Last reviewed: 30 April 2026. Legislative status should be reconfirmed before relying on this guide.
Panama’s Anteproyecto de Ley No. 314, the Ley Marco Integral de Tecnologías Financieras, was introduced on 13 January 2026 and, for the first time, proposes dedicated licensing for virtual-asset service providers (VASPs), payment service providers (PSPs) and electronic-money issuers (EMIs). Simultaneously, the Superintendencia de Bancos de Panamá (SBP) published Acuerdo No. 01‑2026, tightening AML/CFT documentary requirements for account opening and ongoing monitoring. Together, these instruments redefine how fintechs enter Panama, maintain banking relationships and build compliant operations.
Anteproyecto de Ley No. 314 is the first comprehensive fintech bill presented to Panama’s Asamblea Nacional. Filed on 13 January 2026, it aims to create a single legislative framework, the “Ley Marco Integral de Tecnologías Financieras”, governing virtual-asset activities, digital payment services, electronic-money issuance and a formal regulatory sandbox. The bill was announced through the Asamblea’s legislative news portal and its full text was made available through local outlets including Panama Banking News.
The draft responds to longstanding gaps in Panamanian regulation. Until January 2026, crypto exchanges, token custodians and payment aggregators operated without a purpose-built licensing regime, relying instead on general corporate law and ad hoc compliance with AML expectations. Industry observers expect Draft Law 314 to bring Panama closer to international standards, particularly those set by the FATF for virtual-asset regulation.
The draft law introduces formal statutory definitions for three principal entity categories. Understanding which category applies is the first step in any licensing strategy under the Panama fintech law 2026 framework:
As of April 2026, the bill has completed its introduction phase in the Asamblea Nacional. It must pass through committee review, two plenary debates and presidential assent before becoming law. The Chambers & Partners Fintech 2026 Panama practice guide noted that the timeline for fintech legislation in Panama has historically been subject to delay, though the current administration has signalled political support. Early indications suggest the committee stage could extend into the second half of 2026, meaning operators should treat the draft as a highly probable, though not yet enacted, regulatory obligation.
While Draft Law 314 works its way through the Asamblea, the SBP has already acted. Acuerdo No. 01‑2026, published in January 2026, applies immediately to all entities subject to SBP supervision. It raises the bar for AML/CFT documentation at the point of account opening and throughout the client relationship, with direct consequences for every fintech seeking or maintaining banking access in Panama.
The rule clarifies which documents financial institutions must collect and retain, how they should verify the economic activity of account holders, and what ongoing monitoring obligations look like. For fintechs, the practical effect is twofold: banks will demand more documentation up front, and they will terminate relationships more readily when documentary gaps emerge.
SBP Rule 1‑2026 prescribes a structured documentary pack that banks must collect before onboarding any business client, with enhanced obligations for higher-risk profiles such as fintech and virtual-asset businesses:
Panama’s banks operate within a correspondent-banking ecosystem that is sensitive to international reputational pressure. SBP Rule 1‑2026 signals to correspondent banks, particularly in the United States and Europe, that Panama is tightening controls. The likely practical effect, however, is a period of increased caution. Banks may narrow the categories of fintech clients they are willing to onboard until internal compliance teams have fully absorbed the new standards. Fintechs that arrive with a complete, regulator-aligned documentary pack will hold a significant competitive advantage in securing and retaining accounts.
Not every fintech will need the same authorisation. Draft Law 314 differentiates licensing triggers by the nature of the service offered. The comparison table below maps entity types to their core activities, licensing triggers and AML reporting obligations as described in the draft text and aligned with SBP Rule 1‑2026.
