Compliance Report
Data last reviewed April 2026Regul8 — Compliance Report
May 17, 2026Activities: Cross-border Payment · Onramp / Offramp (fiat ↔ crypto) — Jurisdictions: European Union · USA · Singapore · UAE / Dubai
regul8app.vercel.app · General information only, not legal advice.
Tax treatment
Tax summary per jurisdiction (shared across all activities). General information, not tax advice.
No EU-wide crypto tax — set per Member State. DAC8 (in force Jan 2026) imposes pan-EU CASP reporting of user holdings to tax authorities; OECD CARF aligned.
Property treatment (IRS Notice 2014-21). Short-term (< 1 yr): ordinary income up to 37%. Long-term: 0/15/20%. NFT collectibles: up to 28%. Form 1099-DA mandatory from 2026.
NO capital-gains tax. Trading as business: 17% corporate income tax. GST exempt on payment tokens (since 2020). Personal income only if classified as business income.
NO personal income tax on crypto for individuals. Companies: 9% corporate tax on profits > AED 375K (since June 2023). VAT exempt on crypto transfers (Nov 2024).
Cross-border Payment
XRPL ODL (On-Demand Liquidity) — XRP as bridge currency for cross-border fiat corridors — is the flagship EU use case for institutional cross-border crypto payments. Cross-Chain Bridge (XLS-38d, voting) will extend to EVM Sidechain.
US → LatAm, US → Philippines corridors using XRP ODL are live via MoneyGram (historic), Tranglo, SBI Remit. XRPL settles in ~3 seconds vs SWIFT's 1-3 days.
UAE is a top XRPL cross-border hub. Onafriq–Ripple (2023) partnership routes EU/UK → Africa via UAE-based ODL. Emirates NBD + CBUAE CBDC pilots evaluated XRPL.
Onramp / Offramp (fiat ↔ crypto)
XRPL ODL (On-Demand Liquidity) uses XRP as a bridge currency for fiat-to-fiat corridors. Operators of ODL flows in the EU need CASP + payment-institution authorisations + bank partnerships per corridor.
US onramp for XRP is operational post-2023 SEC settlement (XRP not a security on secondary sales). Uphold, Bitstamp, Kraken provide the licensed rail. XRPL IOUs still ambiguous under federal law.
Singapore treats XRP as a Digital Payment Token under PSA. MAS-licensed gateways (Independent Reserve, Coinhako) offer XRP onramp. XRPL IOUs may require additional classification.
VARA-licensed XRPL onramp feasible — XRP is an approved VA in Dubai. AED stablecoin pilots (by M2, Rain) use XRPL for settlement.
Providers, vendors and partners that can run your compliance stack in the selected jurisdictions. Filtered by activity (custody, payment, AML/KYC) and jurisdictional coverage.
🤝 Payment & on/off-ramp partners for your jurisdictions
You selected an on/off-ramp or cross-border payment activity. Here are providers operating in (or passporting into) your jurisdictions, grouped by type. Travel Rule providers (FATF R.16) surface for both scenarios — VASP-to-VASP compliance messaging applies whenever value moves across borders.
Model: Mainstream fiat on/off-ramp — cards, SEPA, Apple/Google Pay. 160+ currencies, 30M+ users. Used by OpenSea, Bitcoin.com, Trust Wallet.
XRPL angle: XRP supported as an on-ramp asset; widely embedded in XRPL wallet UX.
Model: Embeddable on/off-ramp widget — strong in Europe (UK FCA reg., EU MiCA-ready). 80+ countries, low fees on bank transfer.
XRPL angle: XRP supported. RLUSD on-ramping under exploration with Ripple ecosystem.
Model: Global on/off-ramp SDK for dApps and wallets. 160+ countries, 75+ payment methods, 170+ tokens.
XRPL angle: XRP and selected XRPL-native tokens supported in the widget.
Model: Hosted fiat → USDC onramp. Acquired Bridge ($1.1B, Oct 2024) for stablecoin payment APIs. Card → stablecoin in one flow.
