Travel Rule and IVMS101
Why identity information moves with a transfer, and why the route matters.
The Travel Rule concerns information associated with certain transfers through regulated service providers. FATF sets international standards; jurisdictions implement their own measures. IVMS101 supplies a common data model. Neither a message schema nor a blockchain address alone resolves legal scope, counterparty trust or protection of personal information.
Checking this browser’s read-aloud support…
Start with three different layers
FATF's Recommendations are international standards which countries implement through measures adapted to their circumstances. The public page identifies amendments in June 2026 and acknowledges differences in legal, administrative and financial systems. Keep three layers separate when reading a Travel Rule claim: the international expectation, the applicable jurisdiction's law, and the service provider's implementation. A fourth layer, the customer's contract, affects the user's experience without being a universal blockchain rule. This is an editorial reading method.
A statement that FATF discussed something does not establish that identical requirements apply to every wallet worldwide.
FATF's 2021 virtual-asset guidance discusses licensing, registration, supervision and the application of its standards to virtual asset service providers. It also addresses difficult cases involving stablecoins, peer-to-peer activity and decentralised arrangements. The landing page now warns that the guidance does not incorporate later changes to Recommendation 1. That warning belongs in the reading, rather than being omitted because the older document is convenient.
Use the guidance to understand its historical explanations and consult the current Recommendations and local rules before claiming a present obligation. A person's interest in crypto is not itself proof that the person operates a regulated transfer business.
What IVMS101 actually contributes
IVMS101.2023 defines information structures for the originator, beneficiary, relevant service providers, transfer path and payload metadata. Its schema distinguishes natural persons and legal persons and supports structured identification information. Its own scope excludes the transport mechanism, storage choices, information-security arrangements and a universal resolution of local privacy or compliance requirements. A well-formed payload can still contain false information. This is why a working schema validator is evidence of format conformity, not proof of verified identity.
The published specification records the original May 2020 model and the August 2023 revision as separate payload versions.
OpenVASP's explanation presents the standard as a response to incompatible data conventions across service providers. Dates, names and scripts can be represented differently, producing errors even when both parties intend to share the same information. The association describes industry collaboration around a common language modelled on financial-messaging practice. That analogy is useful, but it does not make IVMS101 an ISO 20022 token whitelist. It concerns the way participants describe people and transfers.
Its promised benefit should be judged through actual interoperability between implementations rather than a claim that one investment asset becomes mandatory.
Same model does not always mean the same implementation
CodeVASP's published implementation guide demonstrates how a provider applies the model through concrete payload conventions. It discusses character encoding, field casing and the representation of account references that may include a wallet address and a destination tag or memo. Those details matter because sending a bare address may not specify the intended destination on every system. The guide is an implementation profile, not permission to assume all providers use its exact conventions.
A reader should compare the sender's and receiver's versions and required fields before treating a matching acronym as proof that their systems exchange usable information.
Sygna's documentation describes IVMS101 support in its Bridge v2 product while distinguishing that capability from another product, Hub. This is a small but useful example of why evidence should name the service rather than only the company. An integration may support a standard in one workflow and use a different profile elsewhere. The page's mapping examples are implementation evidence for that vendor's documentation, not a report that every counterparty accepts the same messages.
Research should retain the product, version and stated boundaries, then request a successful exchange with the actual service at the other end.
How does the private information reach the right party?
TRISA's OpenVASP documentation describes a protocol bridge and calls its compatibility partial. It includes discovery through a Travel Address, HTTP-based requests and transformations between message structures. These tasks differ from knowing which identity fields belong in a payload. Correct data can still fail to arrive because systems cannot discover one another or interpret the exchange.
A standard's name should lead to a demonstrated route: who identifies the receiving provider, which endpoint is contacted, how errors return, and what evidence of compatibility exists for those implementations.
TRISA's directory documentation describes certificates, participant verification and discovery information used for authenticated communications. Its architecture sends the sensitive exchange between participants rather than using the directory as a central repository of transfer payloads. The distinction is concrete: discovering a provider and transferring customer information are different operations. Separate production and testing arrangements also matter. A connection that works with a test certificate is not proof that a production counterparty is authorised or trusted.
