The Financial Action Task Force says more jurisdictions are introducing cryptocurrency laws, but enforcement remains a faint point.

In its seventh focused update on the implementation of FATF standards on virtual assets and virtual asset service providers, the global watchdog reported that 83% of surveyed jurisdictions have adopted regulations implementing the travel rule. This is an enhance from 73% in 2025.

On paper, this looks like progress.

However, the report also found that only 40% of jurisdictions with travel regulation laws have taken oversight or enforcement action. In other words, more countries have rules, but far fewer actually enforce them in a meaningful way.

This vulnerability is currently the main problem.

TL;DR

• The FATF says 83% of jurisdictions surveyed have adopted travel rules for cryptocurrencies.
• Only 40% of jurisdictions with these laws have taken supervisory or enforcement action.
• The report highlights risks associated with fraud centers, DPRK cyber theft, DeFi, unhosted wallets, and freeze-proof stablecoins.

Regulations spread faster than enforcement

The travel rule is one of the most vital compliance standards in cryptography.

Requires virtual asset service providers to collect and report originator and beneficiary information for eligible transfers. In layman’s terms, regulators want crypto intermediaries to know who is sending and receiving funds, especially when it comes to transfers between regulated platforms.

For years, the industry argued about whether this could work in crypto.

Currently, according to the FATF, most jurisdictions surveyed have at least implemented this principle into law. This is a major change from the early days, when many countries were still deciding whether to regulate VASP at all.

But legislation is only the first step.

The rule applying without supervision does not change much. Exchanges, brokers, custodians and payment companies need guidance, inspections, enforcement risk and technical systems. Regulators need staff and tools. Cross-border cooperation must work.

FATF figures show that implementation remains uneven.

Why the law enforcement gap matters

Crypto compliance has always been about the weakest link.

If one country has strict rules and another enforces nothing, illegal participants may move through the weaker jurisdiction. This creates pressure on the entire system because crypto transactions are, by design, global.

This is particularly vital for fraud, money laundering networks, ransomware rings and state-linked hacking operations.

The FATF report identified fraud centers linked to organized crime, cyber theft in the DPRK, unhosted wallets, DeFi and stablecoins designed to be freeze-resistant as areas of concern.

These categories show how the risk picture is changing.

It’s no longer just about unfair exchanges or obvious obscure market activity. These include immense frauds, sophisticated cyber operations, decentralized services, wallet infrastructure and stablecoin designs that may limit the ability of issuers or intermediaries to freeze funds.

It’s a much more challenging environment for regulators.

DeFi remains the most hard match

DeFi is one of the most awkward parts of the FATF structure.

The travel principle assumes that there is an intermediary that can collect and transmit information. In DeFi, such an intermediary may not exist in the customary sense. The protocol can be astute contracts, frontends, governance participants, developers, validators, relays, or a mix of all of them.

Regulators therefore face a hard question: who is responsible?

If the team controls the frontend, perhaps the frontend will become the enforcement point. If the DAO regulates parameters, perhaps governance participants face pressure. If users interact directly with contracts, enforcement becomes much more hard.

The FATF urges countries not to allow “decentralized” labels to become a loophole. However, turning this principle into practical supervision is not basic.

This is why the enforcement gap is even more vital in DeFi.

Stablecoins under the microscope

Stablecoins also stand out on the report’s risk list.

They are one of the most powerful exploit cases for cryptocurrencies, but also one of the easiest tools for quickly moving value across borders. USDT, USDC, and other stablecoins have become primary settlement assets for traders, businesses, remittances, DeFi users, and sometimes illicit networks.

The FATF’s concern around freeze-resistant stablecoins is noteworthy because of its focus on control.

If a stablecoin issuer can freeze addresses, regulators can pressure issuers to act against illicit funds. If a stablecoin is designed to be freeze-proof or there is no clear point of control for the issuer, this avenue of enforcement becomes weaker.

This raises hard questions about censorship resistance, user protection, and law enforcement access.

Cryptocurrency users often value assets that cannot be easily frozen. Regulators fear the same features could lend a hand criminals.

This tension doesn’t go away.

The next step is supervision

The headline number, 83% legislative adoption, shows that cryptocurrency regulation has become mainstream. A more vital number may be to take enforcement action at the 40% level.

This is where the next stage will take place.

Countries will be judged less by whether they have created rules and more by whether they police companies, punish violations and cooperate across borders. Exchanges and custodians will need stronger travel policy systems. DeFi frontends may come under greater scrutiny. Stablecoin issuers will remain under pressure.

For the industry, the message is clear enough.

The compliance debate has gone beyond whether cryptocurrencies should be regulated. The issue now is whether existing rules are enforced consistently enough to satisfy global standard setters.

It may not be the story traders want to hear, but it is a story that will shape how exchanges, wallets, stablecoins, and DeFi protocols operate in the next market cycle.

This article is based on Seventh FATF focused update on virtual assets and VASPs.

This article was written by the News Desk and edited by Samuel Rae.