How to Start a Remittance Business in Panama: MRO Licensing, SBP Registration, UAF AML Notice and Banking Access

Panama sits at the crossroads of the Americas, a dollarised economy, a deep banking sector, and a regulatory framework that is actively being modernised to accommodate fintech-driven money flows. For founders and compliance teams working out how to start a remittance business, Panama presents a compelling jurisdiction, but one that demands a precise understanding of its multi-regulator landscape. The Superintendency of Banks of Panama (SBP) oversees the payments perimeter and registration of money remittance operators (MROs), while the Unidad de Análisis Financiero (UAF), Panama’s financial intelligence unit, sets AML/CTF reporting obligations and requires formal notice from new operators. Getting both of these right, and then securing a Panamanian bank account, is where most projects succeed or stall.

Quick Decision Checklist: Should You Pursue a Licensed MRO in Panama?

Before committing capital and months of compliance work, founders should pressure-test their readiness against the five criteria below. Each one maps directly to a regulatory gate or a banking requirement that will surface during the licensing process for Panama money remittance licenses.

• Business model clarity. Can you articulate every step of the payment flow, sender onboarding, FX conversion, settlement, payout, in a single diagram? Regulators and banks will demand it.
• Projected volumes and corridors. Are your anticipated monthly transaction volumes and corridor pairs (e.g., US-to-Panama, Colombia-to-Panama) large enough to justify a full MRO licence, or would a white-label or agent arrangement be a more efficient entry point?
• Banking appetite. Do you already have a relationship with a Panamanian or regional correspondent bank willing to entertain money-service-business (MSB) clients? If not, budget three to six months of bank prospecting into your timeline.
• AML maturity. Do you have, or can you build within 60 days, a written AML/CTF programme that satisfies UAF reporting standards and FATF guidance on customer due diligence (CDD), transaction monitoring, and suspicious transaction reporting (STR)?
• Capital and governance. Can you demonstrate paid-in capital or liquidity safeguards, appoint a qualified compliance officer resident in or accessible to Panama, and provide fit-and-proper documentation for every beneficial owner above the applicable threshold?

If two or more answers are “no,” industry observers expect a white-label or correspondent-agent model will be the faster route to market. You can revisit full licensing once volumes and compliance infrastructure mature.

Panama Regulatory Overview: Which Regulators and Laws to Know

Understanding which regulator owns which part of the remittance value chain is the first compliance task for anyone learning how to start a remittance business in Panama. Three institutions matter most, and their mandates occasionally overlap.

Superintendency of Banks of Panama (SBP)

The SBP supervises the banking system and, critically, the non-bank financial entities that fall within the payments perimeter. Money remittance operators must register with the SBP and comply with its circulars governing capital adequacy, operational controls, and prudential reporting. The SBP also maintains the official register of licensed money-service businesses, a register that Panamanian banks will check before opening an operational account for any MRO applicant.

Unidad de Análisis Financiero (UAF)

The UAF is Panama’s financial intelligence unit. Its mandate covers AML/CTF programme oversight, receipt of suspicious transaction reports (STRs), and the initial AML notice that new remittance operators must file. The UAF publishes reporting forms, CDD templates, and guidance notes on transaction-monitoring thresholds, all essential inputs for your compliance programme.

Ministry of Commerce and Industries (MICI)

The MICI handles the commercial registration of all Panamanian legal entities. Before applying to the SBP, a remittance company must be validly incorporated and registered through MICI’s corporate-registry processes. Certain payment-service policies may also intersect with MICI’s commercial regulations.

Key Documents to Pull Before Applying

• SBP circulars on non-bank financial entities and payment services, available through the SBP’s regulatory-publications portal.
• UAF reporting guidelines and AML notice forms, downloadable from the UAF website.
• FATF Recommendations and guidance on money-value-transfer services, available at fatf-gafi.org, setting the international baseline Panama’s framework aligns with.
• Official Gazette (Gaceta Oficial) publications, for enacted laws and executive decrees that affect the payments sector.
• National Assembly (Asamblea Nacional) legislative tracker, to monitor the status of any draft bills affecting remittance regulation.

How to Start a Remittance Business: Licensing Pathways, MRO vs PSP/EMI vs VASP vs Agent Models

Not every remittance founder needs the same Panama money remittance licence. The right structure depends on product scope, risk appetite, and speed-to-market priorities. Below is a decision-tree summary followed by a detailed comparison table.

