Travel Rule
FATF Recommendation 16 mandates exchanging KYC data between VASPs above USD 1,000.
Crypto & Web3 · United States
Comply with the Travel Rule, screen wallets in seconds and keep your BitLicense. KYC, AML and wallet screening built for exchanges, custodians and DeFi protocols.
The challenge
The main obstacles your industry faces to stay compliant.
FATF Recommendation 16 mandates exchanging KYC data between VASPs above USD 1,000.
Identifying wallets tied to ransomware, mixers, darknet markets or OFAC SDN entries is non-negotiable.
FinCEN guidance, OFAC SDN updates, NYDFS expectations and SEC enforcement keep evolving.
BitLicense, MTL and equivalent regimes demand documented KYC, transaction monitoring and a compliance officer.
The solution
Exchanges, custodians and Web3 builders have to combine the regulatory rigor FATF and OFAC require with the self-custody UX users expect.
Legal Talent screens wallets against sanctions, automates Travel Rule data exchange and runs full user KYC. All API-first, so you keep the smooth experience your users came for.
Products
On-chain wallet risk analysis.
Use case
Before processing a deposit or withdrawal, check whether the wallet is linked to ransomware, mixers, darknet markets or OFAC-designated entities.Crypto-native user onboarding.
Use case
Build risk-tiered flows: lite KYC for retail, enhanced KYC with proof-of-funds for institutional and high-volume traders.OFAC, UN, EU plus crypto-specific lists.
Use case
Screen users and counterparties against OFAC, UN, EU, UK HMT and PEP lists with fuzzy matching.VASP-to-VASP data exchange.
Use case
Exchange KYC payloads with other VASPs in IVMS101 format before transfers above the threshold.Workflow
User registers on your exchange or DeFi platform.
Document upload, selfie, OCR and face match validate identity.
Automated screening against OFAC, UN, EU and PEP lists.
User wallets are analyzed for ties to illicit activity.
Automation rules approve, decline or escalate based on combined risk.
User enters a watchlist with daily re-screening.
Regulation
FATF Travel Rule
Global
FinCEN
United States
OFAC
United States
NYDFS BitLicense
New York
SEC / CFTC
United States
MiCA
European Union
FAQ
FATF Recommendation 16, transposed in the US under FinCEN's Funds Transfer and Travel Rules, requires Virtual Asset Service Providers (VASPs) to transmit originator and beneficiary information for transfers above 3,000 dollars. Practically, exchanges must collect counterparty VASP information, verify the beneficiary and exchange the data over a Travel Rule protocol such as TRP, IVMS 101 or Sumsub Travel Rule. If your platform custodies crypto and processes withdrawals, the rule applies. Legal Talent's KYC output produces the IVMS-101 payload that any Travel Rule provider can consume.
Yes. Since 2013 FinCEN guidance has classified administrators and exchangers of convertible virtual currency as money transmitters, a category of Money Services Business. A US-facing exchange must register with FinCEN within 180 days of beginning activity, renew every two years, secure state money-transmitter licenses (or rely on a sponsor's), implement a written AML program and file SARs and CTRs. Legal Talent provides the KYC, screening and audit trail required to operate that AML program at scale.
OFAC has explicitly stated that compliance obligations apply to digital-asset transactions just as they do to fiat. SDN listings now include wallet addresses (e.g. Tornado Cash, Lazarus Group clusters), and exchanges must screen both customer identities and on-chain destinations before allowing a transfer. Penalties have crossed the 100 million dollar threshold for willful violations. Legal Talent's screening engine combines name-based screening with wallet-address screening through partner on-chain analytics providers.
We integrate at two points. At KYC time we attach a wallet-screening result (Chainalysis, TRM Labs or Elliptic, depending on your contract) so the customer's connected wallet is risk-scored alongside their identity verification. At runtime our webhook fires when an SDN designation, sanctions update or adverse-media event affects a customer, and your TM stack can re-evaluate exposure. Customers can plug in their existing analytics provider; we do not lock you into a single vendor.
Non-custodial wallet software providers that never take custody are generally not classified as MSBs under current FinCEN guidance, so KYC is not strictly required. However, fiat on-ramps, staking products and any custody touchpoint immediately trigger MSB obligations and require full KYC, sanctions screening and Travel Rule compliance for transfers above the threshold. Legal Talent supports both flows: a lightweight identity attestation for non-custodial features and a full KYC session for any custodial or fiat-bridging step.
Other industries
KYC, AML and BaaS-friendly compliance for fintechs.
Fintech & NeobanksEDD, KYB and continuous monitoring at examiner-grade.
Banks & CorrespondentsSynthetic-identity defense and instant decisioning.
Digital LendingMerchant KYC and transaction monitoring.
Payments & PSPsAge verification, multi-account prevention and AML.
iGaming & BettingAML for property deals and beneficial-owner mapping.
Real Estate & PropTechExchanges and Web3 builders trust Legal Talent for crypto compliance — from early-stage startups to fully licensed VASPs.