What is travel rule?

The requirement that businesses transferring crypto pass identifying information about sender and recipient to the receiving business, mirroring long-standing bank rules.

Not yet verifiedHow we verify

3 min read

In this entry

The requirement that businesses transferring crypto pass identifying information about sender and recipient to the receiving business, mirroring long-standing bank rules.

The name comes from banking, where identifying data has had to travel with a wire for decades. Extending it to crypto is why an exchange sometimes asks who owns the address you are withdrawing to, and why a withdrawal to a wallet you control can require you to declare that fact.

The frequent misreading is that this is one global rule. It is a standard that each jurisdiction implements differently, with different thresholds and different treatment of wallets nobody operates on your behalf.

How it works

The international standard is Recommendation 16 of the Financial Action Task Force, which in 2019 was extended to cover virtual asset service providers. It requires the sending business to obtain, hold, and transmit originator and beneficiary information alongside the transfer, and the receiving business to hold it.

Implementation is national and inconsistent:

RegimeInstrumentThreshold
International standardFATF Recommendation 16USD or EUR 1,000 for virtual asset transfers
United StatesBank Secrecy Act funds transfer rules$3,000
European UnionRegulation (EU) 2023/1113no minimum threshold

Thresholds as stated in each instrument. Verify against the current text before relying on any figure.

Because the standard requires the receiving side to be a regulated business, transfers to a wallet with no operator sit outside the messaging system entirely. Jurisdictions handle that gap in different ways, from requiring nothing extra, to requiring the exchange to collect a declaration, to requiring proof that you control the address.

Example

Illustrative. You withdraw from a European exchange to a self-hosted wallet. The interface asks whether the destination is yours or a third party's, and if you say yours, asks you to sign a message from that address or send a small verification amount.

Withdraw instead to another exchange and no such prompt appears, because the two businesses exchange the required data between themselves over a travel rule messaging network. Nothing about the on-chain transaction differs in either case. The compliance layer sits entirely off chain.

Why it matters when you buy

This shapes what you can do with coins after you buy them, and it varies by where you live. A venue that makes self-custody withdrawals easy in one country may require address verification in another. The jurisdiction pages cover the rules by country and US state, and the exchange directory covers each venue's withdrawal handling.

  • vasp: the businesses the rule applies to
  • unhosted wallet: the regulatory name for self-custody
  • aml: the framework this sits inside
  • fatf: the body that sets the standard
  • kyc: the identity data being transmitted
  • proof of address: a related verification step

Questions

Does the travel rule apply to my own wallet transfers?

The rule governs businesses, not you. What reaches you is the exchange's obligation to collect and sometimes verify information about the destination before it will send.

Can an exchange refuse a withdrawal over this?

Yes. Where a venue cannot satisfy its obligations, refusing or delaying the transfer is the compliant outcome. That is why address verification prompts exist rather than silent rejections.

Is this the same as the Bank Secrecy Act travel rule?

It is the same concept applied to a new asset class. The United States rule predates crypto and applies at $3,000, while the FATF standard for virtual assets uses a lower figure and the European Union applies none.