The Crypto Travel Rule and Self-Custody Swaps

The crypto travel rule requires regulated crypto providers to send identifying information about the sender and recipient along with a transfer. It comes from FATF Recommendation 16 and binds exchanges and other service providers, not self-hosted wallets. A swap between two of your own wallets carries no travel-rule data, but providers still check transfers to and from self-hosted addresses.

This guide explains where the rule comes from, how the EU, US and UK apply it as of October 2026, what it means when you use a non-custodial, no-account swap, and what screening still happens regardless. It is general information, not legal advice; rules differ by country and change often.

What the crypto travel rule is

The Financial Action Task Force (FATF) is the intergovernmental body that sets global anti-money-laundering standards. Its Recommendation 16 has long required banks to pass payer and payee details along with wire transfers, so the information "travels" with the money. Through the interpretive note to Recommendation 15, FATF extended that requirement to virtual asset service providers (VASPs), such as exchanges and custodial wallets.

In practice, when one VASP sends crypto to another on a customer's behalf, it should obtain, hold and transmit the originator's and beneficiary's details. FATF's standard sets a threshold of USD/EUR 1,000, above which accurate originator and beneficiary information must accompany the transfer. Countries may set a lower threshold, and FATF says that below it, names and wallet addresses should still be collected.

FATF revised Recommendation 16 in June 2025 to update payment transparency rules, and said the changes reach virtual asset providers mainly through its cross-reference in the VASP standard. Adoption has been gradual. FATF's targeted update published on July 16, 2026 reported that 91 of 109 surveyed jurisdictions (83%) had passed travel rule legislation, up from 73% a year earlier, but only about 40% of those had taken any supervisory or enforcement action on it.

VASPs vs self-hosted wallets

The rule is written for intermediaries. That makes the type of wallet on each end of a transfer the key question.

Transfer	Travel rule applies?	What typically happens
Exchange to exchange	Yes	Sender and recipient details are exchanged between the two providers, often through a messaging protocol.
Exchange to your self-hosted wallet	Partly	The exchange records information about its own customer and the destination, and may ask you to show the address is yours.
Your self-hosted wallet to an exchange	Partly	The receiving exchange may ask where the funds came from and whether you control the sending address.
Self-hosted wallet to self-hosted wallet	No	No provider is involved, so there is no one to transmit data. The transaction is still public on-chain.

A self-hosted (or unhosted) wallet is one where you control the keys, such as a hardware wallet, MetaMask, Phantom or a Bitcoin wallet app. The travel rule cannot attach data to a transfer you make yourself, so regulators instead place obligations on the provider at the regulated end of the transfer.

How the EU, US and UK apply it

Jurisdiction	Legal basis	In force	Threshold	Self-hosted wallets
European Union	Transfer of Funds Regulation (EU) 2023/1113	30 December 2024	None for transfers between crypto-asset service providers	Above EUR 1,000, the provider must assess whether the address is owned or controlled by its customer
United States	Bank Secrecy Act funds travel rule, 31 CFR 1010.410(f), applied to crypto by FinCEN guidance in 2019	Rule dates from the 1990s; crypto guidance May 2019	$3,000	Obligations sit with the money transmitter
United Kingdom	Part 7A of the Money Laundering Regulations 2017, as amended in 2022	1 September 2023	See the regulations and JMLSG guidance	Firms collect and verify information under the MLRs

European Union: TFR and MiCA

The recast Transfer of Funds Regulation applies from 30 December 2024, the same date the Markets in Crypto-Assets Regulation (MiCA) began to apply to crypto-asset service providers (CASPs). Unlike the FATF baseline, the EU rule covers every crypto transfer between CASPs regardless of value. For transfers above EUR 1,000 to or from a self-hosted address, the provider must take adequate measures to assess whether its own customer owns or controls that address. The European Banking Authority's travel rule guidelines, also applicable from 30 December 2024, describe accepted ways to verify that.

The regulation expressly excludes person-to-person transfers carried out without a CASP. MiCA's transitional period for existing providers ended on 1 July 2026, and ESMA now advises users to check its register to confirm a provider is authorised.

United States: the $3,000 rule

FinCEN's funds travel rule applies to transmittals of $3,000 or more, and FinCEN's May 2019 guidance confirmed that transfers of convertible virtual currency qualify. The obligation falls on financial institutions such as money transmitters at each point in the chain. In October 2020, FinCEN and the Federal Reserve proposed lowering the threshold to $250 for transfers that begin or end outside the US; check FinCEN's current rules before relying on either figure.

United Kingdom

UK cryptoasset businesses have had to collect, verify and share information about transfers since 1 September 2023, under amendments HM Treasury made to the Money Laundering Regulations. The FCA has said that if a counterparty sits in a country without the rule, UK firms must still collect and verify the data and decide, on a risk basis, whether to make incoming assets available. The FCA points firms to the JMLSG guidance for operational detail.

For a directory of the regulators involved in each region, see our page on competent authorities for crypto.

What this means for self-custody swaps

A non-custodial, deposit-address swap works differently from an exchange trade. You request a quote, send funds from your own wallet to a one-time deposit address, and an open protocol such as NEAR Intents, Chainflip or Flashnet pays the output to an address you choose. TorrentSwap, for example, asks for no account and never holds user funds; the protocol executes the swap.

For most people, the travel rule touches this flow at the edges:

• When funds come from an exchange. If you withdraw from an exchange to your own wallet before swapping, the exchange may ask you to confirm the destination is yours. In the EU this is required above EUR 1,000.
• When funds go to an exchange. If you send the swap's output straight to an exchange deposit address, the receiving exchange sees an incoming transfer from an address it does not know and may ask you about its origin.
• Between your own wallets. Swapping from your Bitcoin wallet to your Ethereum wallet involves no travel rule message, because no provider is transmitting on your behalf.

Whether a particular non-custodial service is itself in scope of local regulation depends on the jurisdiction and the facts, and regulators have not all answered that question the same way. Do not assume either way; read the service's terms and your local rules. Our no-KYC crypto swap guide explains what "no account" does and does not mean.

What protocols still screen

"No account" is not the same as "no checks." Sanctions laws apply whether or not a travel rule message is sent, and cross-chain protocols have shown they will act on illicit flows. After the Bybit exploit in February 2025, Chainflip shipped a protocol upgrade that lets the brokers who open deposit channels reject deposits flagged as high-risk, citing the danger to its liquidity providers.

On TorrentSwap, the executing protocols screen addresses against sanctions lists and can refuse or refund a swap that involves a flagged address. And every deposit and payout is a public blockchain transaction that anyone can look up. Self-custody gives you control of your keys, not invisibility.

How to stay on the right side of the rules

1. Use addresses you control for both the destination and the refund address, and keep a record of which wallets are yours.
2. Keep your own records: transaction hashes, quotes, dates and amounts. Exchanges may ask for them, and they help with tax reporting.
3. Be ready to prove ownership of a self-hosted address when an exchange asks, using whatever method it accepts.
4. Do not route funds for other people. Moving third parties' money through your wallets can create obligations you did not intend.
5. Check your provider's authorisation. In the EU, ESMA's register shows which CASPs hold MiCA authorisation.
6. Get professional advice for business use, large amounts or anything you are unsure about.

This article is general information, not legal, tax or compliance advice. Travel rule implementation varies by jurisdiction and changes over time.

Swap with your keys, not your identity documents

TorrentSwap never takes custody of your funds, asks for no account and pays out directly to the wallet you choose, while the executing protocols handle sanctions screening. Read how deposit addresses, refunds and sealed quotes protect you on our security page.