FATF Recommendation 16: every control, and what you already have

53 controls 81 frameworks share controls with it Global (FATF members and FSRB members; transposed by national law) verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)	2	measure it →
ISO/IEC 29147:2018	2	measure it →
Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018)	2	measure it →
Pakistan Personal Data Protection Bill 2023	2	measure it →
UAE Virtual Asset Regulatory Authority (VARA) Regulations	2	measure it →
US Automated Commercial Environment (ACE)	1	measure it →
21 CFR Part 211	1	measure it →
21 CFR Part 58	1	measure it →
Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)	1	measure it →
AML/CTF Act 2006 (Australia)	1	measure it →
Annex 11 to EU GMP	1	measure it →
API 1164	1	measure it →

Every control

Code	Control	Also in
`R.16-VATR.Beneficiary`	Beneficiary information requirements	0
`R.16-VATR.CVDD`	Counterparty VASP Due Diligence (CVDD)	0
`R.16-VATR.CrossBorder`	Cross-border transfer controls + intermediary VASP handling	0
`R.16-VATR.DataQuality`	Data accuracy, validation and quality assurance	0
`R.16-VATR.Governance`	Governance, training and independent testing	0
`R.16-VATR.IVMS101`	InterVASP Messaging Standard (IVMS101) and Travel Rule technical infrastructure	0
`R.16-VATR.Originator`	Originator information requirements	0
`R.16-VATR.Record`	Record retention for Travel Rule data (FATF R.11 + R.16)	0
`R.16-VATR.Sanctions`	Sanctions screening of Travel Rule data	0
`R.16-VATR.Scope`	Scope and applicability of Travel Rule to VASPs (R.16 + Interpretive Note to R.15/R.16)	6
`R.16-VATR.Status`	FATF R.16 Virtual Asset Travel Rule - corpus status, 2024 update + implementation pipeline	0
`R.16-VATR.SunriseSproblem`	Sunrise Problem - cross-jurisdictional implementation gaps	0
`R.16-VATR.Unhosted`	Unhosted (self-hosted / non-custodial) wallet transfers - 2024 Targeted Update	81
`B`	Beneficiary financial institution and MVTS providers (INR.16 paragraphs 28 to 32)	0
`I`	Information requirements for cross-border and domestic payments (INR.16 paragraphs 4 to 12)	0
`INR15.7b-BEN`	INR15.7b-BEN Beneficiary VASP: obtain and hold information and apply the other R.16 duties	0
`INR15.7b-ORIG`	INR15.7b-ORIG Originating VASP: obtain, hold and submit originator and beneficiary information	0
`INR16.10`	INR16.10 Domestic transfers below the de minimis threshold	0
`INR16.11`	INR16.11 Domestic transfers above the threshold: full information or availability by other means	0
`INR16.12`	INR16.12 Originator information within three business days; immediate production for law enforcement	0
`INR16.13`	INR16.13 No information required for institution-to-institution transfers	0
`INR16.14`	INR16.14 Net settlements and their underlying transactions	0
`INR16.15`	INR16.15 Batch transfers from a single originator	0
`INR16.16`	INR16.16 Card payments for goods and services	0
`INR16.17`	INR16.17 Card used for other transfers	0
`INR16.18`	INR16.18 Domestic cash withdrawals	0
`INR16.19`	INR16.19 Cross-border cash withdrawals	0
`INR16.20`	INR16.20 Ordering institution: required and accurate originator information above the threshold	0
`INR16.21`	INR16.21 Ordering institution: names and account or reference numbers below the threshold	0
`INR16.22`	INR16.22 Ordering institution: retention of originator and beneficiary information	0
`INR16.23`	INR16.23 Ordering institution: no execution of non-compliant transfers	0
`INR16.24`	INR16.24 Intermediary institution: information retained with the transfer	0
`INR16.25`	INR16.25 Intermediary institution: five-year record where technical limits prevent pass-through	0
`INR16.26`	INR16.26 Intermediary institution: reasonable measures to identify missing information	0
`INR16.27`	INR16.27 Intermediary institution: risk-based policies on execution, rejection or suspension	0
`INR16.28`	INR16.28 Beneficiary institution: reasonable measures to identify missing information	0
`INR16.29`	INR16.29 Beneficiary institution: verification of beneficiary identity above the threshold	0
`INR16.30`	INR16.30 Beneficiary institution: detecting misdirected payments through alignment checks	0
`INR16.31`	INR16.31 Beneficiary institution: risk-based policies on execution, rejection or suspension	0
`INR16.32`	INR16.32 Money or value transfer service providers	0
`INR16.4`	INR16.4 Structured information sufficient to identify originator and beneficiary	0
`INR16.7`	INR16.7 Servicing institutions and their countries identifiable; no disguised account numbers	0
`INR16.8`	INR16.8 Cross-border transfers below the de minimis threshold	0
`INR16.9`	INR16.9 Cross-border transfers above the threshold: the full information set	0
`M`	Intermediary financial institution (INR.16 paragraphs 24 to 27)	0
`O`	Ordering financial institution (INR.16 paragraphs 20 to 23)	0
`R16`	Recommendation 16 and its 2025 revision: objective, scope and status	0
`R16-GLOSS`	Glossary of terms used in Recommendation 16	0
`R16-MON`	R16-MON Monitoring for transfers lacking required information	0
`R16-TFS`	R16-TFS Freezing action and prohibited transactions with designated persons in the payment chain	0
`S`	Screening, freezing and monitoring under Recommendation 16	0
`V`	Virtual asset transfers (INR.15 paragraph 7(b))	0
`X`	Exceptions and differentiated requirements (INR.16 paragraphs 13 to 19)	0

Tell me when FATF Recommendation 16 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for FATF Recommendation 16, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition