Regulation (EU) 2023/1113 is the European Union’s recast Transfer of Funds Regulation for information accompanying transfers of funds and certain crypto-assets. It was adopted on May 31, 2023, published in the Official Journal on June 9, 2023, entered into force on June 29, 2023, and has applied from December 30, 2024. The regulation repeals Regulation (EU) 2015/847 and extends the EU “travel rule” from traditional fund transfers to crypto-asset transfers involving crypto-asset service providers, or CASPs.
What Regulation (EU) 2023/1113 covers
The regulation sets rules on information about payers and payees for transfers of funds, and information about originators and beneficiaries for transfers of crypto-assets. Its AML/CFT purpose is to make transfers traceable where that traceability is needed to prevent, detect, or investigate money laundering and terrorist financing. The scope applies when at least one payment service provider or crypto-asset service provider involved is established, or has its registered office, in the Union.
For funds, the regulation covers transfers in any currency involving EU payment service providers and intermediary payment service providers. For crypto-assets, it covers transfers involving CASPs and intermediary CASPs, including transfers made through crypto-asset automated teller machines. It excludes, among other cases, transfers where PSPs or CASPs act solely on their own behalf and peer-to-peer crypto transfers processed without a CASP.
Crypto travel rule obligations
The crypto-asset transfer provisions require originator and beneficiary information to accompany transfers. The regulation organizes obligations by role: the CASP of the originator, the CASP of the beneficiary, and intermediary CASPs. It also includes detection, rejection, suspension, return, assessment, and reporting processes for transfers with missing or incomplete information.
- Originator CASPs: must ensure required originator and beneficiary information accompanies crypto-asset transfers.
- Beneficiary CASPs: must detect missing or incomplete information and manage deficient transfers before making assets available.
- Intermediary CASPs: must retain accompanying information, detect missing information, and manage deficient transfer chains.
- Competent authorities: receive reporting and supervisory information under the sanctions, monitoring, and cooperation framework.
Self-hosted address safeguards
The regulation does not ban self-hosted wallets. It instead applies specific safeguards when a CASP is involved in a transfer to or from a self-hosted address. EU supervisory material explains that CASPs must make crypto-asset transfers individually identifiable, gather originator and beneficiary information, and, for transfers above EUR 1,000 involving a self-hosted wallet, check whether the address belongs to or is controlled by the customer.
EBA guidelines and implementation
The European Banking Authority issued final Travel Rule Guidelines on July 4, 2024. The guidelines specify what information should accompany transfers and what PSPs, intermediary PSPs, CASPs, and intermediary CASPs should do to detect and manage missing or incomplete information. They apply from December 30, 2024 and replaced the earlier 2017 Joint ESA guidelines under Regulation (EU) 2015/847.
Regulation (EU) 2023/1113 also requires internal policies, procedures, and controls to ensure implementation of Union and national restrictive measures when performing transfers of funds and crypto-assets. EBA’s restrictive-measures guidance provides related standards for PSPs and CASPs and lists an application date of December 30, 2025.
Status and timeline
| Date | Event | Status |
|---|---|---|
| July 20, 2021 | European Commission tabled the Transfer of Funds Regulation proposal. | Proposed |
| May 31, 2023 | European Parliament and Council adopted Regulation (EU) 2023/1113. | Adopted |
| June 9, 2023 | Regulation published in the Official Journal. | Published |
| June 29, 2023 | Regulation entered into force. | In force |
| December 30, 2024 | Regulation became applicable and Regulation (EU) 2015/847 was repealed. | In force |
| July 1, 2026 | Commission self-hosted-address risk report is due under Article 37. | Upcoming |
| June 30, 2027 | Commission application and enforcement report is due. | Upcoming |
As of June 5, 2026, editors should classify Regulation (EU) 2023/1113 as an in-force EU AML/CFT and travel-rule regulation for fund and crypto-asset transfers, closely linked to MiCA authorization and the EU AML/CFT framework but distinct from both.

