FATF applies Recommendation 16 to virtual-asset transfers through the Interpretive Note to Recommendation 15: an ordering VASP must obtain and hold accurate originator and required beneficiary information, submit it immediately and securely to the beneficiary institution, and both sides must check completeness, sanctions and suspicious conduct under local law.
The Travel Rule began as a payment-transparency rule for obliged institutions; in 2019 FATF expressly extended its virtual-asset and VASP framework. FATF does not enact directly applicable law for every country's users: jurisdictions transpose the standard into their own definitions, thresholds, supervision and sanctions. [2]
An ordering VASP must obtain and hold required accurate originator information and required beneficiary information, then transmit it immediately and securely to the beneficiary VASP or financial institution. Data may travel directly or through a separate messaging system, and FATF expressly does not require it to be recorded on-chain or attached to the Bitcoin transaction itself. [1]
The required set typically includes the originator's name and account or equivalent identifier; an address, identification number, customer number, or date and place of birth; and the beneficiary's name and account or equivalent identifier. FATF supplies a functional minimum, while local implementing law determines the format, verification and exemptions. [3]
The beneficiary provider must obtain and retain originator information and accurate beneficiary information, detect missing or incomplete data and have procedures to execute, suspend or reject a transfer. The Travel Rule does not replace sanctions screening, asset freezing, KYC, record keeping or suspicious-transaction reports; it links those controls to a particular transfer. [5]
The EU implementation in Regulation (EU) 2023/1113 covers crypto-asset transfers where at least one CASP is involved in the EU and sets no general monetary minimum for crypto transfers. For a transfer to or from a self-hosted address, the involved CASP performs the duty; above EUR 1 000 it must take proportionate measures to assess whether its client owns or controls the address. [4]
A direct peer-to-peer transfer between two people without a VASP does not automatically make either holder a regulated provider or add identity to the Bitcoin protocol. Once a user sends from or to an exchange, however, its local duties may require counterparty data, assessment of a self-hosted wallet or refusal; the practical result therefore depends on the service and jurisdiction. [4]
Uneven global rollout creates the sunrise problem: one provider must already send data while a foreign counterparty lacks compatible law or systems. In June 2025 FATF said 99 jurisdictions had enacted or were enacting the Travel Rule, while highlighting persistent gaps in licensing, identifying VASPs, cross-border interoperability and enforcement. [6]
Verifying a transfer means separating blockchain data from the identity message between providers. Check the exact legal entity, jurisdiction and counterparty, what is collected, how it is transmitted and retained, how missing data and self-hosted addresses are handled, and whether policy matches effective law; the EBA Guidelines apply in the EU from 30 December 2024. [5]
For the clearest picture, read this entry together with KYC, Custodial Exchange, MiCA, Bitcoin Privacy, Self-custody, On-chain Analysis.
01Does the Travel Rule put my name on the Bitcoin blockchain?+
No. FATF permits direct or indirect off-transfer transmission and does not require identity data to be attached on-chain. A regulated provider retains it in its own systems and may transmit it to a counterparty or make it available to an authorised authority under law.
02Does the Travel Rule apply to my own Bitcoin wallet?+
A self-custody wallet itself is not a VASP or CASP. The rule can still bind an exchange or custodian on the other side; in the EU, for a transfer above EUR 1 000 to or from a self-hosted address, a CASP proportionately assesses whether its client owns or controls it.