The Travel Rule in crypto is an anti-money-laundering requirement that obliges regulated crypto service providers, such as exchanges and custodial wallets, to collect information about the sender and recipient of a transfer and pass it to the counterparty provider along with the transfer, so that identity data “travels” with the funds. In short, it places duties on businesses, not directly on individuals, but it shapes what an exchange will ask you before it sends or releases your coins. This explainer covers who must comply, what data moves, how self-hosted wallets are treated, and how the UK, EU and US approaches compare. It is general information, not legal advice.
What is the Travel Rule in crypto?
The concept comes from traditional banking, where wire transfers above certain amounts must carry originator and beneficiary details from one institution to the next. In the United States, for example, the funds transfer rule in 31 CFR 1010.410(f) requires a transmittor’s financial institution, for transmittal orders of $3,000 or more, to include the transmittor’s name, address, account number where applicable, the amount, the execution date and the identity of the recipient’s institution, among other items and subject to limited exceptions. International anti-money-laundering standards set by the Financial Action Task Force (FATF) extended the same logic to virtual asset service providers (VASPs), and national regulators have since written it into their own rules.
The purpose is transparency between institutions. A receiving exchange that knows who sent a deposit, and a sending exchange that knows who will receive a withdrawal, can screen both parties against sanctions lists and spot suspicious patterns. The UK Financial Conduct Authority describes the rule as a tool to help firms detect suspicious transactions and carry out effective sanctions screening.
Who must comply: exchanges, custodians and other service providers
The obligation sits with regulated intermediaries: centralised exchanges, brokers, custodial wallet providers and other businesses that transfer crypto-assets on behalf of customers. In the EU these are crypto-asset service providers (CASPs); in FATF terminology and in many other jurisdictions they are VASPs. An individual sending coins from one self-hosted wallet to another, with no provider involved, is not directly subject to the rule.
In practice, though, almost every trader touches the rule indirectly. When you withdraw from an exchange, deposit to one, or trade through a platform that holds funds, that provider has to satisfy its own Travel Rule duties, and it will collect the necessary data from you. The rule sits alongside the wider set of obligations described in our overview of crypto AML regulations, including customer due diligence and transaction monitoring.
What data is shared, and when a transfer triggers the rule
The exact data set depends on the jurisdiction, but at its core it identifies both ends of the transfer: who the originator is and who the beneficiary is, together with the account or wallet references involved. The US funds transfer rule above shows the traditional template for that list. In the EU, Regulation (EU) 2023/1113 (in force 29 June 2023, applicable from 30 December 2024) requires crypto-asset service providers to ensure that crypto-asset transfers are accompanied by information on the originator and the beneficiary (Article 14).
Thresholds are where jurisdictions diverge most:
- EU: Regulation (EU) 2023/1113 sets no minimum amount for the originator and beneficiary information that must accompany crypto-asset transfers. EUR 1,000 matters only for the separate ownership check on transfers to or from self-hosted addresses, discussed below.
- US: the funds transfer rule in 31 CFR 1010.410(f) applies to transmittal orders of $3,000 or more. In October 2020, FinCEN and the Federal Reserve Board proposed lowering the threshold to $250 for international transfers (domestic transfers would stay at $3,000); the current regulation text cited above still states $3,000.
- UK: the FCA’s statement on Travel Rule expectations does not itself state a threshold; firms are directed to the Money Laundering Regulations and the industry guidance published by the Joint Money Laundering Steering Group (JMLSG).
The data is exchanged between providers, usually through dedicated messaging protocols, before or at the time of the on-chain transfer. It is not written to the blockchain itself.
Self-hosted wallets and the Travel Rule
Transfers between a regulated provider and a self-hosted (unhosted) wallet are the most frequently misunderstood part of the rule. There is no counterparty institution to receive the data, so regulators have built specific provisions instead.
Under Regulation (EU) 2023/1113, a crypto-asset service provider involved in a transfer to or from a self-hosted address must obtain and hold information on both the originator and the beneficiary (Article 14(5) for the sending provider, Article 16(2) for the receiving provider). For a transfer of an amount exceeding EUR 1,000 to or from a self-hosted address, the provider must also take adequate measures to assess whether that address is owned or controlled by its own customer. The European Banking Authority issued Travel Rule guidelines on 4 July 2024, applicable from 30 December 2024, under a mandate that also covers identifying and verifying the originator or beneficiary of transfers to or from self-hosted addresses.
For users, this explains common exchange requests: a declaration that a withdrawal address belongs to you, a signed message from the wallet, or a small test transfer. These are ownership checks, not an accusation, and how a platform runs them is its own policy decision.
