Crypto Travel Rule Explained: Satoshi Tests and Wallet Checks
Key Takeaways
- •The Travel Rule (FATF Recommendation 16) forces exchanges to attach sender and recipient identity data to crypto transfers — in the EU since December 30, 2024 with no minimum threshold.
- •EU exchanges must verify you own a self-hosted wallet before transfers above 1,000 euros, usually via a Satoshi Test (sending a dust amount) or a signed message; verification typically lasts about 6 months.
- •The rule binds custodial intermediaries (VASPs/CASPs), not wallets. A non-custodial wallet-to-wallet swap has no intermediary collecting or transmitting your identity data.
The crypto Travel Rule requires exchanges and other custodial crypto businesses to collect and transmit identifying information about the sender and recipient of crypto transfers — name, address, account details — alongside the transaction itself. It is why your exchange now demands proof that you own your own wallet before letting you withdraw to it. The rule binds intermediaries, not individuals: a direct wallet-to-wallet swap involves no business that collects this data.
If you've been asked to "verify wallet ownership," to send a tiny test transaction, or to name the person behind an incoming deposit, you've met the Travel Rule in practice. This article explains where it came from, what it requires in the EU, US, and UK as of mid-2026, how to pass a Satoshi Test, and where the rule's reach ends.
Where did the Travel Rule come from?
The name predates crypto entirely. The original "Travel Rule" was a 1996 US banking regulation requiring identifying information to "travel" with wire transfers of 3,000 dollars or more. The Financial Action Task Force (FATF) — the intergovernmental body that sets global anti-money-laundering standards — embedded the same idea in its Recommendation 16, and in June 2019 extended it to "virtual asset service providers" (VASPs): exchanges, custodians, and brokers.
FATF recommendations are not directly binding, but member states that ignore them risk grey-listing, so most major jurisdictions have now written the crypto Travel Rule into domestic law. The implementations differ in thresholds and strictness — and the EU's is by far the most demanding.
What does the EU Transfer of Funds Regulation require?
The EU implemented the Travel Rule through Regulation (EU) 2023/1113, the recast Transfer of Funds Regulation (TFR), which has applied in full since December 30, 2024. Two features make it stricter than anywhere else:
- No de-minimis threshold for data collection. Unlike the FATF's suggested 1,000 USD/EUR floor, EU crypto-asset service providers (CASPs) must collect and transmit originator and beneficiary information on every crypto transfer between CASPs, even one of 5 euros.
- Self-hosted wallet checks above 1,000 euros. When a customer sends to or receives from their own self-hosted (non-custodial) wallet and the amount exceeds 1,000 euros — assessed cumulatively, so multiple smaller transfers can add up — the CASP must verify that the customer actually owns or controls that wallet.
The European Banking Authority's Travel Rule guidelines of July 4, 2024 fill in the operational detail, including what CASPs must do with transfers that arrive missing data: ask for it, return the funds, or reject the transfer. A transitional allowance for messaging-system gaps expired on July 31, 2025, so EU exchanges now have no technical excuse for non-compliance — which is why enforcement of these checks visibly tightened through late 2025.
What is the Satoshi Test and how do I pass it?
The Satoshi Test is the most common way exchanges verify self-hosted wallet ownership: you prove control of an address by sending a tiny, exactly-specified amount from it. The name comes from satoshis, the smallest Bitcoin unit. A typical flow:
- Initiate a withdrawal to your self-hosted wallet above the threshold. The exchange flags it and opens a verification dialog.
- Receive the instruction — for example, "send exactly 0.00012345 BTC from this address to the deposit address below within 24 hours."
- Send the precise amount from the exact wallet being verified. A different amount, a different source address, or sending from another exchange fails the test.
- Wait for on-chain confirmation. The exchange matches the transaction and marks the wallet verified — typically valid for around 6 months before re-verification, per industry practice documented by Travel Rule vendors like 21 Analytics.
