El Salvador -- AML/CFT Compliance Regulatory Overview
Methodology
AI-generated synthesis from web search results.
Limitations
- AI-generated content -- not reviewed by human expert
- Source URLs not independently verified
El Salvador has significantly evolved its regulatory framework for cryptocurrencies and virtual assets, especially since making Bitcoin legal tender in 2021. The country has introduced specific laws and regulations to address AML/CFT concerns for Virtual Asset Service Providers (VASPs), aligning with international standards from the Financial Action Task Force (FATF).
Here's a breakdown of the AML/KYC requirements for VASPs in El Salvador:
AML/CFT Legislation
Ley Contra el Lavado de Dinero y de Activos (LCLDA)
- English Title: Law Against Money Laundering and Asset Forfeiture
- Purpose: This is the foundational AML/CFT law in El Salvador, applicable to a wide range of obliged entities. VASPs fall under its scope, requiring them to implement robust AML/CFT programs.
- Key Aspects: Defines money laundering and asset forfeiture offenses, establishes reporting obligations, and sets penalties.
Ley Bitcoin
- English Title: Bitcoin Law
- Purpose: Made Bitcoin legal tender in El Salvador. While primarily focused on the legal tender status and its integration into the economy, it implicitly brought entities dealing with Bitcoin into the regulatory fold of existing financial laws, including AML.
Ley de Regulación de los Proveedores de Servicios de Activos Virtuales (LRPVAS)
- English Title: Law for the Regulation of Virtual Asset Service Providers
- Promulgation: June 2023
- Purpose: This is the most specific and comprehensive law directly addressing VASPs. It establishes a licensing regime for VASPs and explicitly lays out their AML/CFT obligations, consumer protection measures, and prudential requirements. It covers services such as virtual asset exchange, transfer, custody, and participation in financial services related to virtual asset issuance.
Normas para la Prevención del Lavado de Dinero y Activos y del Financiamiento del Terrorismo (NPLDFT)
- English Title: Norms for the Prevention of Money Laundering and Asset Forfeiture and the Financing of Terrorism
- Issued by: Superintendencia del Sistema Financiero (SSF)
- Purpose: These norms provide detailed requirements for supervised entities (including those handling virtual assets under the SSF's purview) regarding the implementation of AML/CFT policies, procedures, and controls.
Customer Due Diligence (CDD) Requirements
VASPs in El Salvador are required to implement robust CDD procedures, generally including:
Identification and Verification:
- Natural Persons: Obtain and verify identity using reliable independent source documents (e.g., valid national identity card, passport). This includes full name, date of birth, nationality, address, and unique identification number.
- Legal Entities: Obtain and verify legal name, legal form, address, proof of incorporation, articles of association, names of directors and beneficial owners, and authorized signatories.
- Beneficial Ownership: Identify and verify the identity of beneficial owners (individuals who ultimately own or control 25% or more of the entity) for legal entities.
Purpose and Nature of the Relationship: Understand the purpose and intended nature of the business relationship or occasional transaction. This includes understanding the source of funds or wealth, especially for high-value transactions.
Ongoing Monitoring:
- Regularly review the customer relationship to ensure that transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.
- Keep customer information up-to-date, especially for high-risk customers.
- Monitor for changes in beneficial ownership or customer risk profile.
Risk-Based Approach:
- VASPs must classify customers based on their AML/CFT risk (low, medium, high) and apply enhanced due diligence (EDD) measures for higher-risk customers.
- EDD measures may include obtaining additional identifying information, requiring more frequent updates, verifying the source of funds/wealth, and obtaining senior management approval for the relationship.
- Politically Exposed Persons (PEPs) are always considered high-risk and require EDD, including senior management approval and establishing the source of wealth/funds.
Suspicious Transaction Reporting (STR)
- Obligation to Report: VASPs are legally obliged to report any suspicious transactions or activities to the Financial Intelligence Unit (UIF) without delay, regardless of the amount.
