Crypto-funded debit card in Peru
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Peru without local incorporation, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- VASPs (including crypto debit card operators facilitating crypto-to-fiat conversion) are designated as obliged entities under Resolución SBS N° 893-2019, requiring a formal AML/CFT compliance program.
- Customer Due Diligence (CDD) mandatory: obtain and verify identity using reliable independent source documents (national ID, passport), including full name, date of birth, place of birth, nationality, address, and national identification number for individuals.
- For legal entities: verify legal name, legal form, address of main place of business, directors/partners, legal representative, and evidence of legal existence (e.g., articles of incorporation, business registration).
- Beneficial ownership identification required: identify and verify the natural person(s) who ultimately own or control the customer.
- Purpose and intended nature of business relationship must be understood and documented.
- Ongoing transaction monitoring required to detect unusual or suspicious patterns.
- Suspicious Transaction Reports (ROS) must be filed with UIF-Perú.
- Enhanced Due Diligence (EDD) required for: customers from high-risk jurisdictions, PEPs and their family members/close associates, transactions involving significant amounts of virtual assets, transactions with unusual patterns or no apparent economic purpose.
- Record-keeping of all transaction and customer data mandated.
- Comprehensive AML/CTF risk assessment must be conducted.
- Internal controls, policies, procedures, and training programs must be established.
- A compliance officer must be appointed.
Key Restrictions
- If the card program facilitates crypto-to-fiat conversion or fiat payment processing, it risks being deemed an Electronic Money Issuing Company (Empresa Emisora de Dinero Electrónico - EEDE) or other regulated financial institution under SBS supervision, which would trigger significant capital requirements and full banking/EMI licensing.
- No dedicated VASP licensing regime exists — operators rely on general commercial law, creating legal ambiguity.
- No specific e-money or payment-institution license framework tailored to crypto-funded debit cards exists; the closest applicable framework is the EEDE regime, which was not designed for this model.
- Partner-bank or BIN-sponsor arrangements are operationally necessary but not specifically addressed in Peruvian regulation — no dedicated pass-through or card-program licensing pathway exists.
Key Risks
- Regulatory ambiguity: The lack of a specific VASP or crypto debit card licensing framework means the operator's legal status is uncertain. The UIF-Perú AML obligations apply, but the SBS may assert jurisdiction over the fiat leg of the card program (crypto-to-fiat conversion + payment processing).
- Enforcement risk from SBS if the crypto-to-fiat conversion is interpreted as unlicensed financial intermediation or money transmission, potentially resulting in fines, cease-and-desist orders, or criminal liability.
- No specific BIN-sponsor or card-program regulatory pathway creates structural risk — the operator must rely on foreign issuer banks and hope their model is not deemed to require a Peruvian EEDE license.
- Tax reporting ambiguity: crypto-to-fiat conversions may create taxable events for cardholders, with unclear reporting obligations for the operator.
- Reputational and PR risk if the UIF-Perú or SBS publicly states that unlicensed crypto debit cards violate financial regulations.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No specific Licensing Regime for VASPs: There is no dedicated law requiring crypto exchanges, custody providers, or crypto-focused payment processors to obtain a specific "virtual asset license" from a regulatory body like the Superintendencia de Banca, Seguros y AFP (SBS) or the Banco Central de Reserva del Perú (BCRP).
AML/CTF Obligations for Existing "Obligated Subjects": The primary regulatory interaction for entities dealing with virtual assets comes from the Unidad de Inteligencia Financiera del Perú (UIF-Perú), which oversees AML/CTF compliance. Existing "obligated subjects" (sujetos obligados) under the AML/CTF framework (like banks, financial institutions, payment service providers dealing with fiat, and money transmitters) are expected to manage risks associated with virtual assets if they engage with them.
No specific crypto exchange license is required.
They typically operate under general commercial law, registering as a regular company in Peru.
However, if an exchange facilitates fiat-to-crypto or crypto-to-fiat conversions, or offers services that could be interpreted as financial intermediation or money transmission under existing laws, there's a risk they might be expected to comply with some aspects of financial regulation, particularly AML/CTF.
No specific crypto custody license is required.
No specific crypto payment processor license is required.
If they facilitate crypto-to-fiat or fiat-to-crypto payments, or if their services resemble traditional payment services (e.g., money transfers in fiat), they might be subject to the regulations applicable to Electronic Money Issuing Companies (Empresas Emisoras de Dinero Electrónico - EEDEs) or other payment service providers, which are regulated by the SBS. However, the direct application to pure-play crypto firms is often unclear.
No specific capital requirements for VASPs. General company formation capital requirements apply based on the chosen legal entity type (e.g., S.A.C., S.A.A.).
If a VASP were to be deemed a traditional financial institution (e.g., an EEDE), then significant capital requirements mandated by the SBS would apply.
AML/KYC (Anti-Money Laundering/Know Your Customer): This is the most relevant area.
While VASPs are not explicitly listed as "obligated subjects" in the current AML/CTF law, the UIF-Perú encourages all entities engaged in activities susceptible to money laundering (including new technologies) to implement robust AML/KYC practices.
Expected Practices (even if not explicitly licensed):
Customer Due Diligence (CDD): Implementing KYC procedures to identify and verify customers (natural persons and legal entities).
Enhanced Due Diligence (EDD): For higher-risk customers or transactions.
Monitoring Transactions: Identifying unusual or suspicious patterns.
Reporting Suspicious Transactions (ROS): Reporting any suspicious activity to the UIF-Perú.
Record-Keeping: Maintaining records of transactions and customer data.
Risk Assessment: Conducting a comprehensive risk assessment of money laundering and terrorist financing risks.
Internal Controls: Establishing internal policies, procedures, and training programs.
Ley N° 27693 - Ley que crea la Unidad de Inteligencia Financiera del Perú (UIF-Perú) y modifica la Ley N° 26702, Ley General del Sistema Financiero y del Sistema de Seguros y Orgánica de la Superintendencia de Banca y Seguros:
Decreto Supremo N° 020-2017-JUS - Reglamento de la Ley N° 27693, Ley que crea la Unidad de Inteligencia Financiera del Perú:
Resolución SBS N° 893-2019 (and its preceding/subsequent modifications):
What it means for VASPs: VASPs are now required to implement an AML/CFT compliance program, appoint a compliance officer, and report to the UIF-Perú.
Beneficial Ownership: Identify and verify the natural person(s) who ultimately own or control the customer, or on whose behalf a transaction is being conducted.
Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes monitoring for unusual or suspicious transaction patterns.
Enhanced Due Diligence (EDD): Required for higher-risk customers, business relationships, or transactions. This includes:
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — crypto-funded debit cards are not specifically regulated in Peru; they can operate under general commercial law and must comply with VASP AML/CTF obligations (Resolución SBS N° 893-2019, UIF-Perú reporting), but face significant risk of being deemed an unlicensed Electronic Money Issuer (EEDE) by the SBS if facilitating crypto-to-fiat conversion, creating legal ambiguity and enforcement exposure.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?