The Travel Rule Rewritten: Recommendation 16 and the Pakistani Payment Chain

On 24th June 2026 the Financial Action Task Force opened a public consultation at Paris on draft Guidance to the revised “Recommendation 16”, the payment transparency standard the market calls the “travel rule”, and comments close on Friday 21st August 2026. These chambers filed on 7th August 2026, answering questions 5, 6, 10, 12 and 13 of the Explanatory Memorandum with an evidence annex on Pakistan. The reasoning is set out here because ninety pages of technical drafting circulating in Paris will decide, rather more directly than most of what passes for financial regulation, whether a bank at Karachi keeps its correspondent relationships and whether a labourer at Dammam sends his money through a bank or through a broker.

What was rewritten

The FATF adopted the amendments to “Recommendation 16” and to its Interpretive Note on 25th June 2025, and every country is expected to be implementing the revised text by the end of 2030. “Wire transfer” gives way to “payment or value transfer” on the principle “same activity, same risk, same rules”; information requirements are strengthened, so that above the “de minimis threshold” the ordering institution must verify originator name, account number, address and date of birth; “alignment checks” are introduced as a transaction-level control against payment to an unintended beneficiary; and “cross-border cash withdrawals” acquire a targeted regime confined to the card number and the cardholder’s name on request. The “de minimis threshold” may be set at no higher than USD or EUR 1,000, and that single number is where Pakistan’s difficulty begins.

Pakistan sits above the Standard, and cannot easily come down

Regulation 11 of the Anti-Money Laundering, Combating the Financing of Terrorism and Countering Proliferation Financing (AML/CFT/CPF) Regulations for the State Bank of Pakistan’s Regulated Entities, consolidated as updated to 28th November 2022 under BPRD Circular Letter No. 33 of 2022, applies the wire transfer obligations “whether domestic or cross-border wire transfer” and states no de minimis threshold of any kind; and what must accompany the transfer includes not merely the originator’s name and account number but the “originator’s applicable identity document number” and, more strikingly, the “beneficiary’s applicable identity document number”.

An identity document number of the beneficiary, on every transfer of every amount, is nowhere required by “Recommendation 16”, which asks of the beneficiary only a name, an account number and the country and town name. On a transfer out of Pakistan the beneficiary is ordinarily a foreign national holding no Pakistani identity document, and no lawful means exists by which a Pakistani remitter or his bank can obtain a foreign recipient’s national identity number; hence the requirement is not merely above the Standard but, in a large class of transactions, incapable of being satisfied at all. A rule which cannot be complied with is not a control, since it is not enforced as written; it becomes a discretion exercised at the counter, which is what a risk-based regime was built to replace.

Section 5.7 of the draft Guidance records that the permission to require full originator information below the threshold was deleted in order to avoid encouraging overcompliance, and Chapter 5 offers the “de minimis threshold” as a route to financial inclusion. That relief is unavailable to the countries which need it most, because a rule adopted under the pressure of increased monitoring is a ratchet, and these requirements were tightened in the years this country sat on the list of jurisdictions under increased monitoring, from June 2018 until 21st October 2022. Hence the question is not whether a threshold would serve financial inclusion, which is obvious, but whether removing an above-standard requirement will be read at the next mutual evaluation as a weakening of the framework; and for the reasons best known to anyone who has sat through an evaluation, the safe answer is to change nothing.

The arithmetic of a Pakistani name

Paragraph 30 of the Interpretive Note gives three avenues for the “alignment check”, of which at least one must be performed: a per-transaction comparison of the beneficiary name and account number against what the institution holds; ongoing monitoring on a risk basis; or reliance on a pre-validation mechanism such as confirmation of payee. Pakistan has an instant payment system but no confirmation of payee mechanism in general use, therefore the third avenue is shut.

Section 10.3 is careful and correct: transliterations from non-Latin scripts, variations in name order, omission of middle names and the absence of accents are legitimate variations which should not normally be treated as misalignment. Section 10.6 then undoes a good deal of that care, providing that repeated misalignment involving the same ordering institution or payment corridor may indicate broader weaknesses, and encouraging follow-up including reporting to competent authorities.

The difficulty is arithmetical rather than legal. A Pakistani name rendered into Latin script from Urdu varies at almost every position: the honorific and patronymic elements, Syed, Shah, Chaudhry, Malik and Mian among them, may be carried or dropped; “Muhammad” is rendered as Muhammad, Mohammad, Mohammed or Mohd, and is frequently the first element of a name by which the person is never called; a father’s name may or may not be carried as a second element; and there is no settled convention as to which element is the surname. Every one of those sits on the Section 10.3 list of legitimate variations, and every one occurs at a far higher rate on a Pakistan corridor than between two Latin-script jurisdictions with stable surnames. Hence a corridor-level measure of “repeated misalignment” will register Pakistan as anomalous for reasons that are entirely linguistic.

