Ireland AML strategy tightens crypto wallet checks through 2030

Ireland has introduced its first national anti-money laundering strategy through 2030, placing enhanced checks on private-wallet transfers and overseas crypto firms among its main digital-asset controls.

The Department of Finance said on Thursday that the plan coordinates the country’s response to money laundering, terrorist financing, and proliferation financing.

For crypto firms, the strategy completes Ireland’s implementation of the European Union’s Transfer of Funds Regulation. The rules require crypto-asset service providers to conduct enhanced checks on transfers involving self-hosted wallets and apply stricter due diligence when working with crypto businesses based outside the EU.

Under the regulation, information about a transfer’s originator and beneficiary must accompany the transaction when a regulated provider is involved. Required details can include names, distributed-ledger addresses, crypto account numbers, and unique transaction identifiers.

Transfers to or from self-hosted addresses remain permitted, although the provider handling the transaction must collect information about both parties. For transfers exceeding €1,000, the firm must take steps to assess whether its customer owns or controls the self-hosted address.

A receiving provider must also establish procedures for detecting missing or incomplete information. Depending on the risk, it may request further details, suspend the transfer, return the assets, or reject the transaction.

The requirements apply to the regulated intermediary, not the software or hardware used to hold the assets. Someone controlling crypto through a private wallet does not become a regulated service provider merely by holding or transferring the tokens.

Tánaiste and Minister for Finance Simon Harris said criminal groups were using new technologies, crypto assets, and complex international financial networks to hide illicit profits.

“Ireland will not be a safe place to launder criminal proceeds,” Harris said.

Harris added that the strategy would help protect the country’s economy and international reputation while supporting cooperation among regulators, law enforcement bodies, and private companies.

Ireland’s implementation falls alongside the Markets in Crypto-Assets Regulation, which established a common licensing system for crypto-asset service providers across the EU. Although MiCA permitted member states to give previously registered firms as much as 18 months to move into the new framework, Ireland selected a 12-month grandfathering period. According to the European Securities and Markets Authority, the Irish transition ended on Dec. 30, 2025.

Existing firms therefore had to secure full MiCA authorization or stop offering regulated services in Ireland before the last EU transition periods ended in July 2026. Licensed companies can use a MiCA authorization issued in one member state to provide covered services across the bloc, subject to the regulation’s passporting process.

MiCA and the transfer regulation perform separate roles. MiCA controls the authorization, conduct, and supervision of crypto businesses, while the transfer rules determine what information regulated providers must collect and exchange when moving assets.

The government’s latest strategy follows a June risk assessment that classified crypto assets as a “very significant” money laundering and terrorist-financing risk. The assessment cited digital-asset fraud, related prosecutions, sanctions evasion, and uneven international regulation among Ireland’s concerns.

Central Bank of Ireland data showed that about 10% of the population had invested in crypto as of December. The assessment also examined potential tax-evasion and corruption risks, along with activity passing through less-regulated parts of decentralized finance.

Enforcement has already reached large service providers operating in the country. In November 2025, the Central Bank fined Coinbase (COIN) Europe about €21.5 million, or roughly $24 million at the time, over failures connected to its transaction-monitoring system and the delayed reporting of those deficiencies.

A 30-point implementation plan released with the June assessment assigned another crypto measure to the Gambling Regulatory Authority of Ireland. By the second quarter of 2027, the authority must establish an industry standard for accepting crypto-related activity as a source of funds. Operators will need due diligence procedures for checking whether money linked to digital assets comes from a legitimate source.

The measure addresses the point where crypto proceeds enter regulated gambling services rather than prohibiting gamblers from owning digital assets. Its scheduled standard will form part of the authority’s checks on customer funds and financial-crime exposure.

Additional EU restrictions will begin applying in July 2027 under the bloc’s Anti-Money Laundering Regulation. The law prohibits crypto-asset service providers from offering or maintaining anonymous crypto accounts, including accounts designed to hide transactions further through anonymity-enhancing coins.

Self-hosted wallets are not covered by the account prohibition when a hardware or software provider has no access to or control over the assets. Regulated firms that interact with such addresses will still have to follow transfer-information, ownership-assessment, and risk-management requirements.

The EU’s Anti-Money Laundering Authority in Frankfurt will oversee high-risk financial entities and coordinate national supervisors once the regulation applies. National authorities will continue handling much of the direct supervision, while the EU authority will support consistent enforcement across member states.

Separately, EU policymakers are expected to consider changes to MiCA in 2027. A recently reported review of MiCA may examine foreign stablecoin issuers, tokenized deposits, payment instruments, decentralized finance, and cross-border supervision.

For U.S. companies sending assets to an Irish or other EU-regulated platform, the receiving provider’s information requests may affect whether a transfer is processed. EU rules allow providers to suspend, return, or reject transactions when required originator or beneficiary details are missing.

The U.S. applies its own travel rule under the Bank Secrecy Act. According to the Financial Crimes Enforcement Network, covered financial institutions must collect, retain, and transmit specified information for fund transfers and transmittals exceeding $3,000.

FinCEN’s 2019 guidance states that convertible virtual currency transfers may qualify as transmittals of funds, making money transmitters subject to the rule when the threshold and other regulatory conditions are met. The EU framework, however, applies transfer-information requirements whenever a crypto-asset service provider participates, while the €1,000 level triggers added ownership or control checks for certain self-hosted wallet transfers.

The global standard behind both systems comes from the Financial Action Task Force. FATF requires covered virtual-asset providers to obtain and transmit originator and beneficiary information, although each jurisdiction implements the recommendation through its own laws.

In July, FATF reported that 132 of 143 surveyed jurisdictions, or nearly 93%, had not applied its standards to any qualifying DeFi arrangement. The organization said DeFi falls within its virtual-asset rules when a person or legal entity exercises control or sufficient influence through administrative rights, concentrated governance power, upgrade authority, development control, or economic benefits.

Interested in broader crypto market trends? Read our crypto market analysis.