The EU Travel Rule: Why Your Exchange Asks About Your Wallet

This article contains affiliate links.

If an EU exchange has asked you who a withdrawal is for, or wanted proof that a wallet address is yours, you have met the EU travel rule. Since 30 December 2024, the Transfer of Funds Regulation (Regulation (EU) 2023/1113) requires crypto providers to send and check information about the sender and recipient of crypto transfers. For transfers of more than €1,000 to or from a wallet you control yourself, the provider must also check that the wallet really belongs to you.

It can feel like friction. It is also the law, and every MiCA-licensed exchange applies it. Knowing what to expect makes the process quick, and it helps you spot the scammers who imitate it.

Where the “travel rule” comes from

The name comes from banking. When you wire money, information about the payer and payee “travels” with the payment so that banks can screen for money laundering. The Financial Action Task Force (FATF), the international anti-money-laundering body, extended the idea to crypto-assets in 2019. The EU wrote it into law with the recast Transfer of Funds Regulation, which applies from the same date MiCA became fully applicable.

What the rule requires

Transfers between two providers

When you send crypto from one exchange or custodial wallet provider to another, the sending provider must pass on information about you and the recipient: names, wallet addresses and account numbers. The receiving provider checks that the information is there. In the EU there is no minimum amount for this: it applies to every transfer between providers.

If information is missing, the receiving provider can hold the transfer, ask for details, return it or reject it.

Transfers to and from self-hosted wallets

A self-hosted (or unhosted) wallet is one where you hold the keys yourself: a hardware wallet, or a software wallet like a phone app. No provider sits on the other end to exchange data with, so the rules work differently:

• All amounts: the provider must collect and keep information about the transfer, such as who the originator or beneficiary is. This information comes from you, so you may be asked to fill in a short form.
• More than €1,000: the provider must also assess whether the self-hosted address is owned or controlled by its own customer. A simple statement from you is not enough. The European Banking Authority’s guidelines (EBA/GL/2024/11) list suitable methods, and providers must use at least one.

The rule does not apply to transfers between two people that do not involve a provider at all, such as sending crypto from your own hardware wallet directly to a friend’s.

How exchanges check that a wallet is yours

Each exchange designs its own process within the EBA guidelines. The common methods are:

1. Message signing. The exchange shows a short text; you sign it with the private key of the address, using your wallet software or hardware wallet, and paste the signature back. This proves control without moving any funds.
2. A test deposit (“Satoshi test”). You send a small, specific amount from the address to the exchange. Since only someone who controls the address can do that, it proves control.
3. Connecting the wallet. Some exchanges let you connect a wallet through a standard protocol and confirm ownership there.
4. Other technical checks, sometimes combined with analytics, especially if one method alone is not reliable enough.

Once an address is verified, most exchanges save it in your address book, so you do not have to repeat the check every time.

Which method should you pick?

If your exchange offers more than one option, they are not equal. The comparison below is general; your exchange’s own help page decides what is available.

Method	What you need	Time	Cost	Main downside
Message signing	Wallet app that can sign messages (most hardware wallet apps can, for Bitcoin and Ethereum addresses)	2–5 minutes	Free, no transaction	Not every wallet or coin supports signing
Test deposit	A small amount already in the wallet, plus coins for the network fee	Minutes to an hour, depending on network confirmations	One network fee	You pay a fee and must send the exact amount asked
Connecting the wallet	A wallet that supports the exchange’s connection method	1–3 minutes	Free	Easy to confuse with phishing “connect wallet” pages; only do it from inside the exchange

For most hardware wallet users, message signing is the cleanest route: nothing moves, nothing costs a fee, and your keys never leave the device.

What this means for you in practice

Three example withdrawals

The amounts below are a hypothetical example to show how the thresholds work, not the policy of any specific exchange:

Situation	What usually happens
You withdraw €600 of bitcoin to your own Trezor	You confirm it is your own self-hosted wallet (a checkbox or short form). No ownership proof is legally required, though some exchanges ask anyway.
You withdraw €2,500 to the same Trezor for the first time	The exchange must assess that you control the address. You sign a message or do a test deposit once; the address is then saved as verified.
You send €1,500 to a friend’s own wallet	The address cannot be verified as yours. Expect questions about the recipient, extra checks, or a refusal, depending on the exchange.

