FATF guidance on crypto

FATF guidance is the reason exchanges everywhere ask for identification and apply similar checks. It sets the standard that national laws then enforce.

Quick answer

The Financial Action Task Force is the intergovernmental body that sets the global standards for fighting money laundering and terrorist financing, and its guidance shapes how almost every country regulates crypto. As of February 2026 its core standard, Recommendation 15, requires countries to license or register virtual asset service providers and to supervise them for anti money laundering purposes, and its detailed guidance explains how the wider standards, including the travel rule, apply to virtual assets. The Financial Action Task Force does not make binding law itself; its members and the jurisdictions it monitors translate the standards into national rules, and falling short can affect a country's standing. For users, this guidance is the reason exchanges everywhere ask for identification and apply similar checks.

Who the Financial Action Task Force is

The Financial Action Task Force is an intergovernmental organisation, established by the Group of Seven economies, that sets recommendations on combating money laundering, terrorist financing, and the financing of weapons proliferation. As of February 2026 it has a membership of major economies and works through a global network of regional bodies, so its reach extends well beyond its direct members. It assesses how countries implement its standards and publishes the results, and a poor assessment can place a country on a list that signals heightened risk to the rest of the financial system. This monitoring is what gives the recommendations practical force even though they are not themselves law.

Recommendation 15 and the VASP definition

Crypto sits mainly under Recommendation 15. As of February 2026 it requires countries to identify and understand the risks of virtual assets, to license or register virtual asset service providers, and to subject them to supervision for anti money laundering and counter terrorist financing. A virtual asset service provider is defined broadly to cover businesses that exchange between crypto and traditional money, exchange between different crypto assets, transfer crypto, provide custody, or take part in financial services around the issuance or sale of crypto. This definition is the foundation for national licensing regimes, because it determines which businesses must register and comply.

The risk based approach and the 2021 guidance

The Financial Action Task Force expects a risk based approach, meaning supervision and obligations should be proportionate to the risk a business or product presents. As of February 2026 the central reference is the updated guidance for a risk based approach to virtual assets and virtual asset service providers, published in 2021, which explains how the recommendations apply to a wide range of activity, addresses concepts such as decentralised arrangements and how the travel rule operates, and helps countries scope their rules. The guidance is detailed and technical, but its practical message is consistent: where there is an identifiable provider, anti money laundering obligations follow.

Travel rule and the latest implementation reviews

A key part of the standards is the travel rule, which requires providers to send originator and beneficiary information with transfers, covered in detail on its own page. The Financial Action Task Force reviews how well countries are implementing all of this. As of February 2026 its most recent targeted update, published in June 2025, found continued progress but persistent gaps, reporting that the share of assessed jurisdictions rated not compliant had fallen but remained meaningful, and that a large number of jurisdictions had passed or were passing travel rule legislation. It also drew attention to risks from offshore providers operating outside well supervised regimes. A further update was expected during 2026.

What it means for users and platforms

For platforms, the guidance is the reason they must register or be licensed, identify their customers, monitor transactions, and apply the travel rule. For users, it explains why a regulated exchange asks for identity documents, why checks tighten for larger transfers, and why a platform may decline service in a jurisdiction it cannot serve compliantly. As of February 2026 the practical effect is convergence: because so many countries follow the same standards, the compliance experience on regulated platforms looks broadly similar around the world, even though the precise national rules differ. Understanding the source helps make sense of those requirements.

Regulator and sources

The references appear above. The descriptions draw on Financial Action Task Force recommendations, its 2021 updated guidance for a risk based approach to virtual assets and virtual asset service providers, and its targeted update published in June 2025, reviewed as of February 2026. We describe the standards as guidance that members translate into national law rather than as binding law in themselves.

• Financial Action Task Force, the FATF Recommendations including Recommendation 15 (fatf-gafi.org)
• Financial Action Task Force, Updated Guidance for a Risk Based Approach to Virtual Assets and VASPs, 2021
• Financial Action Task Force, Targeted Update on Implementation of the FATF Standards on Virtual Assets and VASPs, June 2025
• Financial Action Task Force, report on risks linked to offshore virtual asset service providers
• Financial Action Task Force, Best Practices on Travel Rule Supervision, June 2025

Frequently asked questions

Related pages