What follows in a bank applying Section 10.6 conscientiously is a file recording repeated misalignment against a named Pakistani ordering institution, then engagement, then restriction or termination of the relationship; which is the sequence that cost this country its correspondent banking during the listing years, and it needs serious reconsideration before the Guidance is finalised. The domestic rulebook has already built the trigger, since Regulation 11(7) provides that regulated entities “shall limit or prohibit relationships or transactions with institutions that do not comply with the standard requirements for wire transfers”, where its predecessor merely counselled caution. Once alignment checks are among those standard requirements, a foreign counterparty will read that Regulation as authority for the mirror image.

The FATF has made this correction before, revising Recommendation 8 at its Plenary of 25th to 27th October 2023 because countries had imposed disproportionate measures on the not-for-profit sector at large when only a narrow sub-set was ever within the intended scope. The same correction can be made here in advance, at the price of one paragraph.

What is at stake in the corridor

Pakistan received workers’ remittances of 41.6 billion US Dollars in the financial year 2025-26, a record and a rise of 8.6 per cent on the 38.3 billion US Dollars of the financial year 2024-25. Saudi Arabia sent 9.783 billion, the United Arab Emirates 8.807 billion, the United Kingdom 6.326 billion and the European Union states 5.227 billion. Those four are exactly the “key payment corridors” in which the draft Guidance asks jurisdictions to align their thresholds with their counterparts, and the alignment is not at present a matter anybody at Islamabad has been asked to decide.

Section 10.5.2 permits a short delay in crediting where post-validation cannot be completed before funds are made available, and Box 22 names post-validation as the operational baseline for lower-capacity jurisdictions; read together, the two mean that the jurisdictions with the least capacity are the ones most likely to be delaying credit. The alternative channel is not another bank. It is “Hawala and Hundi”, which the draft Guidance recognises at Section 4.5 and which the Financial Monitoring Unit’s quarterly report for October to December 2022 recorded as the source of 80 financial intelligence disseminations, second only to tax crimes at 99. A remitter whose family waits a day for money the informal channel delivers in an hour does not lodge a complaint. He changes channel, and the transaction leaves the sight of the State altogether.

A chapter written for a statute book Pakistan does not have

Chapter 9 is drafted throughout on the assumption that a general data protection framework exists, and it instructs acquirers to comply with local data protection and privacy laws. Pakistan has no enacted general personal data protection statute: drafts have been prepared by the Ministry of Information Technology and Telecommunication since 2018, the most recent approved by the Federal Cabinet and still awaiting Parliament, and the operative instrument meanwhile is the Prevention of Electronic Crimes Act, 2016 (Act XL of 2016) as amended in January 2025, a criminal statute and not a data processing code. Article 14 of the Constitution of the Islamic Republic of Pakistan, 1973 is in field, but it is a right against the State enforced by petition rather than a controller and processor regime. Hence that instruction has no domestic referent, while Chapter 7 nonetheless requires the cardholder’s name to cross the border on request within three business days; and a foreign issuer asked to send cardholder names into such a jurisdiction has every reason to decline, which is a de-risking mechanism operating before any question of money laundering arises.

What is urgently required

The State Bank need not wait for the Guidance to be finalised before acting on its own rulebook. It is urgently required that Regulation 11 state a “de minimis threshold” consistent with the revised Standard, that the requirement of a “beneficiary’s applicable identity document number” be deleted as unperformable on outbound cross-border transfers, and that Regulation 11(7) be read down expressly, so that a counterparty’s non-participation in a pre-validation mechanism is not treated as non-compliance. It is highly recommended, further, that the State Bank set by instrument the data handling baseline which Chapter 9 assumes a legislature has supplied: purpose limitation, a defined retention period, a prohibition on onward disclosure other than to a competent authority, segregation of the cardholder name from the card number, and a record of every request and disclosure available to the supervisor. Each of those sits within existing prudential powers and none of them waits on Parliament.

The end of 2030 is four years and some months away, which in the life of a statutory instrument is not long. The last time this country implemented an international financial standard under pressure it implemented it at its most expansive, and the bill was paid in correspondent banking relationships that have not all come back. Very unfortunately, that same instinct is the one now available; hence the case for taking the relief on offer has to be made before the Guidance is finalised, and not after the next evaluation has been survived.