Why Does My Exchange Ask Who Owns My Wallet?

Your exchange asks who owns the wallet you are withdrawing to because of the travel rule: anti-money-laundering law that makes regulated crypto platforms collect, keep and pass on the names and account details behind a transfer. The trigger differs by country. In the United States it is $3,000 or more. In the European Union every platform-to-platform transfer is covered whatever the amount, with an ownership check on self-hosted wallets above EUR 1,000. Canada applies it from CAD 1,000, and the United Kingdom moved its threshold from 1,000 euros to £800 on 30 June 2026. The questions are about the platform's legal duty, not an accusation, and the right answer is a truthful one. This page reads each regime from its legal text, keeps law, guidance and proposals apart, and ends with a checklist for answering the withdrawal screen.

Where the Rule Comes From

The travel rule began life as a banking rule. Recommendation 16 of the Financial Action Task Force standards, adopted in 2012 according to the European Banking Authority's account of its history, asks countries to make banks send identifying information about the payer and the payee along with a wire transfer, so that every institution in the payment chain, and later an investigator, can see who sent money to whom. The name comes from that idea: the information travels with the payment.

The FATF later extended Recommendation 16 to virtual asset service providers, the FATF's term for exchanges, brokers and custodial wallet businesses, on the view that crypto transfers carry the same money-laundering and terrorist-financing risks as wires. Countries then had to write that standard into their own law, which is why there is no single global travel rule. There is a shared template, and each jurisdiction decided its own threshold, its own list of data fields and its own treatment of wallets that no institution controls.

The FATF template allows a floor. A 2020 rulemaking notice from the US Federal Reserve Board and FinCEN summarises it: countries may adopt a de minimis threshold of no higher than USD/EUR 1,000 for cross-border wire transfers, below which names and account numbers should still be collected and sent but need not be verified unless there is a suspicion. The same notice says that the 1,000 figure has been adopted by the European Union and by most jurisdictions. Keep that number in mind, because the United States is the large exception, with a higher threshold inherited from a 1990s wire rule, and the European Union went the other way for crypto and dropped the threshold entirely.

None of this is new law aimed at self-custody. The rule governs what one regulated business must tell another. Self-hosted wallets come into it because a transfer to one has no regulated business on the other end to receive the data, and each regime had to decide what the sending platform should do instead. Which market regulator, if any, oversees the platform itself depends on the activity, as our map of SEC and CFTC jurisdiction over crypto shows.

The Four Regimes Side by Side

The table compares the rules a reader in the United States, the European Union, the United Kingdom or Canada is most likely to meet. Each row was read from the legal text or the regulator's own guidance on October 22, 2026, and the status column says what kind of rule it is.

Two cautions on reading the table. First, the thresholds measure value at the time of the transfer in the regime's own currency, so the same coin amount can fall on either side of a line depending on the day's price. Second, a platform can ask more than the law requires. Many apply one global questionnaire to every withdrawal because it is cheaper than running four rulebooks, so a US customer sending $500 can see the same screen a European customer sees. That is company policy, and you are entitled to read the platform's terms to see what it says about it.

United States: A $3,000 Rule Written for Wires

The US rule sits in the Bank Secrecy Act regulations at 31 CFR 1010.410(f). It applies to any transmittal of funds of $3,000 or more. The financial institution acting for the sender must include, in the order it sends on to the next institution, the sender's name and account number where the payment comes from an account, the sender's address, the amount, the execution date and the identity of the recipient's financial institution, plus as much of the recipient's name, address, account number or other identifier as it received. A neighbouring paragraph, 1010.410(e), sets record-keeping duties at the same $3,000 level.

Nothing in that text mentions crypto. FinCEN connected the two in its May 9, 2019 guidance, FIN-2019-G001, on business models involving convertible virtual currency. Because a transmittal order involving crypto is an instruction to pay a determinable amount of money, FinCEN wrote, such transactions qualify as transmittals of funds and may fall within the Funds Travel Rule, and a transmittal of $3,000 or more, or its equivalent in crypto, may trigger the requirements. The guidance adds two points that matter in practice. The parties do not have to use the same system for moving the value and for sending the required information, as long as the information goes before or at the time of the transfer. And replacing a customer's real name with a code the next institution cannot decode does not satisfy the rule.