The documented design supplies mechanisms for trust establishment; the operator still has to use them correctly.
The United Kingdom: a real effective date and operational expectations
The FCA says the UK cryptoasset Travel Rule took effect on September 1, 2023. Its expectations include collecting, verifying and sharing information, and it stresses that using a third-party supplier does not remove a firm's responsibility. Its statement also addresses transfers involving jurisdictions without equivalent implementation: firms need appropriate collection, storage and risk-based handling rather than pretending that the mismatch does not exist. The statement was updated in February 2026.
This is evidence of UK supervisory expectations for affected businesses, not a universal rule imposed by a wallet app or an assertion that every direct self-custody transfer is prohibited.
An original Bitcoin discussion at the time of the UK change shows what users worried about: whether regulated services would undermine crypto's use as digital cash. The post by Content_Ad3527 starts with the new rules and a particular service's handling of transfers; replies discuss service policies, banking constraints and self-custody. This is valuable testimony about interpretation and concern, but it is not the legislation itself. A restriction experienced through an intermediary should be identified as that intermediary's practice unless legal evidence supports a broader claim.
The thread does not establish a ban on the Bitcoin protocol.
The United States: do not borrow another country's threshold
The current text of 31 CFR 1010.410(f) sets out information requirements for specified transmittals of funds of $3,000 or more through covered financial institutions, subject to the rule's conditions and exceptions. It describes the information passed through the transfer chain and records associated with that activity. The threshold is an aspect of this US provision, not a global number that can be pasted into every crypto compliance explanation. Determining whether a business and transaction are covered still requires the applicable definitions and facts.
A wallet address alone does not tell a reader which legal capacity the participant is acting in.
FinCEN's 2019 convertible virtual-currency guidance explains that obligations turn on the activity performed and the facts of a business model, rather than the label attached to it. Its purpose is to consolidate existing interpretations, not announce an entirely new rule for every developer. This helps readers avoid two opposite mistakes: assuming an application is exempt merely because it calls itself decentralised, or assuming everyone who writes wallet software runs a money-transmission business. This chapter does not determine anyone's individual legal status.
It supplies the evidence trail for the narrower proposition that the actual activity must be examined.
The European trail: keep the regulation and guidance identifiable
The National Bank of Slovakia's register identifies EBA/GL/2024/11 as the July 4, 2024 guidelines on transfer-information requirements under Regulation (EU) 2023/1113. It states that they apply from December 30, 2024 and links the EBA document. These identifiers give a concrete European evidence trail. The register entry does not set out every exception, threshold or duty. This Bible does not invent them from a title. For an actual transaction, follow the legal materials and the competent authority's current interpretation.
Additional questions in an exchange interface should lead to a named service and transfer, rather than a global conclusion. The register identifies a defined regulatory subject; it does not name a proprietary compliance coin. A promotional claim that an asset captures this work needs separate implementation and economic evidence. The regulation's title alone cannot supply those missing steps.
Privacy questions deserve precise answers
FinCEN's published questions and answers make an important distinction: the Travel Rule itself does not require the institution to report the transfer information to the government. It requires information to accompany covered transfers between participants; separate obligations can still require other records or reports. That distinction does not make privacy concerns imaginary. It identifies the actual data flow that needs examination. Ask who receives the information, why they need it, how long records are kept and what protects them.
An accurate account of those questions is more useful than either claiming perfect privacy or declaring every payload an automatic government report.
An original 2021 Bitcoin essay by DecentralizedLaw interprets draft FATF guidance as a coordinated attempt to absorb crypto into a controlled financial system. It predicts a divide between regulated activity and decentralised alternatives and presents broad transparency as a threat to user autonomy. These are the author's claims about a draft, not findings adopted by this platform. The essay acknowledges that FATF does not directly create domestic law. Its stronger predictions need separate evidence in enacted measures and their enforcement.
Preserve that distinction when studying the community's fears; a compelling political argument should not silently become a description of current law everywhere.
