Home › Regulation › FATF and the Travel Rule

Global AML standard

🌐 FATF and the Travel Rule

Last verified: July 2026

FATF Recommendation 15 requires crypto exchanges worldwide to collect and transmit sender and receiver information on transactions — the single global standard that drives exchange compliance everywhere, and a source of real tension with privacy-focused crypto design.

The Financial Action Task Force (FATF) is an intergovernmental body that sets global standards for fighting money laundering and terrorist financing. It isn't a law-making body itself and has no direct enforcement power over any individual country — its influence comes entirely from member countries voluntarily writing its recommendations into their own domestic law, creating a kind of global alignment through soft power rather than direct legal compulsion.

What Recommendation 15 actually requires

FATF's Recommendation 15 is the specific guidance that matters most for crypto. It requires Virtual Asset Service Providers (VASPs) — exchanges, custodial wallet providers, and similar platforms — to collect and transmit identifying information about both the sender and receiver on transactions above a set threshold. This is commonly called the "Travel Rule," since it extends a pre-existing requirement from traditional bank wire transfers into crypto: the identifying details are meant to "travel with" the transaction, just as they do for an international bank transfer today.

Why countries actually follow FATF's guidance

Since FATF has no direct enforcement power, its real leverage comes from a different mechanism: countries that don't implement its standards risk being placed on a public watchlist, which can meaningfully damage that country's broader financial reputation and its banks' ability to do business internationally. This creates strong practical pressure for member countries to adopt FATF's recommendations into their own laws even though technically nothing forces them to.

The genuine tension with privacy

The Travel Rule's core requirement — identifying who is sending and receiving funds — sits in direct, structural tension with crypto's more privacy-preserving corners. Most blockchains, including Bitcoin, are already pseudonymous rather than fully identified, and dedicated privacy coins like Monero are specifically designed to make sender, receiver, and amount cryptographically difficult to determine at all. This is exactly why privacy coins face disproportionate delisting pressure from exchanges trying to stay Travel-Rule-compliant — it's a genuine compliance difficulty with privacy-preserving designs specifically, not a general dislike of privacy as a concept.

What this means in India

India's own anti-money-laundering framework for crypto, under the Prevention of Money Laundering Act (PMLA), aligns with FATF's Travel Rule expectations — registered Indian exchanges are expected to collect and verify customer identity information consistent with global VASP standards. This is part of why using a FIU-IND registered exchange matters practically, beyond just the automatic 1% TDS handling: it's also the exchange fulfilling its own Travel Rule and PMLA obligations on your behalf.