How it works

When a customer sends funds or crypto-assets, the originating institution collects and verifies originator data (such as name and account or wallet address) and beneficiary data, then transmits it to the beneficiary's institution before or at the same time as the transfer. The receiving institution checks that required data is present, screens it, and decides whether to process, suspend or reject transfers with missing information. For crypto, data travels off-chain through dedicated messaging protocols.

Requirements by jurisdiction

• US: Under 31 CFR 1010.410(f), the rule applies to transmittals of funds of $3,000 or more, and FinCEN treats convertible virtual currency transfers by money transmitters as covered.

• EU: The Transfer of Funds Regulation (EU) 2023/1113 has applied since 30 December 2024. There is no de minimis threshold for crypto-asset transfers between CASPs. For transfers over €1,000 to or from a self-hosted address on behalf of a client, the CASP must assess whether the address is owned or controlled by that client.

• UK: The cryptoasset Travel Rule has applied since 1 September 2023 under Part 7A of the Money Laundering Regulations. From 30 June 2026, SI 2026/621 replaced the €1,000 thresholds for inter-business and unhosted wallet transfers with £800. The FCA expects firms to take reasonable steps when counterparties are in jurisdictions without the rule.

• FATF: Revisions to Recommendation 16 agreed in June 2025 standardize payment message content and are generally expected to take effect by the end of 2030. FATF's 2026 update reports that 91 of 109 surveyed jurisdictions have passed Travel Rule legislation.

Common challenges

The "sunrise problem" (counterparties in jurisdictions without the rule), interoperability between messaging protocols, identifying whether a destination address is hosted or self-hosted, and handling missing or mismatched data all slow operations.

How teams handle it in practice

Teams use Travel Rule messaging providers, run counterparty due diligence on other VASPs, and define risk-based policies for missing data and self-hosted wallets. Travel Rule data is fed into screening and monitoring. Compliance platforms like Corsa can bring Travel Rule data into the same alerts and cases as other transaction signals.