- Definition of Suspicion: Suspicion refers to a belief or doubt that funds or assets are proceeds of criminal activity or are linked to the financing of terrorism. This includes transactions that are unusual, complex, abnormally large, or have no apparent economic or lawful purpose.
- No Tipping-Off: VASPs and their employees are prohibited from informing the customer or any third party that a STR has been or will be made.
Record-Keeping Obligations
VASPs must maintain comprehensive records to assist in AML/CFT investigations. These include:
- Customer Due Diligence Records: All documents and information obtained during the CDD process (identification, verification, beneficial ownership, purpose of relationship).
- Transaction Records: Detailed records of all virtual asset transactions, including transaction date, type, amount, parties involved (originator and beneficiary information), and virtual asset addresses.
- STRs: Copies of all suspicious transaction reports filed with the UIF.
- Duration: Records must typically be maintained for a minimum of five (5) years from the date of the last transaction or the end of the business relationship, whichever is later.
Overseeing Authority for Compliance
The primary authority overseeing AML/CFT compliance for VASPs in El Salvador is:
- Superintendencia del Sistema Financiero (SSF)
- English Title: Superintendency of the Financial System
- Role: The SSF is the main regulator responsible for licensing, supervising, and monitoring VASPs for compliance with the LRPVAS and general financial regulations, including AML/CFT.
- Website: https://www.ssf.gob.sv/
Additionally:
Unidad de Investigación Financiera (UIF) / Fiscalía General de la República
- English Title: Financial Investigation Unit / Attorney General's Office
- Role: The UIF, operating under the Attorney General's Office, is the Financial Intelligence Unit (FIU) of El Salvador. It is responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) to relevant law enforcement agencies for investigation.
- Website (Fiscalía General): https://www.fiscalia.gob.sv/
Banco Central de Reserva (BCR)
- English Title: Central Reserve Bank
- Role: While the SSF primarily supervises licensed VASPs under the new law, the BCR has historically been involved in regulating payment systems and certain aspects related to the adoption of Bitcoin, including the issuance of technical norms. Its role might be more focused on monetary policy and payment system stability, while the SSF handles VASP specific licensing and prudential supervision.
- Website: https://www.bcr.gob.sv/
Important Note: The regulatory landscape for virtual assets is constantly evolving, particularly in El Salvador. VASPs are advised to consult with legal and compliance professionals specializing in El Salvadoran law to ensure full adherence to the most current requirements. The FATF also continues to monitor El Salvador's implementation of AML/CFT standards for virtual assets.
Source Data
**Ley Contra el Lavado de Dinero y de Activos (LCLDA)**
**English Title:** Law Against Money Laundering and Asset Forfeiture
**Purpose:** This is the foundational AML/CFT law in El Salvador, applicable to a wide range of obliged entities. VASPs fall under its scope, requiring them to implement robust AML/CFT programs.
**Key Aspects:** Defines money laundering and asset forfeiture offenses, establishes reporting obligations, and sets penalties.
**Purpose:** Made Bitcoin legal tender in El Salvador. While primarily focused on the legal tender status and its integration into the economy, it implicitly brought entities dealing with Bitcoin into the regulatory fold of existing financial laws, including AML.
**Ley de Regulación de los Proveedores de Servicios de Activos Virtuales (LRPVAS)**
**English Title:** Law for the Regulation of Virtual Asset Service Providers
**Purpose:** This is the most specific and comprehensive law directly addressing VASPs. It establishes a licensing regime for VASPs and explicitly lays out their AML/CFT obligations, consumer protection measures, and prudential requirements. It covers services such as virtual asset exchange, transfer, custody, and participation in financial services related to virtual asset issuance.
**Normas para la Prevención del Lavado de Dinero y Activos y del Financiamiento del Terrorismo (NPLDFT)**
**English Title:** Norms for the Prevention of Money Laundering and Asset Forfeiture and the Financing of Terrorism
**Issued by:** Superintendencia del Sistema Financiero (SSF)
**Purpose:** These norms provide detailed requirements for supervised entities (including those handling virtual assets under the SSF's purview) regarding the implementation of AML/CFT policies, procedures, and controls.
