EU Crypto Travel Rule Takes Effect: Zero-Threshold Requirements for US Firms Serving EU Customers
EU Crypto Travel Rule Takes Effect: Zero-Threshold Requirements for US Firms Serving EU Customers
REGULATORY ALERT — February 24, 2026
4 min read
The European Union’s recast Transfer of Funds Regulation — Regulation (EU) 2023/1113 — is now fully operational across all 27 member states. This regulation implements FATF’s “travel rule” for crypto-asset transfers but goes significantly further: it applies to all transfers regardless of amount, with no de minimis threshold. US-based crypto-asset service providers serving EU customers face immediate extraterritorial compliance obligations.
Key Takeaways
- Zero threshold: Unlike the $3,000 threshold in US Bank Secrecy Act regulations (31 C.F.R. § 1010.410), EU requirements apply to every transfer
- Self-hosted wallet restrictions: Enhanced due diligence required for transfers involving non-custodial wallets
- Extraterritorial application: US firms must comply when either party to a transfer is an EU resident
- Effective date: December 30, 2024 (concurrent with MiCA’s Regulation (EU) 2023/1114 main provisions)
The Development
Regulation (EU) 2023/1113 recasts the existing EU Transfer of Funds Regulation to encompass crypto-asset transfers. Published in the Official Journal of the European Union on June 9, 2023, the regulation requires crypto-asset service providers (CASPs) to:
- Collect and verify originator information (name, account number, address or national ID, customer ID)
- Collect beneficiary information (name and account number)
- Transmit this information to the receiving CASP with the transfer
- Retain records for five years
- Detect and report suspicious transactions to national Financial Intelligence Units
This implements FATF Recommendation 16, but exceeds FATF’s suggested de minimis threshold of USD/EUR 1,000.
Who Is Affected
Directly regulated:
- EU-authorized CASPs under MiCA (Regulation (EU) 2023/1114)
- Credit institutions and payment institutions offering crypto services in the EU
Extraterritorial impact:
- US exchanges processing transfers to/from EU residents
- Custodial wallet providers with EU customer bases
- Cross-border payment services involving EU-US corridors
Indirectly affected:
- Users of self-hosted wallets transacting with regulated CASPs
- DeFi protocols where a regulated intermediary participates in the transfer chain
Critical Distinction: EU vs. US Approach
The EU’s framework differs from current US requirements in material ways:
| Requirement | EU (Reg. 2023/1113) | US (Current Enforcement) |
|---|---|---|
| Threshold | None — all transfers | $3,000+ (31 C.F.R. § 1010.410) |
| Self-hosted wallets | Enhanced DD required | No specific federal rule |
| Information standard | EBA technical standards | FinCEN guidance-based |
Note: FinCEN proposed but never finalized rules on self-hosted wallets in December 2020. The EU has moved forward where US rulemaking stalled.
Self-Hosted Wallet Provisions
Article 14 of Regulation 2023/1113 addresses transfers involving “unhosted wallets” (the EU’s term for self-hosted/non-custodial wallets). When a CASP executes a transfer exceeding EUR 1,000 to or from a self-hosted wallet, it must:
- Verify that the wallet is owned or controlled by its customer
- Apply risk-based enhanced due diligence measures
- Document the verification methodology
This creates practical challenges for US firms: how do you verify wallet ownership at scale? The regulation does not prescribe specific methods, leaving CASPs to develop compliant approaches.
Practical Implications
Immediate priorities for US firms with EU exposure:
- Customer identification audit: Determine which customers are EU residents triggering compliance obligations
- Data collection upgrade: Current US-compliant systems may not capture all required EU data fields — gap analysis needed
- Self-hosted wallet procedures: Implement ownership verification workflows before processing EU-linked transfers to external wallets
- Counterparty CASP relationships: Establish information-sharing protocols with EU CASPs for travel rule data transmission
- Record retention review: Ensure five-year retention capability for all relevant transfer data
Strategic considerations:
- Some US firms may choose to geo-block EU customers rather than build parallel compliance infrastructure
- Firms seeking continued EU market access should evaluate MiCA authorization requirements under Article 59 of Regulation (EU) 2023/1114
- Monitor European Banking Authority publications for technical standards on information transmission formats
Enforcement Context
Enforcement responsibility lies with national competent authorities in each EU member state, coordinated through the European Banking Authority. While enforcement patterns are still developing, the regulation includes provisions for administrative penalties and measures that member states must make available to regulators.
Conclusion
Regulation (EU) 2023/1113 establishes the most stringent crypto travel rule regime globally. The zero-threshold approach and self-hosted wallet requirements exceed both FATF recommendations and current US enforcement standards. For US firms, the critical question is whether EU customer exposure justifies the compliance investment — or whether market exit is the more prudent path. Either way, the decision requires immediate attention: the regulation is now in force.
CryptoLaw.blog will continue monitoring EBA technical standards and member state implementation. Subscribe for updates.
This article is for informational and educational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship. Laws and regulations in the cryptocurrency space change rapidly — consult a qualified attorney for advice specific to your situation and jurisdiction. Seth Goettelman is licensed to practice law in Wisconsin and Florida.
