Colombia: fintech & payments regulation

Regulated

Colombia fintech & payments: BR oversees payment systems; VASP licensing under AML Law 1676

Lead regulator:
Banco de la República
Key law:
Law 1676 of 2013 (AML/CFT)
Last updated:
2026-07-12

Colombia maintains a regulated environment for fintech and payments, primarily overseen by the Banco de la República (BR) regarding payment system infrastructure and interoperability. The BR actively updates technical standards for immediate low-value payment systems and interbank compensation, as evidenced by recent circulars in 2026. Non-bank payment providers must navigate the BR's operational frameworks for systems like CENIT and SPBVI.

For virtual assets and broader fintech licensing, the regime is governed by Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT) laws, specifically Law 1676 of 2013. Entities dealing in virtual assets are classified as obligated subjects and must register with the Financial Information and Analysis Unit (UIAF). The Central Bank of Colombia (BCC) and the Superintendency of Corporations (SFC) also play roles in supervising financial activities and corporate entities, though specific fintech licensing acts are not detailed in the provided source documents.

Recent regulatory direction emphasizes interoperability, technical standardization, and operational resilience. The BR has issued multiple circulars in early 2026 to refine tariffs, update directory regulations (DICE), and mandate timestamp synchronization for immediate payment systems. This indicates a focus on modernizing payment infrastructure and ensuring seamless integration between traditional banks and new market participants like Movii S.A.

Who regulates

  • Banco de la República

    Primary supervisor of payment systems, issuing currency, and setting technical standards for interoperability and settlement.

    [1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17]
  • Financial Information and Analysis Unit (UIAF)

    Supervises AML/CFT compliance for obligated subjects, including virtual asset service providers.

  • Superintendency of Corporations (SFC)

    Supervises financial intermediation and corporate entities in the financial sector.

Core laws & rules

  • Law 1676 of 2013 (2013)

    The primary AML/CFT law that designates virtual asset service providers as obligated subjects, requiring registration with the UIAF.

  • External Regulatory Circular DSP-465 (2026)

    Regulates the interoperability of immediate low-value payment systems, setting technical and operational requirements for administrators and participants.

    [1][11][12][17]

Licensing & registration

  • Virtual Asset Service Provider (VASP) Registration

    Entities dealing in virtual assets must register with the UIAF as obligated subjects under AML/CFT regulations. Specific fintech payment institution licenses are not detailed in the provided documents.

    Low confidence — verify with the regulator before relying on this.

  • Payment System Participant

    Entities such as Movii S.A. can join interbank compensation systems like CENIT upon authorization by the Banco de la República, subject to technical and operational compliance. Timeline: May 2026

    [8][9]

Restrictions & warnings

  • Payment system administrators must adhere to strict technical standards for interoperability, including timestamp synchronization and unavailability protocols as defined in Circular DSP-465 and DSP-471.

    [11][10][17]
  • Certain payment transactions, such as interbank compensation via GOU PAYMENTS, are exempt from General Sales Tax (GMF) under specific conditions.

    [5]

Direction of travel

  • The regulatory environment is evolving towards greater interoperability and technical standardization in immediate low-value payments, with the BR actively updating circulars to refine operational mechanisms and tariffs.

    [1][11]
  • New participants like Movii S.A. are being integrated into core payment infrastructure, suggesting an open but regulated approach to non-bank payment providers.

    [8]

Sources

  1. Amendments to External Regulatory Circular DSP-465 of March 31, 2026 · 2026-07-07
  2. Operational and Services External Circular DSP-155, Subject 5: Tariffs for Low-Value Payment Systems Administered by the Bank of the Republic · 2026-06-25
  3. Operational and Services External Circular DSP-155, Subject 5: Fees for Low-Value Payment Systems Administered by the Bank of the Republic · 2026-06-25
  4. Carta Circular Externa DSP-0172-2026: Banco Finandina Suspends Check Clearing Service in Barranquilla Branch · 2026-05-05
  5. Operational and Services External Circular DSP-158, Subject 8: Deposit Account System · 2026-05-05
  6. Carta Circular Externa DSP-0172-2026, Subject: BANCO FINANDINA suspends check clearing service in the Barranquilla office · 2026-05-05
  7. Circular Externa Operativa y de Servicios DSP-155, Subject 5: Tariffs for Low-Value Payment Systems Administered by the Bank of the Republic · 2026-04-28
  8. Circular Letter DSP-0156-2026: New CENIT Participant MOVII S.A · 2026-04-27
  9. External Circular Letter DSP-0156-2026: New CENIT Participant MOVII S.A · 2026-04-27
  10. Operational and Services External Circular DSP-471, Subject 20: Regulation of the Operational Mechanism for Settlement (MOL) · 2026-03-31
  11. External Regulatory Circular DSP-465 of March 31, 2026, Subject 18: Interoperability of Immediate Low-Value Payment Systems · 2026-03-31
  12. External Regulatory Circular DSP-465 of March 31, 2026: Interoperability of Immediate Low-Value Payment Systems · 2026-03-31
  13. Operational and Services External Circular DSP-470, Subject 19: Centralized Directory (DICE) Regulations · 2026-03-31
  14. Operational and Services External Circular DEP-486, Subject 08: 500 Peso Metallic Coin · 2026-03-26
  15. Operational and Services External Circular DSP-158, Subject 8: Deposit Account System · 2026-03-12
  16. Operational and Service External Circular DSP-158, Subject 8: Deposit Account System · 2026-03-12
  17. External Regulatory Circular DSP-465 of March 6, 2026, Subject 18: Interoperability of Immediate Low-Value Payment Systems · 2026-03-06

Email alerts for Colombia updates

New circulars, rules and guidance — a digest in your inbox, same day.

This guide is compiled automatically from 17 primary-source documents published by Colombia's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.