Grade A AI-Researched

El Salvador -- AML/CFT Compliance Regulatory Overview

Published: 2026-04-22 Updated: 2026-04-22 Author: SearXNG+LLM Version 1 Sources cited in: English (3)

Methodology

AI-generated synthesis from web search results.

Limitations

  • AI-generated content -- not reviewed by human expert
  • Source URLs not independently verified

El Salvador has significantly evolved its regulatory framework for cryptocurrencies and virtual assets, especially since making Bitcoin legal tender in 2021. The country has introduced specific laws and regulations to address AML/CFT concerns for Virtual Asset Service Providers (VASPs), aligning with international standards from the Financial Action Task Force (FATF).

Here's a breakdown of the AML/KYC requirements for VASPs in El Salvador:


AML/CFT Legislation

  1. Ley Contra el Lavado de Dinero y de Activos (LCLDA)

    • English Title: Law Against Money Laundering and Asset Forfeiture
    • Purpose: This is the foundational AML/CFT law in El Salvador, applicable to a wide range of obliged entities. VASPs fall under its scope, requiring them to implement robust AML/CFT programs.
    • Key Aspects: Defines money laundering and asset forfeiture offenses, establishes reporting obligations, and sets penalties.
  2. Ley Bitcoin

    • English Title: Bitcoin Law
    • Purpose: Made Bitcoin legal tender in El Salvador. While primarily focused on the legal tender status and its integration into the economy, it implicitly brought entities dealing with Bitcoin into the regulatory fold of existing financial laws, including AML.
  3. Ley de Regulación de los Proveedores de Servicios de Activos Virtuales (LRPVAS)

    • English Title: Law for the Regulation of Virtual Asset Service Providers
    • Promulgation: June 2023
    • Purpose: This is the most specific and comprehensive law directly addressing VASPs. It establishes a licensing regime for VASPs and explicitly lays out their AML/CFT obligations, consumer protection measures, and prudential requirements. It covers services such as virtual asset exchange, transfer, custody, and participation in financial services related to virtual asset issuance.
  4. Normas para la Prevención del Lavado de Dinero y Activos y del Financiamiento del Terrorismo (NPLDFT)

    • English Title: Norms for the Prevention of Money Laundering and Asset Forfeiture and the Financing of Terrorism
    • Issued by: Superintendencia del Sistema Financiero (SSF)
    • Purpose: These norms provide detailed requirements for supervised entities (including those handling virtual assets under the SSF's purview) regarding the implementation of AML/CFT policies, procedures, and controls.

Customer Due Diligence (CDD) Requirements

VASPs in El Salvador are required to implement robust CDD procedures, generally including:

  1. Identification and Verification:

    • Natural Persons: Obtain and verify identity using reliable independent source documents (e.g., valid national identity card, passport). This includes full name, date of birth, nationality, address, and unique identification number.
    • Legal Entities: Obtain and verify legal name, legal form, address, proof of incorporation, articles of association, names of directors and beneficial owners, and authorized signatories.
    • Beneficial Ownership: Identify and verify the identity of beneficial owners (individuals who ultimately own or control 25% or more of the entity) for legal entities.
  2. Purpose and Nature of the Relationship: Understand the purpose and intended nature of the business relationship or occasional transaction. This includes understanding the source of funds or wealth, especially for high-value transactions.

  3. Ongoing Monitoring:

    • Regularly review the customer relationship to ensure that transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.
    • Keep customer information up-to-date, especially for high-risk customers.
    • Monitor for changes in beneficial ownership or customer risk profile.
  4. Risk-Based Approach:

    • VASPs must classify customers based on their AML/CFT risk (low, medium, high) and apply enhanced due diligence (EDD) measures for higher-risk customers.
    • EDD measures may include obtaining additional identifying information, requiring more frequent updates, verifying the source of funds/wealth, and obtaining senior management approval for the relationship.
    • Politically Exposed Persons (PEPs) are always considered high-risk and require EDD, including senior management approval and establishing the source of wealth/funds.

Suspicious Transaction Reporting (STR)

  1. Obligation to Report: VASPs are legally obliged to report any suspicious transactions or activities to the Financial Intelligence Unit (UIF) without delay, regardless of the amount.
  2. Definition of Suspicion: Suspicion refers to a belief or doubt that funds or assets are proceeds of criminal activity or are linked to the financing of terrorism. This includes transactions that are unusual, complex, abnormally large, or have no apparent economic or lawful purpose.
  3. No Tipping-Off: VASPs and their employees are prohibited from informing the customer or any third party that a STR has been or will be made.

Record-Keeping Obligations

VASPs must maintain comprehensive records to assist in AML/CFT investigations. These include:

  1. Customer Due Diligence Records: All documents and information obtained during the CDD process (identification, verification, beneficial ownership, purpose of relationship).
  2. Transaction Records: Detailed records of all virtual asset transactions, including transaction date, type, amount, parties involved (originator and beneficiary information), and virtual asset addresses.
  3. STRs: Copies of all suspicious transaction reports filed with the UIF.
  4. Duration: Records must typically be maintained for a minimum of five (5) years from the date of the last transaction or the end of the business relationship, whichever is later.

