Peru -- Licensing Requirements Regulatory Overview

Peru currently operates in a regulatory grey area regarding cryptocurrencies and virtual assets, characterized by a lack of a dedicated and comprehensive licensing regime. While financial authorities have issued warnings and expressed concerns, there is no specific law that establishes a licensing framework for Virtual Asset Service Providers (VASPs) such as exchanges, custody providers, or dedicated crypto payment processors.

Instead, the approach has been primarily focused on anti-money laundering (AML) and counter-terrorist financing (CTF) obligations for existing regulated financial institutions that might interact with virtual assets, and general consumer protection concerns.

1. Registration vs. Licensing Regime

Peru operates more under an AML-focused reporting/registration regime for specific financial activities and entities rather than a comprehensive licensing regime for VASPs.

• No specific Licensing Regime for VASPs: There is no dedicated law requiring crypto exchanges, custody providers, or crypto-focused payment processors to obtain a specific "virtual asset license" from a regulatory body like the Superintendencia de Banca, Seguros y AFP (SBS) or the Banco Central de Reserva del Perú (BCRP).
• AML/CTF Obligations for Existing "Obligated Subjects": The primary regulatory interaction for entities dealing with virtual assets comes from the Unidad de Inteligencia Financiera del Perú (UIF-Perú), which oversees AML/CTF compliance. Existing "obligated subjects" (sujetos obligados) under the AML/CTF framework (like banks, financial institutions, payment service providers dealing with fiat, and money transmitters) are expected to manage risks associated with virtual assets if they engage with them.

2. Required Licenses for Exchanges, Custody Providers, and Payment Processors

Given the absence of specific crypto legislation:

• Cryptocurrency Exchanges:
  • No specific crypto exchange license is required.
  • They typically operate under general commercial law, registering as a regular company in Peru.
  • However, if an exchange facilitates fiat-to-crypto or crypto-to-fiat conversions, or offers services that could be interpreted as financial intermediation or money transmission under existing laws, there's a risk they might be expected to comply with some aspects of financial regulation, particularly AML/CTF.
• Custody Providers:
  • No specific crypto custody license is required.
  • Similar to exchanges, they operate under general company law.
  • If custody services evolve to offer interest-bearing accounts, lending, or other financial products using virtual assets, they could potentially attract scrutiny from the SBS and might be deemed to require traditional financial licenses.
• Payment Processors (Crypto-focused):
  • No specific crypto payment processor license is required.
  • If they only process crypto-to-crypto payments, they generally fall outside existing financial services regulations.
  • If they facilitate crypto-to-fiat or fiat-to-crypto payments, or if their services resemble traditional payment services (e.g., money transfers in fiat), they might be subject to the regulations applicable to Electronic Money Issuing Companies (Empresas Emisoras de Dinero Electrónico - EEDEs) or other payment service providers, which are regulated by the SBS. However, the direct application to pure-play crypto firms is often unclear.

3. Key Requirements (Where Applicable)

As there's no specific VASP licensing, the following requirements are generally based on existing company law and AML/CTF regulations for "obligated subjects," or general expectations for any company operating in Peru:

• Capital:
  • No specific capital requirements for VASPs. General company formation capital requirements apply based on the chosen legal entity type (e.g., S.A.C., S.A.A.).
  • If a VASP were to be deemed a traditional financial institution (e.g., an EEDE), then significant capital requirements mandated by the SBS would apply.
• AML/KYC (Anti-Money Laundering/Know Your Customer): This is the most relevant area.
  • While VASPs are not explicitly listed as "obligated subjects" in the current AML/CTF law, the UIF-Perú encourages all entities engaged in activities susceptible to money laundering (including new technologies) to implement robust AML/KYC practices.
  • Expected Practices (even if not explicitly licensed):
    • Customer Due Diligence (CDD): Implementing KYC procedures to identify and verify customers (natural persons and legal entities).
    • Enhanced Due Diligence (EDD): For higher-risk customers or transactions.
    • Monitoring Transactions: Identifying unusual or suspicious patterns.
    • Reporting Suspicious Transactions (ROS): Reporting any suspicious activity to the UIF-Perú.
    • Record-Keeping: Maintaining records of transactions and customer data.
    • Risk Assessment: Conducting a comprehensive risk assessment of money laundering and terrorist financing risks.
    • Internal Controls: Establishing internal policies, procedures, and training programs.
  • Obligated Subjects: The primary law governing AML/CTF is Ley N° 27693, Ley que crea la Unidad de Inteligencia Financiera del Perú (UIF-Perú), and its regulatory norms. The list of "obligated subjects" (sujetos obligados) who must report to the UIF-Perú includes:
    • Financial institutions (banks, insurers, pension funds, securities brokers).
    • Payment service providers (like EEDEs).
    • Money remittance companies.
    • Other non-financial businesses and professions (DNFBPs) like real estate agents, notaries, jewelers, etc.
    • While VASPs are not explicitly listed, the spirit of the law and international recommendations (FATF) suggest that robust AML/KYC is expected. If a VASP's activities blur the lines with traditional "obligated subjects," they could face pressure to comply.
• Local Presence:
  • Any company operating in Peru, including a VASP, must establish a legal entity (e.g., a branch or a local subsidiary) registered with the Peruvian public registry (SUNARP) and obtain a tax identification number (RUC) from SUNAT.
  • This implies having a registered office address in Peru and complying with general corporate governance and tax regulations.