The main alternative is a signed-message proof (sometimes via the AOPP protocol): your wallet signs an exchange-provided text with the address's private key, proving control cryptographically without an on-chain transaction or fees. Hardware wallets like Trezor and software wallets like Sparrow support message signing; some exchanges accept it, some insist on the on-chain test, and a few use screenshot-based "visual proof," which is the weakest method and the most error-prone for users.
What are the Travel Rule thresholds by jurisdiction?
As of June 2026:
| Jurisdiction | In force since | Data-collection threshold | Self-hosted wallet rule |
|---|---|---|---|
| EU (TFR) | Dec 30, 2024 | None — all CASP transfers | Ownership verification above 1,000 EUR (cumulative) |
| United States | 1996 rule applied to crypto MSBs (2019 guidance) | 3,000 USD | No verification mandate; recordkeeping proposals pending |
| United Kingdom | Sep 1, 2023 | 1,000 GBP equivalent (full data) | Risk-based ownership checks |
| Switzerland | Jan 1, 2020 (FINMA) | 1,000 CHF | Ownership proof required — strictest early adopter |
| Singapore | Jan 28, 2020 | 1,500 SGD | Risk-based |
In the US, FinCEN and the Federal Reserve proposed in October 2020 to drop the threshold to 250 dollars for transfers beginning or ending outside the US and to confirm the rule covers convertible virtual currency. As of June 2026 that proposal has never been finalized — the operative US threshold remains 3,000 dollars. The UK's regime, in force since September 2023 under FCA expectations, requires full originator/beneficiary data on cryptoasset transfers and risk-based treatment of inbound transfers from jurisdictions without equivalent rules.
Why was my withdrawal to my own wallet blocked?
Day to day, the Travel Rule shows up as friction rather than as a named regulation. The common patterns:
- Withdrawal held pending wallet verification — you crossed the 1,000-euro cumulative line to a self-hosted address, and the exchange can't release funds until you pass a Satoshi Test or sign a message.
- Incoming deposit quarantined — a transfer arrived from another exchange missing required originator data, or from a self-hosted wallet, and compliance wants you to name the sender and your relationship to them before crediting it.
- Counterparty questionnaires — "Who controls the destination wallet?" with options like self, family member, third party. Answering "third party" routinely triggers enhanced checks or refusal.
- Delays measured in days — verification queues at large EU exchanges stretched noticeably after the July 2025 end of the messaging transition, since non-compliant transfers must now be actively handled rather than waved through.
None of this means you are suspected of anything. The exchange faces fines if it moves your coins without the paperwork — Travel Rule failures were among the violations cited in Binance's 4.3 billion dollar US settlement in November 2023 — so compliance teams default to blocking first and asking questions second. If you're facing a prolonged source-of-funds style interrogation rather than simple wallet verification, see our guide to Kraken source-of-funds requests, which covers that distinct process.
What happens to self-hosted wallet rules in July 2026?
Article 75 of the TFR requires the European Commission, after consulting the EBA, to deliver a report by July 1, 2026 assessing the risks of transfers to and from self-hosted addresses and from entities outside the EU — and, if it sees fit, to propose tighter measures. The regulation's recitals already brand self-hosted transactions as "inherently higher risk," and the Commission can act on parts of this through delegated acts, a fast-track mechanism that skips full parliamentary debate.
That deadline is now days away, and no report had been published as this article went to press on June 10, 2026. Possible outcomes floated in policy discussions range from keeping the status quo, to mandatory wallet whitelisting, to transaction caps on self-hosted transfers. July 1, 2026 is doubly significant: it is also the final end of MiCA's transitional period, after which every EU crypto business must hold a full CASP licence. A second review of the whole regulation's application is due by June 30, 2027. If you hold funds on an EU exchange and prefer self-custody, completing wallet verification before any rule change lands is the pragmatic move — our guide to getting crypto off an exchange walks through it.
Does the Travel Rule apply to DEXs and non-custodial swaps?
No — and this is the point most coverage muddles. The Travel Rule regulates intermediaries: VASPs under FATF terminology, CASPs under EU law. It obliges a business that holds and transmits customer assets to pass identity data to the next business in the chain. When you swap directly from your own wallet through a non-custodial protocol, there is no VASP on either end of the transfer — no entity holds your funds, no entity is obligated (or able) to collect your name, and there is no "next institution" to transmit it to.
