📋 FATF Travel Rule · CARF · Sumsub · Notabene · Updated May 2026

Bitcoin Travel Rule & Compliance in Asia 2026

Reviewed by Karel Havlíček · Bitcoin Analyst & Editor · Updated May 2026

The FATF Travel Rule reshaped Asian crypto compliance. Since 2023-25 rollouts, Singapore, Hong Kong, Japan, Korea, UAE all require licensed exchanges to transmit sender + recipient KYC data on crypto transfers above specified thresholds. CARF (Crypto-Asset Reporting Framework) goes live 2027, adding automatic exchange of holdings information between tax authorities globally. This guide is the practical map: what's required, what it means for your transactions, and how to operate compliantly while preserving sovereignty.

Direct answer: The Travel Rule applies to VASP-to-VASP transfers (regulated-to-regulated). Self-custody transfers and your personal wallet-to-wallet sends are not covered. Asian thresholds: SG $1,500, HK $8,000 HKD, JP ¥30K, KR equivalent of $1,000, UAE $1,000. Above threshold, sender VASP shares your KYC with recipient VASP. CARF (2027) adds annual reporting of your VASP holdings to your tax-residence country. Self-custody remains outside both regimes.

How the Travel Rule actually works

VASP → VASP
In-scope transfers

You withdraw BTC from Binance (originating VASP) to Coinbase (beneficiary VASP). Above threshold, Binance shares your KYC with Coinbase via Travel Rule messaging (Notabene, TRP, Sumsub Travel, OpenVASP).

VASP → Self-custody
Mostly out-of-scope

You withdraw BTC from a regulated exchange to your own hardware wallet. Some jurisdictions (JP, KR) require self-declaration of self-custody address ownership. Most allow free-flowing withdrawal subject to AML reasonableness.

Self-custody → Self-custody
Completely out-of-scope

Two of your wallets, no regulated venue involved. No Travel Rule obligation. Pure self-sovereign transaction.

Self-custody → VASP
Source-of-funds scrutiny

Depositing self-custody BTC at a regulated exchange. SoF documentation requested above ~$10K. Chain-analysis tools (Chainalysis, TRM, Elliptic) flag deposits from sanctioned addresses or known mixer outputs.

Cross-border
Multi-jurisdictional Travel Rule

Asian VASPs and Western VASPs exchange Travel Rule data per their respective frameworks. Sumsub and Notabene dominate compliance routing across regions.

P2P
Partly subject

Binance P2P, OKX P2P involve regulated VASPs as facilitators. Travel Rule applies to the VASP leg. Pure peer-to-peer trading (Bisq, RoboSats) outside VASP control remains out-of-scope.

Asian implementation status (May 2026)

CountryTravel Rule statusThresholdSelf-custody disclosureCARF 2027 status
🇸🇬 Singapore (MAS)Live since 2020~SGD 1,500Self-custody disclosure required for major movementsCARF committed; framework finalising
🇭🇰 Hong Kong (SFC)Live since 2023HKD 8,000VASP guidance appliesCARF committed
🇯🇵 Japan (FSA)Live since 2023¥30,000Self-custody address ownership self-declarationCARF committed
🇰🇷 South Korea (FIU)Live since 2022KRW equivalent ~$1,000Real-name banking + address verificationCARF committed
🇦🇪 UAE (VARA)Live since 2024~USD 1,000VASP-determinedCARF committed
🇲🇾 Malaysia (SC)ImplementingThreshold pendingDomestic guidance evolvingCARF expected
🇹🇭 Thailand (SEC)Live since 2023Pending precise thresholdVASP-determinedCARF expected
🇮🇩 Indonesia (Bappebti/OJK)Implementing 2026Threshold pendingVASP guidance pendingCARF expected
🇵🇭 Philippines (BSP)ImplementingPendingVASP guidance evolvingCARF expected
🇮🇳 India (FIU-IND)Limited; AML rules applyn/a Travel Rule specific30% tax + 1% TDS regardlessCARF participation committed
🇨🇳 Chinan/a (banned)n/an/an/a domestic; HK proxies under CARF
🇰🇿 Kazakhstan (AFSA)Live in AIFC zone~$1,000VASP-determinedCARF expected

What this means for your operations

If you use regulated Asian exchanges

  • Your KYC + transfer history travels with you when sending to other regulated VASPs
  • Withdrawals to self-custody remain available but may require address-declaration in some jurisdictions
  • Deposits from self-custody trigger source-of-funds inquiries above thresholds
  • Document everything for current + future CARF reporting

If you self-custody primarily

  • Wallet-to-wallet transfers entirely off Travel Rule radar
  • P2P pure-decentralized (Bisq, RoboSats, Hodl Hodl) entirely off radar
  • Touch a regulated exchange once and that transaction enters Travel Rule scope
  • Plan your "regulated-to-self-custody" and "self-custody-to-regulated" flows deliberately

⚠️ CARF (Crypto-Asset Reporting Framework) 2027

From 2027, your year-end VASP holdings and annual disposals will be automatically shared with your tax-residence country, similar to OECD CRS for banks. This dramatically improves cross-border tax compliance. Self-custody holdings remain outside CARF, but movements between regulated platforms become fully tracked. Plan tax disclosure now.

  • Establish clean record-keeping starting 2026
  • Reconcile any historical underreporting through voluntary disclosure where applicable
  • Use multi-jurisdictional residency planning legally — see Tax Optimization

FAQ

Does the Travel Rule affect Lightning Network payments?

Lightning payments are technically not on-chain — they happen within channels. Regulators have not generally extended Travel Rule to Lightning at the protocol level. However, regulated VASPs that handle Lightning settlements (Strike, Coinbase Lightning) apply Travel Rule equivalents when opening / closing channels and at fiat off-ramp. Pure node-to-node Lightning routing is currently out of Travel Rule scope.

Can I avoid the Travel Rule by using non-KYC exchanges?

Operationally yes, but non-KYC exchanges (MEXC, BingX up to limits) come with their own risks — exchange counterparty risk, jurisdictional uncertainty, deposit/withdrawal limits. The Travel Rule isn't necessarily the right thing to avoid; self-custody after withdrawal accomplishes the privacy goal cleanly.

Will CARF affect my Singapore residency planning?

CARF improves cross-border information exchange — it doesn't prohibit legitimate residency or jurisdictional planning. Genuine Singapore residents (passing substance tests) benefit from Singapore tax treatment. CARF actually rewards good documentation. Verify with a qualified planner.

How do I prove a self-custody address is mine when required?

Sign a message with the address's private key. Most exchanges (Bitstamp, Kraken, Coinhako) accept message-signing as proof of ownership. Demonstrates control without exposing private key.

Is there a way to avoid Travel Rule entirely?

Stay 100% self-custody. Once you touch a regulated exchange, those transactions become subject to applicable rules. P2P + privacy tools + self-custody is the maximum-sovereignty path; combining with occasional regulated venue use is the typical practical compromise for most users.