Guide · Cross-niche editorial cluster · August 2026
The crypto Travel Rule goes global: AU, Brazil, and EU compared (2026)
2026 is the year the FATF Travel Rule stopped being a EU/US-only conversation. Australia's AUSTRAC, Brazil's CVM, and the EU's MiCA/DAC8 reporting regime all reached enforcement milestones in the same window. This guide compares what each market now requires and what it means for cross-border crypto transfers. An explainer, not financial or legal advice.
Markets covered in this guide
Markets covered
- European Union
- Australia
- Latam
The FATF Travel Rule — the requirement that crypto exchanges collect and share sender/receiver identity data on transfers, mirroring the rule that has governed traditional wire transfers for decades — reached full enforcement in three separate markets within the same 2026 window. “No-KYC” exchange claims are becoming legally untenable across all three.
Australia: AUSTRAC, effective July 1, 2026
Australia’s AML/CTF reform came into full force on July 1, 2026, expanding AUSTRAC’s supervision to a wider range of virtual asset service providers and implementing the Travel Rule with no exemptions for transfer size — every crypto transfer, domestic or international, now triggers a Travel Rule data check. Newly regulated VASPs, including crypto-to-crypto exchange and custody providers, were required to register with AUSTRAC by July 29, 2026.
Brazil: CVM Instruction 739 and the domestic Travel Rule
Brazil’s securities regulator, the CVM, now mandates independent, CVM-registered audits before a crypto exchange can be licensed under Instruction 739. Brazil’s domestic VASP Travel Rule — covering transfers between Brazilian-regulated platforms — has been in force since February 2026, ahead of Australia’s and layered on top of the country’s broader crypto AML crackdown.
EU: MiCA authorization plus DAC8 reporting
The EU took a two-layer approach. MiCA’s CASP authorization requirement (transitional period expired July 1, 2026 — see our dedicated MiCA deadline guide) sets the bar for who can operate at all, while the EU’s DAC8 directive adds a parallel tax-transparency reporting obligation on top, requiring crypto-asset service providers to report user and transaction data to national tax authorities.
What this means for cross-border transfers
If you move crypto between exchanges in different jurisdictions, expect:
- More identity data collected at each hop. Sender and receiver information now travels with the transfer in all three markets, not just at the point of cash-out.
- Slower onboarding for identity-light accounts. Exchanges tightening KYC ahead of these deadlines have increasingly gated withdrawals behind fuller identity verification.
- A shrinking set of viable “anonymous” routes. As all three regimes close simultaneously, arbitraging between a stricter and looser jurisdiction is a narrowing option.
This is an explainer, not financial or legal advice. Confirm any specific exchange’s current compliance posture against its home regulator’s public register before relying on it.