On self-custody, the same guidance describes unhosted wallets as software on a person's own device that lets them hold and transact without a third party, and says that a person using an unhosted, single-signature wallet to buy goods or services on their own behalf is not a money transmitter. The duties fall on the hosted side: an exchange that sends to or receives from a self-hosted wallet applies its own anti-money-laundering programme to its own customer.

The $250 proposal, which is only a proposal

On October 27, 2020, the Federal Reserve Board and FinCEN published a joint notice of proposed rulemaking (85 Fed. Reg. 68005) that would have lowered the record-keeping and travel rule threshold from $3,000 to $250 for transfers that begin or end outside the United States, and would have stated in the rule text that it covers convertible virtual currency and digital assets with legal tender status. Comments closed on November 27, 2020. The current text of 31 CFR 1010.410(f), checked on October 22, 2026, still reads $3,000. Treat any article that describes a US $250 crypto travel rule as describing a proposal that did not become the rule.

European Union: No Threshold Between Platforms

The European Union rewrote its wire-transfer rule in 2023. Regulation (EU) 2023/1113 recast the earlier Regulation (EU) 2015/847 and extended it to transfers of crypto-assets, and it applies from 30 December 2024, the same day the main MiCA rules for crypto-asset service providers took effect. If you have read our guide to MiCA and how it split stablecoin liquidity on EU venues, this is the anti-money-laundering half of the same rollout. The licensing half, from CASP authorisation to the ESMA register, is covered in our MiCA explainer for users.

The striking choice is the missing threshold. In its final guidelines, the European Banking Authority points to recital 30 of the Regulation, which makes all crypto-asset transfers subject to the same requirements regardless of their amount and of whether they are domestic or cross-border. A EUR 20 transfer from one EU exchange to another carries the originator's and beneficiary's details just as a EUR 20,000 transfer does.

The EBA guidelines, reference EBA/GL/2024/11, dated 4 July 2024 and applying from 30 December 2024, are where the practical detail lives. Four parts of them shape what a customer sees.

Self-hosted addresses. The Regulation requires a provider to obtain and hold information on the self-hosted address, to make sure the transfer can be individually identified, and, where the amount exceeds EUR 1,000, to assess whether the address is owned or controlled by its customer (Articles 14(5) and 16(2)). The guidelines say the provider should first use technical means such as blockchain analytics and third-party data to work out whether the other end is a self-hosted wallet, and only if that fails should it ask the customer. Where the other end is self-hosted, the provider collects the originator or beneficiary information from its own customer.

How ownership is checked. Above EUR 1,000, the guidelines list acceptable methods: an unattended or attended remote verification in which the customer displays the address, sending a small predefined amount from and to the self-hosted address, signing a specific message with the key for that address, or other technical means that leave the provider fully satisfied about who controls the address. One method can be enough; where one is not reliable on its own, the provider should combine them.

Whitelisting. Once a provider is satisfied that an address belongs to its customer, it should record that and need not repeat the check for later transfers to the same address, while watching for signs that the risk or the ownership has changed. This is why your first withdrawal to a new wallet can be slow and the second one quick.

Measuring the EUR 1,000 line. The value is set at the moment the sending provider initiates the transfer, or at receipt for the receiving provider, using the exchange rate of the crypto-asset being sent, regardless of transaction fees. Fees do not push a transfer under the line.

United Kingdom: Part 7A and the £800 Change

The UK version is Part 7A of the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, inserted by SI 2022/860 with effect from 1 September 2023. The regulations call a platform-to-platform transfer an inter-cryptoasset business transfer and a transfer to or from a wallet no business controls an unhosted wallet transfer.

Regulation 64C sets two tiers of information. Every inter-business transfer must carry the names of the originator and the beneficiary (the registered or trading name for a firm) and their account numbers, or a unique transaction identifier where there is no account number. A second tier, the originator's customer identification number or address, or an identity document number, or date and place of birth, must also travel when the transfer is not wholly within the UK and is equal to or above the threshold, counting linked transfers together. When every business in the chain is carrying on business in the UK, the second tier does not have to travel automatically; the receiving business can request it and the sending business must supply it within three working days. The sending business must verify the originator information from an independent reliable source and must not make the transfer until it has complied.

