Taiwan Crypto Travel Rule: October 2026 Domestic VASP Deadline

Taiwan's Financial Supervisory Commission (FSC) has proposed applying the FATF Travel Rule to all domestic virtual asset service provider (VASP) transfers from October 2026, with no minimum value threshold, and plans to extend the same framework to cross-border transfers by end-2027. For accounting firms advising VASP clients, CFOs overseeing digital asset operations, and auditors assessing AML controls, this is a hard compliance deadline requiring immediate project planning. The right crypto accounting software infrastructure and client data architecture will determine whether firms are ready on day one.

What the FSC Is Actually Proposing

On 5 August 2026, the Financial Supervisory Commission announced proposed amendments to Taiwan's AML regulations that would require all licensed crypto platforms to transmit customer information on every platform-to-platform transfer within Taiwan. The rule applies regardless of transaction value, meaning even the smallest transfer triggers a baseline data obligation.

The Two-Tier Data Requirement

The FSC has structured the obligation in two layers. Every domestic VASP-to-VASP transfer must carry the minimum originator and beneficiary details required under the FATF Travel Rule. Where a transfer exceeds NT$30,000 (approximately US$930), the data set expands:

• For individual senders: date of birth and residential address must accompany the transaction message.
• For corporate senders: the entity's official identification number and registered address are required.

The receiving VASP is not merely a passive recipient. Under the proposal, it must actively compare the beneficiary information supplied by the originating platform against its own customer records. This creates a real-time reconciliation obligation that has direct implications for data governance and system design.

Consultation and Timeline

The FSC stated that the proposed amendments will enter a 30-day public consultation period shortly after the announcement. Assuming a standard legislative path following consultation, the October 2026 domestic implementation target leaves a very short runway. Cross-border transfers, covering transactions between Taiwan-registered VASPs and overseas platforms, are targeted for coverage by end-2027.

Why Taiwan Paused After 2021 and What Has Changed

Taiwan is not starting from zero. Travel Rule provisions were written into its AML regulations back in 2021, but the FSC chose not to enforce them at the time. The commission cited three obstacles: divergent regulatory requirements across jurisdictions, incompatible data-transmission standards between platforms, and the practical difficulty of building reliable cross-border messaging infrastructure.

Those concerns have not entirely disappeared, which is precisely why the FSC has sequenced the rollout. By tackling domestic transfers first, the regulator avoids the interoperability problem in the near term. Cross-border compliance is deferred to 2027, by which point global Travel Rule infrastructure and the FATF peer review cycle should have matured further.

The Shifting Global Picture

The FSC's timing reflects broader international momentum. In July 2026, the FATF reported that 83% of surveyed jurisdictions had enacted Travel Rule legislation, up from 73% in 2025. That is meaningful progress, but the FATF also warned that significant implementation and enforcement gaps remain across those jurisdictions. Taiwan's decision to accelerate domestic application while deferring cross-border rules is a pragmatic response to exactly that gap: it allows the FSC to demonstrate FATF compliance on the domestic front without waiting for a globally uniform standard that does not yet exist.

For a broader view of how FATF guidance is reshaping compliance obligations across digital asset sectors, see our coverage of the FATF DeFi Report and the compliance priorities for accounting firms.

Compliance Implications for Accounting Firms and CFOs

The FSC's proposal creates several distinct workstreams for firms advising or auditing VASP clients in Taiwan. Each deserves dedicated attention before the October deadline.

Client Data Architecture and KYC Records

The enhanced data requirement above NT$30,000 presupposes that VASPs already hold date of birth, residential address, corporate registration numbers, and registered addresses for all active customers. Many platforms completed basic KYC at onboarding but did not structure their databases to make those fields machine-readable and instantly transmissible at the point of a transaction. Accounting and compliance teams should audit client data completeness now, not after the rule takes effect.

Where data gaps exist, remediation campaigns need to be scoped and budgeted. The cost of a retroactive KYC refresh programme, including staff time, communications, and potential customer attrition, should be factored into a VASP client's compliance budget for Q3 and Q4 2026.

Transaction Monitoring and Record-Keeping

The receiving VASP's obligation to compare incoming beneficiary data against its own records is effectively a real-time sanctions and identity screening step. Firms whose clients operate on the receiving side need to confirm that their transaction monitoring systems can perform this comparison at the volume and speed required. A manual process will not scale.

From a record-keeping standpoint, every Travel Rule message sent or received constitutes a compliance record that auditors will expect to see. The crypto bookkeeping software or broader digital asset accounting software used by a VASP needs to be capable of capturing and storing these messages in a way that is retrievable by transaction reference, date, and counterparty. Firms should assess whether current systems meet that standard or whether integration work is required.

Interoperability Between Domestic Platforms

The 2021 pause was partly caused by incompatible information-transmission standards between platforms. For the October rollout to work, domestic VASPs need to agree on or adopt a common messaging protocol for Travel Rule data. Globally, solutions built around the IVMS 101 data standard have gained the most traction. Accounting and compliance advisers should check whether their VASP clients have already joined a Travel Rule messaging network, and if not, initiate that conversation immediately. The technical integration timelines for these networks can run to several weeks even in straightforward cases.