New laws are progress; they are not completed interoperability
FATF's July 2026 update reports that 83 percent of surveyed jurisdictions had passed Travel Rule legislation, compared with 73 percent in 2025. The organisation nevertheless describes uneven implementation and gaps in supervision and enforcement. The percentage concerns the surveyed jurisdictions, not every user, transfer or country in an imagined uniformly operating network. This is a useful correction to both victory headlines and doom headlines. Legislation can spread while practical implementation remains difficult.
A service's claim to comply should be examined through its procedures and actual counterparties, rather than inferred solely from its home jurisdiction's appearance in a global statistic.
FATF's June 2026 consultation concerns guidance for Recommendation 16 changes agreed in June 2025, with implementation expected by the end of 2030. Its announced themes include payment transparency, fraud and error reduction, privacy and financial inclusion. The consultation deadline was August 21, 2026, so it is closed as of this review. The proposed guidance must not be reported as a finished worldwide rule merely because a consultation document is available. A future implementation target is also not an immediate deadline for purchasing a token.
Keep adoption, guidance development and each jurisdiction's implementation timeline in separate notes.
A working payload is the start of an investigation
The open-source Rust IVMS101 library published by 21 Analytics provides an example of implementing the data model and validating its structure. Its documented release history and licence let a developer inspect a real implementation rather than only a vendor promise. Validation asks whether supplied data fit the model's constraints; it cannot by itself authenticate a person, establish a provider's legal authority or decide whether a transfer should proceed. A classroom exercise can compare a malformed record with a valid one, then ask which facts still require verification.
That final question prevents software correctness from being confused with compliance or truth.
Use the bridge documentation to separate discovery, requests and compatibility. Identify the sending and receiving services, message version and route. Ask what happens to failed requests and unsupported counterparties. These are research questions, not advice to bypass controls. A feature list naming IVMS101 does not resolve the other parts of an exchange. The integration's stated limits should remain visible beside its successes.
How we got here.
- 2010-11-09
FinCEN explains the existing funds rule
Its questions and answers distinguish information accompanying a transfer from a report submitted to government.
- 2019-05-09
US virtual-currency guidance consolidates interpretations
FinCEN explains how existing rules apply to different convertible virtual-currency business activities.
- 2020-05
The first IVMS101 model is published
The current specification's version table records May 2020 as the original model's publication month.
- 2021-10-28
FATF publishes expanded virtual-asset guidance
The guidance addresses service providers and complex arrangements; its landing page now flags later changes outside its coverage.
- 2023-08
IVMS101 receives a revised payload version
The specification records August 2023 for IVMS101.2023.
- 2023-09-01
UK cryptoasset Travel Rule takes effect
The FCA's statement gives the effective date and expectations for affected businesses.
- 2024-12-30
The EBA guidelines' application date arrives
The Slovak central bank's register records this date for EBA/GL/2024/11.
- 2026-06-24
Payment-transparency guidance enters consultation
FATF seeks input on implementation guidance for changes expected by the end of 2030.
- 2026-07-16
FATF reports wider legislation and persistent gaps
The targeted update says 83 percent of surveyed jurisdictions legislated the Travel Rule while implementation remained uneven.
Beliefs, ambitions & unanswered questions.
These are attributed narratives, not endorsements. Open each evidence file to see the supporting record and the limits of what it establishes.
Contested interpretationCompliance infrastructure is a route to broad financial control
Open evidence file
A Bitcoin-community author interprets FATF's draft framework as an effort to bring crypto under coordinated state control.
Where the story comes from
DecentralizedLaw's original June 2021 essay on draft guidance.
What the record supports
- The essay predicts a divide between regulated and decentralised activity and worries about transparency requirements.
What it does not prove
- This is an attributed interpretation of a draft. It is not proof of a universal current ban or identical national rules.
What to watch
- Enacted measures, real enforcement and specific privacy impacts rather than repeating the draft's predicted outcome.
Documented beliefService-provider restrictions can feel like the loss of digital cash
Open evidence file
Some Bitcoin users worry that new transfer procedures undermine the autonomy they associate with cryptocurrency.
Where the story comes from
Content_Ad3527's original discussion around the UK's September 2023 change.