• MRO (Money Remittance Operator). The standard path for businesses whose core activity is cross-border or domestic money transfers. Requires SBP registration, a UAF AML notice, a compliance officer, and capital/liquidity safeguards. This is the path most founders envision when they ask how to set up a remittance business.
• PSP (Payment Service Provider). Broader than pure remittance, covers merchant acquiring, payment processing, or aggregation. Regulatory touchpoints may involve the SBP or commerce-ministry oversight depending on the scope of activities, plus mandatory UAF reporting.
• EMI (Electronic Money Issuer). An EMI issues stored-value or e-money instruments. This carries the heaviest prudential load: capital requirements, safeguarding (segregation) of customer funds, operational-resilience standards, and full AML/CTF programme obligations. In Panama, the EMI route is relevant only where the product involves issuance of a prepaid instrument or digital wallet with stored balances.
• VASP (Virtual Asset Service Provider). If the remittance product includes crypto-settlement rails or stablecoin payouts, a VASP registration layer may apply. The regulatory perimeter here is evolving, confirm the current position with the SBP and UAF before structuring.
• Agent or white-label model. For founders who want to launch quickly without holding their own licence, operating under an existing licensee’s umbrella (as an agent or via a white-label platform) reduces regulatory burden but limits margins and control. AML obligations still apply at the agent level.

Comparison Table: Reporting Obligations by Entity Type

Industry observers expect the SBP to continue tightening the definitions between these categories as Panama’s payments framework matures, founders should confirm the latest classification guidance directly with the SBP before filing.

Step-by-Step MRO Application Process (Panama)

The MRO application is a multi-stage process that engages both the SBP and UAF. Below is a consolidated checklist that sequences the work in the order regulators, and, crucially, banks, expect to see it.

1. Incorporate the Panamanian entity. Register a sociedad anónima (S.A.) or equivalent corporate vehicle through MICI. Obtain the public-registry certificate, articles of incorporation (pacto social), and tax identification (RUC).
2. Prepare the beneficial-ownership disclosure. Identify every ultimate beneficial owner (UBO). Draft a complete ownership-chain diagram down to natural persons. The SBP and banks will each require this independently.
3. Appoint a compliance officer. The individual must be qualified in AML/CTF and either resident in Panama or demonstrably accessible to the regulators. Prepare a CV, professional certifications, and a signed acceptance letter.
4. Draft the AML/CTF programme. This is the single most scrutinised document in the entire application. It must cover: customer due diligence (CDD) and enhanced due diligence (EDD) procedures; transaction-monitoring rules and thresholds; STR escalation and filing procedures to the UAF; sanctions and PEP screening protocols; record-retention policies (aligned with FATF standards); and staff-training schedules.
5. Compile fit-and-proper documentation. For each director, officer, and UBO: police-clearance certificates, professional references, source-of-funds declarations, and sworn statements of no criminal record.
6. Prepare the transaction-flow diagram. Map every leg of the remittance: sender onboarding → KYC verification → fund receipt → FX conversion (if applicable) → settlement → payout delivery. Note which legs are handled in-house and which are outsourced to third-party providers.
7. Document technology and information-security controls. Provide an overview of the core transfer system, data-encryption standards, cybersecurity protocols, business-continuity and disaster-recovery plans, and third-party vendor due-diligence records.
8. File the SBP registration application. Submit the complete package, corporate documents, UBO disclosures, compliance-officer appointment, AML programme, fit-and-proper files, transaction-flow diagram, and technology controls, to the SBP.
9. File the UAF AML notice. Concurrently or immediately after the SBP submission, file the formal AML notification with the UAF. This notice informs the FIU that a new reporting entity is entering the market and triggers the UAF’s oversight responsibilities.
10. Respond to regulator queries. Both the SBP and UAF may issue follow-up questions or requests for supplementary documents. Budget time and resources for at least one round of clarifications.

Timeline and Typical Processing Times

Note: verify current processing timelines directly with the SBP and UAF before filing. Timelines shift based on application quality, regulator workload, and any pending legislative changes.

UAF AML Notice and Programme, What Regulators Expect

The UAF AML notice is more than an administrative formality, it is the gateway document that places your remittance operation on the FIU’s supervisory radar and triggers ongoing reporting obligations. Failing to file it, or filing a deficient programme, is one of the most common reasons applications stall.

What Triggers the UAF Notice

Any entity that will receive, transfer, or pay out funds on behalf of third parties, whether domestically or cross-border, falls within the UAF’s reporting perimeter. The trigger is the nature of the activity, not the volume. Even pre-revenue operators planning to handle remittances must file before commencing operations.

