD/EUR 1,000: names and wallet addresses still travel, but they need not be verified unless there is a suspicion.
FATF standards are not law. Each country has to write them into its own rules, and that is still uneven. As of its July 2026 targeted update, FATF said jurisdictions had made progress on the Travel Rule, but almost half of those with Travel Rule laws had not yet taken any supervisory or enforcement action under them.
What information travels with a transfer?
The EU rules are the most detailed. Under the Transfer of Funds Regulation (EU) 2023/1113, Article 14, the sending provider must attach:
- the sender’s name, blockchain address and crypto account number (where an account is used);
- the sender’s address with country, official ID number and customer number, or instead their date and place of birth;
- the recipient’s name, blockchain address and crypto account number (where one is used);
- a legal entity identifier (LEI) for either side where the sender has given one and the message format has room for it.
The rules do not require personal data to be written on the blockchain. Providers typically exchange it through separate messaging systems, usually run by specialist Travel Rule vendors, before or at the same time as the on-chain transfer.
How do the EU, US and UK rules differ?
European Union. The regulation has applied since 30 December 2024. There is no minimum amount for transfers between crypto-asset service providers. The receiving provider must check that the information arrived. If it is missing or incomplete, the provider follows risk-based procedures to decide whether to execute, reject, return or suspend the transfer, and may ask for the missing details first (Article 17). A provider that repeatedly sends transfers without the data can be warned, restricted or cut off, and the receiving provider has to report it to its supervisor.
United States. The US uses its existing funds-transfer rule, 31 CFR 1010.410(f), which covers transmittals of $3,000 or more sent by banks and other covered financial institutions. It requires the sending institution to pass on the sender’s name, account number and address, the amount, the date and the recipient’s institution, plus whatever recipient details it received. FinCEN confirmed in its May 2019 guidance (FIN-2019-G001) that this applies to money transmitters handling convertible virtual currency.
United Kingdom. The Travel Rule came into force on 1 September 2023 through Part 7A of the Money Laundering Regulations 2017. The FCA’s statement on its expectations deals with the gap problem: when sending to a country without the rule, a UK firm must still collect, verify and store the data; when receiving a transfer with missing data, it decides on a risk basis whether to release, hold or return the funds.
What happens with self-hosted wallets?
A self-hosted wallet (one where you hold the keys, such as a hardware wallet) has no provider on the other side to swap data with. The Travel Rule does not apply to a transfer between two self-hosted wallets at all. When one end is a regulated provider, the EU rules still apply.
For a transfer from an EU provider to a self-hosted address, the provider must obtain and hold the sender and recipient information. If the amount exceeds EUR 1,000, it must also take adequate steps to assess whether the address is owned or controlled by its own customer (Article 14(5)). The same applies in reverse for deposits over EUR 1,000 from a self-hosted address (Article 16(2)). In practice that means a form asking whose wallet it is, and sometimes a signed message or a small test transfer to prove control.
What does it mean for a business taking crypto payments?
The rule binds the providers, not a shop taking a payment wallet to wallet. It still reaches most businesses through their providers:
- Payment processors and custodial accounts. If you receive funds into an account at an exchange or processor, that provider handles Travel Rule data for incoming transfers. When the customer pays from a self-hosted wallet, there is no sending provider, so your provider may have to collect the sender’s details itself. Ask which network it uses and how it treats transfers that arrive without data.
- Delayed customer payments. A customer paying from an exchange may face a hold while their exchange or yours asks for details. Build that into your checkout flow and your refund policy.
- Withdrawals to your own wallet. If you move revenue from an EU exchange to a company hardware wallet, expect ownership checks on transfers above EUR 1,000. Keep proof that the address is yours.
- Payouts. When you pay suppliers or staff through a provider, you will be asked for the recipient’s name and, in some cases, details of the platform holding their wallet.
Our pillar guide on how crypto payments work for businesses covers processors, settlement and fees. For the licences behind these duties, see crypto regulation explained, and before choosing a provider, read how to check a crypto company.
Sources
- FATF, The FATF Recommendations (Recommendations 15 and 16 and interpretive notes)
- FATF, Updated guidance for a risk-based approach to virtual assets and VASPs (October 2021)
- FATF, Targeted update on implementation of the FATF standards on VAs and VASPs (July 2026)
- Regulation (EU) 2023/1113, Transfer of Funds Regulation, Articles 14, 16, 17 and 40
- US Code of Federal Regulations, 31 CFR 1010.410(f)
- FinCEN, FIN-2019-G001 (9 May 2019)
- UK Money Laundering Regulations 2017, Part 7A
- FCA, Expectations for UK cryptoasset businesses complying with the Travel Rule
