Soda Labs

FATF

The source of almost every travel rule on earth

Regulator or standard-setterGlobalRestricts anonymity

Anonymity-enhancing assets or unattributed transfers are barred outright, or barred for regulated firms.

What FATF actually says

Nothing else in this section has as much reach. FATF sets standards rather than law, but the mutual evaluation process and the grey list make adoption close to compulsory, which is why the same travel rule appears in every jurisdiction below. Recommendation 15 brought virtual assets into scope in 2018, and its interpretive note carries the transfer threshold. The July 2026 targeted update found peer-to-peer transfers through self-hosted wallets treated as high risk in 88% of responding jurisdictions. Two things cut the other way and are usually missed: the 2025 revision of Recommendation 16 is not applied directly to virtual asset providers, and FATF's own July 2026 report on information sharing concludes that data protection law, not technology, is the main barrier to cooperation.

The instruments that matter

Recommendation 15 and INR.15
extended the standards to virtual assets and VASPs in 2018; the interpretive note carries the travel rule above USD/EUR 1,000
Seventh targeted update, 16 July 2026
83% of responding jurisdictions now have travel rule legislation, up from 73%, but only 34% are largely compliant with R.15
DeFi report, 21 July 2026
applies a control-or-sufficient-influence test rather than accepting decentralisation claims; 93% of jurisdictions have not implemented R.15 for DeFi
R.16 revision, June 2025
effective end-2030, and explicitly not applied directly to VASPs

What this means for confidential transactions

Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.

Compliant by default.

See how selective disclosure satisfies a supervisor without publishing your book to the world.