Nikolai Timofejev
15 years in FinTech and payments. Maps your business model to the right structure and leads the file all the way to a compliant launch, including banking and payment rails.
Get a crypto license in Colombia.
Colombia has no dedicated crypto licence - and we say so plainly. The crypto bill stalled and the sandbox closed. What works: a properly governed company with real AML - UIAF reporting and a SAGRILAFT programme - inside a large, fast-adopting market. We structure it honestly.
27 yrs
on the international marketon the market
60+
in-house specialistsspecialists
400+
Crypto licenses obtainedlicenses obtained
Updated
Colombia in brief
No licence - a compliant company that works.
Colombia does not have a dedicated crypto or VASP licence, and no one can sell you one. Crypto is not legal tender and is not treated as a security; the Cryptoassets Bill that would have built a framework was debated in Congress and stalled for want of consensus, and the Financial Superintendency's regulatory sandbox - which ran controlled crypto-and-bank pilots - expired at the end of 2023. So the picture is honest and specific: crypto activity is legal and widespread, but it runs on the general company and anti-money-laundering system, not on a dedicated authorisation.
What that means in practice is a real compliance route rather than a licence. A crypto business operates through a properly governed Colombian company, reports to the UIAF - the financial-intelligence unit - as an obliged party, and runs a SAGRILAFT anti-money-laundering programme to the Superintendency of Companies' standard. The Financial Superintendency has signalled tighter AML and KYC expectations for the sector, so the bar is rising even without a licensing law. The market is large and adoption is high, which makes doing this properly worthwhile. We build the compliant structure, and monitor the pending legislation so you are first in line if a framework finally passes.
No dedicated crypto licence in Colombia - honestly. The bill stalled and the sandbox closed in 2023. The real route is a governed company plus AML: UIAF reporting and a SAGRILAFT programme.
Crypto is legal and adoption is high; the standards are real even without a licence. Corporate tax is a heavy 35%, so we model the structure deliberately around it.
The honest picture
The AML company route - readiness for a law.
Two workstreams: the company plus AML structure that operates now, and the monitoring that converts it if Colombia finally legislates. We scope both before any work begins.
The company + AML route operates now; a readiness file converts it if Colombia finally legislates.
01 - COMPANY + AML · THE ROUTE
Governed company, real AML
The working structure: a Colombian company with clean governance, UIAF reporting as an obliged party and a SAGRILAFT AML programme to the Superintendency of Companies' standard - lawful and credible, without a dedicated licence because none exists.
The working structure: a Colombian company with clean governance, UIAF reporting as an obliged party and a SAGRILAFT AML programme to the Superintendency of Companies' standard - lawful and credible, without a dedicated licence because none exists.
- ✓Colombian company with clean governance
- ✓UIAF reporting as an obliged party
- ✓SAGRILAFT AML/CFT programme
- ✓KYC, monitoring and record-keeping
- ✓Rising SFC expectations met in full
- ✓Banking arranged on full disclosure
02 - READINESS FOR A LAW
Large, high-adoption marketPrepared if legislation passes
The bill stalled, but pressure for a framework continues. The readiness file - governance, AML and custody documentation on licence-grade patterns - converts the structure into an applicant if Colombia legislates.
The bill stalled but pressure continues - licence-grade compliance now means first in line if a framework lands.
- ✓Cryptoassets Bill stalled - tracked
- ✓SFC signalling stricter AML/KYC
- ✓Compliance built to licence-grade anyway
- ✓Legislative monitoring - we track drafts
- ✓First in line if a framework lands
- ✓Offshore pairing where markets require it
Costs and timelines are confirmed for your case before any work begins. There is no dedicated crypto licence in Colombia - the AML company route is the real path, and we are candid that it is a compliance structure, not an authorisation.
Why Colombia
A large market, approached honestly.
No dedicated law - but a big, high-adoption market where a properly compliant company is a credible, bankable base.
✓
A large adoption market
Colombia has one of Latin America's most active crypto user bases. The demand is real and deep - which is why building a compliant, bankable structure to serve it lawfully is worth doing well.One of Latin America's most active user bases.
✓
Legal to operate
Crypto is not banned - it is simply unlicensed. Operating through a governed company with real AML is lawful, and the standards you meet are what banks and counterparties actually read.Not banned - unlicensed; the AML route is lawful.
✓
A defined AML standard
UIAF reporting and a SAGRILAFT programme give a clear, enforceable compliance bar. Meeting it makes the business credible - the substance is the product, since there is no licence badge to lean on.UIAF + SAGRILAFT - a clear, enforceable bar.
✓
A major regional economy
One of the largest economies in Latin America, with a growing fintech scene and Spanish-language reach across the region. A sensible base from which to serve neighbouring markets.Spanish-language reach across the region.
