Taiwan Travel Rule 2026: What Crypto VASPs Must Do From October

By Andrew Chang, Compliance Officer, Liminal. Last updated 30 September 2026.

Taiwan’s Financial Supervisory Commission (FSC) plans to apply the Travel Rule to crypto transfers between domestic virtual asset service providers (VASPs) from October 2026, with no minimum transfer value. Transfers above NT$30,000 need extra identity data, and the receiving VASP must check it. Cross-border transfers follow by the end of 2027. The rule is still a draft: the FSC’s public comment period closed on 14 September 2026, and the final text is pending.

Key points

• The Taiwan Travel Rule applies to every domestic VASP-to-VASP transfer, whatever the amount.
• Above NT$30,000, individuals need a date of birth and residential address. Legal persons need an official ID number and registered address.
• Receiving VASPs must compare beneficiary details against their own customer records.
• Phase two, covering transfers with overseas VASPs, is targeted for the end of 2027.
• Self-hosted wallet treatment has not been published.

Taiwan’s Travel Rule Starts October 2026 for Domestic Transfers

Taiwan’s crypto Travel Rule already exists on paper. Article 7 of the FSC’s AML and counter-terrorism financing regulations for VASPs has carried Travel Rule provisions since 30 June 2021. Enforcement never began, because national standards differ, data formats are not aligned, and cross-border connections are hard to build.

On 4 August 2026, the FSC announced draft amendments to switch the rule on in phases. The amendments follow the Financial Action Task Force’s (FATF) revised Recommendation 16.

Learn More – What is the Travel Rule

Which Taiwan VASPs the Travel Rule Covers

Phase one covers transfers between VASPs established in Taiwan. Exchanges, trading platforms, transferors and custodians that hold AML registration fall in scope as senders, receivers, or both. Transfers between a Taiwan VASP and an overseas VASP wait for phase two.

What Data VASPs Send on Every Crypto Transfer

Every covered transfer needs the sender’s name and wallet information, the receiver’s name and wallet information, and retained records. The rule applies whatever the amount.

Transfers above NT$30,000 (about USD 930) need more:The threshold sets the level of data collected. It does not exempt smaller transfers.

How Receiving VASPs Verify Beneficiary Information

Receiving VASPs must actively check the incoming data. Above NT$30,000, the receiving VASP compares the beneficiary information sent by the originating VASP against its own customer records. A mismatch, such as a differently spelled corporate name, can affect how the transfer is processed. The receiving side also needs a risk-based policy for transfers that arrive with missing data.

This check often changes daily workflows more than the data transmission itself. Teams need matching logic, exception queues and a documented accept-or-reject policy.

Worked Example: A NT$500,000 Corporate Transfer Between Two Taiwan VASPs

A company treasury sends the equivalent of NT$500,000 in USDT from VASP A to VASP B, both in Taiwan.

1. VASP A collects the company’s name, official ID number and registered address, plus the beneficiary’s name and wallet address.
2. VASP A screens the beneficiary and wallet, then transmits the Travel Rule data to VASP B.
3. VASP B compares the beneficiary details with its own customer record.
4. If the details match, the transfer proceeds. If not, VASP B applies its exception policy.
5. Both VASPs retain the records.

How the Travel Rule Fits Taiwan’s Virtual Asset Service Act

The Travel Rule and the Virtual Asset Service Act (VASA) are separate instruments. The Travel Rule comes from the existing AML framework under the Money Laundering Control Act. VASA adds licensing, capital, custody and conduct rules on top. VASA’s commencement date is set by the Executive Yuan and could be as early as Q1 2027.

Institutions should plan for both together. See our guide to Taiwan’s Virtual Asset Service Act and our post on [FSC AML registration for VASPs] [https://www.liminalcustody.com/blog/liminal-secures-fsc-aml-registration-in-taiwan/].

What Travel Rule Duties Mean for Custody and Wallet Operations

Travel Rule messaging usually runs through a dedicated messaging provider or a VASP’s own connection. Custody and wallet infrastructure governs what happens before and after. Three areas need attention:

• Approval and policy controls. Outbound transfers should not release until required data is collected and approved. Liminal’s Firewall adds governance and automation to transactions. [CONFIRM: how Travel Rule data checks plug into this]
• Data location and access. Banks want Travel Rule data stored in Taiwan with clear access controls. [CONFIRM: Liminal’s data residency position]
• Records. Transfer approvals and Travel Rule records must be retained and retrievable for audits.

Liminal Taiwan holds AML registration with the FSC. [CONFIRM current status wording with Compliance.] Liminal holds ISO 27001, ISO 27701 and SOC 2 Type 2 certifications.

What the FSC Has Not Yet Published

Public material does not yet cover:

• Final article numbers and effective date of the amended rule
• The exact fields the receiving VASP must match
• Whether transfers to or from self-hosted wallets are covered in phase one
• Message format and connection standards for cross-border transfers

Watch the FSC website and the Taiwan VASP Association. This post will be updated when the final text is published.

Travel Rule Readiness Checklist for Taiwan VASPs

1. Name an owner for Travel Rule compliance.
2. Map which customer data fields you hold against the required fields.
3. Confirm your messaging connection to other Taiwan VASPs.
4. Build matching logic and an exception queue for receiving transfers.
5. Write an accept-or-reject policy for transfers with missing or mismatched data.
6. Set record retention and retrieval procedures.
7. Train operations and compliance staff.
8. Test with a counterparty VASP before October.