The threshold changed this year. As it stood on 1 September 2023, regulation 64C(4) read 1,000 euros. Regulation 32 of the Money Laundering and Terrorist Financing (Amendment) Regulations 2026, SI 2026/621, substituted £800, and the legislation.gov.uk annotation dates the change to 30 June 2026. Any UK guide written before mid-2026 that quotes 1,000 euros was right when written and is out of date now.

Regulation 64G covers unhosted wallets. A business involved in an unhosted wallet transfer may ask its own customer for the basic information it does not already hold and, where its customer is the beneficiary of a transfer of £800 or more, for the originator's second-tier details. In deciding whether to ask, it must have regard to its risk assessments and to the purpose of the transfer, its value and any linked transfers, how often the customer transfers, and how long the relationship has lasted. If it asks and the information does not arrive, it must not make the cryptoasset available to the beneficiary. For a UK customer receiving coins from someone else's self-hosted wallet, that last sentence is the one with teeth.

On the receiving side of an inter-business transfer, regulation 64D says that if information is missing or does not match the business's verified records, it must request it, consider making enquiries, and consider delaying the transfer or returning the cryptoasset, and it must report repeated failures by another business to the FCA. UK readers working out their tax position should note that none of this changes how a transfer is taxed; the HMRC rules on crypto disposals are a separate regime.

Canada: The CAD 1,000 Record and Section 124.1

Canada's rule is short. Section 124.1 of the Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations says that a financial entity, money services business or foreign money services business that must keep a record of a virtual currency transfer shall include with the transfer the name, address and, if any, the account number or other reference number of both the person who requested it and the beneficiary, and shall take reasonable measures to ensure that any transfer it receives includes the same. It must also have written, risk-based policies for deciding whether to suspend or reject a received transfer that still lacks the information, and what follow-up to take.

The threshold comes from the record-keeping rules the section points back to. The same regulations require a money services business that transfers an amount of $1,000 or more in virtual currency at a customer's request to keep a record of the transfer, including every transaction identifier with the sending and receiving addresses and the exchange rates used, and a matching record when it receives $1,000 or more for remittance to a beneficiary. So for crypto platforms registered as money services businesses, the travel rule in practice attaches at CAD 1,000.

FINTRAC's guidance, Travel rule for electronic funds and virtual currency transfers, came into effect on June 1, 2021. It says information received under the travel rule cannot be removed from a transfer, and it describes reasonable measures to fill gaps as steps taken toward a result even if they do not succeed, giving examples such as asking the client, searching open sources and consulting commercially available information. Canadian platforms also file a separate large virtual currency transaction report when they receive virtual currency worth $10,000 or more in one transaction, or in several within 24 consecutive hours that meet FINTRAC's aggregation tests. That report goes to FINTRAC; it does not travel with the transfer.

Why Self-Hosted Wallets Get the Questions

From a compliance officer's chair, a transfer between two regulated platforms is the easy case. Each side knows its own customer, and the travel rule data passes between them through a messaging system. A transfer to a self-hosted address has no second institution, so there is nobody to receive the data and nobody on the other end who has checked an identity. The sending platform fills the gap the only way it can, by asking its own customer. That is the logic behind every question on the withdrawal screen.

The EBA guidelines say it outright in their list of situations that can raise risk: transfers with self-hosted addresses sit alongside transfers involving countries that have not implemented the travel rule and addresses linked with suspicious activity. The EBA also responded to industry comments that the rules targeted self-custody unfairly, pointing to recital 58 of the Regulation and its reference to the potential high risks and the technological and regulatory complexity of self-hosted addresses. You can disagree with that view and still answer the questions; the platform does not have discretion to skip them.

It also helps to know what a wallet address is and is not. An address is derived from a key you hold, and the formats differ by chain; our guide to Bitcoin address types explains why the same wallet can show several. A platform cannot tell from the address string alone who controls it, which is why the European methods involve proving control, by signing a message or moving a small amount, rather than just declaring it. If you are new to how a self-hosted wallet holds keys at all, our wallet primer is the place to start.

