Crypto ATM / kiosk operator in Colombia

Superintendencia de Industria y Comercio (SIC) is a regulator in Colombia. The Fiscalía General de la Nación is not supported as a regulator for this context by the provided Colombia-specific evidence.

SIC: Fines in the hundreds of millions of Colombian Pesos (COP) against promoters and entities. For instance, in August 2022, the SIC sanctioned "Smart Business Corp SAS," "Bux Corp SAS," and several individuals involved with OmegaPro, imposing fines totaling over COP $2.400 million (approx. USD $600,000 at the time) and ordering the immediate cessation of activities and restitution to affected consumers. Further fines and orders against other promoters followed.

SIC: Imposed fines of over COP $500 million (approx. USD $125,000 at the time) against the company and its managers, ordered the immediate cessation of its operations, and mandated the return of funds to investors.

Fiscalía: Criminal charges for illegal mass capture of money, aggravated fraud, and money laundering. Arrests and asset seizures.

General Operation: VASPs operating without direct interaction with the traditional financial system (e.g., direct fiat on/off-ramps via banks) are primarily subject to AML/CFT obligations but are not licensed by the SFC. They operate in a somewhat "grey area" from a licensing perspective, though the UIAF views them as obliged entities for AML purposes.

Interaction with Financial System: If an exchange seeks to offer fiat currency on/off-ramps through Colombian banks, it generally needs to participate in the SFC's Regulatory Sandbox ("La Arenera") in partnership with a regulated financial institution. This sandbox allows for supervised pilot programs.

Regulatory Sandbox (La Arenera): The closest mechanism for innovation is the SFC's La Arenera, a regulatory sandbox established under Circular Externa 021 de 2023. This allows financial entities (and in certain cases, non-supervised entities in partnership with supervised ones) to test innovative financial services, including those involving crypto assets, under a controlled environment with temporary waivers or specific authorizations. However, participating in La Arenera does not exempt a token from being classified as a security; rather, it allows for a structured dialogue and potential adaptation of regulations if a security token is being tested.

Registration Regime (AML/CFT): Colombia primarily operates a registration regime for AML/CFT purposes. All VASPs, regardless of whether they are licensed or participating in the sandbox, are considered "obliged entities" by the Unidad de Información y Análisis Financiero (UIAF) and must:

Ongoing Development: Ley 2143 of 2021 mandated the SFC to propose a comprehensive regulatory framework for crypto assets, indicating a future move towards a more formal licensing system.

AML/CFT Obligations: All VASPs are subject to Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) requirements, regardless of whether they are licensed or not.

Law 526 of 1999: This law created the Financial Information and Analysis Unit (UIAF) and established its functions as Colombia's Financial Intelligence Unit (FIU). It is the foundational law for AML/CFT in the country.

Decree 1068 of 2015 (as modified by Decree 169 of 2020): This crucial decree explicitly incorporates "virtual assets" into the scope of assets and operations that the UIAF must analyze to prevent money laundering and terrorism financing. It empowers the UIAF to establish reporting requirements for entities involved in operations with virtual assets.

Identification and Verification of Customers:

Identification and verification of beneficial owners (typically individuals holding 25% or more of the company's shares or voting rights, or exercising control through other means).

Risk-Based Approach: VASPs must implement a risk-based approach to CDD. This means applying enhanced due diligence (EDD) for higher-risk customers (e.g., Politically Exposed Persons - PEPs, customers from high-risk jurisdictions, complex corporate structures, high-value transactions, or unusual transaction patterns) and simplified due diligence (SDD) for lower-risk customers.

Report suspicious transactions (SARs) to the UIAF.

Resolución 314 de 2021 de la UIAF: Por la cual se imparten instrucciones relacionadas con el SARLAFT a los proveedores de servicios de activos virtuales.

Ongoing Monitoring: Continuous scrutiny of transactions undertaken throughout the course of the relationship to ensure that they are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.

Identify, measure, control, and monitor the risks of money laundering and terrorist financing (ML/TF).

Train personnel on AML/CFT obligations.

UN Sanctions: As a member state of the United Nations, Colombia is legally obligated to implement sanctions imposed by the UN Security Council. UIAF Resolution 314/2021 directly references adherence to UN Security Council resolutions as a core component of ML/TF risk management. This includes asset freezes and other restrictions against listed individuals and entities.

Outcome: SIC ordered the cessation of all promotion and operations of OmegaPro-related schemes in Colombia, imposed significant fines, and mandated restitution to affected consumers. The Fiscalía has pursued criminal charges, leading to arrests of key promoters and the freezing of assets. Many victims have lost significant sums, and the full extent of recovery is uncertain.

Outcome: SIC issued a definitive resolution ordering the immediate cessation of Daily Cop's activities, imposing fines, and requiring restitution. The Fiscalía subsequently arrested key figures behind the scheme and initiated criminal proceedings, uncovering millions of dollars in alleged fraud.