Crypto Law Profile

FATF Updated Guidance for a Risk-Based Approach to Virtual Assets and VASPs

FATF’s 2021 updated VA/VASP guidance clarifies how global AML/CFT standards apply to virtual assets, VASPs, stablecoins, P2P transfers, licensing, Travel Rule implementation and supervisor cooperation.

Effective Global standard

At a glance

Publisher Financial Action Task Force guidance for global AML/CFT standards.
Status Published Oct. 28, 2021; non-binding guidance clarifying FATF standards.
Core focus VA/VASP scope, stablecoins, P2P risk, licensing, Travel Rule and supervisor cooperation.
Legal effect Implemented through national laws, regulations, supervision and FATF assessments.

Overview

FATF Updated Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers is the Financial Action Task Force’s 2021 virtual assets and VASP guidance. Published on 28 October 2021, it updates the 2019 guidance and explains how the FATF Recommendations apply to virtual assets, virtual asset service providers, and related AML/CFT controls across the FATF Global Network.

The document is best understood as an international standards and guidance profile, not a directly enforceable statute. FATF states that the guidance is non-binding and clarifies existing standards rather than changing them. National authorities implement those standards through domestic law, licensing regimes, supervision, enforcement, and FATF mutual-evaluation processes.

FATF virtual assets guidance: status and scope

The 2021 update sits under FATF Recommendation 15, which was revised to address virtual assets and VASPs. FATF’s own publication page says the guidance helps countries and VASPs understand AML/CFT obligations and implement FATF requirements for the sector. It also notes that the document should be read alongside later FATF materials because it does not reflect all subsequent standards revisions, including 2025 revisions to Recommendation 1.

For CryptoSlate taxonomy purposes, the profile is mapped as a global standard with a current status of “In force,” while the editorial note should make clear that the instrument is non-binding guidance. The relevant jurisdiction is global rather than a single country, because the FATF Recommendations are implemented through national frameworks.

Key provisions in the 2021 FATF VA/VASP update

The guidance focuses on six practical areas for the public and private sectors. It clarifies the definitions of “virtual asset” and “virtual asset service provider,” emphasizing a broad, functional approach. FATF’s glossary definition treats a virtual asset as a digital representation of value that can be digitally traded or transferred and used for payment or investment purposes, while excluding digital representations of fiat currencies, securities, and other financial assets already covered elsewhere.

  • VASP perimeter: The guidance directs countries to look at the underlying activity, not only labels or technology, when assessing whether a person or entity conducts covered VASP functions.
  • Stablecoins: FATF clarifies that entities involved in stablecoin arrangements may fall within the VASP definition where they conduct covered activities.
  • Peer-to-peer transfers: The update adds discussion of ML/TF risks and possible tools for transactions that do not involve an obliged intermediary.
  • Licensing and supervision: Countries are expected under the FATF standards to license or register VASPs and subject them to risk-based monitoring or supervision.
  • Travel Rule: The guidance expands public- and private-sector discussion of originator and beneficiary information for virtual asset transfers.
  • Supervisor cooperation: FATF adds principles for information sharing and cooperation among VASP supervisors.

Relationship to national crypto AML regimes

The FATF guidance does not itself license exchanges, impose penalties, or create user obligations. Its practical effect comes from how jurisdictions transpose FATF standards into AML/CFT laws, registration rules, reporting duties, supervisory procedures, and sanctions. FATF’s virtual assets materials state that countries should understand sector risk, license or register VASPs, supervise the sector, and require preventive measures such as customer due diligence, record keeping, suspicious transaction reporting, and Travel Rule information exchange.

The 2021 guidance therefore remains a reference point for crypto AML policy, especially for centralized exchanges, custodians, brokers, transfer services, stablecoin-related intermediaries, and other businesses that may conduct covered VASP activities. It also frames continuing FATF reviews of implementation gaps, including later targeted updates on Recommendation 15.

Implementation timeline and later review

FATF first added VA and VASP definitions and revised Recommendation 15 in 2018, adopted the Interpretive Note to Recommendation 15 in 2019, and published the updated VA/VASP guidance in 2021. The 2021 document incorporates and supersedes the 2019 guidance. FATF has continued to publish targeted implementation updates, including a 2026 update assessing progress and remaining gaps across the FATF Global Network.

Editors should review this profile when FATF issues further Recommendation 15, Travel Rule, stablecoin, DeFi, or risk-based-approach updates. As of 21 July 2026, the key verification point is that the 2021 guidance remains available on FATF’s official site but must be read with later FATF Recommendations and targeted updates.

Key provisions

Broad VA and VASP scope

Guidance says VA and VASP definitions should be read broadly and functionally, without gaps for relevant financial assets.

Regulatory perimeter Source

Stablecoin arrangements

Clarifies that a range of entities involved in stablecoin arrangements may qualify as VASPs under FATF standards.

Stablecoins Source

Peer-to-peer risk tools

Adds guidance on ML/TF risks and tools countries may use for transfers that do not involve an obliged entity.

AML/CFT Source

VASP licensing and registration

Updates expectations for licensing or registration and risk-based supervision or monitoring of VASPs by competent authorities.

Licensing Source

Travel Rule implementation

Provides additional public- and private-sector guidance on originator and beneficiary information in virtual asset transfers.

AML/CFT Source

Supervisor cooperation

Adds principles for information sharing and cooperation among VASP supervisors, including cross-border coordination.

Supervision Source

Timeline

  1. Recommendation 15 revised

    FATF revised R.15 and added VA and VASP glossary definitions in October 2018.

    Enacted Source
  2. INR.15 adopted

    FATF adopted the Interpretive Note to Recommendation 15 in June 2019.

    Enacted Source
  3. 2019 VA/VASP guidance published

    FATF published its 2019 risk-based approach guidance for virtual assets and VASPs.

    Enacted Source
  4. Updated guidance published

    FATF published updated guidance for a risk-based approach to virtual assets and VASPs.

    Enacted Source
  5. Seventh targeted update

    FATF assessed progress and remaining gaps in R.15 implementation across its global network.

    Enacted Source

Who it affects

Actors

Financial Action Task Force, National AML/CFT Supervisors, Virtual asset service providers

Asset classes

Stablecoins, Virtual assets

Official sources

Editorial note

Non-binding FATF guidance clarifying existing standards; national legal obligations depend on domestic implementation. FATF says the 2021 guidance does not reflect later revisions, including 2025 Recommendation 1 updates.