Travel Rule

Under the Travel Rule, a bank or exchange that sends money or crypto for you has to hand your name and account details, and the recipient's, to the firm that receives the funds. The point is that investigators can later see who paid whom.

Why an exchange asks whose wallet it is

You paste an address to withdraw coins. Then the app asks something odd. Is this wallet yours, a friend’s or a company’s? That question is the Travel Rule at work, an anti-money-laundering rule under which sender and recipient details follow the money from one provider to the next.

Europe wrote its crypto version into Regulation (EU) 2023/1113, applied since December 30, 2024, and gave it no small-payment exemption: recital 30 wants the same requirements for crypto transfers “regardless of their amount”. There is a second check above EUR 1,000.

When a customer sends more than that to a self-hosted address, the kind a self-custody wallet generates, Article 14(5) tells the provider to “take adequate measures to assess whether that address is owned or controlled by the originator.”

Four thresholds, read on November 8, 2026

The spread runs from no minimum at all in the EU to $3,000 in the US.

Standard Legal reference When full sender and recipient data must travel
FATF Recommendation 16, applied to virtual assets since June 2019 Countries may set a threshold no higher than USD/EUR 1,000 for cross-border wire transfers
EU Regulation (EU) 2023/1113, Article 14 Every crypto transfer a provider carries out, with no minimum
US 31 CFR 1010.410(f) Transmittals of $3,000 or more, including those made in convertible virtual currency
UK Money Laundering Regulations 2017, regulation 64C Names and account numbers on every transfer, full data on cross-border transfers of £800 or more

The FATF ceiling is described in a 2020 Federal Register notice from FinCEN and the Federal Reserve, and the EU regulation’s recital 2 dates the FATF changes for virtual asset providers to June 2019. The US figure sits in the rule text on govinfo; FinCEN’s 2019 guidance says a transmittal of $3,000 “or its equivalent in CVC” may trigger it.

The UK row moved most recently. According to legislation.gov.uk, S.I. 2026/621 replaced 1,000 euros with £800 in regulation 64C(4) from June 30, 2026, and when every business in the chain is in the UK, the fuller data set is handed over on request within three working days.

What travels, and how

Does the data go on the blockchain? No. Article 14(4) of the EU regulation lets providers keep it out of the transfer itself, so it moves through a separate channel, sent ahead of the coins or with them.

On the sender’s side the list in Article 14(1) is long. Name, wallet address and account number come first. Then comes a home address with an ID document number and a customer number, or else a date and place of birth. Most of that was gathered at sign-up during KYC checks, so in practice the Travel Rule reuses what the exchange already knows.

The misreading to avoid

Many people assume the rule binds individuals. It does not. The EU text applies “as long as there is a crypto-asset service provider involved,” and recital 39 says a provider “should in principle not be required to verify the information on the user of the self-hosted address.” A payment from one personal wallet to another, with no provider at either end, falls outside it.

UK firms carry the same burden. Since September 1, 2023, cryptoasset businesses there have had to “collect, verify and share information about cryptoasset transfers,” the FCA says.

If the receiving firm sits in a country without the rule and cannot take the data, the UK firm still collects and verifies it, and should store it before sending. Before a large EU withdrawal to your own wallet, expect a step that asks you to show the address is yours.

Where it comes up