Self-custodial wallet / non-custodial software in Uruguay
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is permitted in Uruguay with no licensing burden.
Verdict Details
- Permitted
- yes
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach — the publisher never holds, controls, or has access to user funds, and is not an 'obligated subject' under Decreto N° 379/020 (uy.aml.decreto-n-379020-regulation-of)
- The VASP obligations under Uruguayan law (CDD, SARs, record-keeping, internal controls) apply only to entities performing defined activities such as exchange, transfer, safekeeping/administration, or participation in issuance of virtual assets (uy.aml.exchange-between-virtual-assets-and, uy.aml.safekeeping-andor-administration-of-virtual) — none of which are triggered by mere non-custodial software publishing (uy.licensing.bcu-stance-the-bcu-has)
Key Restrictions
- No licensing, registration, or AML obligations apply to the publisher of self-custodial wallet software, because the publisher never holds, controls, or accesses user funds
- The BCU has clarified that purely virtual asset activities not involving traditional financial intermediation generally do not fall under its licensing framework (uy.licensing.bcu-stance-the-bcu-has, uy.licensing.bcu-consideration-purely-virtual-asset)
- If the software publisher later expanded into custodial services, exchange, or fiat payment processing, it would then trigger UIAF registration and/or BCU licensing requirements (uy.licensing.if-processing-payments-involving-fiat)
Key Risks
- Regulatory ambiguity: The BCU has announced a future VASP regulatory framework (uy.enforcement.developing-a-regulatory-framework-the), and future legislation could expand the definition of VASP to include non-custodial software publishers
- Consumer-protection expectations may still arise if Uruguayan users suffer loss (e.g., from a software bug or security flaw), even where no formal financial regulation applies
- Reputational risk: Regulators may issue public warnings or guidance that discourages use of non-custodial wallets, creating indirect pressure on publishers (uy.enforcement.issuing-warnings-and-general-guidance)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
BCU Stance: The BCU has issued communications clarifying its position. While it acknowledges virtual assets, it has explicitly stated that they are not considered legal tender in Uruguay and virtual asset activities generally do not fall under the traditional financial intermediation framework (e.g., banking law) unless they involve activities that would traditionally require BCU authorization (e.g., taking public deposits, issuing e-money as a payment institution). The BCU monitors the sector and indicates the possibility of future, more specific regulation.
UIAF Role: The UIAF is the key authority for AML/CFT oversight of VASPs. VASPs are required to register with the UIAF and comply with AML/CFT regulations.
Requirement: Registration with the UIAF is mandatory for virtual asset exchanges operating in Uruguay. They are considered "obligated subjects" under AML/CFT law.
BCU Consideration: Purely virtual asset custody is not currently under BCU licensing. However, if the custody provider also offers regulated financial services or manages client funds in a way that falls under existing financial laws, BCU authorization would be required.
Decreto N° 379/020 (Regulation of Non-Financial Obligated Subjects and Activities Regulated by Law N° 19.574), dated December 23, 2020: This crucial decree explicitly includes "providers of virtual asset services" (proveedores de servicios de activos virtuales) as obligated subjects (sujetos obligados) under the AML/CFT framework. This brought VASPs directly under the regulatory scope, requiring them to comply with the same AML/CFT obligations as traditional financial institutions and other designated non-financial businesses and professions (DNFBPs).
Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.
Exchange between virtual assets and fiat currencies.
Developing a regulatory framework: The BCU presented a preliminary proposal for regulating Virtual Asset Service Providers (VASPs) in 2021, and work is ongoing.
Issuing warnings and general guidance: Advising the public on risks and clarifying that virtual assets are not legal tender.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Yes — a publisher of self-custodial/non-custodial wallet software can operate in Uruguay without any licensing, registration, or AML obligations, because the publisher never holds, controls, or accesses user funds and therefore does not meet the definition of a VASP or obligated subject under current UY law; however, future VASP-specific regulation is under development.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?