Required AML Programme Components

The UAF’s expectations align closely with FATF Recommendations on money-value-transfer services. At a minimum, your programme must include:

• Customer Due Diligence (CDD) procedures. Tiered onboarding: simplified CDD for low-risk, low-value transactions; standard CDD for regular users; enhanced due diligence (EDD) for high-risk customers, PEPs, and non-face-to-face onboarding.
• Transaction-monitoring rules. Automated or rule-based monitoring that flags transactions exceeding locally prescribed thresholds, unusual patterns (structuring, rapid-fire transfers), and cross-border flows to or from high-risk jurisdictions.
• STR escalation and filing. A documented internal escalation path, from analyst to compliance officer to the UAF, with clear timelines. The UAF publishes STR reporting forms on its website; operators must use these forms and file within the prescribed period.
• Sanctions and PEP screening. Real-time or batch screening against Panama’s domestic sanctions lists, UN sanctions, OFAC SDN lists, and EU consolidated lists. Document your screening vendor, refresh frequency, and false-positive handling.
• Record retention. Retain all CDD records, transaction data, and STR documentation for the period specified under Panama’s AML framework, aligning with the FATF’s minimum of five years from the end of the business relationship or date of the transaction.
• Staff training. Annual (minimum) AML/CTF training programme covering CDD, red-flag detection, STR procedures, and sanctions compliance. Maintain dated training records for regulator inspection.

Sample UAF Notice Cover-Letter Elements

While the exact format should be confirmed against the current UAF filing templates, the cover letter accompanying your AML notice typically addresses:

• The legal name, RUC, and registered address of the applicant entity.
• A description of the remittance services to be provided, including corridors and anticipated volumes.
• The name and contact details of the designated compliance officer.
• A confirmation that the attached AML/CTF programme has been approved by the entity’s board of directors.
• A commitment to file STRs in accordance with UAF procedures and timelines.

Banking and Correspondent Access: How to Build the Bank Pack

Securing a Panamanian bank account is routinely the longest, and most uncertain, phase when learning how to start a remittance business. Banks classify remittance operators as high-risk clients and subject them to enhanced due diligence. The quality of your “bank pack” (the due-diligence package you present to relationship managers) directly determines whether and how quickly a bank will onboard you.

Bank Pack Checklist

• Corporate documents. Certified copy of articles of incorporation, public-registry certificate, board resolutions authorising the account opening, and good-standing certificate.
• Beneficial-ownership declaration. Full ownership chain to natural persons, with passport copies and proof of address for each UBO.
• SBP registration confirmation. Evidence that the MRO application has been filed or approved, banks will verify this against the SBP’s register.
• AML/CTF programme. The same programme filed with the UAF, demonstrating the bank that the operator’s controls meet regulatory and FATF standards.
• Risk assessment. A written self-assessment covering: customer-risk profile, geographic risk (corridors), product/service risk, and delivery-channel risk.
• Transaction-flow diagram. The end-to-end flow chart showing every leg of the remittance, including funding sources, FX points, settlement mechanisms, and payout channels.
• Payout-partner agreements. Copies of agreements with downstream payout partners (cash-pickup agents, mobile-money operators, correspondent banks in destination countries).
• Projected volumes and corridors. A 12-month financial projection showing anticipated transaction counts, average ticket sizes, total volumes per corridor, and fee/FX revenue.
• Sanctions and PEP screening documentation. Evidence of the screening vendor or system in use, sample screening results, and your false-positive resolution procedures.
• Technology and cybersecurity overview. Summary of the core platform, data-encryption standards, penetration-testing schedule, and SOC 2 or equivalent certifications (if held).
• Compliance-officer credentials. CV, certifications, and appointment letter for the designated officer.

Practical Tactics to Win a Panamanian Bank (or Regional Correspondent)

Presenting a complete bank pack is necessary but not always sufficient. The following negotiation and risk-mitigation tactics can improve acceptance rates:

• Offer EDD access. Proactively offer the bank full visibility into your transaction-monitoring dashboard and commit to providing periodic compliance reports.
• Propose staged onboarding. Suggest starting with a limited corridor or capped volume, scaling up once the bank is comfortable with your compliance track record.
• Maintain higher liquidity. Offering to maintain a larger-than-required operational balance signals financial stability and reduces the bank’s credit-risk concerns.
• Provide third-party references or guarantees. Letters of good standing from regulators in other jurisdictions, or a guarantee from a parent company or investor, can bolster credibility.
• Consider regional correspondents. If Panamanian domestic banks prove difficult, explore correspondent relationships with regional banks in jurisdictions with established MSB-onboarding practices.

