← Regulations / Panama / Operating Models / DeFi frontend

DeFi protocol frontend in Panama

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in Panama with a local entity, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • Customer identification and verification (CDD) using reliable independent source documents (government-issued ID, passport, proof of address) — Law 23 of 2015 and Law 1 of 2024
  • Beneficial ownership identification for legal entity customers — Law 23 of 2015
  • Understanding purpose and nature of business relationship — ongoing monitoring requirement
  • Ongoing transaction monitoring — scrutinizing complex, unusual large transactions and unusual patterns — Law 23 of 2015
  • Enhanced Due Diligence (EDD) for PEPs, high-risk jurisdictions, anonymity-favoring technologies, and high-value/complex transactions
  • Suspicious Transaction Report (STR) filing to the Unidad de Análisis Financiero (UAF) for any transaction with reasonable grounds of suspicion — no amount threshold
  • Record-keeping for at least 5 years after business relationship ends or transaction date
  • No tipping-off prohibition — cannot disclose STR filing to customer or third parties
  • If the DeFi protocol frontend charges fees, it is highly likely to be treated as a VASP under Law 1 of 2024 and subject to SBP AML/CFT supervision and registration
  • Registration with the Superintendencia de Bancos de Panamá (SBP) for AML/CFT oversight as an obligated subject under Law 1 of 2024

Key Restrictions

  • Must incorporate under Panamanian law (Public Registry) and obtain a business license ('Aviso de Operación') from the Ministry of Commerce and Industries
  • Must register with the Superintendencia de Bancos de Panamá (SBP) for AML/CFT oversight as a VASP under Law 1 of 2024 — the SBP is the primary regulator for VASPs
  • If the frontend charges fees (trading fees, swap fees, aggregation fees) or earns revenue from the protocol, it is very likely classified as a VASP under Law 1 of 2024 and subject to full SBP licensing/supervision
  • If virtual assets accessed via the frontend are deemed securities under Panamanian law (SMV jurisdiction), additional securities broker-dealer licensing may be required under Law Decree 1 of 1999
  • Geofencing / IP screening to exclude high-risk jurisdictions identified by FATF or local authorities is strongly implied by EDD obligations
  • No crypto-specific capital requirements, but general corporate capitalization requirements for company formation apply

Key Risks

  • Regulatory ambiguity — Law 1 of 2024 is very recent (January 2024) and its application to non-custodial DeFi frontends is untested; SBP guidance on how strictly frontends are regulated is not yet available
  • Enforcement risk — Panama has no dedicated crypto regulator and prior enforcement relies on general financial laws; SBP has issued warnings that crypto activities are unregulated by them, creating potential confusion
  • Securities classification risk — if any underlying tokens are deemed securities, the SMV could assert jurisdiction with broker-dealer licensing requirements (Law Decree 1 of 1999)
  • FATF grey-list legacy — Panama was on the FATF grey list until October 2023, meaning regulators may take a harder enforcement stance on crypto to demonstrate compliance
  • Legislative uncertainty — Bill 697 (comprehensive crypto regulation) was partially vetoed in 2022 and remains in legislative limbo; Law 1 of 2024 may be supplemented or replaced, creating a moving regulatory target

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

No Crypto-Specific Licensing Regime: As of late 2023 / early 2024, there is no specific "virtual asset license" in Panama issued by a dedicated crypto regulator.

licensing 60% confidence

General Business Registration: Any company wishing to operate in Panama, including those involved in virtual assets, must still:

licensing 60% confidence

Obtain a business license ("Aviso de Operación") from the Ministry of Commerce and Industries.

licensing 60% confidence

Applicability: Exchanges, custody providers, and payment processors dealing with virtual assets are highly likely to be considered "Designated Non-Financial Businesses and Professions" (DNFBPs) or fall under an extended interpretation of "financial activities" for AML purposes.

licensing 60% confidence

Requirement: While not a "license," these entities would need to register with the SSNF for AML/CFT oversight and comply with all associated requirements.

licensing 60% confidence

Regulatory Reference: Law 23 of 2015 (Ley 23 de 2015, que adopta medidas para prevenir el blanqueo de capitales, el financiamiento del terrorismo y el financiamiento de la proliferación de armas de destrucción masiva). This law designates certain entities as "obligated subjects" (sujetos obligados) for AML/CFT purposes. While it doesn't explicitly name "VASPs," its broad scope and subsequent interpretations can cover them.

aml 60% confidence

Law 23 of April 27, 2015 (Ley 23 de 27 de abril de 2015): This is the foundational AML/CFT law in Panama. It adopted measures to prevent money laundering, financing of terrorism, and financing of the proliferation of weapons of mass destruction. It established the Financial Analysis Unit (UAF) and defined "obligated subjects" (sujetos obligados), which, through subsequent interpretations and amendments, have come to include VASPs. This law sets general obligations for customer due diligence, suspicious transaction reporting, and record-keeping.

