FATF Travel Rule Regulation: What It Means for Crypto Payments

When people talk about the rules that shape compliant crypto payments, one body sits at the center of the conversation: the Financial Action Task Force. The FATF sets the international standards that governments use to fight money laundering and terrorist financing, and over the past several years it has extended those standards squarely into digital assets. If your business is offering crypto, building stablecoin infrastructure, or processing cross border transfers, the FATF Recommendations are not abstract policy — they are the baseline that determines whether you can legally accept payments and serve new customers.

This post breaks down what the relevant FATF standards say, how the crypto travel rule actually works, and what it means for any company moving virtual assets across borders.

Key Point Summary

• Who the FATF is and why it matters
• What the crypto travel rule actually requires
• How the travel rule maps onto traditional financial institutions
• The 2025 revisions to Recommendation 16
• A patchwork of jurisdictions
• What this means for virtual asset service providers moving crypto

Who the FATF is and why it matters

The Financial Action Task Force is an intergovernmental organization that issues 40 Recommendations forming the global blueprint for anti money laundering and counter-terrorist financing. While the FATF itself is not a regulator or a monetary authority, its standards are adopted into national law by more than 200 jurisdictions. A country's banking supervisor or central bank translates FATF guidance into binding regulatory requirements, and traditional financial institutions, banks, and now virtual asset service providers all answer to those rules.

Two Recommendations matter most for crypto. Recommendation 15 and its Interpretative Note were updated in 2019 to apply AML/CFT measures to virtual assets and the businesses that handle them. Recommendation 16 — commonly called the travel rule — governs the information that must accompany funds transmittals, including virtual asset transfers.

What the crypto travel rule actually requires

In traditional finance, the travel rule has existed for decades. In the United States it lives inside the Bank Secrecy Act and is enforced by the Financial Crimes Enforcement Network, which has historically required identifying details to "travel" alongside wire transfers above a set transaction threshold. The crypto travel rule simply applies that same logic to blockchain payments.

The core idea is straightforward. For a covered transfer, the originating institution must collect and transmit originator information to the receiving financial institution, and certain beneficiary information must travel as well. Under this framework, virtual asset service providers must collect and verify information about both the originator and beneficiary of a transaction and share it with their counterparties so that the data travels with the transfer to increase transparency and traceability.

In practice, that means a VASP handling VA transfers needs to attach a defined set of customer information to each transaction. Depending on the jurisdiction, this can include:

• The full name of both the originator and beneficiary

• The originator's account number, crypto wallet, or wallet address used for the transaction

• A physical address, national identity number, customer identification number, or date of birth

• The beneficiary's wallet address and, increasingly, location data

• A unique transaction reference tying the message to the on-chain movement

For corporate clients, a legal entity identifier can stand in for personal data, while for natural persons the rule leans on identity details. The goal is the same one that underpins correspondent banking relationships in the traditional world: making sure each party knows who is on the other side and that the receiving account exists.

How the travel rule maps onto traditional financial institutions

It helps to see the parallels. When an originating bank sends a cross border wire, it includes originator and beneficiary fields so the recipient bank can run transaction monitoring and screen the names. Crypto transactions now carry the same expectation. The FATF's guiding principle is "same activity, same risk, same rules" — if a digital asset transfer poses the same risk as a wire, it should meet the same travel rule requirements regardless of the technology.

This is why the FATF frames virtual assets not as a loophole but as another channel inside the global financial system. Whether value moves as fiat currencies through virtual accounts or as digital currency across a blockchain, the underlying obligation to mitigate risks of illicit finance does not change.

The 2025 revisions to Recommendation 16

The standards are not static. On 18 June 2025, the FATF announced changes to Recommendation 16 — the travel rule in the virtual asset context — agreed at its June 2025 Plenary, with the changes coming into effect by the end of 2030 as jurisdictions adopt them into law. The headline updates include clarifying who in the payment chain is responsible for the data, standardizing what information must accompany messages, and pushing institutions toward technology that protects against fraud and error.

Under the new standards, the payment chain is treated as beginning with the financial institution that first receives the instruction from the customer, and standardized requirements apply to peer-to-peer cross-border payments above USD/EUR 1,000, covering name, address, and date of birth. One notable addition is beneficiary location data. Unlike the originator address, the beneficiary's information does not need to be provided in full — only the country and town are required — but it represents an additional data point the originator must supply to their financial institution.

For any provider building transfer services today, the message is clear: design for the stricter standard now, because the 2030 transition will tighten what reasonable steps look like.

A patchwork of jurisdictions

The travel rule applies in many jurisdictions, but implementation is uneven, and that fragmentation is one of the hardest parts of compliance. In the 2025 FATF survey, 85 jurisdictions had passed legislation implementing the travel rule, up from 65 in 2024. Counting those still in the legislative process, around 99 jurisdictions have passed or are passing travel rule legislation.

The European Union is among the most advanced. The EU regulates crypto-assets through MiCA, which harmonizes licensing and market rules, and the Transfer of Funds Regulation, which implements FATF Recommendation 16 for crypto-asset transfers; the EBA's final travel rule guidelines have applied since 30 December 2024. A critical detail for businesses: under the TFR, when a crypto-asset service provider is involved, the required originator and beneficiary information must accompany all provider-to-provider transfers with no minimum threshold, and for transfers to or from self-hosted addresses providers must collect the information and assess transfers over €1,000. The United States continues to rely on the Bank Secrecy Act framework and FinCEN's existing thresholds for funds transfers.

Because rules differ by country, a single cross border transaction can touch two or three different sets of obligations at once. This is precisely why VASP due diligence and counterparty checks have become a core operational function rather than a box-ticking exercise.

What this means for virtual asset service providers moving crypto

If your company is moving stablecoin payments, settling in crypto assets, running currency conversion between traditional currencies and digital assets, or using stablecoins for cross border transactions that move value internationally, the practical implications come down to a few themes.

First, you need real customer information at onboarding. You cannot transmit originator information you never collected, so know-your-customer due diligence has to be solid before the first transaction. Second, you need a way to exchange recipient data with counterparties securely — the transaction details have to travel without exposing customers to data leaks. Third, you need transaction monitoring that flags anomalies across both incoming and outgoing transfers, including movements to an external wallet that a customer may manage themselves.

For institutional clients, the upside is significant. Working with a counterparty that has these controls fully integrated means you can buy crypto, move stablecoins, and manage wallets while staying inside regulatory requirements — without building the entire compliance stack yourself. That ability to ensure compliance out of the box is increasingly what separates a credible provider from a risky one. It also helps reduce costs, because a compliant rail with global reach removes the friction of stitching together fragmented transfer services and improves the predictability of cash flow for cross-border operations.

This is the position FinchTrade is built around. As a Swiss VQF-regulated desk focused on cross-border payments and OTC crypto liquidity, the goal is to let businesses send value across corridors — Europe, Africa, LatAm, and the UAE — with faster, lower-cost international commerce and travel rule regulation handled as part of the infrastructure rather than as an afterthought.

Conclusion

FATF Recommendation 16 and the broader FATF standards are not trying to slow crypto down; they are trying to make virtual asset transfers as transparent and traceable as the wire transfers and correspondent banking relationships that came before them. For any business offering crypto or processing blockchain payments, the practical takeaway is simple: collect proper customer information, make sure the right originator and beneficiary data travels with every transfer, and choose partners who treat travel rule requirements as a foundation, not a feature. Get that right, and crypto becomes a legitimate, scalable channel inside the regulated financial system rather than a compliance liability waiting to surface.

For requesting more information about how we can help reach out to us. We're here to help and answer any questions you may have.

Contact us!