Bitcoin & the Travel Rule
From 1 July 2026, Australian virtual asset service providers (VASPs) must meet strengthened Travel Rule obligations when they move cryptocurrency on behalf of customers. This page explains what that means in plain language: who must comply, what changes for exchange users and self-custody holders, and what it does not change about Bitcoin itself.
Quick read
- The Travel Rule requires regulated businesses to collect, verify, and (where applicable) share originator and beneficiary information along a value transfer chain, similar in spirit to international bank wires.
- For virtual asset transfers, the obligation starts on 1 July 2026 (deferred from an earlier March date under AUSTRAC transitional rules).
- It applies to exchanges and other VASPs, not to individuals holding Bitcoin in their own wallets.
- Transfers between two self-hosted wallets with no obliged entity in the middle are generally outside the Travel Rule framework.
- Moving Bitcoin from an exchange to your own wallet still triggers exchange obligations: the “self-hosted exemption” means they do not pass data to another VASP, not that no checks apply.
- The Bitcoin Adviser is not a VASP or custodian; we do not transmit Travel Rule data. Your exchange’s processes are what will change at the boundary.
- Australian exchanges may limit transfers that look like paying another entity directly from your exchange account; advisory fees are normally paid from your self-custody vault, not via a direct exchange send.
- Once Bitcoin is in your collaborative security vault (self-custody), moving it to other wallets you control is the same as any self-hosted to self-hosted transfer: unchanged by the Travel Rule.
- This is educational information only, not legal, tax, or financial advice. Exchange workflows vary.
What is the Travel Rule?
The Travel Rule is an anti-money laundering and counter-terrorism financing (AML/CTF) standard. When a reporting entity transfers money, virtual assets, or certain other value on behalf of a customer, it must collect specific information about the payer and payee and pass that information to the next institution in the chain where the rules require it.
The standard comes from the Financial Action Task Force (FATF) Recommendation 16, which was extended to virtual assets and virtual asset service providers. Countries implement it in national law. In Australia, the framework sits under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 and the AML/CTF Rules 2025, supervised by AUSTRAC.
The practical purpose is transparency: so businesses in the chain can manage money laundering, terrorism financing, and proliferation financing risk, and so law enforcement can obtain transfer information when legally required. It is not a ban on self-custody Bitcoin; it regulates intermediaries that move value for others.
What is changing on 1 July 2026?
Australia’s broader AML/CTF reforms have been rolling out in stages. For virtual asset transfers, AUSTRAC’s transitional rules defer full Travel Rule obligations until 1 July 2026 for both existing digital currency exchange providers (now treated as VASPs) and newly regulated virtual asset services.
| Milestone | Date | What it means (summary) |
|---|---|---|
| Travel Rule for virtual asset transfers | 1 July 2026 | VASPs must meet Travel Rule obligations for covered virtual asset transfers (no small-amount exemption in Australia). |
| VASP enrolment and registration | By 29 July 2026 | Providers of registrable virtual asset services must enrol and apply to register with AUSTRAC (existing registered DCEs roll over; new services have transitional arrangements if they apply in time). |
| Broader reform activity | From March 2026 | Transaction monitoring and other AML/CTF steps are already live or ramping for many entities; Travel Rule is one major July milestone, not the only reform. |
| ASIC digital assets framework | From 9 April 2027 | Separate timeline from AUSTRAC’s Travel Rule. Consumer licensing and disclosure rules under ASIC are not the same as AML Travel Rule compliance. |
For VASPs, AUSTRAC states that all non-incidental transfers of virtual assets are subject to the Travel Rule, whether domestic or international. That is stricter than some legacy wire-transfer carve-outs for low-value domestic payments.
Who must comply?
In scope: businesses that act as an ordering institution (accepting the instruction to send value), intermediary institution (passing transfer messages along the chain), or beneficiary institution (making value available to the payee). This includes Australian crypto exchanges, custodial wallet providers, and other virtual asset service providers that transfer assets on behalf of customers.
Generally not in scope as Travel Rule reporters:
- Individual Bitcoin holders sending from wallets they control (you are not a VASP because you hold your own keys).
- Transfers that involve only physical currency or tangible property (not virtual assets on-chain).
- Peer-to-peer on-chain transfers between two self-hosted wallets where no obliged entity sits in the middle of the transfer chain.
