The European Union's recast Transfer of Funds Regulation is now fully in force for crypto, with the MiCA transitional period ending July 1. That means every qualifying transfer — regardless of amount — must carry originator and beneficiary information, a requirement known as the Travel Rule. Exchanges, brokers, custodians, OTC desks, and payment firms operating in the EU are now legally bound to collect and pass along sender name, recipient name, and account references for every transaction.
What the rule actually requires
Under Regulation (EU) 2023/1113, the threshold is zero. There's no minimum amount that triggers the data requirement — it applies to every transfer. The minimum data set includes the sender's name and account reference, the recipient's name and account reference, and enough additional information to trace the transaction and request more if needed. Account reference typically means a wallet address paired with an internal account ID at the exchange or custodian.
The rule mirrors FATF Recommendation 16, which was extended to virtual assets and virtual asset service providers back in 2019. But the EU is the first major jurisdiction to enforce a zero-threshold regime for crypto.
How data moves — on-chain and off
Two payloads travel in parallel. The on-chain transfer itself, and a separate off-chain compliance payload using the IVMS101 schema. IVMS101 is an industry standard that provides a common dictionary for fields like originator name, date of birth, account reference, and beneficiary details. That compliance payload is a private message between providers — not a public broadcast or a sanctions list.
When a user sends from a hosted wallet to another hosted wallet, both sides can exchange Travel Rule data end to end. If one side is an unhosted wallet, the provider still collects and stores the data, runs risk checks, and may require extra verification of wallet control.
The sunrise problem and screening
Different jurisdictions are implementing the Travel Rule at different speeds — the so-called sunrise problem. That means networks and bilateral arrangements are needed to bridge gaps between compliant and non-compliant regions. Screening is now standard in the EU, US, and UK for crypto transfers. But the real shift, according to the facts, is continuous monitoring after the transfer lands. It's not enough to check once at the gate; providers must keep watching.
What users experience
For a typical withdrawal, the platform already knows the originator through KYC. Now it asks for recipient info, runs address screening using blockchain analytics, and performs counterparty discovery if the destination address belongs to another VASP. Self-custody users are affected when they interact with a regulated provider, which must collect and sometimes verify details about the other side.
The practical effect: more friction at the point of withdrawal, but also a clearer audit trail. Whether that reduces illicit finance or just adds paperwork is an open question — and one that regulators will be watching closely as enforcement picks up.
