BSA Travel Rule: What Moves With a Crypto Withdrawal
The $3,000 threshold, the six fields a transfer carries, and why a US exchange is covered while an unlicensed offshore casino is not a BSA casino.
- logged
- by
- No KYC Casino Dispatch
- topic
- The Travel Rule
- read
- 6 min
- hash
- b421682

The BSA travel rule is a Treasury regulation that makes a sending financial institution pass the sender's identity and the payment details along with any funds transfer of $3,000 or more. For crypto gamblers, it reaches the regulated businesses on either end of a deposit or withdrawal, such as exchanges and US-licensed casinos, rather than the wallet itself. What travels is a short, specific list: name, account number, address, amount, date and the receiving institution.
That list matters more than the label. "No KYC" describes what a casino asks you for at signup. It does not change what an exchange must record when value leaves it, and it does not rewrite the federal definitions that decide who counts as a financial institution in the first place. The wider picture of who owes what sits in our travel rule compliance overview; this dispatch stays with the regulation text and what it means for one withdrawal.
Where does the travel rule BSA text actually live?
It lives in 31 CFR 1010.410, the Bank Secrecy Act's general recordkeeping section. Two paragraphs do the work: one tells nonbank institutions which transfer records to keep, the other tells them what to send onward.
The nonbank recordkeeping rule covers transmittals of $3,000 or more handled by US agents, branches or offices of a nonbank financial institution (as of November 2026). The travel rule paragraph then lists what the transmittor's institution must include in the order it sends to the next institution in the chain.
FinCEN's own funds travel Q&A from 2010 adds one point that is easy to miss: the threshold applies to transmittals of $3,000 or its foreign equivalent regardless of whether currency is involved. The rule follows the transfer, not the cash.
What data moves with a withdrawal?
When a covered institution sends a transmittal, the order carries a fixed set of fields. Read from the regulation text, these are:
| Field | When it is required |
|---|---|
| Transmittor's name | Always |
| Account number | Only if the payment is ordered from an account |
| Transmittor's address | Always |
| Amount | Always |
| Execution date | Always |
| Recipient's financial institution | Always |
The regulation requires the transmittor's name and account number to go with the order, the number only where the payment is ordered from an account. It does not list your browsing history, your betting record or a selfie. The list is narrow, and what it describes is identity plus payment details, carried between institutions.
There are two further details here that most explainers skip.
First, how records are found. Retained records must be retrievable by the transmittor's name, and by account number only where the transmittor is an established customer with an account used for transmittals.
Second, what happens in the middle. FinCEN's Q&A says an intermediary institution passes on the information it receives but has no general duty to retrieve information the sending institution did not provide. Gaps at the origin can persist down the chain. That is a description of the rule's limits, not a workaround: the sending institution still carries the obligation.
For a walk-in customer who is not an established customer, the regulation also requires the institution to verify the identity of the person placing the order and record the type and number of the ID document used.
Who counts as a financial institution here?
The rule binds financial institutions, so the definitions decide everything. Two matter for crypto gambling: money transmitters and casinos.
The general definitions section says money transmission includes accepting value that substitutes for currency and transmitting it to another location or person by any means. FinCEN's 2013 guidance on virtual currencies applies that reading directly. An administrator of a centralized virtual currency repository will be a money transmitter to the extent it allows transfers of value between persons or locations, and the same guidance treats exchangers that transfer value the same way.
The other side of that guidance matters just as much for players. A user who buys goods or services with convertible virtual currency is not an MSB under FinCEN guidance. Spending your own coins does not turn you into a regulated business.
Casinos have their own definition. A casino is a BSA financial institution only if it is licensed or authorized in the US and has gross annual gaming revenue above $1 million. An offshore site with no US license falls outside that definition. If you want the detail on when a casino's own identity checks still kick in, see where casino KYC and AML checks trigger.
How does the BSA travel rule reach a casino withdrawal?
Through whichever regulated institution touches the value. The casino's status and the exchange's status are separate questions, and the answer to one does not settle the other.
Consider the typical flow. A player buys crypto at a US exchange, sends it to a casino, then withdraws back to the exchange to cash out. Under FinCEN's 2013 reading, the exchange is a money transmitter, so the nonbank recordkeeping and travel rule paragraphs reach its transfers at or above the threshold. A US-licensed casino over the revenue line is a financial institution in its own right. An offshore casino is not a BSA casino, which is why many no KYC crypto casino rules differ so sharply from a licensed US venue's.
Two honest limits on this reading:
- The regulation text describes a transmittor's institution and a recipient's institution. Where one end is a wallet you control and not an institution, the pack of sources here does not spell out how the fields are handled, and this dispatch does not guess. The trade-offs of holding your own keys are covered in self custody crypto basics.
- The EU applies its own framework with different fields and thresholds. That comparison sits in our EU travel rule breakdown.
What the rule does not do
It does not require the casino to know your name if the casino is not a BSA institution. It does not give an intermediary a duty to fill in missing data. And it does not cover transfers below the threshold under this paragraph. None of that makes a transfer anonymous. The exchange record still exists, indexed by your name, and other BSA obligations sit outside this one section.
Privacy questions
Does the BSA travel rule apply to crypto?
FinCEN treats crypto exchangers and administrators that transfer value as money transmitters, and the money transmission definition covers value that substitutes for currency. That places those businesses inside the nonbank rule; it says nothing about wallets you control yourself.
What is the threshold for the travel rule?
The rule covers transmittals of $3,000 or more, or the foreign equivalent, as of November 2026. FinCEN says the line applies whether or not cash is involved.
Is an offshore crypto casino covered by the BSA?
Not as a casino. The BSA casino definition requires a US license or authorization and more than $1 million in gross annual gaming revenue. The exchange you fund it from is a separate question, and it stays regulated either way.
What can a bank in the middle of a transfer add?
Nothing it was not given. FinCEN says an intermediary passes on what it receives and has no general duty to go and find data the sending institution left out.
Primary sources
- eCFR via Cornell LII, 31 CFR 1010.410 Records to be made and retained by financial institutions, accessed November 2026
- FinCEN, Funds Travel Regulations: Questions & Answers (FIN-2010-G004), November 2010
- FinCEN, Application of FinCEN's Regulations to Persons Administering, Exchanging, or Using Virtual Currencies (FIN-2013-G001), March 2013
- eCFR via Cornell LII, 31 CFR 1010.100 General definitions, accessed November 2026