XRPL angle: No XRPL-native integration today; stablecoin pipes (USDC, USDB) are EVM-anchored. Worth watching post-Bridge.
Model: Cross-border settlement rail using XRP as a bridge asset (On-Demand Liquidity). 70+ payout markets, Ripple-licensed in NY, US states, Singapore, Ireland.
XRPL angle: Native XRPL rail — flagship use case. RLUSD launching as the stablecoin leg.
Model: Stablecoin orchestration API — instant USDC/USDB swaps + orchestration across chains. Acquired by Stripe Oct 2024. Powering merchant payouts in LatAm + Africa.
XRPL angle: EVM/Solana/Tron-anchored today; XRPL not natively wired but interop possible via stablecoin liquidity.
Model: WhatsApp-native US → LatAm remittances on stablecoin rails. Mexico, Guatemala, Colombia. Instant USDC payouts.
XRPL angle: Stablecoin-rail provider, Solana/EVM today. Could route via XRPL/RLUSD for LatAm corridors.
Model: B2B cross-border stablecoin payments — focus on LatAm + Africa SMEs. USDC settlement, FX corridors with local payout.
XRPL angle: Stablecoin-rail orchestration, EVM-anchored today. Cross-corridor flows could complement XRPL ODL on under-served pairs.
Model: B2B cross-border collections + payouts + escrow specialist. Singapore MAS Major Payments Institution licence (CMS100975), 200+ payment methods, 70+ payout corridors. RippleNet partner since 2023 for APAC ↔ US/EU corridors.
XRPL angle: RippleNet partner — XRP-bridge settlement available on supported APAC corridors. B2B-only (marketplaces, exporters, agencies); not a retail on-ramp.
Model: Leading Travel Rule messaging network for VASPs (FATF R.16). Pre-transaction sanctions screening + counterparty verification. 1 200+ VASPs.
XRPL angle: Chain-agnostic — works for XRPL VASPs that need MiCA / Travel Rule compliance from day one.
Model: Travel Rule + KYC + AML monitoring under one roof. Strong in EU + emerging markets, MiCA-aligned. ~5 000 clients.
XRPL angle: Chain-agnostic. Used by XRPL VASPs needing onboarding KYC + Travel Rule in a single SDK.
Public information — not a recommendation. Verify current local licences and XRPL/RLUSD support with each provider before integration.
🛡️ AML / KYC vendors for your jurisdictions
A regulated activity typically needs KYC at onboarding, sanctions / PEP screening, transaction monitoring, and Travel Rule messaging. Here are the established providers that operate in (or passport into) your jurisdictions, grouped by function. Sumsub covers identity + Travel Rule in a single SDK; Chainalysis / Elliptic / TRM have native XRPL coverage.
Model: KYC + KYB + AML monitoring + Travel Rule under one roof. Strong in EU + emerging markets, MiCA-aligned. ~5,000 clients including major crypto exchanges.
Crypto coverage: Chain-agnostic. Used by XRPL VASPs needing onboarding KYC + Travel Rule + monitoring in a single SDK.
Model: IDV + biometric verification + ongoing monitoring. Acquired by Entrust (2024). Strong in UK / EU / US fintech and crypto markets — Coinbase Europe, Revolut historic clients.
Model: AI-powered IDV — document verification + biometric liveness + ongoing monitoring. Used by major exchanges (Bitstamp, Bitpanda, Bitso) and banks. SOC2 + ISO 27001.
Model: No-code IDV platform with high configurability. Used by US-first fintech / crypto firms — Block (Cash App), Brex, Robinhood. Strong KYB + business-verification module.
Model: IDV across 230+ countries, 11K+ document types. Estonian-base + EU MiCA-aligned. Used by Bolt, Wise, Kraken, Bitstamp.
Model: GlobalGateway — KYC + KYB across 195 countries via 450+ data sources. Strong in B2B verification (UBO, business registry checks). Canadian-base, served by major banks + crypto firms.
