US drops a proposed crypto rule. Europe can still hold up your $500 transfer

FinCEN, the U.S. financial-crime regulator, and the Federal Reserve announced Nov. 6 that they are withdrawing a plan to expand transfer-data duties to cross-border payments as small as $250. Existing U.S. requirements remain, alongside EU information checks that can affect even a $500 crypto payment.

An illustrative $500 customer transfer from a U.S. exchange to an EU exchange shows the limit of the retreat. It is below the U.S. Travel Rule's $3,000 threshold, but the receiving exchange's EU obligations can still prevent the recipient from accessing the assets until required information is supplied.

The joint withdrawal notice was published in the Federal Register on Nov. 9, with withdrawal effective that day. FinCEN's Nov. 6 announcement confirmed the decision. The proposed $250 threshold never took effect through this rulemaking.

The October 2020 proposal would have lowered the threshold for specified recordkeeping and information-transmission duties from $3,000 to $250 for transfers beginning or ending outside the United States.

The existing Recordkeeping Rule requires covered institutions to collect and retain transfer information, while the Travel Rule requires information to pass to other institutions in the payment chain. The joint notice describes the current threshold as $3,000 or more. Withdrawing the proposal avoids extending those duties into the lower-value band.

The agencies cite the passage of more than five years, the value of further public feedback and changes in virtual-currency markets and legal frameworks. They say any future similar amendments should reflect those developments.

Existing crypto compliance duties continue. FinCEN's 2019 virtual-currency guidance says qualifying convertible-virtual-currency transfers of $3,000 or more can trigger Travel Rule requirements. Covered money transmitters also retain applicable anti-money-laundering programs, customer-identification controls, recordkeeping, monitoring and reporting obligations.

Why $500 crypto transfers still need information

The EU's crypto-transfer regulation, applicable since Dec. 30, 2024, covers customer transfers involving a crypto-asset service provider with its registered office in the EU. Its information requirements have no general exemption for small crypto transfers. The regulation explains that crypto transfers should face the same requirements regardless of amount or whether they are domestic or cross-border.

For the hypothetical $500 payment, assume the receiving exchange is an EU-registered provider serving a customer. The relevant duties here belong to the EU receiving provider; the U.S. exchange's own obligations are governed separately.

At the EU receiving exchange

On a risk-sensitive basis, request required information before availability, or reject/return. Act without undue delay.

The U.S. retreat leaves the EU exchange's information and recipient-verification requirements intact.

Scope: ordinary customer exchange-to-exchange crypto transfer with an EU-registered receiving provider. Other controls may apply. The separate self-hosted-address test and provider-free P2P exemption are outside this diagram. No processing-time or failure estimate.

Sources and evidence

Sources

1. Joint withdrawal notice
2. FinCEN CVC guidance
3. EU Regulation 2023/1113
4. EU Regulation 2023/1113

Supporting facts

• The October 2020 proposal would have reduced the threshold for certain transfers beginning or ending outside the United States from $3,000 to $250; the proposed $250 threshold never took effect through this rulemaking, and the joint notice describes the existing Recordkeeping and Travel Rule threshold as $3,000 or more. [1]
• FinCEN's May 9, 2019 guidance says qualifying CVC transmittals of $3,000 or more can trigger Travel Rule duties and that covered money transmitters retain applicable AML-program, customer-identification, recordkeeping, monitoring and reporting obligations. [2]
• Regulation (EU) 2023/1113 applies to crypto transfers where the originator's, beneficiary's or intermediary crypto-asset service provider has its registered office in the EU; the regulation applies from December 30, 2024. [4]
• EU crypto-transfer information requirements do not have a general low-value exemption: recital 30 says crypto transfers should face the same requirements regardless of amount or whether they are domestic or cross-border. [3] [4]
• Under Articles 14 and 16, required transfer information can be sent securely separately from the blockchain transaction; the EU receiving provider must detect missing information and verify recipient information before making assets available, with qualifying prior identity checks capable of satisfying verification. [4]
• When required sender or recipient information is missing or incomplete, Article 17 requires the EU receiving provider, on a risk-sensitive basis and without undue delay, to reject or return the transfer or request the required information before making the assets available; its procedures cover execution, rejection, return or suspension. [4]

Method

Qualitative illustration from the joint notice, FinCEN CVC guidance and EU Articles 2,14-17. $500 is hypothetical, not an observed payment. Arrows show responsibilities and information flow, not speed, volume or legal reach over a US-only sender.

Scope

Scope: ordinary customer exchange-to-exchange crypto transfer with an EU-registered receiving provider. Other controls may apply. The separate self-hosted-address test and provider-free P2P exemption are outside this diagram. No processing-time or failure estimate.

Infographic by CryptoSlate

Article 14 specifies sender and recipient names, relevant blockchain addresses and applicable crypto-account identifiers. Sender information also includes an address and country, official document number and customer identification number, or alternatively a date and place of birth. Additional legal-entity identifiers are conditional.

Providers can exchange that information in secure messages separate from the blockchain transaction. The EU receiving provider must detect missing information and verify recipient information before making the assets available; qualifying previous identity verification can satisfy the latter check.

If required details are missing or incomplete, Article 17 requires the receiving provider to act on a risk-sensitive basis and without undue delay. It must reject or return the transfer, or request the required information before making the assets available. Its procedures can include suspension.

That is how blockchain arrival and access to funds can diverge: the assets can arrive while the exchange still needs information before releasing them to its customer.

The regulation adds an ownership-or-control assessment for transfers exceeding €1,000 to or from self-hosted addresses. Smaller transfers still face the applicable information requirements. The exchange-to-exchange example falls under those general rules rather than this self-hosted-address test.

Scope matters, too. Person-to-person crypto transfers without a service provider fall outside the regulation, as do transfers where both providers act on their own behalf. An ordinary customer payment between exchanges remains within the provider-based framework.

The European Banking Authority's applicable guidelines address detecting missing information and managing transfers that lack it.