What is FATF?

The Financial Action Task Force, an intergovernmental body that sets the global standards countries use to write anti-money-laundering and counter-terrorist-financing law.

It has no direct authority over any exchange, but its recommendations become binding when member countries legislate them, which is how virtual asset rules spread worldwide in near-identical form. The travel rule applied to crypto originates in its recommendations, and its periodic assessments push laggard jurisdictions to act. The primary source is the published Recommendations and their interpretive notes at fatf-gafi.org.

The confusion worth resolving: nobody is regulated by this body. It writes standards. Your exchange answers to a national regulator, and that regulator's rulebook is usually a local translation of the same recommendations, which is why identity checks look so similar from one country to the next.

How it works

The body publishes a set of Recommendations that member countries commit to implementing. Two matter directly to anyone buying crypto.

Recommendation 15, on new technologies, is where virtual asset service providers were brought into the framework. It requires countries to license or register them and to supervise them for anti-money-laundering purposes, which is the origin of the vasp category and of registration regimes worldwide.

Recommendation 16, the wire transfer standard, is the source of the travel rule. Its interpretive note sets a threshold of USD or EUR 1,000, above which the originating provider must send the sender's and recipient's identifying information along with the transfer, and the receiving provider must obtain it (source: the FATF Recommendations and interpretive notes).

Compliance is enforced by peer pressure rather than by penalty. Mutual evaluations assess how well each country has implemented the standards, and countries with serious deficiencies can be placed on public lists that make correspondent banking harder for everyone in that market. That is a strong incentive, which is why the standards propagate so consistently.

Implementation still varies. The threshold, the exact data required, and the deadline for compliance are set by each country's own law, not by the body itself.

Example

Illustrative case of the travel rule in practice. You withdraw from a European exchange to an account at an exchange in another country. Because the amount is above the local threshold, the sending exchange transmits your name and account identifier alongside the transfer, and the receiving exchange checks it against the account it lands in. If the name does not match, the receiving venue may hold or return the funds. That is why withdrawing to someone else's account increasingly fails.

Why it matters when you buy

The identity documents you are asked for, the questions about source of funds, and the restrictions on withdrawing to a third party all trace back to this framework as implemented locally. Read your country's summary at the jurisdiction pages and check what a venue requires at the exchange pages.

Related terms

travel rule — the transfer information requirement, vasp — the category the standards created, aml — the broader obligation, kyc — the identity check that implements it, unhosted wallet — the treatment of self-custody transfers, casp — the European Union's equivalent category.

Questions

Does the FATF regulate my exchange?

No. It sets standards that countries implement in their own law, and your exchange is supervised by a national regulator applying that law. The body itself has no enforcement power over firms.

Why does my exchange ask who I am sending crypto to?

Because the travel rule requires the sending provider to collect and transmit recipient information above a threshold. The threshold and the exact fields are set by the local implementation.

Does the travel rule apply to my own self-custody wallet?

The obligation falls on the provider, and many implementations require additional checks for transfers to wallets not held at another provider. Some venues ask you to prove control of the destination address; see proof of address.