The Financial Action Task Force published its Seventh Targeted Update on Virtual Assets and Virtual Asset Service Providers on July 16, 2026. Eighty-three percent of jurisdictions have now enacted Travel Rule legislation, up from 73% in 2025. That sounds like progress. The problem is that passing a law and actually enforcing it are two very different things.
The Travel Rule is winning on paper, losing in practice
FATF’s update points directly at the problem of jurisdictions still struggling to identify who actually controls DeFi protocols. As regulated institutions, including traditional banks and licensed exchanges, increasingly engage with DeFi platforms, the risk that illicit flows contaminate compliant financial infrastructure grows alongside that engagement.
The update specifically flags offshore VASPs, stablecoins, and unhosted wallets as areas requiring more rigorous risk-based supervision. Stablecoins have drawn attention for their role in sanctions evasion and cross-border capital movement at scale.
Bans without enforcement are just loopholes with extra steps