✓
Direction of travel
The Financial Superintendency continues to tighten AML expectations and a framework is periodically revived in Congress. Building to licence-grade now means readiness if the law finally lands.SFC tightening; a framework periodically revived.
✓
Honest guidance
Our value here is candour. We will not sell a Colombian «licence» that does not exist - we build the real compliant structure, and tell you plainly where its limits are.No selling a licence that does not exist.
How it compares
How Colombia differs from other routes.
Colombia is the compliant-company play in a big market, not a licensing regime. The honest comparison is below.
Colombia vs other jurisdictions
| Feature |  Colombia | Other jurisdictions |
|---|---|---|
| Regime | Company + AML, no dedicated licence | Dedicated VASP licences |
| AML basis | UIAF reporting + SAGRILAFT | Licence-based supervision |
| Corporate tax | 35% | Often lower |
| Market | Large, high adoption | Varies |
Regime
ColombiaCompany + AML, no dedicated licence
Other jurisdictionsDedicated VASP licences
AML basis
ColombiaUIAF reporting + SAGRILAFT
Other jurisdictionsLicence-based supervision
Corporate tax
Colombia35%
Other jurisdictionsOften lower
Market
ColombiaLarge, high adoption
Other jurisdictionsVaries
Country by country
| Country | License type | Taxation | Requirements |
|---|---|---|---|
| Colombia | Company + AML (no dedicated licence) | 35% corporate | UIAF + SAGRILAFT |
 Chile | Fintech Law registration (CMF) | 27% corporate | Registration + authorisation |
 Brazil | VASP under Law 14.478 (BCB) | 34% combined | Central-Bank supervised |
 El Salvador | DASP registration (CNAD) | 0% on digital-asset gains | Registration, 2-4 months |
ColombiaLicense typeCompany + AML (no dedicated licence)
Taxation35% corporate
RequirementsUIAF + SAGRILAFT
ChileLicense typeFintech Law registration (CMF)
Taxation27% corporate
RequirementsRegistration + authorisation
BrazilLicense typeVASP under Law 14.478 (BCB)
Taxation34% combined
RequirementsCentral-Bank supervised
El SalvadorLicense typeDASP registration (CNAD)
Taxation0% on digital-asset gains
RequirementsRegistration, 2-4 months
Doing it properly
What the compliant structure contains.What the compliant structure contains.
No licence does not mean no standards - the UIAF and SAGRILAFT obligations are real. The checklist below is what we build.
01
Colombian company - incorporated with clean governance and transparent ownership to UBOs.
02
UIAF registration and reporting - as an obliged party, with suspicious-transaction and periodic reporting.
03
SAGRILAFT programme - the self-control and risk-management AML system to the Superintendency of Companies' standard.
04
KYC and monitoring - client due diligence, ongoing monitoring and record-keeping to Colombian AML rules.
05
Named compliance officer - an oficial de cumplimiento appointed with real authority.
06
Rising SFC expectations - the tighter AML and KYC standards the Financial Superintendency is signalling, met in full.
07
Custody and systems documentation - wallet architecture described to international standards.
08
Banking file - accounts arranged on full disclosure, matched to the flows.
09
Clean books - accounting a bank and a future regulator read as an asset.
10
Legislative monitoring - the pending framework tracked, the structure updated as drafts move.
11
Offshore pairing - a licensed base alongside where target markets require one.
01
Colombian company with clean governance.
02
UIAF registration and reporting as obliged party.
03
SAGRILAFT AML/CFT programme.
04
KYC, monitoring and record-keeping.
05
Named compliance officer.
06
Rising SFC AML/KYC expectations met.
07
Custody and systems documentation.
08
Banking file on full disclosure.
09
Clean books from day one.
10
Legislative monitoring.
11
Offshore pairing where needed.
Reflects Colombia's general company law and AML framework (UIAF, SAGRILAFT) as of 2026. There is no dedicated crypto licence - in writing, not in small print. The sandbox closed in 2023 and the crypto bill has stalled.General company law + AML (UIAF, SAGRILAFT), as of 2026. No licence; sandbox closed 2023.
How it works
From first call to a compliant structure.
01
Strategy and honesty
The real status, your AML obligations and the banking plan - fixed in writing before anything incorporates.Status, AML obligations, banking - in writing.
02
Company and governance
Colombian incorporation with clean governance and transparent ownership - the base the AML route needs.Incorporation, clean governance, UBOs.
03
UIAF and SAGRILAFT
Registration, reporting and a full SAGRILAFT programme with a named compliance officer - built to standard.Registration, reporting, programme, officer.
