← Regulations / El Salvador / Operating Models / DeFi frontend

DeFi protocol frontend in El Salvador

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in El Salvador with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Must register as a Digital Asset Service Provider (PSAD) with CNAD under the Digital Assets Issuance Law — this imposes full AML/CFT obligations under the Ley Contra el Lavado de Dinero y de Activos (LCLDA).
  • Customer identification and verification (CDD) required for all users: obtain valid national ID/passport, name, date of birth, nationality, address, unique ID number (for natural persons); or legal name, incorporation docs, directors, beneficial owners (for legal entities).
  • Beneficial ownership identification required for any individual owning/controlling 25% or more of a legal entity.
  • Risk-based classification of customers (low/medium/high) with enhanced due diligence (EDD) for higher-risk customers and PEPs.
  • Continuous transaction monitoring — review customer relationships to ensure transactions are consistent with knowledge of customer and risk profile.
  • Keep customer information up-to-date, especially for high-risk customers.
  • EDD measures for higher-risk customers: additional identifying information, more frequent updates, source of funds/wealth verification, senior management approval.

Key Restrictions

  • Operator must be legally constituted in El Salvador (local entity required).
  • Must obtain a PSAD license from CNAD under the Digital Assets Issuance Law.
  • Minimum capital requirements (to be specified by CNAD technical norms).
  • Must implement governance, risk management, and internal control systems (fit-and-proper criteria for directors).
  • If the frontend takes fees or provides any custody/transfer service (beyond mere display), it likely falls under PSAD licensing scope — fee-taking increases likelihood of classification as a digital asset service.
  • Must adopt adequate technical and organizational measures to safeguard client digital assets (if any custody/access to private keys is involved).
  • Must implement financial guarantee or insurance fund mechanisms for client protection (details pending CNAD norms).
  • Bitcoin as legal tender means some additional obligations under Bitcoin Law — must accept Bitcoin as payment if operating as an economic agent in relevant contexts.
  • Geofencing / IP-restriction for non-resident users may be required unless the operator is willing to obtain a full license as a PSAD; unclear if foreign-frontend-only (no custody, no fees) falls within scope or is unregulated.

Key Risks

  • Regulatory ambiguity: The Digital Assets Issuance Law (2023) and VASP Law (2023) are newly enacted and CNAD's technical norms are still being developed — unclear how a non-custodial, fee-taking frontend is classified vs. a full-exchange.
  • CNAD enforcement is nascent — no public enforcement precedents for DeFi frontends yet; regulatory interpretation could shift.
  • If CNAD classifies any frontend that charges fees or aggregates protocols as a PSAD, operating without a license exposes operator to penalties for unlicensed digital asset services.
  • Chivo Wallet experience shows government willingness to address user harm and fraud allegations — consumer complaints could trigger regulatory attention.
  • Bitcoin's legal tender status creates unique exposure: mandatory acceptance requirements and AML obligations attach differently than in other jurisdictions.
  • Tax treatment of frontend fees is unclear — no clear guidance on whether fees from DeFi aggregation are taxable services in El Salvador.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Ley de Emisión de Activos Digitales (Digital Assets Issuance Law)

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Creates the National Commission of Digital Assets (CNAD) as the primary regulator for these activities.

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Defines various types of digital assets and their regulatory treatment.

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
aml 60% confidence

Ley Contra el Lavado de Dinero y de Activos (LCLDA)

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Ley de Regulación de los Proveedores de Servicios de Activos Virtuales (LRPVAS)

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Normas para la Prevención del Lavado de Dinero y Activos y del Financiamiento del Terrorismo (NPLDFT)

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Identification and Verification:

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Natural Persons: Obtain and verify identity using reliable independent source documents (e.g., valid national identity card, passport). This includes full name, date of birth, nationality, address, and unique identification number.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Legal Entities: Obtain and verify legal name, legal form, address, proof of incorporation, articles of association, names of directors and beneficial owners, and authorized signatories.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Beneficial Ownership: Identify and verify the identity of beneficial owners (individuals who ultimately own or control 25% or more of the entity) for legal entities.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

VASPs must classify customers based on their AML/CFT risk (low, medium, high) and apply enhanced due diligence (EDD) measures for higher-risk customers.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

EDD measures may include obtaining additional identifying information, requiring more frequent updates, verifying the source of funds/wealth, and obtaining senior management approval for the relationship.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Regularly review the customer relationship to ensure that transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Keep customer information up-to-date, especially for high-risk customers.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
enforcement 60% confidence

Comisión Nacional de Activos Digitales (CNAD) - National Commission of Digital Assets:

[secondary] reuters.com — Salvadorans Complain Bitcoin App Faults After Adoption 2021 09 08 [secondary] hrf.org — The Many Problems Of El Salvadors Bitcoin Experiment [primary] cnad.gob.sv
enforcement 60% confidence

Digital Assets Issuance Law & CNAD Licensing:

[secondary] reuters.com — Salvadorans Complain Bitcoin App Faults After Adoption 2021 09 08 [secondary] hrf.org — The Many Problems Of El Salvadors Bitcoin Experiment [primary] cnad.gob.sv
custody 60% confidence

Digital Assets Issuance Law, Article 12: States that "Digital Asset Service Providers may offer, among others, the following services: ... b) Custody services of Digital Assets owned by third parties."

[primary] Ley Bitcoin (Official Text - Spanish) [primary] Ley de Emisión de Activos Digitales (Official Text - Spanish)
custody 60% confidence

Legal constitution in El Salvador.

[primary] Ley Bitcoin (Official Text - Spanish) [primary] Ley de Emisión de Activos Digitales (Official Text - Spanish)
custody 60% confidence

Minimum capital requirements (to be defined by CNAD norms).

[primary] Ley Bitcoin (Official Text - Spanish) [primary] Ley de Emisión de Activos Digitales (Official Text - Spanish)
custody 60% confidence

Robust governance, risk management, and internal control systems.

[primary] Ley Bitcoin (Official Text - Spanish) [primary] Ley de Emisión de Activos Digitales (Official Text - Spanish)
custody 60% confidence

Digital Assets Issuance Law, Article 12: States that "Digital Asset Service Providers may offer, among others, the following services: ... b) Custody services of Digital Assets owned by third parties."

[primary] Ley Bitcoin (Official Text - Spanish) [primary] Ley de Emisión de Activos Digitales (Official Text - Spanish)
custody 60% confidence

Digital Assets Issuance Law, Article 12: States that "Digital Asset Service Providers may offer, among others, the following services: ... b) Custody services of Digital Assets owned by third parties."

[primary] Ley Bitcoin (Official Text - Spanish) [primary] Ley de Emisión de Activos Digitales (Official Text - Spanish)
custody 60% confidence

Digital Assets Issuance Law, Article 12: States that "Digital Asset Service Providers may offer, among others, the following services: ... b) Custody services of Digital Assets owned by third parties."

[primary] Ley Bitcoin (Official Text - Spanish) [primary] Ley de Emisión de Activos Digitales (Official Text - Spanish)
licensing 60% confidence

Ley Bitcoin (Bitcoin Law)

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Mandates that all economic agents accept Bitcoin as payment for goods and services (with exceptions for those unable to access the technology).

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a DeFi protocol frontend that charges fees or facilitates transactions likely qualifies as a Digital Asset Service Provider (PSAD) and must obtain a CNAD license, establish a local entity, and implement full AML/CFT programs under El Salvador's new digital assets framework; pure informational frontends with no fee-taking, custody, or transaction facilitation may fall outside scope, but this remains unclear due to nascent regulation.

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?