FATF Recommendation 15 — Virtual Assets and VASPs

Sets international AML/CFT standards for countries regulating virtual assets and virtual asset service providers.

12

Rules extracted

179

Obligations decomposed

14.9x

Avg obligations per rule

🌐 International

Jurisdiction

About this regulation

FATF Recommendation 15 (R.15) and its Interpretive Note (INR.15) establish the international AML/CFT standards for virtual assets (VA) and virtual asset service providers (VASPs). Adopted in June 2019 with updated guidance in October 2021, R.15 requires jurisdictions to apply a risk-based approach to VASPs, implement licensing/registration regimes, mandate CDD for VA transfers, enforce the Travel Rule for originator/beneficiary information on transfers exceeding USD/EUR 1,000, maintain recordkeeping and STR obligations, screen for sanctions, monitor peer-to-peer transfers, and address emerging risks from DeFi, stablecoins, and NFTs. The standards apply to all 39 FATF member jurisdictions and over 200 jurisdictions that have committed to implementing FATF recommendations.

What AuditDSS covers

Source

1

Regulation

Extracted

12

Rules

Decomposed

179

Obligations

14.9x

Decomposition ratio

Each rule is decomposed into an average of 14.9 atomic obligations — the smallest testable units that can be independently violated.

Fully extracted & scored

All 179 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.

Risk scoring

Every obligation in FATF R.15 is scored across independent risk dimensions:

W

Obligation Weight

How critical within the regulatory framework

L

Violation Likelihood

How often breached in practice

E

Enforcement Evidence

Regulator enforcement history and penalties

C

Cascade Dependency

How many obligations depend on this one

Regulatory details

Full title
FATF Recommendation 15 — Virtual Assets and VASPs
Regulatory body
Financial Action Task Force
Jurisdiction
🌐 International
Document type
recommendation
Effective date
June 21, 2019
Issuing authority
Financial Action Task Force (FATF)
Official source
View source document ↗

Who this applies to

VASPsfinancial institutionsjurisdictionscompetent authoritiesFIUsDeFi protocol operatorsstablecoin issuersNFT platforms

Key requirements

  • VA and VASP definitions
  • risk-based approach
  • VASP licensing/registration
  • CDD for VA transfers
  • Travel Rule (USD/EUR 1,000 threshold)
  • recordkeeping (5 years)
  • STR obligations
  • sanctions screening
  • P2P transfer monitoring
  • DeFi/stablecoin guidance
  • NFT guidance
  • international cooperation

Frequently asked questions about FATF R.15

What is FATF R.15?

FATF Recommendation 15 (R.15) and its Interpretive Note (INR.15) establish the international AML/CFT standards for virtual assets (VA) and virtual asset service providers (VASPs). Adopted in June 2019 with updated guidance in October 2021, R.15 requires jurisdictions to apply a risk-based approach to VASPs, implement licensing/registration regimes, mandate CDD for VA transfers, enforce the Travel Rule for originator/beneficiary information on transfers exceeding USD/EUR 1,000, maintain recordkeeping and STR obligations, screen for sanctions, monitor peer-to-peer transfers, and address emerging risks from DeFi, stablecoins, and NFTs. The standards apply to all 39 FATF member jurisdictions and over 200 jurisdictions that have committed to implementing FATF recommendations.

Who does FATF R.15 apply to?

FATF R.15 applies to VASPs, financial institutions, jurisdictions, competent authorities, FIUs, DeFi protocol operators, stablecoin issuers, NFT platforms.

How many obligations does FATF R.15 contain?

AuditDSS has decomposed FATF R.15 into 179 atomic obligations from 12 rules. Each obligation is independently testable and risk-scored.

What are the key requirements of FATF R.15?

The key requirements include: VA and VASP definitions, risk-based approach, VASP licensing/registration, CDD for VA transfers, Travel Rule (USD/EUR 1,000 threshold), recordkeeping (5 years), STR obligations, sanctions screening, P2P transfer monitoring, DeFi/stablecoin guidance, NFT guidance, international cooperation.

How can I assess my FATF R.15 compliance?

Upload your compliance policy to AuditDSS. The platform maps your document against all 179 FATF R.15 obligations using deterministic AI scoring — not checklists or LLM summaries. You get a risk-scored gap analysis showing exactly which obligations are covered, partially covered, or missing.

Which jurisdiction enforces FATF R.15?

FATF R.15 is enforced in International by Financial Action Task Force.

When did FATF R.15 come into effect?

FATF R.15 became effective on June 21, 2019.

What industry does FATF R.15 apply to?

FATF R.15 is primarily relevant to the AML & Counter-Terrorism Financing industry. AuditDSS covers 64 regulations in this industry sector.

Build a FATF R.15 compliance pack

Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for FATF R.15 — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.

Policy

High-level commitments and governance framework covering FATF R.15 requirements.

Procedures

Step-by-step operational procedures to implement each policy commitment.

Forms & checklists

Ready-to-use forms, registers, and checklists for day-to-day compliance operations.

Multi-regulation

Combine FATF R.15 with other regulations into a single unified compliance pack for your business.

Already have a policy? Assess it against FATF R.15

1

Upload your document

Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.

2

AI maps against 179 obligations

Your document is scored against every obligation in FATF R.15. Each claim is mapped to the obligation tree and evaluated for coverage.

3

Risk-scored gap report

Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.

Related regulations in AML & Counter-Terrorism Financing

Assess your FATF R.15 compliance

Upload your document and get a risk-scored gap analysis against 179 FATF R.15 obligations in under 5 minutes.