The Financial Action Task Force says more jurisdictions are adopting crypto rules, but enforcement remains the weak point.
In its seventh targeted update on the implementation of the FATF standards for virtual assets and virtual asset service providers, the global watchdog reported that 83% of surveyed jurisdictions have adopted legislation to implement the Travel Rule. This is an increase from 73% in 2025.
On paper, this looks like progress.
But the report also says that only 40% of jurisdictions with travel rules legislation have taken monitoring or enforcement action. In other words, more countries have rules, but far fewer actually enforce them in any meaningful way.
This gap is now the central problem.
TL;DR
- The FATF says 83% of surveyed jurisdictions have adopted crypto travel rules legislation.
- Only 40% of jurisdictions with these laws have taken any monitoring or enforcement action.
- The report highlights risks related to scam hubs, DPRK cybertheft, DeFi, unhosted wallets, and freeze-resistant stablecoins.
Laws spread faster than their enforcement
The Travel Rule is one of the most important compliance standards in crypto.
It requires virtual asset service providers to collect and transmit originator and beneficiary information for eligible transfers. In common parlance, regulators want crypto intermediaries to know who is sending and receiving funds, especially when transfers cross regulated platforms.
For years, the industry has wondered if this could work in crypto.
Today, according to the FATF, most jurisdictions surveyed have at least transposed this rule into law. This is a major change from the early days, when many countries were still deciding whether or not to regulate VASPs.
But legislation is only the first step.
A rule that sits on the books unmonitored doesn’t change much. Exchanges, brokers, custodians and payment companies need guidance, inspections, enforcement risks and technical systems. Regulators need staff and tools. Cross-border cooperation must work.
FATF figures show that implementation is still patchy.
Why enforcement gaps matter
Crypto compliance has always had a weak link problem.
If one country has strict rules and another does not enforce anything, illicit actors can go through the weaker jurisdiction. This creates pressure on the entire system because crypto transactions are global by design.
This is particularly relevant for scams, laundering rings, ransomware groups and state-linked hacking operations.
The FATF report identifies scam hubs linked to organized crime, cyber theft in the DPRK, unhosted wallets, DeFi and stablecoins designed to withstand freezing as areas of concern.
These categories show how the risk situation is evolving.
It’s no longer just about dishonest trading or obvious dark market activity. These include large scams, sophisticated cyber operations, decentralized services, wallet infrastructure and stablecoin designs that can limit the ability of issuers or intermediaries to freeze funds.
This is a much more challenging environment for regulators.
DeFi remains the most difficult solution
DeFi is one of the most uncomfortable parts of the FATF framework.
The travel rule assumes that there is an intermediary capable of collecting and transmitting information. In DeFi, this intermediary may not exist in the traditional sense. A protocol can be composed of smart contracts, interfaces, governance participants, developers, validators, relayers, or a mix of all.
Regulators then face a difficult question: who is responsible?
If a team controls a frontend, perhaps that becomes the application point. If a DAO governs the parameters, governance participants may be under pressure. If users interact directly with contracts, enforcing them becomes much more difficult.
The FATF has been pushing countries to avoid letting “decentralized” labels become a loophole. But transforming this principle into practical supervision is not simple.
This is why the application gaps are even greater in DeFi.
Stablecoins are under the microscope
Stablecoins also stand out in the report’s list of risks.
It is one of the most important use cases in crypto, but also one of the simplest tools for quickly moving value across borders. USDT, USDC and other stablecoins have become essential settlement assets for traders, businesses, remittances, DeFi users and, sometimes, illicit networks.
The FATF’s concern over freeze-resistant stablecoins is notable because it focuses on control.
If a stablecoin issuer can freeze addresses, regulators can pressure issuers to take action against illicit funds. If a stablecoin is designed to withstand freezing or does not have a clear point of control for the issuer, this avenue of application becomes weaker.
This raises difficult questions about censorship resistance, user protection, and law enforcement access.
Crypto users often value assets that cannot be easily frozen. Regulators worry that these same features could help criminals.
This tension will not go away.
The next phase is supervision
The headline figure, 83% legislative adoption, shows that crypto regulation has become mainstream. The most important figure could be 40% of coercive measures.
This is where the next phase will take place.
Countries will be judged less on whether they have written rules and more on whether they supervise businesses, punish violations and cooperate across borders. Exchanges and depositories will need stronger travel rule systems. DeFi interfaces could be subject to further scrutiny. Stablecoin issuers will remain under pressure.
For the industry, the message is quite clear.
The compliance debate goes beyond whether crypto should be regulated. The question now is whether existing rules are applied consistently enough to satisfy global standards bodies.
It may not be the story traders want to hear, but it’s the story that will shape how exchanges, wallets, stablecoins, and DeFi protocols operate over the next market cycle.
This article is based on FATF Seventh Targeted Update on Virtual Assets and VASPs.
This article was written by the News Desk and edited by Samuel Rae.
About the Author
