FATF Releases Seventh Targeted Update

The Financial Action Task Force (FATF) has released its Seventh Targeted Update on the implementation of AML/CFT standards for Virtual Assets and Virtual Asset Service Providers (VASPs). The global report highlights a dichotomy in the digital asset landscape: while global adoption and technical compliance with the crypto Travel Rule are reaching new highs, criminal networks are adapting with alarming sophistication - exploiting regulatory gaps, offshore jurisdictions, and artificial intelligence to move illicit funds.

The new update demonstrates that global regulators are making steady progress in establishing the benchmark rules for virtual asset markets. Among the key findings regarding compliance and legislative adoption are:

• A Surge in Travel Rule Legislation: According to the report, 83% of surveyed jurisdictions have now passed legislation implementing the crypto Travel Rule - a jump up from 73% in 2025 - with another 11 jurisdictions reporting that implementation is currently underway.
• Increased Risk Assessments: More countries are actively evaluating their domestic exposure to crypto-related crime, with 86% of respondents reporting they have conducted a formal Virtual Asset/VASP risk assessment (up from 76% last year).
• Improving Technical Compliance: The share of jurisdictions rated ‘largely compliant’ with FATF Recommendation 15 (which governs crypto AML/CFT measures) rose from 29% in 2025 to 34%, signaling that international standards are steadily progressing across major financial markets.

Despite the rise in legislative frameworks, the FATF stressed that having laws on paper is no longer enough. Many jurisdictions still struggle to translate legal definitions into active supervision and real-world enforcement, leaving critical vulnerabilities in the global financial network:

• An Enforcement Deficit: While 91 jurisdictions have enforceable Travel Rule legislation in place, roughly 60% have yet to issue a single finding, supervisory directive, or enforcement action against non-compliant entities. This creates an uneven playing field where compliant VASPs bear the operational costs of compliance while unmonitored counterparties operate without scrutiny.
• Offshore Blind Spots: Regulators continue to face major hurdles in identifying and supervising offshore VASPs (oVASPs). Operators without a meaningful physical presence often provide services across borders, acting as safe harbors for illicit flows before funds are moved to unhosted wallets.
• AI-Enabled Crime and Synthetic Identities: The report highlights a dangerous rise in the use of artificial intelligence to facilitate crypto fraud and money laundering. Criminals are deploying sophisticated deepfakes, synthetic identities, and AI-driven scams to bypass basic screening measures.
• Stablecoin Misuse: The FATF noted that most identified on-chain illicit activity now involves stablecoins. In response to regulatory crackdowns, organized crime groups and state-sponsored cyber actors are even attempting to develop proprietary stablecoins explicitly designed to resist asset freezing and seizure.

The findings in the FATF’s latest update highlight a critical reality for crypto businesses: as criminal tactics evolve - particularly through the use of synthetic identities and deepfakes - legacy onboarding systems are a massive weak point vulnerable to exploitation.

It is no longer sufficient for an exchange or wallet provider to simply collect static user data or rely on basic document uploads. To protect against AI-enhanced fraud and stay ahead of the looming supervisory crackdown on Travel Rule compliance, VASPs must implement continuous, robust identity verification. Ensuring that natural and legal persons are thoroughly vetted at the point of onboarding is the most effective barrier against illicit offshore flows, sanctioned entities, and organized crime networks attempting to exploit Web3 infrastructure.

With global supervisory bodies needing robust proof of compliance rather than just technical alignment with regulatory standards, navigating cross-border verification can be challenging for VASPs. Blockpass provides a secure, user-centric, decentralized identity verification system that allows businesses to meet FATF Recommendations without sacrificing operational speed or user privacy.

Blockpass’ solutions are designed to facilitate fast, automated Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) to ensure platforms remain compliant with global KYC and AML requirements, including the Travel Rule mandate. AML screening, PEP and Sanctions list checks, adverse media monitoring, and advanced face match with 3D liveness detection measures all contribute to counter fraudsters and the rising threat of deepfakes and synthetic identities. Any businesses can deploy Blockpass in minutes, streamlining both KYC and KYB onboarding while ensuring bad actors are kept out of the ecosystem from day one.

As the threats to both traditional and crypto-based businesses continue to develop, Blockpass is ready to protect the good actors, ensuring not just compliance with the latest regulations, but with the standards required to keep the space legitimate and secure.