The question of whether a non-resident can open a bank account in Panama for a remittance company arises frequently. The short answer is yes, Panamanian banks do accept non-resident corporate accounts. However, they will impose heightened KYC requirements: expect requests for a local representative or registered agent, in-person meetings (or video-verified alternatives), and a more extensive bank pack than would be required for a domestic applicant.

Operational Set-Up: Tech, Payouts, Fee and FX Design

With licensing filed and banking in progress, founders must build the operational backbone. The technology, payout-rail, and pricing decisions made at this stage directly affect compliance posture, unit economics, and scalability.

Technology Choices

• White-label platforms. Fastest to market, vendors provide a pre-built transfer engine, compliance-screening integrations, and customer-facing apps. The trade-off is limited customisation and dependency on the vendor’s roadmap.
• API-first remittance platforms. A middle ground, founders integrate a core transfer API into their own front-end, retaining brand control while outsourcing settlement and compliance tooling.
• Full proprietary build. Maximum control and margin, but requires significant engineering investment, PCI-DSS or equivalent certifications, and in-house maintenance of AML screening and transaction-monitoring engines.

Payout Rails and Local Partners

Panama’s dollarised economy simplifies USD settlement, but payout methods vary by corridor. Common options include bank-credit transfers through local clearing (ACH Panama), cash-pickup via agent networks, mobile-money wallets in destination countries, and direct-to-card disbursements. Each payout method carries its own reconciliation, chargeback, and regulatory reporting profile, map these before launch.

How Do Remittance Companies Make Money?

Revenue in remittance operations typically flows from three streams: per-transaction fees charged to the sender or receiver; foreign-exchange margins on currency conversion; and volume-based rebates or interchange from payout-network partners. Pricing design must balance competitiveness with compliance cost recovery, particularly the costs of AML screening, STR preparation, and regulator filings.

Post-Licence Compliance and Scaling: Monitoring, Audits, and Enforcement Risk

Obtaining the licence is the beginning, not the end, of the compliance obligation. Ongoing duties are what keep the licence valid and the bank relationship intact.

• UAF reporting cadence. File STRs within the timeframes prescribed by the UAF. Maintain an internal log of all STRs filed, regulators may request a summary during inspections.
• SBP periodic filings. Submit the periodic reports required by SBP circulars, typically covering transaction volumes, capital positions, and compliance-programme updates.
• Internal audit schedule. Conduct an independent AML/CTF programme audit at least annually. Document findings, remediation actions, and board sign-off.
• Record retention. Maintain CDD files, transaction records, STR copies, and audit reports for the minimum retention period under Panama’s AML framework.
• Regulator engagement. Respond to SBP and UAF queries promptly. Delayed or evasive responses are among the most common triggers for formal enforcement action.
• Staff re-training. Update AML training materials annually (or more frequently if regulations change) and maintain dated attendance records.

Remediation Checklist for Enforcement-Trigger Scenarios

• Immediately preserve all relevant records and transaction data.
• Engage external legal counsel with SBP and UAF experience.
• Conduct a root-cause analysis and document the findings.
• Submit a remediation plan to the relevant regulator within the prescribed response window.
• Implement corrective controls and obtain independent verification of effectiveness.

Conclusion: How to Start a Remittance Business in Panama, Immediate Next Steps

Launching a licensed remittance operation in Panama is a sequential, regulator-driven process. Every step, from corporate formation through SBP registration, UAF AML notice, bank-pack preparation, and technology build, feeds into the next. Founders who approach the process with a complete compliance programme, transparent beneficial-ownership documentation, and a well-assembled bank pack will move through the pipeline significantly faster than those who treat regulatory filings as afterthoughts.

For founders and compliance teams ready to act, the immediate checklist is:

1. Incorporate the Panamanian entity through MICI and obtain the public-registry certificate and RUC.
2. Draft the full AML/CTF programme aligned with UAF requirements and FATF guidance.
3. Assemble the bank pack, beneficial-ownership disclosures, transaction-flow diagrams, projected volumes, and technology-security documentation.
4. File the SBP registration application and the UAF AML notice concurrently.
5. Select the technology path (white-label, API, or proprietary) and negotiate payout-partner agreements.
6. Engage qualified Panama FinTech legal counsel to review each filing, negotiate bank relationships, and manage regulator interactions.

Sources

1. Superintendency of Banks of Panama (SBP)
2. Unidad de Análisis Financiero (UAF), Panama FIU
3. Ministry of Commerce and Industries (MICI), Panama
4. Gaceta Oficial / Official Gazette (Panama)
5. Financial Action Task Force (FATF)
6. Panama National Assembly (Asamblea Nacional)