Centralized exchange in Ecuador
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Ecuador with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD: identify and verify all customers (natural persons: full name, DOB, nationality, ID number, address, occupation; legal entities: registration number, incorporation date, legal form, directors/shareholders, authorized signatories). Source: ec.aml.identification-and-verification-of-customer, ec.aml.natural-persons-obtain-and-verify, ec.aml.legal-entities-obtain-and-verify
- Beneficial Ownership identification: identify natural persons who ultimately own or control the customer. Source: ec.aml.beneficial-ownership-bo-identification
- Purpose and intended nature of business relationship: understand reason for service usage and expected transaction type/volume. Source: ec.aml.purpose-and-intended-nature-of
- Ongoing monitoring: continuous transaction/activity monitoring, regular customer information updates. Source: ec.aml.continuously-monitor-customer-transactions-and, ec.aml.regularly-update-customer-information-and
- Risk-based approach: develop and implement risk assessment framework; apply EDD for PEPs, high-risk jurisdictions, complex/unusually large transactions, anonymity-favoring products; SDD for lower-risk. Source: ec.aml.develop-and-implement-a-risk, ec.aml.apply-enhanced-due-diligence-edd, ec.aml.apply-simplified-due-diligence-sdd
- Suspicious transaction reporting (STR): any transaction, attempted transaction, or activity suspicious of ML/TF must be reported to UAFE regardless of amount, via the SARLAFT electronic system. No tipping-off allowed. Source: ec.aml.reporting-obligation-any-transaction-attempted, ec.aml.no-tipping-off-vasps-and-their, ec.aml.reporting-mechanism-reports-are-typically
- Record keeping: maintain all transaction records (amount, virtual asset type, sender/recipient addresses, timestamps, fiat equivalents, transaction hashes) for at least 10 years. Source: ec.aml.transaction-records-all-details-of, ec.travel-rule.record-keeping-vasps-are-required
- Travel Rule: for virtual asset transfers exceeding $500 USD, collect and transmit originator full name, physical/registered address, account/reference number, official ID number; and beneficiary full name. Must transmit securely, accurately, and timely to beneficiary VASP. Source: ec.travel-rule.travel-rule-threshold-uafe-resolution, ec.travel-rule.information-collection-for-transactions-exceeding, ec.travel-rule.full-name-of-the-originator, ec.travel-rule.physical-address-or-registered-address, ec.travel-rule.account-number-or-equivalent-reference, ec.travel-rule.official-identification-number-eg-passport, ec.travel-rule.full-name-of-the-beneficiary, ec.travel-rule.information-transmission-this-information-must
Key Restrictions
- Ban on crypto as means of payment: Resolution 014-2014-M (BCE) effectively bans the use of cryptocurrencies as a means of payment. Financial institutions are barred from facilitating such transactions. Source: ec.enforcement.legal-basis-resolution-014-2014-m-or, ec.licensing.payment-tokens-cryptocurrencies-eg-bitcoin
- Security/investment token offerings require registration with SCVS, prospectus filing, ongoing disclosure, and corporate governance compliance. Secondary trading must occur on regulated stock exchanges; broker-dealer (casas de valores) registration needed. Source: ec.licensing.registration-with-scvs-mandatory-registration, ec.licensing.prospectus-requirements-preparation-and-submission, ec.licensing.information-disclosure-ongoing-periodic-and, ec.licensing.corporate-governance-compliance-with-corporate, ec.licensing.regulated-exchanges-secondary-trading-of, ec.licensing.broker-dealer-registration-entities-facilitating-the
- Tokens classified as securities (satisfying Howey-like test: investment, profit expectation, common enterprise, reliance on others' efforts) fall under full securities law. Source: ec.licensing.investment-inversin-a-contribution-of, ec.licensing.expectation-of-profit-expectativa-de, ec.licensing.common-enterprise-emprendimiento-comn-the, ec.licensing.reliance-on-the-efforts-of
- Stablecoins attempting to function as means of payment, especially if not USD-backed or not transparently regulated, are prohibited by BCE stance. Source: ec.licensing.stablecoins-while-the-scvs-focuses
- No specific crypto-token exemptions from securities law exist; only general exemptions (private placements, small offerings) with low thresholds. Source: ec.licensing.these-exemptions-are-highly-specific
Key Risks
- Regulatory ambiguity: No comprehensive crypto-asset law exists; operators must navigate overlapping SCVS (securities) and BCE (payment bans) frameworks with contradictory implications for different token types
- Enforcement risk: BCE Resolution 014-2014-M has been used to close crypto platforms; any exchange facilitating fiat-crypto pairs for Ecuadorian residents could be deemed facilitating prohibited payments
- Securities classification risk: Many tokens listed on a centralized exchange could be retroactively deemed securities, triggering unregistered offering liability and requiring SCVS broker-dealer licensing
- No sandbox or tailored VASP licensing regime: operators cannot obtain a fit-for-purpose exchange license; must use legacy securities framework or operate in legal grey zone
- Travel Rule compliance burden: $500 USD threshold is low relative to global norms; requires robust beneficiary VASP data transmission capabilities without a prescribed technical protocol
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Superintendencia de Compañías, Valores y Seguros (SCVS): The superintendency responsible for regulating companies, securities, and insurance. This body would classify tokens as securities.