aml 60% confidence

Law 1 of January 5, 2024 (Ley No. 1 de 5 de enero de 2024): This is the most crucial and recent piece of legislation specifically for virtual assets. It amends Law 23 of 2015 and other related laws to define virtual assets and virtual asset service providers (VASPs), establish a licensing and supervision regime, and explicitly subject VASPs to AML/CFT obligations under the supervision of the Superintendency of Banks of Panama (SBP). This law ensures Panama's compliance with FATF Recommendation 15 on new technologies and VASPs.

aml 60% confidence

Superintendencia de Bancos de Panamá (SBP) - Superintendency of Banks of Panama:

aml 60% confidence

Unidad de Análisis Financiero (UAF) - Financial Analysis Unit of Panama:

aml 60% confidence

Identification and Verification:

aml 60% confidence

For Individuals: Obtaining and verifying the identity of the customer and beneficial owner (if different from the customer) using reliable, independent source documents, data, or information (e.g., government-issued ID, passport, proof of address).

aml 60% confidence

For Legal Entities/Arrangements: Obtaining and verifying the legal name, legal form, proof of existence, powers that regulate and bind the entity, names of relevant persons (directors, partners), and the identity of beneficial owners (those ultimately owning or controlling more than a specified percentage, typically 10% or 25%).

aml 60% confidence

Understanding the Purpose and Nature of the Business Relationship: Gathering information on the customer's financial activities, expected transaction types, and the source of funds/wealth.

aml 60% confidence

Ongoing Monitoring: Continuously monitoring the business relationship and transactions to ensure consistency with the VASP's knowledge of the customer, their business, and risk profile. This includes scrutinizing complex, unusual large transactions, and all unusual patterns of transactions that have no apparent economic or lawful purpose.

aml 60% confidence

Enhanced Due Diligence (EDD): Applying EDD measures for high-risk customers, business relationships, or transactions, which include:

aml 60% confidence

Politically Exposed Persons (PEPs) and their family members and close associates.

aml 60% confidence

Customers from high-risk jurisdictions identified by FATF or local authorities.

aml 60% confidence

Transactions involving new or developing technologies that might favor anonymity.

aml 60% confidence

High-value or complex transactions.

aml 60% confidence

Obligation to Report: VASPs are legally obligated to report any suspicious transaction or activity to the UAF, regardless of the amount. A transaction is suspicious if the VASP has reasonable grounds to suspect that it may be related to money laundering, terrorism financing, or other illicit activities.

aml 60% confidence

No Tipping-Off: VASPs, their employees, and officers are prohibited from disclosing to the customer or any third party that an STR has been or will be submitted.

aml 60% confidence

Duration: Records must typically be kept for at least five (5) years after the business relationship has ended or after the date of the transaction.

enforcement 60% confidence

Evolving Regulatory Framework: Panama has been discussing comprehensive cryptocurrency regulation, most notably with Bill 697, which was partially vetoed in 2022. This lack of a clear, dedicated crypto legal framework means that enforcement would likely fall under existing general financial laws (e.g., anti-money laundering, fraud), making it harder to categorize specifically as "crypto enforcement."

enforcement 60% confidence

Focus on AML/CFT: Panama was on the FATF grey list until October 2023, which heavily emphasized improving its Anti-Money Laundering and Counter-Financing of Terrorism (AML/CFT) regime. While this pressure indirectly affects crypto (as it's a known vector for financial crime), direct, high-profile enforcement actions against crypto entities with specific fines haven't been widely publicized as a result.

licensing 60% confidence

Relevance: If the virtual asset is deemed a "security" under Panamanian law, then the SMV would have jurisdiction. This is a crucial distinction.

licensing 60% confidence

Applicability: Projects issuing tokens that represent ownership, a right to profit, or other characteristics of traditional securities would fall under the SMV's purview. Exchanges listing such tokens, or custody providers holding them, would then need to comply with securities regulations.

licensing 60% confidence

Regulatory Reference: Law Decree 1 of 1999 (Decreto Ley 1 de 1999, por el cual se reorganiza el mercado de valores en la República de Panamá).

licensing 60% confidence

General corporate capitalization requirements apply for company formation.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — A DeFi protocol frontend serving Panama residents is likely treated as a VASP under Law 1 of 2024 if it charges fees or facilitates transactions, requiring Panamanian incorporation, business registration, and SBP AML/CFT registration with full CDD/STR obligations; however, the application of the new law to non-custodial frontends specifically remains untested and ambiguous.

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?