FATF: Offshore Crypto Gaps Enabled $4B in Crime Networks

On paper, the regulatory framework exists. Most surveyed jurisdictions now have Travel Rule laws requiring VASPs to share originator and beneficiary information for qualifying transfers. In practice, the compliance plumbing is weak. The FATF update notes that data sharing between VASPs, consistent KYC thresholds, and fit-for-purpose licensing remain uneven. High-risk flows through OTC brokers, P2P hubs, and cross-chain bridges are not getting the same scrutiny as exchange-to-exchange transfers.

The update is not a ban signal. It is a nudge to supervisors to close the practical holes. The FATF does not write national law, its signals drive what supervisors ask for. One lever is resourcing. Many supervisors simply do not have enough technical staff to test Travel Rule plumbing, the update said. Without that, the law on paper stays on paper.

For VASPs, the to-do list is not glamorous. Map top counterparties by volume. Test Travel Rule messaging both ways, including fallbacks for unregistered addresses and non-responsive VASPs. Document the decisions. The FATF update is effectively a shopping list for compliance buyers, and the 83% number is the tell that procurement cycles are starting, Comsure reported.

Short term, some corridors may slow as controls tighten. Over time, clearer rules tend to support deeper institutional liquidity because counterparties can explain and evidence their compliance to banks and auditors. The FATF's next scheduled update is expected in the first half of 2027.