How the rule differs across jurisdictions (UK, EU, US)
| Jurisdiction | Key source | What it establishes |
|---|---|---|
| United Kingdom | FCA statement, 17 August 2023 | From 1 September 2023, UK cryptoasset businesses must collect, verify and share information about cryptoasset transfers. Firms remain accountable when using third-party suppliers. |
| European Union | Regulation (EU) 2023/1113 (in force 29 June 2023, applicable from 30 December 2024); EBA guidelines issued 4 July 2024, applicable from 30 December 2024 | Originator and beneficiary information must accompany crypto-asset transfers, with no minimum amount; an ownership assessment for transfers exceeding EUR 1,000 to or from self-hosted addresses. |
| United States | 31 CFR 1010.410(f); FinCEN guidance FIN-2019-G001 (9 May 2019), “Application of FinCEN’s Regulations to Certain Business Models Involving Convertible Virtual Currencies” | Funds transfer information requirements apply to transmittal orders of $3,000 or more. |
The cross-border problem is that implementation is uneven. The FCA’s statement addresses this directly: when sending to a jurisdiction without the rule, a UK firm must still collect, verify and store the required information before making the transfer; when receiving a transfer with missing or incomplete information, it should take a risk-based decision on whether to make the assets available to the beneficiary. This is why a deposit from an overseas platform can sometimes be held while a UK or EU exchange requests more details.
Travel Rule vs. wallet screening: two different compliance checks
The Travel Rule answers the question “who is sending and who is receiving?” It does not answer “where have these funds been?” A transfer can carry complete, accurate identity data and still originate from an address with exposure to sanctioned entities, mixers or stolen funds.
That second question is the domain of on-chain screening. Wallet screening analyses the address and the transaction history behind it: direct and indirect exposure to OFAC-sanctioned addresses, USDT freeze or blacklist status, and fund flows through high-risk services across several hops. Compliance teams generally treat the two as complementary: Travel Rule data establishes identity, while screening assesses the risk of the funds and the counterparty address.
| Travel Rule | Wallet screening | |
|---|---|---|
| Question answered | Who are the originator and beneficiary? | What risk is attached to this address and its funds? |
| Data source | Customer records exchanged between providers | Public blockchain activity and risk intelligence |
| Applies to | Regulated service providers | Anyone assessing a counterparty address |
What P2P traders and small platforms should prepare
Peer-to-peer traders are not usually service providers themselves, but the exchanges they deposit to and withdraw from are. Practical preparation reduces friction:
- Keep accurate identity details on your exchange accounts. Mismatched names between sending and receiving platforms can lead to a transfer being held for review.
- Be ready to prove ownership of self-hosted wallets. Know how to sign a message from your wallet, and keep withdrawal addresses you control separate from addresses you use for third parties.
- Screen counterparties before you accept funds. Complete Travel Rule data does not protect you from receiving tainted coins. Checking the counterparty’s address for sanctions exposure and frozen USDT before a trade is the step you control.
- Keep records of where funds came from. Trade confirmations, chat history with counterparties and on-chain transaction IDs make it easier to respond to an exchange enquiry; our guide on how to prove source of funds covers this in detail.
Small platforms that do qualify as service providers face the full obligation and should take advice from qualified counsel in each jurisdiction they serve. Open questions remain, including how consistently regulators will treat transfers to and from jurisdictions that have not implemented the rule, and how self-hosted wallet treatment will evolve. Regulation (EU) 2023/1113 builds in its own review: Article 37(2) asks the Commission, after consulting the EBA, for a report by 1 July 2026 on the risks of transfers to or from self-hosted addresses and entities not established in the Union, and Article 37(3) requires a report on the regulation’s application by 30 June 2027, which is to assess, among other points, the costs and benefits of introducing de minimis (minimum) thresholds for the information accompanying crypto-asset transfers.
Before accepting a P2P payment or sending funds to a new address, you can check a wallet’s risk on SafeON and see its risk score, sanctions exposure and USDT freeze status.
FAQ
What is the Travel Rule in cryptocurrency?
It is an anti-money-laundering requirement under which regulated crypto service providers collect originator and beneficiary information for a transfer and share it with the counterparty provider. It derives from FATF standards and is implemented through national rules, such as the UK Money Laundering Regulations and Regulation (EU) 2023/1113.
Does the Travel Rule apply to transfers to my own wallet?
The rule applies to the provider, not to you, but a provider sending to or receiving from your self-hosted wallet still has obligations. In the EU, under Regulation (EU) 2023/1113, the provider obtains and holds originator and beneficiary information and, for transfers exceeding EUR 1,000, must take adequate measures to assess whether the self-hosted address is owned or controlled by its customer.
What is the UK Travel Rule for crypto?
Since 1 September 2023, UK cryptoasset businesses must collect, verify and share information about cryptoasset transfers under the UK Money Laundering Regulations. The FCA expects firms to take all reasonable steps to comply and to apply risk-based handling to transfers involving jurisdictions without the rule.
Is the Travel Rule the same as AML screening?
No. The Travel Rule shares identity data between providers; AML or wallet screening assesses the risk of an address and its funds, such as sanctions exposure or links to illicit services. Most compliance programmes use both.