A practical consequence: if you plan to move €2,500 to your own wallet, verifying the address with a small first withdrawal (say €50) gets the check done before the big transfer, and confirms you have the right network and address.

Withdrawing to your own hardware wallet

Withdrawals under €1,000 usually only require you to confirm that the address is your own self-hosted wallet. Above that, expect one of the checks above. A first-time verification takes a few minutes. If you have not done a withdrawal before, our walkthrough on moving crypto from an exchange to a hardware wallet covers the full process, including the test transaction.

Sending to a friend’s wallet

If you send more than €1,000 to someone else’s self-hosted wallet, the exchange cannot verify that the address is yours, because it is not. Providers handle this differently: some ask for the recipient’s details, some apply extra checks, some do not allow it. Check your exchange’s help pages before you try.

Receiving from another platform

Deposits from other providers may be held briefly while the receiving exchange checks the accompanying information. Deposits from non-EU platforms that do not support the travel rule can take longer or need extra details from you.

Delays are not always a problem

A withdrawal waiting for “travel rule information” is a compliance step, not a sign your money has vanished. Answer the request through the exchange’s own app or website.

Why licensed exchanges cannot skip this

All crypto-asset service providers in the EU have to apply the Transfer of Funds Regulation. An exchange that promises “no questions asked” withdrawals to EU users is either not licensed or not following the law. Both are good reasons to stay away. You can check a provider’s status in the official registers; our guide explains how to check whether a crypto exchange is licensed in the EU.

The travel rule is part of the same framework as MiCA. MiCA decides who may offer crypto services; the Transfer of Funds Regulation decides what information has to travel with transfers. Our overview of what MiCA means for crypto users covers the wider picture.

Honest pros and cons of the travel rule

The rule is not going away for EU users, but it helps to be clear about what it does and does not do.

What it gets right

• It makes it much harder to move stolen or laundered funds through licensed exchanges, which protects ordinary users too.
• It gives exchanges a legal reason to pause suspicious transfers, which can stop some scams before money leaves.
• Self-custody stays legal. The rule adds a check; it does not ban hardware wallets or self-hosted addresses.

Where it hurts

• Withdrawals can be delayed, especially the first one to a new address or a transfer from a non-EU platform.
• More personal data sits with more providers, so a data breach at an exchange exposes more information.
• Rules differ per country outside the EU, so moving between EU and non-EU platforms can be clumsy.
• Scammers use the rule’s language to make phishing look official (see below).

Watch out: travel rule scams

Scammers like official-sounding rules. Be suspicious of:

• Emails or messages saying your wallet must be “travel rule verified” through a link;
• “Verification” pages that ask you to connect a wallet and approve a transaction or token permission;
• Anyone asking for your recovery phrase or private key to “verify ownership”.

A real ownership check never needs your recovery phrase, and a message signature does not move funds. If a request asks you to approve a transfer or a token allowance, stop. Start the process only from inside your exchange account.

Making it smoother next time

• Verify your main hardware wallet address once and save it in the exchange’s address book.
• Use the same address type and network every time.
• Keep your exchange account details up to date, including your name exactly as on your ID, since that information travels with transfers.
• For larger amounts, do a small test withdrawal first; it also gets the verification out of the way.

Frequently asked questions

Does the €1,000 limit apply per transfer?

The ownership check is linked to transfers of more than €1,000 to or from a self-hosted address. Providers take a risk-based approach, though, and some apply checks to smaller amounts too, or to a series of transfers that together exceed the threshold.

Does the rule apply outside the EU?

The EU regulation applies when a provider involved in the transfer is established in the EU. Many other countries apply their own version of the FATF travel rule, with different thresholds, so non-EU exchanges may ask for similar information.

Will my wallet address be shared with the tax authorities?

The travel rule is an anti-money-laundering measure: information travels between providers and is kept for checks. Tax reporting is a separate system, DAC8: EU providers collect transaction data from 1 January 2026 and send their first reports to tax authorities in 2027. Our guide to DAC8 and EU crypto tax reporting explains what is shared.

If you are still choosing a device to hold your own keys, Trezor’s official shop sells its current models directly, with EU shipping.

Sources: Regulation (EU) 2023/1113 and its EUR-Lex summary; EBA guidelines on the travel rule (EBA/GL/2024/11); Austrian FMA, Transfer of Funds Regulation Q&A (checked November 2026). Information as of November 2026.