04
Banking and operations
Accounts arranged on disclosure; the structure live on rails that hold.Accounts on disclosure; live on solid rails.
05
Monitor and convert
The pending framework tracked - if Colombia legislates, the prepared file enters first.First in line if Colombia legislates.
Quick facts
Dedicated lawNone - stalled
RouteCompany + AML
AML reportingUIAF
AML systemSAGRILAFT
Supervisor pressureSFC tightening
SandboxClosed 2023
Corporate tax35%
MarketLarge, high adoption
Anyone selling a «Colombian crypto licence» in 2026 is selling paper. The honest product is the compliant company and AML structure - and it is a real, bankable one.
On the ground in Colombia
Run from our Dubai office, with Colombian counsel.
Prifinance - Colombia desk
Bogotá · Colombia
Bogotá, Colombia
01
Colombian incorporation
Company formation with clean governance - the corporate layer the AML route sits on, built properly.Clean governance - the base for the AML route.
02
UIAF and SAGRILAFT
Registration and reporting to the UIAF and a full SAGRILAFT AML programme - drafted, filed and maintained to standard.Registration, reporting and programme - maintained.
03
Compliance officer and monitoring
An oficial de cumplimiento and the ongoing KYC and monitoring the rising SFC expectations demand.An oficial de cumplimiento and monitoring.
04
Banking and readiness
Accounts arranged on disclosure, and the readiness file kept current so you are first in line if a framework passes.Accounts on disclosure; ready for a future law.
We also have offices in
Tallinn
Estonia
Roseni 13
Vilnius
Lithuania
Gedimino pr. 2
Prague
Czech Republic
Vlkova 532/8, Žižkov
London
United Kingdom
7 Bell Yard
Dubai
UAE
33 Level, Al Saqr Business Tower
Madeira
Portugal
Rua da Alegria 31, 1F
Istanbul
Turkey
Perpa Ticaret Merkezi, A Blok
Good to know
Taxation of crypto companies in Colombia.
No crypto-specific corporate levy - company profits carry Colombia's 35% corporate rate, one of the region's higher rates, so the tax position is planned deliberately from the start.
35% corporate rate
The general corporate income tax rate is 35% on company profits - among the higher rates in Latin America. We model it carefully, because it is a real drag that structuring has to account for.Among the region's higher rates - modelled.
Crypto as ordinary income
Income from crypto trading is generally treated as ordinary income, taxed at progressive rates for individuals up to 39%. Where assets are held over two years, gains may qualify for a 15% capital-gains treatment.Up to 39% for individuals; 15% after 2 years.
VAT considerations
Colombia's VAT applies to supplies of services in the usual way; how it maps onto crypto fee income depends on the activity. We plan the position rather than assume an exemption.Service-specific - planned, not assumed.
The high rate shapes structure
At 35%, Colombia is not a low-tax base. For internationally-facing models, we model whether a compliant Colombian company is the operating heart or one node in a wider, honestly-disclosed structure.Colombia as the heart, or one honest node.
A digital tax authority
The DIAN runs increasingly digital systems with clear obligations. Positions are researchable, which helps as crypto tax practice continues to settle without a dedicated law.DIAN - researchable positions.
Records serve both
The UIAF and SAGRILAFT record-keeping the route requires also underpins the tax position - compliance-grade books double as tax-office-grade books.Compliance-grade books serve tax too.
Tax summary
Corporate income tax35%
Crypto (individuals)Up to 39% ordinary
Held > 2 years15% capital gains (may apply)
VATService-specific
CurrencyCOP
Crypto-specific rulesNone - general system
*As of 2026. At 35%, the corporate rate is a real factor - we model the structure honestly around it.
Turnkey professional support
Experienced lawyers and international consultants.
We provide end-to-end support, from company registration and the AML programme to regulatory interaction and compliance oversight - with an individualized approach to each client.
Oleksii Kindratenko
Builds the application itself: Colombian company, SAGRILAFT and UIAF pack, capital structure and tax registrations. His document sets are the reason reviews finish in months, not years.
Eugeniu Bevziuc
First point of contact for international founders. Runs the whole setup remotely, across time zones and languages - from the first call to a clean, compliant business.
Follow Prifinance
Active across our channels.
Colombia · AML route
Launch your crypto project in Colombia with expert support.
Full-service setup - the compliant company and AML structure today, readiness for any future framework.
Get a consultation →Free legal opinion
Is Colombia the right fit for your project?
Our legal team will analyze your case at no cost and provide a written legal opinion: which jurisdiction, structure, or route fits your business.
Written assessment within 2-5 business days
Request a free conclusion →FAQ
The Colombia crypto route, answered honestly.
