# Crypto AML Policy

> What a crypto AML policy template must contain: risk assessment, written controls, an MLRO, training, CDD and the travel rule, mapped to UK MLRs 2017 and EU rules.

## Key facts

- In the UK, cryptoasset exchange providers and custodian wallet providers are supervised for anti-money laundering by the FCA under regulation 7(1)(a)(viii) and (ix) of the Money Laundering Regulations 2017, and may not operate without being on the FCA register.
- The UK travel rule for crypto transfers has applied since 1 September 2023 under Part 7A of the MLRs 2017, with the extra originator information required on cross-border transfers of GBP 800 or more; the EU rule in Regulation (EU) 2023/1113 has applied since 30 December 2024 with no de minimis threshold at all.
- Regulation (EU) 2024/1624, the EU single AML rulebook, applies from 10 July 2027 and prohibits crypto-asset service providers from keeping anonymous crypto-asset accounts or accounts allowing anonymisation, including through anonymity-enhancing coins.

## Key pages

- [What does a crypto AML policy template have to contain?](https://cryptoamlpolicy.com/): the main tool, answer above the fold.
- [The crypto travel rule: UK and EU compared, with the thresholds](https://cryptoamlpolicy.com/crypto-travel-rule/): The UK travel rule has applied since 1 September 2023 with a GBP 800 cross-border threshold. The EU rule applies to every transfer of crypto-assets, of any value.
- [Crypto AML policy in the UK: what the MLRs 2017 actually require](https://cryptoamlpolicy.com/crypto-aml-policy-uk/): UK cryptoasset firms are FCA-supervised under the MLRs 2017: a written risk assessment, policies approved by senior management, an MLRO, screening, audit and training.
- [EU AML rules for crypto: what applies now, and what applies in 2027](https://cryptoamlpolicy.com/eu-aml-rules-for-crypto/): A MiCA CASP is an obliged entity under its member state's AML law today, with the travel rule in Regulation (EU) 2023/1113. The single rulebook applies from 10 July 2027.
- [What a crypto AML policy must contain, and the rule that requires it](https://cryptoamlpolicy.com/#data): original data table, updated 2026-08-15.
- [Full site content as markdown](https://cryptoamlpolicy.com/llms-full.txt)

## Data

- What a crypto AML policy must contain, and the rule that requires it. Methodology: UK column read from the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (S.I. 2017/692) as amended, on legislation.gov.uk on 15 August 2026. EU column read from Directive (EU) 2015/849 as it currently applies through national transposition, Regulation (EU) 2023/1113 for the travel rule, and Regulation (EU) 2023/1114 Article 68(8) for the MiCA overlay. Regulation (EU) 2024/1624 replaces most of the EU column from 10 July 2027 and is shown where it changes the substance. This table names sources, it is not advice on how to apply them.
- Last updated: 2026-08-15. Every figure cites its source inline.
- Source: Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (S.I. 2017/692): https://www.legislation.gov.uk/uksi/2017/692/contents
- Source: MLRs 2017, Part 7A: cryptoasset transfers (the UK travel rule): https://www.legislation.gov.uk/uksi/2017/692/part/7A
- Source: MLRs 2017, regulation 14A: cryptoasset exchange providers and custodian wallet providers: https://www.legislation.gov.uk/uksi/2017/692/regulation/14A
- Source: Proceeds of Crime Act 2002, Part 7 (money laundering): https://www.legislation.gov.uk/ukpga/2002/29/part/7
- Source: National Crime Agency, suspicious activity reports: https://www.nationalcrimeagency.gov.uk/what-we-do/crime-threats/money-laundering-and-illicit-finance/suspicious-activity-reports
- Source: FCA, cryptoasset firms: registration under the MLRs ahead of the new FSMA regime: https://www.fca.org.uk/firms/new-regime-cryptoasset-regulation/registration-under-mlrs-ahead-new-fsma-regime
- Source: Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets: https://eur-lex.europa.eu/eli/reg/2023/1113/oj/eng
- Source: Directive (EU) 2015/849 (the fourth AML directive, as amended): https://eur-lex.europa.eu/eli/dir/2015/849/oj/eng
- Source: Regulation (EU) 2024/1624 (AMLR), applying from 10 July 2027: https://eur-lex.europa.eu/eli/reg/2024/1624/oj/eng
- Source: Directive (EU) 2024/1640 (AMLD6), transposition by 10 July 2027: https://eur-lex.europa.eu/eli/dir/2024/1640/oj/eng
- Source: Regulation (EU) 2024/1620 establishing AMLA: https://eur-lex.europa.eu/eli/reg/2024/1620/oj/eng
- Source: Regulation (EU) 2023/1114 (MiCA), Article 68(8): https://eur-lex.europa.eu/eli/reg/2023/1114/oj/eng

## Citation

Cite as: "What a crypto AML policy must contain, and the rule that requires it", Crypto AML Policy, https://cryptoamlpolicy.com/ (updated 2026-08-15).

## About

- Crypto AML Policy is a free introduction service. We pass your details to crypto licensing and compliance advisers, who quote you directly; we may receive a fee from them, you pay nothing and are under no obligation. We are not a law firm, we are not authorised or registered by any regulator, and we are not affiliated with or endorsed by the FCA, HMRC, the National Crime Agency, ESMA, the EBA or any national competent authority or financial intelligence unit. Nothing here is legal or regulatory advice, and this site does not tell you whether a specific transaction is reportable: take advice from a qualified professional in the jurisdiction that supervises you.
- Operated by cryptoamlpolicy.com. Contact: enquiries@cryptoamlpolicy.com