Overseeing Authority for Compliance

The primary authority overseeing AML/CFT compliance for VASPs in El Salvador is:

  • Superintendencia del Sistema Financiero (SSF)
    • English Title: Superintendency of the Financial System
    • Role: The SSF is the main regulator responsible for licensing, supervising, and monitoring VASPs for compliance with the LRPVAS and general financial regulations, including AML/CFT.
    • Website: https://www.ssf.gob.sv/

Additionally:

  • Unidad de Investigación Financiera (UIF) / Fiscalía General de la República

    • English Title: Financial Investigation Unit / Attorney General's Office
    • Role: The UIF, operating under the Attorney General's Office, is the Financial Intelligence Unit (FIU) of El Salvador. It is responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) to relevant law enforcement agencies for investigation.
    • Website (Fiscalía General): https://www.fiscalia.gob.sv/
  • Banco Central de Reserva (BCR)

    • English Title: Central Reserve Bank
    • Role: While the SSF primarily supervises licensed VASPs under the new law, the BCR has historically been involved in regulating payment systems and certain aspects related to the adoption of Bitcoin, including the issuance of technical norms. Its role might be more focused on monetary policy and payment system stability, while the SSF handles VASP specific licensing and prudential supervision.
    • Website: https://www.bcr.gob.sv/

Important Note: The regulatory landscape for virtual assets is constantly evolving, particularly in El Salvador. VASPs are advised to consult with legal and compliance professionals specializing in El Salvadoran law to ensure full adherence to the most current requirements. The FATF also continues to monitor El Salvador's implementation of AML/CFT standards for virtual assets.

Source Data

60%

**Purpose:** This is the foundational AML/CFT law in El Salvador, applicable to a wide range of obliged entities. VASPs fall under its scope, requiring them to implement robust AML/CFT programs.

60%

**Key Aspects:** Defines money laundering and asset forfeiture offenses, establishes reporting obligations, and sets penalties.

60%

**Purpose:** Made Bitcoin legal tender in El Salvador. While primarily focused on the legal tender status and its integration into the economy, it implicitly brought entities dealing with Bitcoin into the regulatory fold of existing financial laws, including AML.

60%

**Ley de Regulación de los Proveedores de Servicios de Activos Virtuales (LRPVAS)**

60%

**English Title:** Law for the Regulation of Virtual Asset Service Providers

60%

**Purpose:** This is the most specific and comprehensive law directly addressing VASPs. It establishes a licensing regime for VASPs and explicitly lays out their AML/CFT obligations, consumer protection measures, and prudential requirements. It covers services such as virtual asset exchange, transfer, custody, and participation in financial services related to virtual asset issuance.

60%

**Normas para la Prevención del Lavado de Dinero y Activos y del Financiamiento del Terrorismo (NPLDFT)**

60%

**English Title:** Norms for the Prevention of Money Laundering and Asset Forfeiture and the Financing of Terrorism

60%

**Purpose:** These norms provide detailed requirements for supervised entities (including those handling virtual assets under the SSF's purview) regarding the implementation of AML/CFT policies, procedures, and controls.

60%

**Natural Persons:** Obtain and verify identity using reliable independent source documents (e.g., valid national identity card, passport). This includes full name, date of birth, nationality, address, and unique identification number.

60%

**Legal Entities:** Obtain and verify legal name, legal form, address, proof of incorporation, articles of association, names of directors and beneficial owners, and authorized signatories.

60%

**Beneficial Ownership:** Identify and verify the identity of beneficial owners (individuals who ultimately own or control 25% or more of the entity) for legal entities.

60%

**Purpose and Nature of the Relationship:** Understand the purpose and intended nature of the business relationship or occasional transaction. This includes understanding the source of funds or wealth, especially for high-value transactions.

60%

Regularly review the customer relationship to ensure that transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.

60%
60%

VASPs must classify customers based on their AML/CFT risk (low, medium, high) and apply enhanced due diligence (EDD) measures for higher-risk customers.

60%

EDD measures may include obtaining additional identifying information, requiring more frequent updates, verifying the source of funds/wealth, and obtaining senior management approval for the relationship.

60%

Politically Exposed Persons (PEPs) are always considered high-risk and require EDD, including senior management approval and establishing the source of wealth/funds.

60%

**Obligation to Report:** VASPs are legally obliged to report any suspicious transactions or activities to the Financial Intelligence Unit (UIF) without delay, regardless of the amount.

60%

**Definition of Suspicion:** Suspicion refers to a belief or doubt that funds or assets are proceeds of criminal activity or are linked to the financing of terrorism. This includes transactions that are unusual, complex, abnormally large, or have no apparent economic or lawful purpose.