Is there a crypto licence in Colombia?+
No - there is no dedicated crypto or VASP licence. The Cryptoassets Bill stalled in Congress and the Financial Superintendency's sandbox closed at the end of 2023. Anyone selling a «Colombian crypto licence» is describing something that does not exist.
So is operating legal?+
Yes, when done properly. Crypto is not banned - it is unlicensed. Operating through a governed Colombian company that meets its UIAF reporting and runs a SAGRILAFT AML programme is lawful, and those standards are what banks read.
What is UIAF reporting?+
The UIAF is Colombia's financial-intelligence unit. Crypto businesses report to it as obliged parties - suspicious transactions and periodic filings - as part of the country's anti-money-laundering system.
What is SAGRILAFT?+
SAGRILAFT is the self-control and risk-management AML/CFT system that the Superintendency of Companies requires of obliged businesses - risk assessment, KYC, monitoring and a named compliance officer. We build it to standard.
Is a licensing law coming?+
Possibly. A framework has been revived in Congress before and the Financial Superintendency keeps tightening AML expectations. We track the drafts and keep your structure conversion-ready, so you are first in line if one passes.
How are crypto companies taxed?+
A 35% corporate rate on company profits - among the higher rates in the region. Individual crypto gains are generally taxed as ordinary income up to 39%, with a possible 15% capital-gains treatment after a two-year hold.
Is the market worth it despite the tax?+
For many, yes. Colombia has one of Latin America's largest crypto user bases. We model honestly whether a Colombian company is the operating heart or one node in a wider structure, given the 35% rate.
Why Colombia with you?+
Because the value is in the compliance detail: the UIAF reporting, the SAGRILAFT programme, the banking file. We build Colombian structures to the standard licensed firms keep - which is what makes them bankable and future-ready.
Is there a crypto licence?+
No - the bill stalled; the sandbox closed in 2023.
Is operating legal?+
Yes - governed company + UIAF + SAGRILAFT.
UIAF reporting?+
Reporting to the financial-intelligence unit as obliged party.
SAGRILAFT?+
The required AML/risk system - built to standard.
A law coming?+
Possibly - revived before; we track the drafts.
Company taxes?+
35% corporate; individuals up to 39%.
Worth it despite tax?+
Often - a large market; modelled honestly.
Why with us?+
The compliance detail makes it bankable.
Client notes
Google4.7★★★★★
Founders who wanted it done right.
Google4.7★★★★★
“As a software development crew at FewMoreTaps OÜ, we've had the pleasure of working with Prifinance on some key financial moves.First of all, navigating the world of corporate banking and finance can be a maze, but Prifinance made it feel like a walk in the park. They helped us set up a corporate bank account without the hassle of jumping on a plane or drowning in paperwork. Everything was done remotely, smoothly…”
Google
“I had their assistance in company registration and I would recommend them. They were answering all my clarification during the process and offering all their supportThank you Daniel and Irinia”
Google
“We found PRIFINANCE COMPANYvia the Internet and asked for help in organizing the opening of their company in Estonia. PRIFINANCE COMPANY specialists helped us a lot with this. Their professional, competent approach and knowledge of their business left us with only the best impressions.”
Google
“I'm thrilled with my experience with PriFinance! They helped me obtain a crypto license in Estonia without any hassle. The team was super understanding and always available to answer my questions and assist. It was great to see how they put effort into preparing the documents to ensure everything went smoothly. I'm delighted with the outcome and highly recommend PriFinance to anyone looking to get a license…”
Google
“Opening an account with Prifinance in a Swiss bank was such an easy and quick process that I was shocked. It all started with the first call, where I received detailed guidance on the required documents and the entire procedure.One of the key highlights was their attention to detail. As someone who usually gets tangled up in paperwork, I was pleasantly surprised when they sent me all the documents and…”
Google
“I recently had the pleasure of working with Boris.. and I must say, it was a fantastic experience. Boris went above and beyond to assist me with my residency needs. His professionalism, knowledge, and dedication truly stood out. I highly recommend working with Boris and the team!”
Google
Start today
One message away from your Colombia structure.
Get a free legal opinion on your project - our legal team will analyze your case at no cost and provide a written legal opinion: which jurisdiction, structure, or route fits your business.Free legal opinion: which Colombia structure fits your project and what it will cost.
✓Written legal opinion within 2-5 business days - free of charge✓A clear recommendation on the right structure, not a sales pitch✓Transparent fixed fees, confirmed up front✓EN · RU · ES speaking team
Prifinance is an independent law and advisory firm. We are not a regulator and are not affiliated with, endorsed by, or acting on behalf of the UIAF, the Financial Superintendency or any other public authority. Registrations are made with, and obtained directly from, the competent authorities.