FATF itself acknowledges this boundary: its guidance applies the rule to entities conducting transfers "on behalf of" customers, and peer-to-peer transactions fall outside it (FATF has noted this repeatedly in its targeted updates on virtual assets). That doesn't make non-custodial swapping a legal grey zone — it is simply outside the rule's scope, the same way handing cash to a friend is outside wire-transfer regulations. Whether no-KYC swapping is legal where you live is a separate question, covered in depth in Is no-KYC swapping legal? (short version: for users in most jurisdictions, yes — the compliance obligations sit on regulated businesses). And remember that swaps remain taxable events regardless of whether anyone reports them — see our guide to no-KYC swap taxes.
Swapping without a data trail to manage
The Travel Rule exists because custodial exchanges sit in the middle of your transactions. Remove the middleman and there is nothing for the rule to attach to. LeoDex is a non-custodial aggregator: it compares routes across THORChain, Chainflip, MAYAChain, NEAR Intents and more — 8+ routes per swap, 60+ chains, native BTC with no wrapped assets — and the swap settles wallet-to-wallet on transparent public blockchains. No account, no email, no KYC, and your keys never leave your wallet.
To be clear about what this is and isn't: these are public, traceable, on-chain transactions — not a privacy mixer, and not a way to hide from anyone. What you avoid is the custodial layer: the withdrawal that can be blocked, the wallet verification that expires every 6 months, and the counterparty questionnaire. See how no-KYC swapping works — there is no compliance queue between you and your own keys.
Frequently Asked Questions
What is the crypto Travel Rule in simple terms?
It is a rule requiring crypto businesses (exchanges, custodians) to attach sender and recipient identity information to crypto transfers, the way banks do with wire transfers. It originates from FATF Recommendation 16 and was extended to crypto in June 2019. It binds businesses, not individuals using their own wallets.
What is a Satoshi Test?
A wallet-ownership check: the exchange asks you to send a small, exactly-specified amount (named after satoshis, Bitcoin's smallest unit) from the self-hosted wallet you want verified. A matching on-chain transaction proves you control the address. Verification typically remains valid for about six months before the exchange asks again.
Why is my exchange asking me to verify my own wallet?
Under the EU Transfer of Funds Regulation, exchanges must verify customer ownership of self-hosted wallets for transfers above 1,000 euros, assessed cumulatively. The exchange faces penalties if it skips the check, so it blocks the withdrawal until you pass a Satoshi Test or sign a message with the wallet's key.
Is there a minimum amount before the Travel Rule applies?
Depends on jurisdiction. In the EU there is no minimum for data collection between exchanges — every transfer is covered — with the extra self-hosted ownership check kicking in above 1,000 euros. The US threshold is 3,000 dollars (a 2020 proposal to lower it to 250 dollars for cross-border transfers was never finalized). The UK applies full requirements from 1,000 pounds.
Does the Travel Rule apply to DeFi or non-custodial wallets?
No. The rule obligates virtual asset service providers — businesses that hold and transfer assets for customers. A self-hosted wallet is not a VASP, and a non-custodial swap protocol has no entity collecting or transmitting identity data. Peer-to-peer and wallet-to-wallet transactions fall outside the rule's scope under FATF's own guidance.
Can an exchange refuse my incoming transfer under the Travel Rule?
Yes. EU rules require exchanges to detect transfers arriving with missing or incomplete originator data and to either request the information, return the funds, or reject the transfer. Deposits from self-hosted wallets may be held until you confirm who controls the sending address. Respond accurately; mismatched answers trigger deeper reviews.
What changes for self-hosted wallets in July 2026?
The European Commission must report by July 1, 2026 on the risks of self-hosted wallet transfers and may propose stricter measures — potentially via delegated acts that bypass full parliamentary procedure. Options discussed range from status quo to wallet whitelisting or transfer caps. As of June 10, 2026, the report had not yet been published.