What the record supports
- The thread raises questions about intermediary policies and contrasts them with direct wallet use.
What it does not prove
- The discussion is not a legal text or representative survey. A service policy should not be generalised into a protocol ban.
What to watch
- Which intermediary imposes a restriction, its explanation and the legal provision it actually relies upon.
Documented beliefA common language can reduce an expensive compliance mismatch
Open evidence file
Industry collaborators see shared identity-data structures as a practical route to interoperability.
Where the story comes from
OpenVASP's explanation of the IVMS101 collaboration.
What the record supports
- Its account identifies incompatible representations of names, scripts and dates as a problem.
What it does not prove
- A shared data model does not establish universal product compatibility or verified identity.
What to watch
- Demonstrated exchanges between identified services using stated versions and implementation profiles.
Documented beliefRequired information can move without a central payload warehouse
Open evidence file
TRISA's design separates provider discovery from peer-to-peer exchanges of sensitive transfer data.
Where the story comes from
The TRISA global directory architecture documentation.
What the record supports
- Directory records and certificates support discovery and authenticated participant communications.
What it does not prove
- The design does not guarantee every operator's data protection or eliminate the privacy impact of the exchange.
What to watch
- Correct production certificates, counterparty verification and actual treatment of customer data.
The source library.
Primary documents explain mechanics and decisions. Community records show what participants believed. Dates below indicate when these links were reviewed; external pages may change.
- FATF Recommendations as amended in June 2026 ↗Financial Action Task Force · primary · Published 2026-06 · Reviewed 2026-10-02
- Updated virtual-asset guidance with a later-revision qualification ↗Financial Action Task Force · primary · Published 2021-10-28 · Reviewed 2026-10-02
- IVMS101.2023 data model, versions and scope exclusions ↗Neil Samtani and the interVASP working group · primary · Published 2023-08 · Reviewed 2026-10-02
- Why VASPs need the interVASP messaging standard ↗OpenVASP Association · primary · Reviewed 2026-10-02
- CodeVASP IVMS101 implementation profile ↗CodeVASP maintainers · primary · Reviewed 2026-10-02
- Sygna Bridge IVMS101 integration and product scope ↗Sygna · primary · Reviewed 2026-10-02
- TRISA to OpenVASP integration and partial protocol compatibility ↗TRISA maintainers · primary · Reviewed 2026-10-02
- TRISA global directory, verification and certificate architecture ↗TRISA maintainers · primary · Reviewed 2026-10-02
- FCA expectations for UK cryptoasset businesses and the Travel Rule ↗Financial Conduct Authority · legal · Published 2023-08-17 · Reviewed 2026-10-02
- Original Bitcoin discussion of the UK's new transfer procedures ↗Content_Ad3527 and r/Bitcoin participants · community · Reviewed 2026-10-02
- 31 CFR 1010.410: current records and transmittal-information requirements ↗US Electronic Code of Federal Regulations · legal · Reviewed 2026-10-02
- FinCEN guidance on convertible virtual-currency business models ↗Financial Crimes Enforcement Network · legal · Published 2019-05-09 · Reviewed 2026-10-02
- Official EBA/GL/2024/11 record and application date ↗National Bank of Slovakia, EBA document register · legal · Published 2024-07-04 · Reviewed 2026-10-02
- Funds Travel Regulations: questions and answers ↗Financial Crimes Enforcement Network · legal · Published 2010-11-09 · Reviewed 2026-10-02
- An original global-control interpretation of draft FATF guidance ↗DecentralizedLaw, r/Bitcoin participant · community · Reviewed 2026-10-02
- FATF 2026 targeted update: progress in legislation and gaps in practice ↗Financial Action Task Force · primary · Published 2026-07-16 · Reviewed 2026-10-02
- June 2026 consultation on Recommendation 16 implementation guidance ↗Financial Action Task Force · primary · Published 2026-06-24 · Reviewed 2026-10-02
- Open-source Rust IVMS101 data-model implementation ↗21 Analytics · primary · Published 2023-06-19 · Reviewed 2026-10-02