- The Bitcoin Adviser: we provide education and collaborative security support; we are not a custodian, exchange, or VASP and do not collect or transmit Travel Rule transfer messages. See our scope and risks page.
What information moves?
Exact fields depend on the type of transfer and your role in the chain. AUSTRAC describes transfer messages as typically including:
- Payer information (identity details the ordering institution must collect and, where required, verify).
- The payee’s full name.
- Tracing information that lets institutions link the transfer to accounts or wallets in the chain.
For transfers between two regulated institutions (for example, exchange to exchange), the ordering VASP passes this data to the next business in the chain before the transfer is completed. Institutions must monitor for missing or inaccurate information and follow risk-based policies when data is incomplete.
Australia has no de minimis threshold for virtual asset Travel Rule transfers: obligations apply regardless of transaction size. FATF’s global transition to updated messaging standards may take years for some banking rails; VASPs may use more contained payment ecosystems in the meantime.
This page does not reproduce every field in the Rules. For authoritative detail, use AUSTRAC’s guidance linked in Further reading below.
Self-hosted vs exchange (custodial) wallets
A self-hosted (self-custody) wallet is controlled by the payer or payee, not by an exchange or custodian. AUSTRAC treats these differently from custodial wallets held at a VASP.
The important nuance: there is an exemption when the transfer is to a self-hosted wallet. The ordering institution does not need to send Travel Rule information to another business in the chain because there is no next VASP. That is not a full exemption from compliance:
- Ordering institutions sending to a self-hosted wallet must still collect and verify payer information and collect payee information and tracing information under AUSTRAC’s virtual asset guidance.
- Beneficiary institutions receiving from a self-hosted wallet must obtain payer information and tracing information, and the payee’s full name if not already held, before making assets available.
VASPs must also maintain AML/CTF policies that describe how they determine whether a destination is custodial or self-hosted, how they assess counterparty licensing in FATF-aligned jurisdictions, and what steps they take to identify or verify the person controlling a wallet under a risk-based approach. Practices vary by exchange: wallet-type questions in an address book, ownership checks, or enhanced review for higher-risk transfers are common themes. We do not state that any single method (such as a “Satoshi test”) is mandatory nationwide; follow your exchange’s published process.
Reporting note: AUSTRAC reform guidance describes future reporting obligations for services involving unverified self-hosted wallets with a later commencement (guidance summaries reference 31 March 2029 for certain reporting by ordering and beneficiary institutions). That is separate from the 1 July 2026 Travel Rule operational start for virtual asset transfers.
Common scenarios
Exchange → exchange
Both sides are VASPs. The sending exchange must pass originator and beneficiary data through the value transfer chain. You may need to label the destination as an exchange, select the counterparty platform, and use verified withdrawal addresses. Missing data can cause delays or refusal to process the transfer under the exchange’s AML program.
Exchange → self-custody
Typical path when moving Bitcoin off an exchange into your own wallet or a collaborative security vault (self-custody, not an exchange account). The exchange remains the ordering institution. Expect wallet-type questions, payee identification, and possible verification steps. The exchange does not pass Travel Rule messages to another VASP, but still applies its self-hosted wallet policies. This is different from sending from your exchange balance to another company’s wallet as a fee or payment; many Australian exchanges now restrict that pattern under remittance rules.
Self-custody → exchange
You send from a wallet you control to an exchange deposit address. The exchange acts as beneficiary institution and must obtain required payer and tracing information before crediting you. Deposits may be held or reviewed while checks complete.
Self-custody → self-custody
A standard on-chain transfer between two wallets you control, including from a Theya collaborative security vault to a hardware wallet, cold storage, or another self-hosted address. With no obliged entity in the chain, Travel Rule standards do not apply to the transfer itself. This activity is unchanged by the July 2026 rules: ordinary Bitcoin network usage, not a regulated value transfer service.
Exchange example (not legal guidance): Independent Reserve describes address-book updates ahead of 1 July 2026: wallet statuses such as “pending verification” and “verified,” confirming whether an address is a personal wallet or another exchange, and preparing verified withdrawal addresses for transfers between custodial providers. Your exchange may handle this differently; treat such posts as operational previews, not the law.