Model: AI-powered sanctions / PEP / adverse-media screening + ongoing monitoring. Strong in fintech and crypto — Coinbase, Gemini, BitGo, Klarna among clients. Real-time data updates.
Model: Refinitiv's World-Check (now part of LSEG) — the gold-standard sanctions / PEP / heightened-risk database. Curated by 400+ analysts; used by Tier-1 banks worldwide.
Model: Bridger Insight XG sanctions screening + Accuity payment screening. Strong in regulated banking + crypto on-ramp. US-base with global reach.
Model: Industry-standard crypto transaction monitoring + investigations + sanctions screening. Used by US Treasury / IRS / FBI + most regulated exchanges. Reactor (investigations) + KYT (Know Your Transaction) products.
Crypto coverage: Native XRPL coverage — XRPL transactions + IOU flows + AMM tracked. Reactor supports XRPL investigations. RLUSD coverage from launch.
Model: Crypto-native AML platform — Holistic (cross-chain monitoring) + Lens (entity intelligence). UK-base, MiCA-aligned. Strong in EU + UK regulated markets. Coinbase, Revolut, Binance among clients.
Crypto coverage: XRPL covered. Cross-chain heuristics for stablecoin tracing (USDC, USDT, RLUSD).
Model: Real-time blockchain intelligence + sanctions screening + investigations. Used by US Secret Service, FBI, OFAC + major crypto exchanges. Strong in compliance automation for institutional flows.
Crypto coverage: XRPL native coverage. RLUSD tracking from issuance.
Model: Leading Travel Rule messaging network for VASPs (FATF R.16). Pre-transaction sanctions screening + counterparty verification. 1,200+ VASPs onboarded. Founded by post-FATF Travel Rule architects.
Crypto coverage: Chain-agnostic — works for XRPL VASPs that need MiCA / Travel Rule compliance from day one.
Public information — not a recommendation. Verify current certifications (SOC2, ISO 27001) and jurisdictional coverage with each vendor before integration.
🏛️ Official portals by jurisdiction
Regulators, public registers and law texts to verify directly at the source. Opens in a new tab.
- RegulatorESMA — MiCA portal ↗
- Public registerESMA — Public CASP register ↗
- Law textEUR-Lex — MiCA Regulation 2023/1114 ↗
- Public registerFinCEN — MSB registration lookup ↗
- Public registerNMLS — State MTL register ↗
- RegulatorNYDFS — Virtual currency businesses (BitLicense) ↗
- Public registerOCC — Trust bank charters ↗
- GuidanceSEC — Crypto Assets ↗
- TaxIRS — Digital assets tax guidance ↗
- Law textMAS — Payment Services Act ↗
- Public registerMAS — Financial institutions directory ↗
- RegulatorVARA — Dubai Virtual Asset Regulatory Authority ↗
- Public registerVARA — Public licensee register ↗
- RegulatorADGM FSRA — Virtual asset framework ↗
📚 Official sources
Links to the laws and official guidance referenced in this report.
- ↪MiCA — Regulation (EU) 2023/1114· European Parliament
- ↪MiCA Articles 59-75 (CASP)· ESMA / National NCAs
- ↪Payment Services Directive (EU) 2015/2366· European Commission
- ↪FinCEN — MSB registration (31 CFR 1022)· FinCEN (US Treasury)
- ↪FinCEN MSB Registration· FinCEN
- ↪Bank Secrecy Act — 31 USC 5311· FinCEN
- ↪
- ↪OFAC Sanctions Compliance for Virtual Currency· OFAC (US Treasury)
- ↪
- ↪VARA Virtual Assets Regulations· VARA (Dubai)
- ↪MAS Payment Services Act (PSA)· Monetary Authority of Singapore
- ↪SFC VASP / VATP Licensing Regime· SFC (Hong Kong)
- ↪FCA Cryptoasset Registration Guide· FCA (UK)
- ↪
AI Compliance Audit
Personalised roadmap, risk analysis and recommendations — auto-generated