**Natural Persons:** Obtain and verify identity using reliable independent source documents (e.g., valid national identity card, passport). This includes full name, date of birth, nationality, address, and unique identification number.
**Legal Entities:** Obtain and verify legal name, legal form, address, proof of incorporation, articles of association, names of directors and beneficial owners, and authorized signatories.
**Beneficial Ownership:** Identify and verify the identity of beneficial owners (individuals who ultimately own or control 25% or more of the entity) for legal entities.
**Purpose and Nature of the Relationship:** Understand the purpose and intended nature of the business relationship or occasional transaction. This includes understanding the source of funds or wealth, especially for high-value transactions.
Regularly review the customer relationship to ensure that transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Keep customer information up-to-date, especially for high-risk customers.
Monitor for changes in beneficial ownership or customer risk profile.
VASPs must classify customers based on their AML/CFT risk (low, medium, high) and apply enhanced due diligence (EDD) measures for higher-risk customers.
EDD measures may include obtaining additional identifying information, requiring more frequent updates, verifying the source of funds/wealth, and obtaining senior management approval for the relationship.
Politically Exposed Persons (PEPs) are always considered high-risk and require EDD, including senior management approval and establishing the source of wealth/funds.
**Obligation to Report:** VASPs are legally obliged to report any suspicious transactions or activities to the Financial Intelligence Unit (UIF) without delay, regardless of the amount.
**Definition of Suspicion:** Suspicion refers to a belief or doubt that funds or assets are proceeds of criminal activity or are linked to the financing of terrorism. This includes transactions that are unusual, complex, abnormally large, or have no apparent economic or lawful purpose.
**No Tipping-Off:** VASPs and their employees are prohibited from informing the customer or any third party that a STR has been or will be made.
**Customer Due Diligence Records:** All documents and information obtained during the CDD process (identification, verification, beneficial ownership, purpose of relationship).
**Transaction Records:** Detailed records of all virtual asset transactions, including transaction date, type, amount, parties involved (originator and beneficiary information), and virtual asset addresses.
**STRs:** Copies of all suspicious transaction reports filed with the UIF.
**Duration:** Records must typically be maintained for a minimum of **five (5) years** from the date of the last transaction or the end of the business relationship, whichever is later.
**Superintendencia del Sistema Financiero (SSF)**
**English Title:** Superintendency of the Financial System
**Role:** The SSF is the main regulator responsible for licensing, supervising, and monitoring VASPs for compliance with the LRPVAS and general financial regulations, including AML/CFT.
**Unidad de Investigación Financiera (UIF) / Fiscalía General de la República**
**English Title:** Financial Investigation Unit / Attorney General's Office
**Role:** The UIF, operating under the Attorney General's Office, is the Financial Intelligence Unit (FIU) of El Salvador. It is responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) to relevant law enforcement agencies for investigation.
**Banco Central de Reserva (BCR)**
**English Title:** Central Reserve Bank
**Role:** While the SSF primarily supervises licensed VASPs under the new law, the BCR has historically been involved in regulating payment systems and certain aspects related to the adoption of Bitcoin, including the issuance of technical norms. Its role might be more focused on monetary policy and payment system stability, while the SSF handles VASP specific licensing and prudential supervision.
**United Nations (UN) Sanctions:** Binding on all UN member states, including El Salvador.
**Office of Foreign Assets Control (OFAC - U.S. Treasury Department) Sanctions:** Critical due to the global reach of the U.S. financial system and the U.S. dollar, and OFAC's extraterritorial jurisdiction.
**European Union (EU) Sanctions:** Applicable to EU persons and entities, but with global implications for financial flows.
**Financial Action Task Force (FATF) Recommendations:** While not a sanctions body, FATF sets the international standards for AML/CFT, which El Salvador is expected to implement. These recommendations explicitly address VASPs and include obligations for sanctions screening.
**Risk-Based Approach:** Assessing the specific sanctions risks associated with their customer base, products, services, geographic locations, and transaction types.
**Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD):** Collecting and verifying identity information for all customers, including beneficial owners, to understand their risk profile. This forms the basis for effective sanctions screening.
**Real-time Screening:** Screening all new customers, counterparties, and transactions against relevant sanctions lists *before* commencing any relationship or facilitating a transaction.
**Ongoing Monitoring:** Regularly re-screening existing customer bases against updated sanctions lists.
**Beneficial Ownership:** Screening all individuals and entities involved in a transaction, including intermediaries and ultimate beneficial owners, not just direct customers.
**PEP Screening:** Screening for Politically Exposed Persons (PEPs) often goes hand-in-hand with sanctions screening, as PEPs can present higher corruption and money laundering risks.
**Geographic Restrictions:** Identifying and blocking transactions to/from comprehensively sanctioned jurisdictions (e.g., Iran, North Korea, Cuba, Syria, specific regions of Ukraine/Russia) or involving individuals/entities located in or associated with such areas.
**Transaction Monitoring:** Implementing systems to detect suspicious patterns or red flags that may indicate sanctions evasion.
**Reporting:** Freezing funds and assets of sanctioned individuals/entities and reporting blocked transactions and suspicious activities to the relevant authorities (e.g., El Salvador's Financial Intelligence Unit – FIU, known as Unidad de Investigación Financiera - UIF).
**Record-Keeping:** Maintaining accurate and comprehensive records of all transactions, CDD information, screening results, and compliance decisions.
**OFAC Sanctions Compliance Guidance for the Virtual Currency Industry:** Emphasizes that U.S. sanctions apply to virtual currency activities in the same manner as they apply to traditional financial activities. It details expectations for compliance programs, including sanctions screening, risk assessment, and reporting.
**OFAC's Specially Designated Nationals and Blocked Persons (SDN) List:** This is the most critical U.S. sanctions list.
**OFAC's Consolidated Sanctions List:** Includes the SDN List and other non-SDN lists (e.g., Sectoral Sanctions Identifications List).
**EU Consolidated List of Persons, Groups and Entities subject to EU Financial Sanctions:**
**URL (unofficial but comprehensive map):** https://www.sanctionsmap.eu/
**Official Journal (search for latest consolidated list):** https://eur-lex.europa.eu/homepage.html
**UN Security Council Consolidated List:** Includes individuals and entities associated with Al-Qaida, ISIL (Da'esh), and the Taliban, as well as those subject to other UN sanctions regimes.
**Iran:** (U.S., UN, EU sanctions)
**North Korea (DPRK):** (U.S., UN, EU sanctions)
**Crimea, Donetsk, Luhansk, Kherson, Zaporizhzhia regions of Ukraine:** (U.S., EU, UK sanctions due to Russian occupation)
**Venezuela:** (Specific individuals/entities under U.S., EU sanctions)
**Civil Penalties:** Can range from thousands to millions of dollars per violation, depending on the program and severity.
**Criminal Penalties:** For willful violations, individuals can face significant prison sentences (e.g., up to 20 years) and substantial fines (e.g., up to $1 million), while corporations can face multi-million dollar fines.
**Reputational Damage:** Significant negative impact on a company's reputation and ability to operate globally.
**EU Penalties:** Vary by member state, but generally include substantial fines and potential imprisonment for individuals.
**UN Penalties:** While the UN itself doesn't impose penalties directly on individuals/entities, member states are obligated to implement the sanctions into their national law and enforce them, leading to national penalties.
**Ley Contra el Lavado de Dinero y de Activos (Law Against Money Laundering and Asset Forfeiture):**
**Example (search for updated versions):** A general search for "Ley Contra el Lavado de Dinero y de Activos El Salvador" will yield many legal aggregator sites. It's crucial for legal professionals to consult the most current version.
This law, and its implementing regulations (Normas Técnicas), mandate financial institutions (which VASPs are increasingly considered) to implement AML/CFT measures, including due diligence and reporting suspicious transactions. Failure to comply can lead to:
**Administrative Fines:** Imposed by the Superintendencia del Sistema Financiero (SSF) for non-compliance with regulations.
