The Travel Rule in the UAE: A Practical Guide for VASPs
What the Travel Rule requires, how it applies to UAE virtual asset service providers and how to build a workable Travel Rule process.
The Travel Rule is one of the most operationally demanding AML requirements for crypto businesses. UAE law and regulators require VASPs to apply it, and counterparties increasingly refuse to deal with firms that cannot.
What the Travel Rule is
The Travel Rule comes from FATF Recommendation 16 on wire transfers, which FATF applies to virtual asset transfers through Recommendation 15. It requires VASPs to obtain, hold and transmit information about the originator and beneficiary of virtual asset transfers, so that the same transparency that applies to bank wire transfers also applies to crypto.
What information travels
In Dubai, VARA's Rulebook applies these requirements to virtual asset transfers exceeding AED 3,500.
- Originator: name, account number or wallet address, and address. FATF standards allow a national ID number, customer ID or date and place of birth instead of address; VARA's Rulebook requires the residential or business address.
- Beneficiary: name and account number or wallet address.
Building a workable process
A Travel Rule process is part technology and part judgement. Firms typically connect to one or more Travel Rule messaging solutions, then decide how to handle each scenario.
- Identify whether the counterparty is a VASP or an unhosted (self-custody) wallet
- Carry out due diligence on counterparty VASPs before exchanging data
- Define what happens when required data is missing or doesn't match
- Screen originators and beneficiaries against sanctions lists
- Record decisions and escalate suspicious patterns to the MLRO
Unhosted wallets
Transfers to and from self-custody wallets cannot use VASP-to-VASP messaging. Firms usually apply risk-based measures such as proving wallet ownership, collecting beneficiary information from their own customer and screening the wallet with blockchain analytics.
Key takeaways
- The Travel Rule applies FATF wire-transfer standards (Recommendations 15 and 16) to crypto transfers; VARA applies it above AED 3,500.
- Counterparty VASP due diligence is as important as the messaging tool.
- Unhosted wallets need risk-based controls and blockchain screening.
Related licence guides
Need help with this?
Talk to our compliance team about your licence, AML/CFT framework or transaction monitoring.
This article is general information, not legal advice. Regulatory requirements change; confirm current rules with the relevant regulator.