4. Application Process

There is no specific application process for a crypto-related license because such a license does not currently exist.

The typical process for a VASP operating in Peru would involve:

1. Company Formation: Registering a legal entity in Peru with the Superintendencia Nacional de los Registros Públicos (SUNARP).
2. Tax Registration: Obtaining a Tax Identification Number (RUC) from the Superintendencia Nacional de Aduanas y de Administración Tributaria (SUNAT).
3. General Business Licenses: Obtaining any municipal or sectoral licenses generally required for the type of commercial activity.
4. AML/CTF Compliance (Self-Imposed/Best Practice): Proactively implementing robust AML/KYC procedures in line with the spirit of Peruvian AML laws and international best practices (e.g., FATF recommendations), even if not explicitly mandated for their specific VASP category. This may include voluntary registration with UIF-Perú as a "non-obligated reporter" if their activities are deemed sensitive, or simply maintaining internal compliance.

5. Specific Regulatory References with URLs

It is important to note that these references are to general financial regulations or official statements, as there is no specific "crypto licensing law."

• Superintendencia de Banca, Seguros y AFP (SBS):
  • The SBS has repeatedly issued warnings about the risks associated with virtual assets, emphasizing their lack of regulation, volatility, and potential for fraud.
  • While not licensing laws, these communiqués highlight the official stance.
  • SBS Official Communiqué on Virtual Assets (example): You would typically find these under "Comunicados" or "Notas de Prensa" on the SBS website. An example from 2021 reiterated risks: [SBS Communiqué on Virtual Assets - usually found in news/press releases section, e.g., on their main portal: www.sbs.gob.pe] (Specific direct link may change, search their news section for "criptoactivos" or "monedas virtuales").
• Unidad de Inteligencia Financiera del Perú (UIF-Perú):
  • Responsible for AML/CTF. The key legal framework is the AML law and its regulations.
  • Ley N° 27693 - Ley que crea la Unidad de Inteligencia Financiera del Perú (UIF-Perú): https://busquedas.elperuano.pe/normaslegales/ley-que-crea-la-unidad-de-inteligencia-financiera-del-peru-le-ley-n-27693-138661-1/ (Peruvian Official Gazette)
  • List of Obligated Subjects (Sujetos Obligados): The UIF-Perú website provides information on entities required to report. https://www.uif.gob.pe/sso.html (While VASPs are not explicitly listed, this is the framework they would eventually fall under if regulated).
• Banco Central de Reserva del Perú (BCRP):
  • The BCRP has also issued statements warning about the risks of virtual assets, particularly regarding their lack of sovereign backing and volatility.
  • BCRP Official Statements: Similar to SBS, these would be found in their press releases or publications sections. [www.bcrp.gob.pe] (Search for "criptomonedas" or "activos virtuales").

Future Outlook: There have been discussions and proposals for regulating virtual assets in Peru, including draft bills presented in Congress. However, as of late 2023/early 2024, none of these have been enacted into law. The regulatory landscape remains fluid and subject to change.

Disclaimer: This information is for general informational purposes only and does not constitute legal advice. Given the evolving nature of virtual asset regulation, it is highly recommended to seek professional legal counsel specializing in Peruvian financial law for specific guidance on operating a crypto business in Peru.