EU AML Overhaul Bans Privacy Coins on Exchanges, Wallet-to-Wallet Bitcoin Exempt

The EU has approved a wide-ranging anti-money laundering package that clamps down on anonymity in crypto — but stops short of blanket ID rules for direct Bitcoin transfers between private wallets. Key takeaways - New regulation: Regulation (EU) 2024/1624 takes effect July 10, 2027. - Privacy coins restricted for regulated firms: Exchanges, custodians and other regulated crypto-asset service providers will be banned from offering accounts or services that enable transaction anonymization, including support for anonymity-enhancing cryptocurrencies (e.g., Monero, Zcash). Regulated firms cannot list, custody or facilitate transactions in those assets — though private ownership and use by individuals is not outlawed. - Customer checks and thresholds: Providers must carry out full customer due diligence (KYC) for occasional crypto transactions worth €1,000 (~$1,150) or more. For transactions below €1,000, providers must still identify customers but are not required to apply the full verification standard used for larger or ongoing relationships. - Peer-to-peer Bitcoin transfers unaffected: The regulation targets crypto-asset service providers, not every on-chain transaction. Direct transfers between self-hosted wallets remain outside the mandatory identification obligations. However, existing Travel Rule rules (Regulation (EU) 2023/1113) still require regulated intermediaries to pass sender and recipient data for transfers, and extra checks kick in when transfers involving self-hosted wallets reach €1,000 or more and a regulated intermediary is involved. - Broader AML measures: - A harmonized EU-wide cap of €10,000 (~$11,500) on commercial cash payments is introduced; member states may keep lower national limits if they wish. - For cash payments of €3,000 (~$3,450) or more, traders and other obliged entities must verify customer identity and carry out due diligence. - The €10,000 cap does not apply to bank deposits or payments through regulated payment institutions, which remain subject to existing monitoring and suspicious-activity reporting. - Expanded scope of obliged entities: New sectors — including professional football clubs, football agents, crowdfunding platforms, investment migration businesses, luxury goods dealers and others — will now fall under EU AML compliance and reporting duties. - Stronger ownership transparency: Legal entities must disclose ultimate beneficial owners in national registries, generally at a 25% ownership threshold, reduced to 15% for certain higher-risk structures. Trusts, foundations and non-EU entities involved in EU business or real estate transactions will face disclosure rules; trustees must update ownership data within 28 calendar days. What this means for the crypto market - Regulated platforms will need to delist, stop custodying, or refuse to facilitate privacy-focused coins and any services that materially enhance transaction obfuscation. - Ordinary holders can still own and transfer privacy coins privately, but interacting with regulated intermediaries with those assets will be constrained. - Peer-to-peer Bitcoin users retain a degree of anonymity for wallet-to-wallet transfers, but using exchanges or intermediaries will trigger KYC/Travel Rule obligations once the relevant thresholds are met. The package tightens Europe’s AML regime across cash, corporate transparency and a wider set of industries, while carving a focused path for crypto: reduce anonymity through regulated channels, leave unmediated on-chain transfers outside direct ID requirements, and increase reporting and transparency across the economy.