Four Worked Scenarios

These are hypothetical transfers with stated inputs, written to show how the rules above apply. They describe minimum legal duties; a platform may ask more under its own policy.

Scenario B shows the effect most readers feel. The EUR 4 fee is irrelevant to the line because the EBA guidelines measure value regardless of transaction fees, and the transfer would face the same check at EUR 1,001. Scenario C is the one that surprises people: a UK platform holding an incoming deposit while it waits for information is following regulation 64G, not freezing your account at random.

What the Exchange May Ask, and How to Answer

The screens vary, but the questions map onto the legal duties above. This checklist covers the common ones.

The step-by-step mechanics of the withdrawal itself, address checks, network matching, memos and the test transaction, are in our guide to moving crypto from an exchange to your own wallet. This page covers why the questions appear; that one covers how to send without losing the coins.

When the Other Side Isn't Covered: The Sunrise Problem

Countries adopted the travel rule at different times and some have not adopted it at all. Industry calls the gap the sunrise problem: the sun has risen on the rule in one country and not yet in the next, so a compliant platform sends travel rule data to a counterparty with no system or duty to receive it, or receives a transfer with nothing attached. The EBA's consultation responses record respondents describing a significant share of transactions still lacking the required information because of the sunrise period and interoperability limits.

The rules tell the receiving platform what to do, and the answer is rarely to wave the transfer through. Under the EBA guidelines, a provider that cannot obtain missing information should decide under its risk-based policy whether to reject, return, suspend or execute, and should consider the future treatment of the counterparty, including rejecting future transfers from it. Where rejecting a crypto transfer is technically impossible, the transfer should be returned to the originator, and where returning to the original address is impossible, the provider should hold the assets in a secure, segregated account while it arranges a return. Transfers involving counterparties in countries that, on public information, have not implemented the obligation appear in the EBA's list of risk factors. In Canada, FINTRAC's guidance asks for reasonable measures to obtain the data and a written policy on suspending or rejecting. In the UK, regulation 64D lists requesting the information, making enquiries, and delaying or returning the transfer.

For a customer, the practical consequence is that sending to a small or offshore platform can be slower, can bounce back, or can be refused at the outset. It is also one more reason to know where a platform is licensed before you deposit; our exchange reserve and risk checklist includes that check.

What Is Law, What Is Guidance, What Is Only Proposed

Coverage of the travel rule often blurs these categories. Here they are separated.

Enacted or final law. 31 CFR 1010.410(f) in the United States. Regulation (EU) 2023/1113 in the European Union. Part 7A of the UK Money Laundering Regulations 2017, including the £800 amendment made by SI 2026/621. Section 124.1 and the record-keeping provisions of Canada's PCMLTFR.

Regulator guidance on how to comply. FinCEN's FIN-2019-G001, which applies the US rule to crypto. The EBA's Travel Rule Guidelines, EBA/GL/2024/11. FINTRAC's travel rule guidance. Guidance explains and sets supervisory expectations; where it goes beyond the legal text, firms generally follow it because supervisors examine against it.

International standards. FATF Recommendation 16 and its interpretive notes. They bind no individual or firm directly; they shape what countries legislate.

Proposals. The 2020 US proposal to lower the threshold to $250 for cross-border transfers. It was published for comment and the rule text still reads $3,000.

Related rules are separate regimes. The GENIUS Act guide covers US stablecoin issuers, and the travel rule applies to stablecoin transfers between platforms like any other crypto. Stablecoins also show why the rule matters to issuers: our explainer on how fiat-backed, crypto-backed and synthetic stablecoins differ covers the issuer controls that sit on top of the travel rule data. Tax reporting is different again: a US broker's Form 1099-DA reports your sales to the IRS, and travel rule data reports a transfer to the next platform, so neither one replaces the other. More on how these rules fit together is on our crypto regulation hub.

Edge Cases and Common Mistakes

Declaring a hosted account as self-hosted. A wallet address inside another exchange or a custodial app is not self-hosted, even though it is yours. Calling it self-hosted sends the platform down the wrong path and can stall the transfer when blockchain analytics shows the address belongs to a provider. The EBA guidelines tell providers to identify the counterparty provider correctly when a customer's answer turns out to be wrong.