| Entity Type | Licensing Trigger (Draft Law 314) | SBP / AML Reporting Highlights |
|---|---|---|
| VASP (Crypto exchange / custody / transfer) | Operating an exchange between virtual assets and fiat, between virtual assets, or providing custodial wallets or transfer services. Must register, obtain a licence and be included in the public registry of licensed VASPs. | Enhanced KYC for virtual-asset transactions; transaction monitoring for all cross-border transfers; suspicious-activity reporting to the UAF (Unidad de Análisis Financiero). |
| PSP / Payment Institution | Handling customer funds for payment processing, remittances or clearing. Includes payment aggregators and gateways processing fiat or hybrid (fiat-crypto) transactions. | Standard KYC under SBP Rule 1‑2026; additional documentary proof for high-risk corridors; ongoing monitoring and reporting for transfers exceeding prescribed thresholds. |
| EMI / Card Issuer | Issuing electronic money, stored-value cards or e-money tokens where the issuer maintains a float and a reconciliation obligation. | Prudential and fit-and-proper checks for directors and UBOs; periodic reporting on float positions, reconciliation controls and safeguarding arrangements. |
Draft Law 314 designates the SBP as the primary supervisory authority for VASPs, PSPs and EMIs. The Asamblea Nacional retains legislative oversight. The Unidad de Análisis Financiero (UAF) will handle suspicious-activity reports. For securities-token activities, operators should also assess whether the Superintendencia del Mercado de Valores (SMV) asserts jurisdiction.
Obtaining a licence under the anticipated Panama fintech law 2026 framework requires structured preparation well before the application itself. The following roadmap reflects best-practice sequencing drawn from the draft law’s requirements and the documentary expectations set out in SBP Rule 1‑2026.
| Step | Typical Duration | Responsible Party |
|---|---|---|
| 1. Corporate structuring, incorporate a Panamanian entity (S.A. or SRL); appoint local directors and registered agent | 2–4 weeks | Legal counsel + corporate services provider |
| 2. AML/CFT program development, draft compliance manual, appoint compliance officer, build KYC/CDD workflows | 3–6 weeks | Compliance consultant + legal counsel |
| 3. Technology and custody audit, document tech stack, cybersecurity controls, custody/safeguarding arrangements | 4–8 weeks | CTO / external auditor |
| 4. Bank-ready documentary pack, assemble all documents per SBP Rule 1‑2026 (see Appendix below) | 2–4 weeks | CFO / legal counsel |
| 5. Pre-application dialogue with SBP, informal engagement to confirm entity classification and documentary completeness | 2–4 weeks | Legal counsel |
| 6. Formal licence application, submit application pack to SBP with all supporting documents | 1–2 weeks (preparation); processing TBD | Legal counsel + compliance officer |
| 7. Regulator review and Q&A cycle, respond to SBP queries, provide supplementary evidence | 8–16 weeks (estimate) | All stakeholders |
| 8. Licence grant + public-registry publication, commence supervised operations | Upon approval | SBP / applicant |
Before filing an application, fintechs should secure at least one banking relationship. Under the current environment, shaped by SBP Rule 1‑2026, banks will require the same documentary pack used in the licence application, plus additional items specific to the bank’s internal risk appetite. Open a dialogue with relationship managers early, provide a payment-flow map and a narrative description of the business model, and be prepared to answer questions about counterparty risk, settlement channels and expected transaction volumes.
Draft Law 314 formalises a regulatory sandbox that permits qualifying firms to test innovative financial products under a temporary, supervised regime. Sandbox participants operate under limited permissions and enhanced reporting obligations but benefit from shorter entry times compared to full licensing. To apply:
The draft law contains transitional provisions allowing existing operators a defined period to regularise their status. While the exact duration will be confirmed upon enactment, early engagement with the SBP is strongly advised. Operators already active in Panama should begin assembling their documentary packs and conducting gap analyses against the draft law’s requirements now, rather than waiting for the transitional clock to start.
Securing and maintaining banking relationships is the single most critical operational challenge for fintechs in Panama. SBP Rule 1‑2026 has raised the bar, and the anticipated enactment of Draft Law 314 will only increase banks’ scrutiny of unlicensed or underprepared operators. The strategy below addresses both the initial onboarding and the ongoing relationship management that prevents de-banking.
