Source: OJ L 150, 9.6.2023, pp. 1–39

Current language: EN

Article 14 Information accompanying transfers of crypto-assets


Summary What does Article 14 of the Transfer of funds regulation (TFR) say?

This is a foundational article for the crypto-asset side of the regulation, serving as the direct equivalent of Article 4 (which covers transfers of funds).

It places the core "travel rule" obligations squarely on the crypto-asset service provider of the originator, requiring that transfers of crypto-assets be accompanied by identifying information on both the originator and the beneficiary.

The article also addresses the specific scenario of transfers to self-hosted addresses, where additional obligations apply, including an assessment of whether the address is owned or controlled by the originator when the transfer exceeds EUR 1 000.

Crucially, the required information must be submitted before or simultaneously with the transfer, but it does not need to be embedded directly within the transfer itself.

Important points:

  • Ensure every transfer of crypto-assets is accompanied by identifying information on both the originator and the beneficiary, including names, distributed ledger addresses or account numbers, and address or date of birth details.
  • For transfers to self-hosted addresses exceeding EUR 1 000, take adequate measures to assess whether that address is owned or controlled by the originator.
  • No transfer may be initiated or executed before full compliance with this Article is ensured.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. The crypto-asset service provider of the originator shall ensure that transfers of crypto-assets are accompanied by the following information on the originator:

      1. the name of the originator;

      2. the originator’s distributed ledger address, in cases where a transfer of crypto-assets is registered on a network using DLT or similar technology, and the crypto-asset account number of the originator, where such an account exists and is used to process the transaction;

      3. the originator’s crypto-asset account number, in cases where a transfer of crypto-assets is not registered on a network using DLT or similar technology;

      4. the originator’s address, including the name of the country, official personal document number and customer identification number, or, alternatively, the originator’s date and place of birth; and

      5. subject to the existence of the necessary field in the relevant message format, and where provided by the originator to its crypto-asset service provider, the current LEI or, in its absence, any other available equivalent official identifier of the originator.

    1. The crypto-asset service provider of the originator shall ensure that transfers of crypto-assets are accompanied by the following information on the beneficiary:

      1. the name of the beneficiary;

      2. the beneficiary’s distributed ledger address, in cases where a transfer of crypto-assets is registered on a network using DLT or similar technology, and the beneficiary’s crypto-asset account number, where such an account exists and is used to process the transaction;

      3. the beneficiary’s crypto-asset account number, in cases where a transfer of crypto-assets is not registered on a network using DLT or similar technology; and

      4. subject to the existence of the necessary field in the relevant message format, and where provided by the originator to its crypto-asset service provider, the current LEI or, in its absence, any other available equivalent official identifier of the beneficiary.

    1. By way of derogation from paragraph 1, point (c), and paragraph 2, point (c), in the case of a transfer of crypto-assets not registered on a network using DLT or similar technology and not made to or from a crypto-asset account, the crypto-asset service provider of the originator shall ensure that the transfer of crypto-assets is accompanied by a unique transaction identifier.

    1. The information referred to in paragraphs 1 and 2 shall be submitted in advance of, or simultaneously or concurrently with, the transfer of crypto-assets and in a secure manner and in accordance with Regulation (EU) 2016/679.

    2. The information referred to in paragraphs 1 and 2 shall not be required to be attached directly to, or be included in, the transfer of crypto-assets.

    1. In the case of a transfer of crypto-assets made to a self-hosted address, the crypto-asset service provider of the originator shall obtain and hold the information referred to in paragraphs 1 and 2 and shall ensure that the transfer of crypto-assets can be individually identified.

    2. Without prejudice to specific risk mitigating measures taken in accordance with Article 19b of Directive (EU) 2015/849, in the case of a transfer of an amount exceeding EUR 1 000 to a self-hosted address, the crypto-asset service provider of the originator shall take adequate measures to assess whether that address is owned or controlled by the originator.

    1. Before transferring crypto-assets, the crypto-asset service provider of the originator shall verify the accuracy of the information referred to in paragraph 1 on the basis of documents, data or information obtained from a reliable and independent source.

    1. Verification as referred to in paragraph 6 of this Article shall be deemed to have taken place where one of the following applies:

      1. the identity of the originator has been verified in accordance with Article 13 of Directive (EU) 2015/849 and the information obtained pursuant to that verification has been retained in accordance with Article 40 of that Directive;

      2. Article 14(5) of Directive (EU) 2015/849 applies to the originator.

    1. The crypto-asset service provider of the originator shall not allow for the initiation, or execute any transfer, of crypto-assets before ensuring full compliance with this Article.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod