The EU Travel Rule, mandated by the Financial Action Task Force (FATF), requires virtual asset service providers (VASPs) to transmit relevant transaction information to counterparties for cross-border transfers exceeding €1,000. Travel Agency

Cyprus aligns with EU directives through the Financial Services Supervisory Authority (FSSA), ensuring VASPs comply with AML/KYC obligations and reporting requirements. Crypto Travel Rule Explained: FATF Requirements for VASPs

Non-custodial wallets face specific challenges under the EU Travel Rule, necessitating enhanced transparency measures to satisfy regulatory standards. Non-Custodial Wallets and the EU Travel Rule

CySEC’s circular on the EBA public consultation underscores the importance of timely adaptation to evolving travel rule guidelines. CySEC Circular: EBA public consultation on Travel Rule ...

Implementation gaps, such as technological integration and compliance monitoring, pose risks that require proactive mitigation strategies. Non-Custodial Wallets and the EU Travel Rule

Tax treatment of virtual asset transactions remains under scrutiny, with potential implications for VASP operations in Cyprus. Travel Rule Compliance What You Must Do - Govern

Cyprus implements the EU Travel Rule through directives enforced by the FSSA, ensuring VASPs adhere to stringent AML/KYC protocols. Travel Rule Compliance What You Must Do - Govern

The FATF’s global standards set a baseline for transaction reporting, obligating VASPs to disclose sender and recipient details for cross-border transfers. Crypto Travel Rule Explained: FATF Requirements for VASPs

CySEC plays a pivotal role in supervising compliance, issuing circulars that guide VASPs on meeting the latest travel rule stipulations. CySEC Circular: EBA public consultation on Travel Rule ...

VASPs operating in Cyprus must secure licenses from the FSSA, demonstrating compliance with AML/KYC frameworks and adherence to travel rule mandates. Travel Rule Compliance What You Must Do - Govern

The licensing process evaluates technological capabilities for accurate transaction reporting, ensuring non-custodial wallets meet regulatory thresholds. Non-Custodial Wallets and the EU Travel Rule

Effective AML/KYC measures are essential for VASPs to verify customer identities and monitor transactional patterns, mitigating illicit financial flows. Travel Rule Compliance What You Must Do - Govern

The EU Travel Rule extends AML obligations by requiring real-time reporting of cross-border virtual asset transfers exceeding €1,000. Crypto Travel Rule Explained: FATF Requirements for VASPs

Non-compliance with travel rule requirements triggers enforcement actions from the FSSA and CySEC, including fines and potential license revocations. Travel Rule Compliance What You Must Do - Govern

Case studies highlight instances where VASPs faced penalties for delayed or inaccurate transaction reporting under the EU Travel Rule. CySEC Circular: EBA public consultation on Travel Rule ...

The tax treatment of virtual asset transactions in Cyprus is subject to evolving legislative interpretations, influencing VASP operational strategies. Travel Rule Compliance What You Must Do - Govern

Ongoing consultations aim to clarify tax obligations for cross-border transfers facilitated by the EU Travel Rule. Non-Custodial Wallets and the EU Travel Rule

Technological integration challenges pose a risk for timely travel rule compliance, particularly for non-custodial wallet solutions. Non-Custodial Wallets and the EU Travel Rule

Regulatory gaps concerning jurisdictional overlaps may lead to inconsistent enforcement, necessitating harmonized international standards. CySEC Circular: EBA public consultation on Travel Rule ...

Market participants must navigate evolving FATF guidelines and CySEC interpretations to mitigate compliance risks effectively. Crypto Travel Rule Explained: FATF Requirements for VASPs

Crypto Travel Rule Explained: FATF Requirements for VASPs

Non-Custodial Wallets and the EU Travel Rule

CySEC Circular: EBA public consultation on Travel Rule ...

Travel Rule Compliance What You Must Do - Govern

Cyprus Securities and Exchange Commission (CySEC) – supervises CASPs; website: <https://www.cysec.gov.cy>

Capital Markets Authority (CMA) – overall financial market regulator; website: <https://govern.cy>

Primary Law: EU Regulation 2023/1113 (Revised Transfer of Funds Regulation, “Travel Rule”). Official gazette entry: <https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A52023PC1113>. Effective 30 Dec 2024.

International Standing: Cyprus is a member state of the Financial Action Task Force (FATF) and complies with its recommendations, including the Travel Rule.

Who Needs a License? CASPs offering crypto‑asset services must be registered under CySEC’s “Crypto Asset Service Provider” (CASP) category. Application process involves:

Submitting the “Application for Registration of a Crypto Asset Service Provider” form.

Providing financial statements, internal AML/KYC policies, and risk‑management procedures.

Meeting minimum capital requirements – €500,000 (EUR) or equivalent USD (~$540,000 at 1 EUR = $1.08).

Activities Requiring Licensing: Custody of crypto assets, issuance/trading of tokens, exchange services, wallet provision (including non‑custodial), and any service facilitating cross‑border crypto transfers subject to the Travel Rule.

Application Timeline: Typically 30–60 days post submission; ongoing monitoring required.

Structural Requirements: Entity must be a legal entity registered in Cyprus or have a local representative office, with designated AML officer(s).

Customer Due Diligence (CDD): Identity verification (ID card/passport), proof of address, risk assessment based on source‑of‑funds.

Enhanced Due Diligence (EDD): For high‑risk customers or transactions > €1,000 involving non‑custodial wallets—requires additional documentation such as beneficial ownership information and transactional history review.

Strikes Reporting (STR): Mandatory reporting of suspicious transactions to CySEC within 5 business days.

Record Retention: KYC documents retained for at least five years; transaction logs retained indefinitely with anonymized data after risk assessment.

Capital Gains: Profits from crypto asset sales are taxed at a flat rate of 15 % on worldwide gains, per Cyprus Income Tax Law.

Income Tax: Short‑term gains (held <12 months) taxed as ordinary income; long‑term gains taxed at 15 %.

VAT: Crypto services are generally exempt from VAT under Directive 2015/849/EU, provided the service is deemed a “financial service.”

Implementation Lag: No specific licenses for Travel Rule yet; firms must self‑certify compliance, creating ambiguity.

Non‑Custodial Wallet Integration: Difficulty in verifying wallet owners; risk of structuring and anonymity abuse.

Regulatory Consistency: Potential divergence between CySEC guidance and forthcoming MiCA (Markets in Crypto‑Assets) framework under the EU.

Technology Integration: Need for robust blockchain analytics tools to automate sender/beneficiary data transmission across disparate platforms.

Govern’s Travel Rule Compliance Guide: <https://govern.cy/2025/12/30/travel-rule-compliance-what-you-must-do/>

Harneys’ Cookie & Consent Overview (illustrative of operational practices): <https://www.harneys.com/our-blogs/regulatory/cysec-circular-eba-public-consultation-on-travel-rule-guidelines/>

PL Law’s Analysis on Non‑Custodial Wallets and EU Travel Rule: <https://www.pllaw.com.cy/2025/09/19/non-custodial-wallets-and-the-eu-travel-rule-what-crypto-firms-must-know-under-cysec-guidance/>

Cyprus legalizes cryptocurrencies under the supervision of CySEC and CMA, requiring CASPs to comply with EU Travel Rule obligations. Govern

The Travel Rule mandates transmission of sender’s name, account number, recipient’s name, account number, amount, date, and any additional legal information for all crypto transfers ≥ €1,000. Govern

Non‑compliance can lead to hefty fines and reputational damage per CySEC enforcement authority guidance. Govern

Financial institutions must implement blockchain analytics for non‑custodial wallet interactions under CySEC Circular 27 Dec 2024. Harneys

EU Regulation 2023/1113 applies to all crypto‑asset transfers ≥ €1,000 and extends obligations to interactions with non‑custodial wallets. PL Law

CySEC requires CASPs to collect originator/beneficiary full name, wallet address, and additional identifiers for non‑custodial transfers. PL Law

The capital requirement for CASP licensing is €500,000 (≈$540,000) as stipulated by CySEC. Govern

Cyprus taxes crypto gains at 15 % for long‑term holdings under Income Tax Law. PL Law