What is Travel Rule?

Travel Rule (FATF Recommendation 16)

The Travel Rule (based on FATF Recommendation 16) requires financial institutions and Virtual Asset Service Providers (VASPs) to collect, retain, and transmit originator and beneficiary information when transferring funds or virtual assets. For crypto transactions, this means VASPs must share customer identification data — including names, account numbers, and addresses — with the receiving VASP for transfers above applicable thresholds (typically $1,000 or €1,000).

Why Travel Rule Matters

The Travel Rule is one of the most significant regulatory challenges facing the crypto industry. While traditional financial institutions have implemented the Travel Rule for decades through established messaging systems like SWIFT, the crypto sector lacks equivalent infrastructure. The requirement to share personally identifiable information between VASPs for crypto transfers creates technical, operational, and privacy challenges that the industry is still working to resolve. Non-compliance exposes VASPs to enforcement actions and can result in loss of banking relationships.

Regulatory Implications

Travel Rule implementation varies by jurisdiction but generally requires:

How Travel Rule Relates to Compliance Monitoring

Travel Rule requirements continue to evolve rapidly. The EU's Transfer of Funds Regulation (recast) has specific crypto provisions, individual EU member states are implementing varying approaches, and jurisdictions like Singapore, Japan, and South Korea have their own frameworks. RegPulse tracks Travel Rule developments across all major jurisdictions, helping your team navigate this complex and evolving compliance requirement.

Monitor Travel Rule Regulations with RegPulse

Stay ahead of Travel Rule-related regulatory changes across the US, EU, and UK with AI-powered alerts.

Start Free Trial →

Frequently Asked Questions

Under the Travel Rule, originator information typically includes the sender's name, account number (or wallet address), and physical address, national ID number, or date/place of birth. Beneficiary information includes the recipient's name and account number. The exact requirements vary by jurisdiction — the EU requires information for all transfers, while the US applies a $3,000 threshold. Some jurisdictions require additional data points.
Crypto companies use Travel Rule compliance protocols — technology solutions that enable VASPs to securely exchange customer information for qualifying transfers. Major protocols include TRISA, OpenVASP, Shyft/Veriscope, Notabene, and Sygna. These solutions create secure messaging channels between VASPs. However, interoperability between protocols remains a challenge, and not all VASPs have implemented compliant solutions yet.
FATF guidance indicates that the Travel Rule applies to VASPs, which are defined by their activities rather than their technology. Fully decentralized protocols without a controlling entity may fall outside the Travel Rule's scope, but protocols with identifiable operators, governance structures, or intermediary functions may be captured. Regulators are increasingly scrutinizing DeFi protocols for VASP characteristics. The regulatory treatment remains an evolving area.

📖 Related Terms

FATF · VASP (Virtual Asset Service Provider) · BitLicense · CASP (Crypto-Asset Service Provider)

⚖️ Related Regulations

FATF Travel RuleMiCA RegulationSEC Crypto Rules

📚 Further Reading

← All Glossary Terms View Pricing Start Free Trial