FinCEN, the U.S. financial-crime regulator, and the Federal Reserve announced Nov. 6 that they are withdrawing a plan to expand transfer-data duties to cross-border payments as small as $250. Existing U.S. requirements remain, alongside EU information checks that can affect even a $500 crypto payment.
An illustrative $500 customer transfer from a U.S. exchange to an EU exchange shows the limit of the retreat. It is below the U.S. Travel Rule’s $3,000 threshold, but the receiving exchange’s EU obligations can still prevent the recipient from accessing the assets until required information is supplied.
The joint withdrawal notice was published in the Federal Register on Nov. 9, with withdrawal effective that day. FinCEN’s Nov. 6 announcement confirmed the decision. The proposed $250 threshold never took effect through this rulemaking.
The October 2020 proposal would have lowered the threshold for specified recordkeeping and information-transmission duties from $3,000 to $250 for transfers beginning or ending outside the United States.
The existing Recordkeeping Rule requires covered institutions to collect and retain transfer information, while the Travel Rule requires information to pass to other institutions in the payment chain. The joint notice describes the current threshold as $3,000 or more. Withdrawing the proposal avoids extending those duties into the lower-value band.
The agencies cite the passage of more than five years, the value of further public feedback and changes in virtual-currency markets and legal frameworks. They say any future similar amendments should reflect those developments.
Existing crypto compliance duties continue. FinCEN’s 2019 virtual-currency guidance says qualifying convertible-virtual-currency transfers of $3,000 or more can trigger Travel Rule requirements. Covered money transmitters also retain applicable anti-money-laundering programs, customer-identification controls, recordkeeping, monitoring and reporting obligations.
Why $500 crypto transfers still need information
The EU’s crypto-transfer regulation, applicable since Dec. 30, 2024, covers customer transfers involving a crypto-asset service provider with its registered office in the EU. Its information requirements have no general exemption for small crypto transfers. The regulation explains that crypto transfers should face the same requirements regardless of amount or whether they are domestic or cross-border.
For the hypothetical $500 payment, assume the receiving exchange is an EU-registered provider serving a customer. The relevant duties here belong to the EU receiving provider; the U.S. exchange’s own obligations are governed separately.
At the EU receiving exchange
On a risk-sensitive basis, request required information before availability, or reject/return. Act without undue delay.
Required information complete AND recipient verified, including qualifying prior verification. Other applicable controls continue.
The U.S. retreat leaves the EU exchange’s information and recipient-verification requirements intact.
Scope: ordinary customer exchange-to-exchange crypto transfer with an EU-registered receiving provider. Other controls may apply. The separate self-hosted-address test and provider-free P2P exemption are outside this diagram. No processing-time or failure estimate.
Article 14 specifies sender and recipient names, relevant blockchain addresses and applicable crypto-account identifiers. Sender information also includes an address and country, official document number and customer identification number, or alternatively a date and place of birth. Additional legal-entity identifiers are conditional.
Providers can exchange that information in secure messages separate from the blockchain transaction. The EU receiving provider must detect missing information and verify recipient information before making the assets available; qualifying previous identity verification can satisfy the latter check.
If required details are missing or incomplete, Article 17 requires the receiving provider to act on a risk-sensitive basis and without undue delay. It must reject or return the transfer, or request the required information before making the assets available. Its procedures can include suspension.
That is how blockchain arrival and access to funds can diverge: the assets can arrive while the exchange still needs information before releasing them to its customer.
The regulation adds an ownership-or-control assessment for transfers exceeding €1,000 to or from self-hosted addresses. Smaller transfers still face the applicable information requirements. The exchange-to-exchange example falls under those general rules rather than this self-hosted-address test.
Scope matters, too. Person-to-person crypto transfers without a service provider fall outside the regulation, as do transfers where both providers act on their own behalf. An ordinary customer payment between exchanges remains within the provider-based framework.
The European Banking Authority’s applicable guidelines address detecting missing information and managing transfers that lack it.