60%

**No Tipping-Off:** VASPs and their employees are prohibited from informing the customer or any third party that a STR has been or will be made.

60%

**Customer Due Diligence Records:** All documents and information obtained during the CDD process (identification, verification, beneficial ownership, purpose of relationship).

60%

**Transaction Records:** Detailed records of all virtual asset transactions, including transaction date, type, amount, parties involved (originator and beneficiary information), and virtual asset addresses.

60%
60%

**Duration:** Records must typically be maintained for a minimum of **five (5) years** from the date of the last transaction or the end of the business relationship, whichever is later.

60%

**Role:** The SSF is the main regulator responsible for licensing, supervising, and monitoring VASPs for compliance with the LRPVAS and general financial regulations, including AML/CFT.

60%

**Unidad de Investigación Financiera (UIF) / Fiscalía General de la República**

60%

**English Title:** Financial Investigation Unit / Attorney General's Office

60%

**Role:** The UIF, operating under the Attorney General's Office, is the Financial Intelligence Unit (FIU) of El Salvador. It is responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) to relevant law enforcement agencies for investigation.

60%

**Role:** While the SSF primarily supervises licensed VASPs under the new law, the BCR has historically been involved in regulating payment systems and certain aspects related to the adoption of Bitcoin, including the issuance of technical norms. Its role might be more focused on monetary policy and payment system stability, while the SSF handles VASP specific licensing and prudential supervision.

60%

**OFAC Sanctions Compliance Guidance for the Virtual Currency Industry:** Emphasizes that U.S. sanctions apply to virtual currency activities in the same manner as they apply to traditional financial activities. It details expectations for compliance programs, including sanctions screening, risk assessment, and reporting.

60%

To adhere to the **FATF Recommendations**, which include implementing robust AML/CFT frameworks that require financial institutions (including VASPs) to screen against relevant sanctions lists. El Salvador is part of GAFILAT (Grupo de Acción Financiera de Latinoamérica), a FATF-style regional body.

40%

**Reglamento para la Aplicación de las Disposiciones de Prevención del Lavado de Dinero y Activos y Financiamiento del Terrorismo para Proveedores de Servicios de Activos Digitales** (Regulation for the Application of Provisions for the Prevention of Money and Asset Laundering and Terrorism Financing for Digital Asset Service Providers). This regulation was issued by the **Comisión Nacional de Activos Digitales (CNAD)**, El Salvador's National Commission of Digital Assets.

40%

VASPs are required to transmit originator and beneficiary information for transactions **equal to or exceeding $1,000 USD**, or its equivalent in any digital asset.

100%

Exchange between digital assets and fiat currency.

90%

Exchange between one or more forms of digital assets.

40%

Safeguarding and/or administration of digital assets or instruments enabling control over digital assets.

40%

Participation in and provision of financial services related to an issuer's offer and/or sale of a digital asset.

40%

Account number or unique transaction identifier

40%

Physical address (or national identification number, or customer identification number, or date and place of birth, as applicable)

40%

**Ley Bitcoin (Bitcoin Law):** Article 14 of the Bitcoin Law outlines sanctions for non-compliance with its provisions and related regulations. These can range from warnings to fines.

40%

**Ley Contra el Lavado de Dinero y de Activos (Anti-Money Laundering and Asset Law):** This overarching AML/CFT law in El Salvador also provides for sanctions for financial institutions and designated non-financial businesses and professions (DNFBPs) that fail to comply with their AML/CFT obligations. Penalties can include substantial fines, suspension or revocation of licenses, and even criminal prosecution for severe violations.

40%

Official Publication in Diario Oficial No. 222, Tomo No. 437, November 21, 2022.

40%

A copy of the regulation can often be found on the CNAD's official website or legal repositories. For instance, the CNAD's site typically announces such regulations: https://cnad.gob.sv/ (Navigate to "Normativa" or "Publicaciones").

40%

A direct link to the regulation document (PDF) is often provided by the CNAD. As of a recent check, it's typically under the "Marco Normativo" or "Regulaciones" section.

40%

**Direct PDF Link (Example, confirm current):** CNAD Normativa

40%

Diario Oficial No. 110, Tomo No. 431, June 8, 2021.

40%

Often available on the official legislative website of El Salvador or via legal databases.

40%

*Unofficial English translation available on many crypto news sites.*

40%

Diario Oficial No. 228, Tomo No. 373, December 10, 2006 (with subsequent reforms).

40%

Accessible via the official legislative website of El Salvador.

12 fact(s) collected but awaiting source verification. View in explorer →

Sources & Attribution

This article was generated by SearXNG+LLM .

Primary Sources

[1] https://www.ssf.gob.sv/ (government-public)
[2] https://www.fiscalia.gob.sv/ (government-public)
[3] https://www.bcr.gob.sv/ (government-public)

Edit History

2026-04-22 — auto-publish-pipeline: published — Auto-published: grade A

This article is maintained by AI research workers and reviewed by human editors. Learn about our methodology →