The Financial Action Task Force says many jurisdictions are putting crypto regulations into law, but enforcement remains weak.
In its Seventh Targeted Update on FATF’s implementation of standards for real estate and service providers, the global watchdog reported that 83% of the jurisdictions surveyed had enacted legislation to implement the Trafficking Act. This is up from 73% in 2025.
On paper, that looks like progress.
But the report also found that only 40% of jurisdictions with Travel Rule laws actually monitored or enforced them. In other words, many countries have laws, but very few enforce them in a meaningful way.
That difference is the main problem.
TL; DR
- The FATF says 83% of jurisdictions surveyed have passed the Travel Rule for crypto.
- Only 40% of the jurisdictions with these laws actually monitored or enforced them.
- The report highlights the risks associated with fraud sites, DPRK cyber theft, DeFi, non-custodial wallets, and cold hard cash.
Laws Are Spreading Faster Than Enforcement
The Travel Rule is one of the most important rules to follow in crypto.
It requires service providers of all kinds to collect and submit activation and benefit information for transfer. In common language, controllers I want crypto intermediaries to know who is sending and receiving money, especially when transferring to regulated platforms.
For years, the industry debated whether this could work in crypto.
Now, according to the FATF, many of the requested jurisdictions have turned this rule into law. That’s a big change from the early days when many states were still debating whether to regulate VASPs at all.
But the law is only the first step.
A law that sits on the books without oversight doesn’t change much. Exchanges, brokers, regulators, and payment companies need guidance, inspections, security risks, and technical practices. Controllers need staff and equipment. A cross-border agreement must be valid.
FATF numbers show that implementation is not uniform.
Why Differences in Implementation Matter
Crypto tracking always has a very weak point.
If one country has strict laws and another has no enforcement, sex offenders can slip through the cracks. This puts pressure on the entire system because crypto transactions are global in nature.
This is especially important for spam, hacking networks, ransomware groups, and government-linked disinformation projects.
The FATF report highlights the areas of fraud related to crime, cyber theft in the DPRK, illegal wallets, DeFiand stablecoins designed to cool like affected areas.
Those groups show how the risk picture is changing.
It is no longer about fraudulent exchanges or black market transactions. It is about high fraud, advanced cyber systems, decentralized services, wallet architecture, and stablecoin designs that will reduce the ability of issuers or intermediaries to freeze funds.
It’s a very difficult area for managers.
DeFi Remains Challenging
DeFi is one of the least interesting areas of the FATF.
The Travel Act assumes that there is an intermediary that can collect and transmit information. In DeFi, that middleman may not exist in a traditional way. The protocol can be smart contractsforward, authority participants, builders, verifiers, liaisons, or a mix of all.
The authorities are then faced with a difficult question: who is responsible?
If the group is controlling the front, maybe the front is a pressure point. If the DAO controls the shares, the directors may face difficulties. If users have direct contact with contractors, enforcement becomes more difficult.
The FATF has been urging countries not to allow “established” labels to be restrictive. But turning this principle into effective management is not easy.
This is why forced diversification is so important in DeFi.
Stablecoins Are Under the Microscope
Stablecoins also appear on the report’s risk list.
It is one of the most powerful crypto systems, and the easiest tool to exchange value quickly across borders. USDT, USDC, and other stablecoins have become valuable assets for traders, businesses, emerging markets, DeFi users, and in some cases, informal networks.
The FATF’s concern with unfreezing stablecoins is obvious as it focuses on regulation.
If a stablecoin issuer can freeze addresses, regulators can force issuers to take action against illegal funds. If a stablecoin is designed to resist freezing or doesn’t have a centralized supply chain, the incentive system is weak.
This raises serious questions about anti-blocking, user protection, and legal compliance opportunities.
Crypto users often value assets that cannot be frozen easily. Administrators worry that the same resources could help criminals.
That struggle does not go away.
The Next Step Is Monitoring
The headline number, 83% legalization, shows that crypto regulation has become widespread. The most important number can be 40% action.
That’s where the next part will take place.
States will be judged less if they write laws and if they regulate companies, punish violations, and cooperate across borders. Exchange and management will require strong Travel Rule systems. The DeFi front can be heavily monitored. Stablecoin investors will remain under pressure.
For companies, the message is clear.
The next debate is over whether crypto should be regulated. Now it’s about whether the existing rules are being used consistently enough to satisfy international setters.
This may not be the news that traders want to hear, but it is news that will change the way exchanges, wallets, stablecoins, and DeFi protocols work in the next market.
This article is based on The Seventh Amendment to the FATF on specific products and VASPs.
This article was written by News Desk and edited by Samuel Rae.
