FATF warns crypto Travel Rule enforcement lags

TLDR

The global AML body FATF says most countries have passed crypto Travel Rule laws, but actual supervision and enforcement remain far behind.

1. FATF reports broad legislative adoption of the Travel Rule for crypto, but only a minority of jurisdictions are actively enforcing it.
2. Weak enforcement leaves gaps that illicit actors can exploit, increasing pressure on exchanges, stablecoins, and DeFi frontends to tighten compliance.
3. Crypto users should expect more scrutiny on cross-border transfers and unhosted wallets as regulators move from passing rules to policing them.

Deep Dive

1. What FATF Actually Found

In its Seventh Targeted Update on virtual assets and VASPs, FATF says about 83% of surveyed jurisdictions now have the crypto Travel Rule on the books, up from 73% in 2025, showing clear legislative progress.

However, FATF notes that only around 40% of those jurisdictions have taken supervisory or enforcement actions, meaning inspections, penalties, or formal guidance remain patchy despite the rule being enacted.

The report highlights risks from scam centers, DPRK-linked hacks, DeFi, unhosted wallets, and freeze resistant stablecoins, stressing that pure legislation without real enforcement leaves the system vulnerable, as summarized in this Seventh Targeted Update.

2. Why Enforcement Gaps Matter

The Travel Rule requires virtual asset service providers to collect and transmit sender and recipient information for qualifying transfers, similar to wire transfer data in banking.

FATF warns that the weakest link problem persists: if one country or venue enforces the rule and another does not, illicit flows can route through the softer jurisdiction, undermining compliant platforms and regulators.

DeFi and unhosted wallets complicate enforcement because there is often no clear intermediary to regulate, so authorities are likely to lean on gateways such as centralized exchanges, custodians, fiat ramps, and web frontends that connect users to these tools.

3. What To Watch Next

FATF signals that the next phase of crypto regulation will focus on supervision and enforcement rather than new laws, so expect more on site inspections, data requests, and public enforcement actions.

Regulators may target high risk corridors, offshore venues, and freeze resistant or lightly governed stablecoins, making compliance tooling and Travel Rule messaging networks increasingly central to industry infrastructure.

For everyday users, the main changes are likely to be stricter KYC at exchanges, more questions about counterparties, and possible routing constraints when sending funds between platforms in different jurisdictions.

Conclusion

FATFs warning is that the crypto Travel Rule is largely written into law but not yet fully lived in practice, leaving exploitable gaps for bad actors. As supervision catches up, the crypto market is likely to see a gradual shift toward heavier compliance at key gateways, more pressure on cross border flows, and a clearer divide between well regulated venues and those operating at the edge of the system.