Counterparty Due Diligence on Domestic VASPs

The proposal requires originating VASPs to supply verified customer data to receiving VASPs. That creates a mutual due diligence dynamic: each platform needs to be confident the counterparty it is exchanging data with is itself licensed, AML-compliant, and handling the data securely. Firms advising multi-platform VASP clients should help them build a counterparty registry and a lightweight due diligence framework covering domestic peers before October.

Our detailed breakdown of digital asset AML and sanctions best practices for firms covers the broader control framework that underpins this kind of counterparty screening.

Accounting and Audit Considerations

Beyond the operational compliance workstream, the FSC's proposal has direct implications for how digital asset transactions are recorded, reported, and audited.

Enhanced Due Diligence as an Audit Evidence Category

Auditors assessing a VASP's AML controls will increasingly need to test Travel Rule compliance as a distinct audit area. This means reviewing a sample of transaction records to confirm that Travel Rule messages were generated, transmitted, and received for covered transfers; that the enhanced data fields were populated for transactions above NT$30,000; and that the beneficiary comparison performed by the receiving VASP was documented. Audit programmes should be updated to include these tests before the October live date.

Provisioning for Compliance Infrastructure Costs

VASPs facing material technology integration costs to meet the October deadline may need to consider how those expenditures are treated in financial statements. Depending on the nature of the work, costs may be capitalised as an intangible asset if they meet the relevant accounting standard criteria, or expensed as incurred. CFOs should align with their auditors on the appropriate treatment early in the project, rather than at year-end when the work is done and the accounting choice is harder to unwind.

Cross-Border Extension in 2027: Plan Now

The 2027 cross-border extension will require Taiwanese VASPs to transmit and receive Travel Rule data with overseas platforms that may be operating under different regulatory regimes, data standards, and licensing frameworks. Some of those overseas counterparties may not yet be Travel Rule-compliant in their own jurisdictions. CFOs and compliance teams should begin mapping their cross-border transfer flows now to identify which counterparty relationships will require the most work to bring into scope by end-2027. Starting that process in late 2026, after the domestic rollout is stable, should leave adequate time, but only if the groundwork is laid now.

What Firms Should Do Before October

The FSC's 30-day consultation window is the last realistic point at which industry feedback can shape the final rules. Accounting firms and CFOs advising Taiwanese VASPs should consider whether to submit a consultation response, particularly on the practicality of the NT$30,000 threshold, the data fields required for corporate senders, and the technical standards for the beneficiary comparison obligation.

Beyond the consultation, the practical steps break down as follows. First, audit client KYC databases for completeness of the data fields the rule will require, and scope any remediation needed. Second, confirm whether the VASP's technology stack can generate, transmit, and receive FATF-compliant Travel Rule messages at production volume. Third, review transaction monitoring and screening workflows to incorporate the receiving-VASP comparison obligation. Fourth, update internal AML policies and procedures to reflect the new domestic rule, and schedule staff training ahead of the go-live date. Fifth, begin counterparty due diligence on domestic VASP relationships that will become data-sharing partners under the new framework.

Firms that treat this as a technology project alone will miss the broader AML governance dimension. The FSC's proposal is as much about the quality and verifiability of customer data as it is about the plumbing that moves that data between platforms. Robust crypto accounting software and digital asset accounting software form the backbone of a compliant record-keeping environment, but they need to be fed by clean, complete, and consistently structured customer information to deliver the audit trail the FSC will expect.

Frequently Asked Questions

Does the Travel Rule apply to every domestic transfer in Taiwan from October, regardless of amount?

Yes. Under the FSC's proposal, the baseline Travel Rule obligation applies to all platform-to-platform transfers within Taiwan with no minimum value floor. The enhanced data requirements, covering date of birth and address for individuals, or registration number and address for corporates, are triggered only for transfers above NT$30,000 (approximately US$930).

What does the receiving VASP actually have to do under this proposal?

The receiving VASP must compare the beneficiary information transmitted by the originating platform against its own customer records. This is an active reconciliation obligation, not a passive receipt of data. Platforms need systems capable of performing this check at the point of transfer, not as a manual back-office process.

When does the cross-border extension take effect?

The FSC plans to extend the Travel Rule framework to transfers between Taiwanese VASPs and overseas platforms by the end of 2027. The domestic-only phase from October 2026 is explicitly sequenced to allow time for cross-border interoperability challenges to be addressed.

What are the key audit implications for accounting firms?

Auditors will need to test Travel Rule compliance as a distinct area within AML control assessments. This includes reviewing whether Travel Rule messages were generated and transmitted for all covered transfers, whether enhanced data fields were populated above the NT$30,000 threshold, and whether the beneficiary comparison was documented by the receiving VASP. Audit programmes should be updated before the October live date.

How does this relate to the broader FATF global Travel Rule picture?

The FATF reported in July 2026 that 83% of surveyed jurisdictions have enacted Travel Rule legislation, up from 73% in 2025, but noted that significant implementation and enforcement gaps remain. Taiwan's phased approach, domestic first, then cross-border, reflects those global gaps and aligns with FATF's expectation that jurisdictions make tangible progress even where full cross-border interoperability is not yet achievable.

Source: Cointelegraph