Crypto Travel Rule and Cash Reporting: Which Records Should Accompany the Funds?

Under the crypto Travel Rule, missing information is an AML failure when a covered institution sends funds without the required identifying details. The next institution receives the money without the information it needs to trace the sender. For an insider, the revealing comparison is what the business received, what it passed on and what it kept. A customer file, a transfer message and a cash report answer different questions.

Does the Travel Rule Apply to Cryptocurrency?

Yes. In the United States, the Travel Rule applies to covered institution-to-institution transfers of $3,000 or more, measured by the equivalent value of convertible virtual currency. The information accompanies the transfer order. It does not have to become a public entry on the blockchain.

The Financial Crimes Enforcement Network’s virtual-currency guidance examines what the business actually does. A centralized exchange, a business exchanging crypto between customers or a kiosk operator can conduct money transmission by accepting and transmitting value. That can include exchanges between cryptocurrencies. A hosted-wallet provider’s control over customer value matters to the same inquiry.

Crypto exchange AML evasion can leave a revealing split: the institution holds customer information internally, but its outgoing transfer leaves required information behind.

Which Information Should Accompany the Transfer?

A crypto Travel Rule record missing originator or beneficiary information has to be read against the institution’s role and the information it received. The originating institution supplies the sender’s required details. Recipient details have their own received-information condition.

Under the federal transfer-record rule, the message carries the sender’s name and address, account number when used, transfer amount and date, and the institutions involved. It also carries the recipient’s name, address, account number and other specific identifier, to the extent received with the order.

Those last words matter. There is a difference between a recipient field that never arrived and one that arrived but disappeared from the outgoing message. Comparing the incoming and outgoing orders makes that difference visible.

The Intermediary Passes Along What It Receives

An intermediary that accepts an order passes the specified information it received to the next institution. FinCEN’s Travel Rule questions and answers make receipt the key distinction: an empty outgoing field has to be compared with the incoming record to see whether information was dropped.

The Institution Also Keeps Its Own Record

Nonbank intermediaries and recipients keep the accepted order. The originating institution keeps the customer’s payment instructions and completed transfer forms, giving us a record to compare with the outgoing message.

When the Other Side Is a Self-Hosted Wallet

A self-hosted user controlling value for personal transactions is not another financial institution waiting to receive an institutional Travel Rule message. The regulated business on the other side still has its own obligations. The useful question is who actually controls and transmits the value.

Hosted wallets present a different record problem. A provider can move value between customer accounts on its internal ledger without each movement appearing separately on a public blockchain. The ledger can identify the credited customer where the public transfer history cannot.

The identity information belongs in the institutional exchange and records, rather than on a public blockchain. A Wharton Initiative on Financial Policy and Regulation white paper, Anti-Money Laundering: Opportunities for Improvement, published in 2024, frames the broader privacy issue this way:

That distinction matters here. Passing required identity information to another covered institution and publishing a customer’s identity for everyone to see are different acts. The Travel Rule calls for the former.

What Is the Difference Between SAR and CTR?

Cash transaction reporting versus suspicious activity reporting for a crypto business turns on the kind of transaction and what the business knows about it. A currency transaction report records qualifying cash activity. A suspicious activity report records activity meeting the institution’s suspicion standard and threshold.

The same Wharton paper distinguishes recordkeeping from affirmative reporting as separate parts of the Bank Secrecy Act. That distinction explains why these records cannot stand in for one another:

Cash Reporting Follows the Cash

The federal currency-reporting rule covers qualifying currency transactions of more than $10,000. Currency here means qualifying coin and paper money. Known transactions for the same person during a business day are aggregated, with cash in and cash out counted separately.

Cash entering or leaving through a business can raise a currency-reporting question at that point. The crypto transfer raises its own transfer-record question. In a business handling both, the cash receipt and the transfer order describe different parts of the movement of value.

Cash purchases of covered monetary instruments also have a separate purchase-and-identity record requirement.

Suspicious Activity Follows the Facts

For a covered money services business, the suspicious-activity rule generally reaches conducted or attempted transactions involving or aggregating at least $2,000 when the business knows, suspects or has reason to suspect the specified activity. Suspected evasion of Bank Secrecy Act requirements is one of its grounds.

An attempted transfer can therefore matter even if the funds never leave. The review concerns the attempted activity and what the institution knew. A Travel Rule message serves the next institution. A SAR communicates suspicion to the government.

What Missing Information Looks Like Inside the Business

The most useful comparison puts the accepted order beside the outgoing message and the customer information the business held. We examine whether the field was absent at the start, lost along the way or available internally but left out of the transmission.

Where a business uses a missing-information queue, its requests, responses and release decisions can help explain the gap. If an employee escalated a missing field and someone authorized the transfer anyway, the escalation and authorization connect the missing information to a decision.

A completed customer file does not answer whether the required information traveled. Nor does an undecodable pseudonym stand in for required identity information. We examine the internal record and outgoing message with the people who understand how the transfer was processed.

Why a Transaction Hash Leaves Questions Unanswered

A transaction hash can document a transfer while leaving the customer credited internally, the person controlling the wallet and the staff decision unexplained. Exchange ledgers, wallet-control records and escalation histories can supply those connections.

A 2019 Central European University thesis, How Does Whistleblowing and Leaking Affect Anti-Money Laundering Policy Changes in the European Union, examined leaks, transactions and policy responses. Its findings emphasize how internal transfers and communications make hidden processes visible.

For this page’s reader, that is the value of knowing the operation from inside. An exchange ledger can connect a transfer to a customer account. A payment instruction can show what was requested. An escalation can show what staff understood before the business moved the funds. Together, those records let us examine the gap between the transfer and its explanation.

What Are Some Examples of Cash Structuring?

Latam Games provides a concrete example of dividing cash deposits to evade reporting. In its guilty plea, the company admitted a pattern of structuring involving more than $100,000 over a twelve-month period. Its officers split the cash deposits to avoid reporting requirements.

The comparison for a crypto business is the decision behind the transaction pattern. In Latam Games, the admitted conduct connected the deposits to an evasion purpose. In a transfer-information inquiry, we examine who received the information, who passed it on and what decisions explain the gap. The records need to tell the story of the conduct as well as the movement of funds.

How Long Should AML Records Be Kept?

The Bank Secrecy Act rules require five years of retention for the transfer records, currency reports and SAR support discussed here. Those records can let us trace an older transfer back to the instructions and information the institution held.

What an Insider Can Bring to a Whistleblower Case

Someone who understands the transfer process can help connect missing information to the business’s knowledge and decisions. We use that knowledge to identify where the information broke down and build the evidence behind a whistleblower case. SAR confidentiality is something we address with you when it bears on the matter.

FinCEN’s whistleblower program covers information about Bank Secrecy Act violations and certain sanctions violations. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers. The False Claims Act and FinCEN programs are separate. We assess the conduct and the reward route together.

When the Funds Moved and the Information Did Not

If you work in exchange operations, payments or AML and know where required transfer information went missing, speak with our whistleblower experts about what happened inside the business. We build your case around who released the transfers, what they knew and the records that show it. We bring in money laundering whistleblower lawyers who understand exchange operations and stay beside you through the process.