**Suspension or Revocation of Licenses:** For serious or repeated non-compliance.
**Criminal Charges:** For individuals or directors involved in money laundering, terrorist financing, or serious facilitation of such activities, which includes willful violations of sanctions. Penalties can include imprisonment.
To implement and enforce the sanctions regimes mandated by **UN Security Council Resolutions**, which are binding on all member states.
To adhere to the **FATF Recommendations**, which include implementing robust AML/CFT frameworks that require financial institutions (including VASPs) to screen against relevant sanctions lists. El Salvador is part of GAFILAT (Grupo de Acción Financiera de Latinoamérica), a FATF-style regional body.
To cooperate with international partners (like the U.S. and EU) in enforcing their respective sanctions, especially where there is a nexus (e.g., U.S. persons, U.S. dollar transactions).
**Superintendencia del Sistema Financiero (SSF):** The primary financial regulator responsible for overseeing banks and other financial institutions. They are developing and enforcing specific regulations for VASPs under the broader AML/CFT framework.
**Unidad de Investigación Financiera (UIF) – Financial Intelligence Unit:** Receives Suspicious Activity Reports (SARs/STRs) and is responsible for investigating financial crimes, including money laundering and terrorist financing.
Part of the Fiscalia General de la República (Attorney General's Office).
**Reglamento para la Aplicación de las Disposiciones de Prevención del Lavado de Dinero y Activos y Financiamiento del Terrorismo para Proveedores de Servicios de Activos Digitales** (Regulation for the Application of Provisions for the Prevention of Money and Asset Laundering and Terrorism Financing for Digital Asset Service Providers). This regulation was issued by the **Comisión Nacional de Activos Digitales (CNAD)**, El Salvador's National Commission of Digital Assets.
VASPs are required to transmit originator and beneficiary information for transactions **equal to or exceeding $1,000 USD**, or its equivalent in any digital asset.
Exchange between digital assets and fiat currency.
Exchange between one or more forms of digital assets.
Safeguarding and/or administration of digital assets or instruments enabling control over digital assets.
Participation in and provision of financial services related to an issuer's offer and/or sale of a digital asset.
Account number or unique transaction identifier
Physical address (or national identification number, or customer identification number, or date and place of birth, as applicable)
**Ley Bitcoin (Bitcoin Law):** Article 14 of the Bitcoin Law outlines sanctions for non-compliance with its provisions and related regulations. These can range from warnings to fines.
**Ley Contra el Lavado de Dinero y de Activos (Anti-Money Laundering and Asset Law):** This overarching AML/CFT law in El Salvador also provides for sanctions for financial institutions and designated non-financial businesses and professions (DNFBPs) that fail to comply with their AML/CFT obligations. Penalties can include substantial fines, suspension or revocation of licenses, and even criminal prosecution for severe violations.
Official Publication in Diario Oficial No. 222, Tomo No. 437, November 21, 2022.
A copy of the regulation can often be found on the CNAD's official website or legal repositories. For instance, the CNAD's site typically announces such regulations: https://cnad.gob.sv/ (Navigate to "Normativa" or "Publicaciones").
A direct link to the regulation document (PDF) is often provided by the CNAD. As of a recent check, it's typically under the "Marco Normativo" or "Regulaciones" section.
**Direct PDF Link (Example, confirm current):** CNAD Normativa
Diario Oficial No. 110, Tomo No. 431, June 8, 2021.
Often available on the official legislative website of El Salvador or via legal databases.
*Unofficial English translation available on many crypto news sites.*
Diario Oficial No. 228, Tomo No. 373, December 10, 2006 (with subsequent reforms).
Accessible via the official legislative website of El Salvador.
12 fact(s) collected but awaiting source verification. View in explorer →
Sources & Attribution
This article was generated by SearXNG+LLM .
Primary Sources
Edit History
This article is maintained by AI research workers and reviewed by human editors. Learn about our methodology →