If you work with The Bitcoin Adviser
Many clients buy Bitcoin on an Australian exchange, then move it into client-controlled collaborative security (for example, a Theya multisig vault). A TBA-supported vault is self-custody: you retain beneficial ownership and control; we are not a custodian and do not hold your Bitcoin. That journey crosses the regulated boundary at the exchange withdrawal, not when you later move coins between wallets you control.
- We do not hold customer Bitcoin, operate an exchange, or send Travel Rule transfer messages.
- Your exchange will apply its Travel Rule and AML policies when you withdraw to a self-hosted or vault address.
- Vault to vault, or vault to any other self-custody wallet you control, is an on-chain transfer with no VASP in the middle. The Travel Rule does not apply to that movement itself; it is unchanged by July 2026 reform for ordinary client-initiated sends.
- Collaborative security distributes keys and documents continuity; it does not turn your vault into an exchange account. See Collaborative Security.
- Onboarding: if you fund a new vault from an exchange, complete KYC and address-book steps on the exchange side before large transfers. Our onboarding guide covers exchange funding in parallel with vault setup.
- SMSF and audit context: keep your own records (dates, amounts, TXIDs, exchange statements) for substantiation. See the SMSF Bitcoin Audit Guide if applicable.
We can help you think through custody architecture and documentation; we cannot override or expedite an exchange’s compliance decisions.
Paying advisory fees from an exchange account
As Travel Rule requirements take effect, Australian exchanges and other VASPs are tightening flows that resemble remittance: moving value from your exchange account so it is received by another business, rather than by you in a wallet you control. Many exchanges are not licensed to provide remittance services; facilitating a direct payment from your exchange balance to another entity’s wallet can fall outside what they are permitted to offer.
What changes (exchange boundary):
- Withdraw to wallets you control. You can still move Bitcoin from an exchange to your own self-hosted wallets, including a collaborative security vault in your name, subject to each exchange’s address-book and verification steps.
- Pay TBA fees from your vault, not from the exchange. Our standard path is a Theya invoice paid from your self-custody vault after you sign (see pricing and onboarding: invoice payments). That separates the exchange step (buy and withdraw to self-custody) from the advisory fee step.
- If you previously paid fees straight from an exchange, plan a short migration: withdraw to your vault first, then pay the invoice from there. Your adviser can help you rehearse the flow before a fee is due.
What does not change (self-custody after withdrawal): once Bitcoin is in your vault, moving it to another wallet you control, or receiving Bitcoin from another self-hosted wallet into your vault, is the same self-custody to self-custody activity as before. The Travel Rule targets regulated intermediaries, not those transfers.
This is an exchange compliance boundary, not a change to collaborative security or to your ability to operate your vault. We do not run exchange platforms; follow your exchange’s published guidance for withdrawals and address books.
What to do before 1 July 2026
No single checklist fits every holder, but these steps reduce friction as rules tighten:
- Review saved withdrawal addresses on each exchange you use. Confirm whether each address is labelled as personal (self-hosted) or another exchange.
- Complete any “verify address” prompts your exchange offers before the mandatory date.
- Test a small withdrawal to your intended self-custody or vault address before moving a large balance.
- Plan fee payments from your vault; do not assume you can pay advisory invoices straight from an exchange balance once remittance-style rules apply.
- Keep records of withdrawals and deposits (statements, TXIDs, dates) for tax, SMSF, or estate planning files.
- Secure your perimeter (email 2FA, hardware keys, password manager) so compliance workflows are not undermined by account takeover. Start at the Security Centre.
- Separate concerns: AUSTRAC Travel Rule (July 2026) vs ASIC’s later digital assets framework (April 2027). Follow the regulator relevant to each question.
What the Travel Rule does not do
- It does not ban holding Bitcoin in self-custody or collaborative multisig, including TBA-supported vaults.
- It does not change ordinary transfers between self-custody wallets you control (vault to hardware wallet, vault to vault you own, and similar).
- It does not require individuals to register with AUSTRAC as VASPs.
- It does not change Bitcoin’s protocol, consensus rules, or how keys sign transactions on-chain.
- It does not mean every wallet-to-wallet transfer is reported to government; reporting obligations attach to regulated businesses in the chain.
- It does not make The Bitcoin Adviser a custodian or transfer agent for Travel Rule purposes.
- It is not the same as banning withdrawals; exchanges may delay or refuse transfers that do not meet their AML policies, but the rule’s aim is information flow between obliged entities, not ending self-custody.
