🇪🇺 EU · Key Regulation
EU TFR
The recast Transfer of Funds Regulation (Regulation (EU) 2023/1113) extends the EU Travel Rule to crypto-assets and forms a core part of the European Union's financial crime framework.
In this briefing
- What it is
- What does the EU TFR do?
- Key things to know
Historically, the Travel Rule applied only to transfers of funds made through traditional payment systems. With the adoption of the revised TFR alongside MiCAR, the same principles now apply to crypto-asset transfers. The regulation requires Crypto-Asset Service Providers (CASPs) and certain payment service providers to collect, verify, transmit and retain information about the originator and beneficiary of crypto-asset transfers.
Unlike the FATF Recommendations, which permit jurisdictions to apply thresholds below which the Travel Rule may not apply, the EU framework applies the Travel Rule to crypto-asset transfers regardless of value. The regulation works alongside AMLDs, AMLR and the wider EU AML framework to improve the traceability of crypto-asset transactions and strengthen the prevention, detection and investigation of financial crime.
What does the EU TFR do?
Applies the Travel Rule to Crypto-Asset Transfers
Requires prescribed information about the originator and beneficiary to accompany transfers of crypto-assets between CASPs, creating greater transparency throughout the transaction chain.
Harmonises Requirements Across the EU
Creates a single EU framework for information accompanying crypto-asset transfers, replacing differing national approaches and ensuring consistent obligations across Member States.
Introduces Requirements for Self-Hosted Wallets
Establishes additional obligations for transfers involving self-hosted addresses, including information collection and appropriate risk-based verification measures where required.
Strengthens AML & Financial Crime Controls
Supports customer due diligence, transaction monitoring, sanctions compliance and law enforcement investigations by improving the traceability of crypto-asset transfers.
Sets Operational Requirements for CASPs
Requires firms to establish policies, procedures and controls for handling incomplete information, rejected transfers, record keeping and counterparty due diligence.
Supports Cross-Border Supervision
Creates consistent information-sharing standards that allow competent authorities to supervise cross-border crypto-asset activity more effectively.
Key things to know
The Travel Rule applies regardless of transfer value
Unlike the FATF standard, the EU does not provide a general monetary threshold below which the Travel Rule does not apply. Firms therefore need compliant processes for all in-scope crypto-asset transfers.
The process has two distinct parts
Travel Rule compliance starts with identifying whether a transfer is in scope, determining whether the counterparty is another CASP or a self-hosted wallet, collecting the required information and completing any necessary due diligence. The second part is securely transmitting that data and managing any missing, incomplete or inconsistent information.
Travel Rule solutions must meet the regulatory requirements
Selecting a vendor is only one part of compliance. Firms need to assess asset and network coverage, timing of message exchange, data security, interoperability, treatment of self-hosted wallets, handling of missing information and the ability to support different regulatory approaches across jurisdictions.
Self-hosted wallets are not prohibited
The regulation does not ban transfers involving self-hosted wallets. Firms are instead expected to collect the relevant information and apply proportionate, risk-based controls depending on the value and circumstances of the transfer.
The EBA Guidelines are essential
The Level 1 Regulation is supplemented by EBA Guidelines that provide important detail on required information, verification, transfers with missing data, intermediary providers and practical implementation.
Compliance is an operational challenge
There is no universal directory for CASPs, Travel Rule protocols are not always interoperable, and data requirements differ across jurisdictions. Firms need clear workflows for counterparty discovery, data exchange, exception handling, escalation and evidence.
For general information only. Not legal, regulatory or compliance advice.
Working With This Regulation?
Cryptliance helps firms understand what applies, what it means for the business and what to do next — across strategy, controls, product and market execution.