Skip to main content
FP·EDITORIAL · VOL. III · ISSUE 14 · CROSS-MARKET GUIDE · MAY 2026 last sweep 2026-05-14 · 0 programs scored · 0 defunct

Editorial cluster · Cross-market guide

methodology v3.2 · audited apr '26

iso 27001

Guide · Cross-niche editorial cluster · August 2026

The crypto Travel Rule goes global: AU, Brazil, and EU compared (2026)

2026 is the year the FATF Travel Rule stopped being a EU/US-only conversation. Australia's AUSTRAC, Brazil's CVM, and the EU's MiCA/DAC8 reporting regime all reached enforcement milestones in the same window. This guide compares what each market now requires and what it means for cross-border crypto transfers. An explainer, not financial or legal advice.

Markets covered

  • European Union
  • Australia
  • Latam

The FATF Travel Rule — the requirement that crypto exchanges collect and share sender/receiver identity data on transfers, mirroring the rule that has governed traditional wire transfers for decades — reached full enforcement in three separate markets within the same 2026 window. “No-KYC” exchange claims are becoming legally untenable across all three.

Australia: AUSTRAC, effective July 1, 2026

Australia’s AML/CTF reform came into full force on July 1, 2026, expanding AUSTRAC’s supervision to a wider range of virtual asset service providers and implementing the Travel Rule with no exemptions for transfer size — every crypto transfer, domestic or international, now triggers a Travel Rule data check. Newly regulated VASPs, including crypto-to-crypto exchange and custody providers, were required to register with AUSTRAC by July 29, 2026.

Brazil: CVM Instruction 739 and the domestic Travel Rule

Brazil’s securities regulator, the CVM, now mandates independent, CVM-registered audits before a crypto exchange can be licensed under Instruction 739. Brazil’s domestic VASP Travel Rule — covering transfers between Brazilian-regulated platforms — has been in force since February 2026, ahead of Australia’s and layered on top of the country’s broader crypto AML crackdown.

EU: MiCA authorization plus DAC8 reporting

The EU took a two-layer approach. MiCA’s CASP authorization requirement (transitional period expired July 1, 2026 — see our dedicated MiCA deadline guide) sets the bar for who can operate at all, while the EU’s DAC8 directive adds a parallel tax-transparency reporting obligation on top, requiring crypto-asset service providers to report user and transaction data to national tax authorities.

What this means for cross-border transfers

If you move crypto between exchanges in different jurisdictions, expect:

  • More identity data collected at each hop. Sender and receiver information now travels with the transfer in all three markets, not just at the point of cash-out.
  • Slower onboarding for identity-light accounts. Exchanges tightening KYC ahead of these deadlines have increasingly gated withdrawals behind fuller identity verification.
  • A shrinking set of viable “anonymous” routes. As all three regimes close simultaneously, arbitraging between a stricter and looser jurisdiction is a narrowing option.

This is an explainer, not financial or legal advice. Confirm any specific exchange’s current compliance posture against its home regulator’s public register before relying on it.

Editorial signatures and issue metadata

Edited by

Maren Holst

Senior Editor

Signed · M.HOLST

Fact-checked by

Asha Devi

Standards Desk (Fact-Checker)

Signed · A.DEVI

Issue meta

vol iii · iss 14

published 2026-08-21

last sweep 2026-08-21

methodology v3.2 · audited apr '26

Paphos, Cyprus