Before any meeting with a bank’s compliance team, fintechs should prepare a visual payment-flow diagram that clearly shows:
This flow diagram should be accompanied by a narrative explaining the business model in plain language. Avoid jargon, the bank’s compliance officer may not be a fintech specialist.
The following checklist consolidates requirements from SBP Rule 1‑2026 and typical Panamanian bank internal policies. Fintechs should prepare all items before approaching a bank:
Banks evaluate fintechs not only on documentation but on the clarity and predictability of their operational flows. To reduce friction:
A robust AML/CFT program is no longer optional, it is the gateway to both licensing and banking access. SBP Rule 1‑2026 specifies the documentary evidence banks must see, and Draft Law 314 will impose direct AML obligations on licensed VASPs, PSPs and EMIs. The program should cover the following core areas, aligned with both instruments and with FATF guidance on virtual assets:
An effective SAR process follows a seven-step escalation path:
Draft Law 314 envisions a graduated enforcement regime. While specific fine amounts will be confirmed upon enactment, the draft contemplates administrative fines, licence suspension and licence revocation for material non-compliance. The SBP retains authority to conduct on-site and off-site examinations of licensed entities and to require remedial action within defined timelines.
The following action checklist distils the guidance above into ten prioritised steps. Where you are unsure which licensing category applies or how to structure your Panama banking access strategy for fintech operations, seek specialist legal advice.
| Priority | Action |
|---|---|
| Immediate | 1. Map your services against Draft Law 314’s VASP, PSP and EMI definitions to determine which licence(s) you need. |
| Immediate | 2. Assemble a bank-ready documentary pack per the 30-item checklist (see Appendix) aligned with SBP Rule 1‑2026. |
| Immediate | 3. Review and update your AML/CFT program to meet the enhanced documentary expectations. |
| Within 30 days | 4. Engage a Panamanian registered agent and incorporate or restructure your local entity. |
| Within 30 days | 5. Appoint a local compliance officer and begin staff AML training. |
| Within 30 days | 6. Open dialogue with at least two Panamanian banks, present your payment-flow diagram and documentary pack. |
| Within 90 days | 7. Commission a technology and custody audit (for VASPs) or a safeguarding-arrangements review (for EMIs). |
| Within 90 days | 8. Prepare and submit a pre-application package to the SBP for informal review. |
| Within 90 days | 9. If testing a new product, prepare a regulatory-sandbox application with a 12–24 month test plan. |
| Ongoing | 10. Monitor the Asamblea Nacional for legislative updates on Draft Law 314’s committee progress and enactment date. |
For a comprehensive comparison of VASP licensing requirements across jurisdictions, or to review Panama’s existing crypto-licence framework, see the linked guides. Those planning to launch a crypto exchange will find the technical and legal steps detailed separately. Compliance teams benchmarking against US requirements may also consult our MSB licence guide for crypto and payment businesses.
The checklist below consolidates the 30 items listed in the banking-access section above into a printable format. Each item is cross-referenced to its source obligation, either SBP Rule 1‑2026 or Draft Law 314’s anticipated requirements.
| # | Document | Source Obligation |
|---|---|---|
| 1 | Certificate of incorporation | SBP Rule 1‑2026 |
| 2 | Articles of association (Pacto Social) | SBP Rule 1‑2026 |
| 3 | Public-registry extract (certificación vigente) | SBP Rule 1‑2026 |
| 4 | Board resolution authorising account opening | Bank internal policy |
| 5 | Directors list with certified ID copies | SBP Rule 1‑2026 |
| 6 | UBO declaration (25 %+ threshold) | SBP Rule 1‑2026 |
| 7 | Certified passport copies, all UBOs | SBP Rule 1‑2026 |
| 8 | Proof of address, all UBOs | SBP Rule 1‑2026 |
| 9 | Professional reference letters | Bank internal policy |
| 10 | Bank reference letters | SBP Rule 1‑2026 |
| 11 | Audited financial statements / management accounts | SBP Rule 1‑2026 |
