FATF

It has no power to legislate anywhere, which is the interesting part: compliance is enforced by listing instead. Countries judged deficient go on the grey list, and 22 were under increased monitoring after the plenary of June 17 to 19, 2026, which raises the cost of banking for everyone inside them. Recommendation 15, amended in October 2018, is the one that pulled bitcoin exchanges into the system.

How it works

The Financial Action Task Force sets standards and then grades governments against them.

It was created in 1989 by the G7 and is hosted at the OECD in Paris, with a membership of national governments plus the European Commission and the Gulf Cooperation Council. Its output is a set of 40 Recommendations covering money laundering, terrorist financing and proliferation financing, backed by interpretive notes that carry as much weight as the recommendations themselves.

Enforcement runs through evaluation and reputation. Every member is assessed in a mutual evaluation, a multi-year review conducted by peers and by one of nine regional bodies that mirror the process for the rest of the world. Fall short and a country enters the list of jurisdictions under increased monitoring, universally called the grey list, with an agreed action plan and deadlines. The far shorter blacklist, formally the call for action, has held North Korea, Iran and Myanmar.

Grey listing has real economic bite: correspondent banks apply heavier checks to the entire country, payment costs rise, and governments treat exit as a national priority. Burkina Faso, Mozambique, Nigeria and South Africa were removed at the plenary that closed on October 24, 2025, after completing their action plans.

For bitcoin, two recommendations matter. Recommendation 15 requires countries to license or register virtual asset service providers and supervise them. Recommendation 16 extends the payment-transparency requirement, the Travel Rule, to those providers.

Where you see it

You never deal with FATF, and yet nearly every rule you meet while buying bitcoin can be traced back to it.

The clearest trace is in small jurisdictions writing crypto law they would otherwise not have prioritised. Trinidad and Tobago passed its virtual assets act in December 2025 ahead of a regional review. Seychelles built a licensing regime for the exchanges registered there specifically to align with the standards, and Montserrat did the same through its 2023 act and 2024 regulations. Those laws then decide which platforms serve residents of those countries, which is a practical outcome rather than a diplomatic one.

The second trace is in the pace of the Travel Rule. The seventh targeted update, published on July 16, 2026, reported that 83 percent of surveyed jurisdictions had passed implementing legislation, up from 73 percent the year before, with the remaining gaps concentrated in supervision rather than in law.

The third is in what a grey listing does to you as a resident. Card payments to foreign exchanges get declined more often, banks ask for more paperwork on outbound transfers, and local platforms lose access to international rails. None of that is aimed at bitcoin buyers, and all of it lands on them.

FATF vs the Travel Rule

FATF is the body; the Travel Rule is one requirement it recommends, and conflating them makes the rule sound optional. FATF publishes standards that bind nobody directly. What binds you is the national law your country passed afterwards, which is why the thresholds differ so much: no minimum in the European Union, 3,000 dollars in the United States, and nothing at all in jurisdictions that have not legislated. When a support agent says "the FATF Travel Rule requires this", the accurate version is that a domestic regulation, written to satisfy an evaluation, requires it. The distinction matters if you ever need to check what actually applies where you live, because the enforceable text is your own country's, not the one published in Paris.