Compliance friction at exchanges is real. It is also different from losing the right to hold keys yourself once coins are off-platform.
Frequently asked questions
When does the Travel Rule start for crypto in Australia?
For virtual asset transfers, key Travel Rule obligations take effect on 1 July 2026 under AUSTRAC’s transitional rules.
Broader AML/CTF reform timelines also apply from March 2026 onward. See Australia timeline above.
Does the Travel Rule apply to my personal self-custody Bitcoin?
Not while Bitcoin stays in wallets you control without a regulated intermediary moving it for you, including a collaborative security vault.
When you interact with an exchange (deposit or withdrawal), the exchange’s Travel Rule obligations apply at that boundary. Vault-to-vault or vault-to-other-wallet moves you initiate are otherwise ordinary self-custody. See Self-hosted vs exchange wallets.
Do I need to register with AUSTRAC as an individual?
No. Registration applies to businesses providing designated virtual asset services, not to individuals holding Bitcoin for themselves.
VASPs must enrol and register by 29 July 2026 if they provide registrable services. That is an operator obligation, not a holder obligation.
What happens when I withdraw from an exchange to my own wallet?
The exchange acts as ordering institution. It must meet self-hosted wallet policies: collect and verify payer information and collect payee and tracing information, without passing data to another VASP.
You may be asked to classify the address and complete verification steps in the exchange’s address book before or after 1 July 2026.
Will peer-to-peer transfers between two private wallets be reported under the Travel Rule?
Generally no, because no VASP is in the value transfer chain.
FATF notes P2P self-hosted activity can still pose ML/TF risk at a policy level; countries may pursue other measures. The Travel Rule targets obliged entities, not direct on-chain transfers between individuals’ wallets.
Is there a minimum transaction amount?
For virtual asset transfers in Australia, industry and AUSTRAC-aligned summaries describe no threshold: obligations apply regardless of amount.
Some other countries retain thresholds for certain transfer types; Australia’s virtual asset rules are broad.
How is this different from ASIC’s 2027 digital assets rules?
AUSTRAC’s Travel Rule is AML/CTF transparency between institutions. ASIC’s framework (commencing April 2027 with transition) addresses different consumer and markets regulation.
Hold both timelines in mind when reading news about “crypto regulation” in Australia.
Can I pay The Bitcoin Adviser fees directly from my exchange account?
You should plan to pay invoices from your self-custody vault, not by sending directly from an exchange to a third-party address.
Australian exchanges are increasingly restricting remittance-style sends to other entities. Withdraw to a wallet you control first, then pay the invoice from your vault. See fees and exchanges above.
Does the Travel Rule change transfers from my vault to another wallet I control?
No. A collaborative security vault is self-custody. Moving Bitcoin from your vault to another self-hosted wallet you control is not a VASP transfer.
Travel Rule obligations apply when a regulated exchange or custodian moves value on your behalf. Once coins are in your vault, ordinary client-initiated sends between wallets you control are unchanged. See common scenarios.
Does The Bitcoin Adviser transmit Travel Rule data?
No. We are not a VASP, exchange, or custodian.
We provide education and collaborative security support. Travel Rule compliance sits with regulated institutions in your funding and withdrawal path. See scope and risks.
What should I do before 1 July 2026?
Review and verify exchange withdrawal addresses, test a small transfer, and keep good records.
See the checklist above and your exchange’s own Travel Rule communications.
Can exchanges refuse or delay my withdrawal?
Under their AML/CTF programs, exchanges may delay, request more information, or refuse transfers that do not meet legal or policy requirements.
Preparing verified addresses and accurate wallet classifications reduces avoidable friction. This page does not guarantee any exchange outcome.
Further reading (official and context)
Primary (AUSTRAC):
- Travel rule overview
- Additional travel rule obligations when transferring virtual assets
- AML/CTF transitional rules 2026
International context:
Exchange operational example (not law):
Educational only. This page is general information about how the Travel Rule may affect Australian Bitcoin holders and clients who use exchanges. It is not legal, tax, financial, or investment advice. Laws and exchange processes change; rely on qualified professionals and official regulators for decisions. See scope, risks & important information.
Questions about custody after the exchange step?
We help families and holders design collaborative security and continuity plans once Bitcoin is in client-controlled custody. For exchange-specific Travel Rule steps, follow your platform’s guidance.