Banco Central del Ecuador (BCE): The Central Bank, which has historically taken a very strict stance against cryptocurrencies being used as means of payment.
Security Tokens: These are explicitly designed to represent traditional securities such as shares, bonds, or interests in a fund. They confer rights like dividends, voting rights, profit sharing, or a claim on assets.
Investment Tokens: Tokens that are primarily sold to raise capital for a project or company, where purchasers expect a return on their investment due to the efforts of the issuer or a third party. This includes tokens that grant a share of future revenues, profits, or are marketed with promises of appreciation based on the success of a venture.
Registration with SCVS: Mandatory registration of the offering and the issuer with the Superintendencia de Compañías, Valores y Seguros.
Prospectus Requirements: Preparation and submission of a detailed prospectus containing comprehensive information about the issuer, the project, financial statements, risks, and the rights associated with the token.
Information Disclosure: Ongoing periodic and material event disclosures to the SCVS and the public.
Regulated Exchanges: Secondary trading of registered securities typically must occur on regulated stock exchanges (Bolsas de Valores) authorized by the SCVS.
Broker-Dealer Registration: Entities facilitating the trading of such tokens would need to be registered as broker-dealers (casas de valores) with the SCVS.
Market Conduct Rules: Rules against market manipulation, insider trading, and other abusive practices would apply.
Custody: Custodial services for such tokens would likely require authorization and compliance with specific regulations.
Payment Tokens / Cryptocurrencies (e.g., Bitcoin, Ethereum): These are generally not considered "securities" in the traditional sense, but their use as legal tender or alternative currency is explicitly prohibited by the Banco Central del Ecuador. Financial institutions are barred from facilitating transactions with them. This prohibition makes their status in Ecuador highly problematic, regardless of whether they are securities.
Stablecoins: While the SCVS focuses on securities, it's worth noting that the BCE would likely view any stablecoin as problematic if it attempts to function as a means of payment, especially if it is not backed by the USD or if its backing is not transparent and regulated by Ecuadorian authorities.
These exemptions are highly specific and would need to be rigorously adhered to; there are no specific "crypto-token" exemptions.
Unidad de Análisis Financiero y Económico (UAFE) - The Financial and Economic Analysis Unit.
Ley Orgánica de Prevención, Detección y Erradicación del Delito de Lavado de Activos y Financiamiento de Delitos (Organic Law for the Prevention, Detection, and Eradication of the Crime of Money Laundering and Financing of Crimes)
Resolución No. UAFE-DG-2022-0001 (Resolution No. UAFE-DG-2022-0001)
Continuously monitor customer transactions and activities to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Develop and implement a risk assessment framework to identify, assess, and mitigate ML/TF risks.
Apply enhanced due diligence (EDD) for higher-risk customers (e.g., Politically Exposed Persons - PEPs, customers from high-risk jurisdictions, complex or unusually large transactions, new technologies and products that favor anonymity).
Reporting Obligation: Any transaction, attempted transaction, or activity that raises suspicion of money laundering or terrorist financing, regardless of the amount, must be reported.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that a report has been or will be submitted to UAFE.
Transaction Records: All details of virtual asset transactions (e.g., amount, type of virtual asset, sender/recipient addresses, timestamps, fiat currency equivalents, transaction hashes).
Adopted: Yes, the FATF Travel Rule has been adopted in Ecuador.
Travel Rule Threshold: UAFE Resolution No. UAFE-DG-2023-0002 (Article 10) mandates the collection and transmission of originator and beneficiary information for virtual asset transfers that exceed the value of five hundred United States Dollars ($500 USD) or its equivalent in other currencies.
Information Collection: For transactions exceeding the $500 USD threshold, VASPs must obtain and maintain the following information (Article 10):
Information Transmission: This information must be transmitted to the beneficiary VASP in a secure, accurate, and timely manner (de forma segura, precisa y oportuna). While the resolution does not prescribe a specific technical protocol (like TRISA, OpenVASP, etc.), it implicitly expects VASPs to adopt solutions that meet these criteria and ensure interoperability where possible, aligning with FATF standards.
Record Keeping: VASPs are required to keep records of this information for at least 10 years (Article 11).
Legal Basis: Resolution 014-2014-M (or its subsequent reiterations) issued by the Monetary and Financial Policy and Regulation Board (Junta de Política y Regulación Monetaria y Financiera) and implemented by the Central Bank of Ecuador (BCE). This resolution, dated July 28, 2014, effectively banned private cryptocurrencies, stating that they are not recognized as legal tender and cannot be used as a means of payment within the country.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange can operate in Ecuador only if it (1) registers as a VASP obligated subject with UAFE and complies with full AML/CTF and Travel Rule obligations ($500 USD threshold), (2) does not facilitate use of crypto as a means of payment per BCE Resolution 014-2014-M, and (3) treats any security/investment tokens under SCVS securities law (prospectus, broker-dealer registration, regulated exchange trading) — creating a deeply restrictive and ambiguous operating environment with no bespoke crypto exchange license.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?