Splitting a transfer to stay under a line. The UK rule counts linked transfers together, the EBA encourages providers to look for threshold circumvention around EUR 1,000, and Canada aggregates for its separate $10,000 report. Splitting is the pattern these provisions exist to catch, and it can do more damage to your standing with a platform than the check you were avoiding.

Assuming a smaller amount means no questions. In the EU there is no threshold for platform-to-platform transfers, and every platform can apply its own policy below the legal minimum.

Using an old UK threshold. Material written before 30 June 2026 cites 1,000 euros. The figure in force is £800.

Quoting the US $250 figure as law. It was proposed in 2020. The rule reads $3,000.

Treating a delayed deposit as a frozen account. Under UK regulation 64G and the EU rules, a receiving platform may hold a deposit from a self-hosted wallet until it has the information it asked for. Supplying it usually resolves the hold. If someone outside the platform contacts you claiming they can release a held transfer for a fee, that is a scam pattern; our guide on where and how to report a crypto scam covers what to do.

Giving more than is asked. The questions are about identity and control. Nothing in the rules discussed here requires your recovery phrase, your private key, or remote access to your device, and anyone requesting those is not doing travel rule compliance.

Where to Go Next

If the questions on your withdrawal screen were the reason you came here, the next useful read is our step-by-step guide to moving coins from an exchange to a wallet you control, because the network, memo and test-transaction mistakes it covers lose far more money than any compliance check delays.

Frequently Asked Questions

Why does my exchange ask who owns the wallet I'm withdrawing to?

Travel rule laws require regulated platforms to collect information about the sender and recipient of a crypto transfer and, when the recipient is at another provider, to pass it on. When the destination is a self-hosted wallet there is no provider on the other end, so the platform collects the details from you, and in the European Union it must also assess whether the address is owned or controlled by you when the transfer is above EUR 1,000.

Does the travel rule apply to transfers to my own hardware wallet?

It shapes what your platform asks, but the obligations sit with the platform, not with you. In the EU the platform must obtain and hold information on the self-hosted address and, above EUR 1,000, check ownership, for example by asking you to sign a message or send a small amount. In the UK a platform may request information under regulation 64G. FinCEN's 2019 guidance says a person using an unhosted single-signature wallet for their own purchases is not a money transmitter.

What is the crypto travel rule threshold in the United States?

$3,000. The rule at 31 CFR 1010.410(f) applies to transmittals of funds of $3,000 or more, and FinCEN's 2019 guidance says it covers crypto transmittals of that amount or its equivalent. A 2020 proposal would have lowered it to $250 for cross-border transfers, but the current rule text still reads $3,000.

Is there a minimum amount for the travel rule in the EU?

Not for transfers between crypto-asset service providers. Regulation (EU) 2023/1113, applying from 30 December 2024, covers all crypto-asset transfers regardless of amount. EUR 1,000 matters only for transfers involving self-hosted addresses, where above that value the provider must assess whether its customer owns or controls the address.

What happens if I can't provide the recipient's information?

It depends on where you are and which side of the transfer you are on. A sending platform may decline to process the withdrawal until its questions are answered. A receiving platform in the UK that asked for information about an unhosted wallet transfer and did not get it must not make the coins available, and EU providers can reject, return or suspend transfers lacking information under their risk-based policies. Answering accurately, and saying when you do not know something, is the fastest route through.

Can I refuse to verify my self-hosted wallet?

You can, but the platform can then refuse or delay the transfer, because in the EU the verification is the provider's legal duty above EUR 1,000 and providers elsewhere apply their own risk policies. The verification methods in the EBA guidelines, such as signing a message or a small test transfer, prove control without revealing your recovery phrase, which no genuine check ever needs.

Why do I get travel rule questions when I'm below the threshold?

Two reasons. In the EU there is no threshold for platform-to-platform transfers, so the data is collected on every one. And platforms often apply a single global questionnaire, or a lower internal threshold, as a matter of company policy rather than law. The legal thresholds in the table above are minimums, not ceilings.

Sources

CryptosEyes publishes general educational research, not legal, tax or investment advice. Travel rule obligations depend on where a platform is licensed and on its own policies, and the rules change; read the legal text linked above or ask a qualified adviser before relying on any threshold for a specific transfer.