Payment Facilitators in Panama: Licensing, AML Supervision & Card‑network Requirements

Payment facilitator Panama models are under fresh scrutiny, and any founder, PSP or marketplace planning to onboard sub‑merchants in the country needs to understand the regulatory landscape. The Superintendencia de Bancos de Panamá (SBP) and the Intendencia de Supervisión y Regulación de Sujetos No Financieros maintain anti‑money‑laundering governance and oversight expectations that directly affect how payment facilitators onboard merchants, monitor transactions, structure settlement and allocate liability. This practical guide explains whether you need a licence, how Panamanian AML rules reshape compliance obligations, which BIN sponsorship routes exist, and how card‑network requirements from Visa and Mastercard interact with Panamanian supervision.

The aim is to give you an actionable roadmap, licensing answer, AML impact, onboarding checklist and settlement architecture, before you commit to a BIN sponsor or a local partnership.

This is practical guidance, not legal advice. Licensing decisions and contract drafting should be confirmed with Panama‑licensed counsel. Any specific rule reference should be verified against the current official text published by the relevant authority.

What is a payment facilitator (PayFac) in Panama?

A payment facilitator aggregates many smaller businesses, “sub‑merchants”, under a single master merchant relationship, allowing them to accept card and electronic payments quickly without each one opening its own merchant account. In Panama, as elsewhere, the model collapses weeks of individual onboarding into a streamlined process, which is why marketplaces, SaaS platforms and vertical software providers favour it. Understanding where a payment facilitator Panama operation sits in the payment chain is the first step to assessing its regulatory footprint.

Definition and common models

There are three recurring structures to distinguish:

• True PayFac (sub‑merchant aggregator). The facilitator holds a master merchant account under an acquirer or BIN sponsor and boards sub‑merchants beneath it, taking responsibility for their onboarding, screening and often settlement.
• Payment aggregator Panama variant. Functionally similar, aggregating transaction volume across many merchants into a single acquiring relationship, frequently used by platforms seeking fast activation.
• Merchant of Record (MoR). The entity becomes the legal seller of record for the transaction, assuming the contractual relationship with the cardholder, the tax exposure and most compliance responsibility, then paying out to the underlying businesses.

Each model changes who holds funds, who contracts with the cardholder and who answers to the regulator, distinctions that matter enormously under Panama’s AML framework.

How a PayFac differs from an acquirer or PSP

An acquirer is the licensed financial institution that holds the merchant account, connects to the card networks and ultimately settles funds. A payment service provider (PSP) typically supplies the technical gateway and processing. A payment facilitator sits between them and the merchant: it uses the acquirer’s licence and BIN, but takes on the commercial and compliance work of recruiting and managing sub‑merchants. In practice the acquirer carries the regulated settlement activity, while the facilitator carries onboarding, risk screening and transaction oversight. The key difference is that a PayFac onboards sub‑merchants under a single master merchant account rather than arranging a separate account for each business.

Pros and cons of the PayFac model in Panama

The upside is speed and scale: sub‑merchants activate quickly, and the platform owns the customer relationship. The downside is concentrated compliance risk. The facilitator inherits responsibility for knowing each sub‑merchant, monitoring their activity and reporting suspicious behaviour, obligations that Panama’s AML regime makes demanding for any payment facilitator Panama operation.

Licensing status, do you need a payfac license in Panama?

The single most common question is whether a payfac license Panama is required. The honest answer is that it depends on exactly which activities you perform, who holds the funds, and whether your service targets Panamanian merchants. There is no one‑size‑fits‑all licence that says “payment facilitator”; instead, the regulatory trigger turns on whether you are carrying out activities that fall within the SBP’s supervisory remit or within the AML obligations enforced by Panama’s financial intelligence unit, the Unidad de Análisis Financiero (UAF). The practical consequence is that two superficially similar PayFac businesses can have completely different licensing outcomes depending on their fund‑flow design.

Which activities trigger SBP licensing or registration

As a practical interpretation, the activities most likely to attract regulatory attention are those where the facilitator holds, controls or settles customer funds, initiates payments, or performs functions that look like regulated financial intermediation. Where a facilitator merely provides software and the acquirer handles the regulated money movement, the licensing burden is typically lighter, but the AML obligations do not disappear. Key questions a payment facilitator Panama business should work through include:

• Fund holding. Do you take custody of settlement funds before paying sub‑merchants, or does the acquirer settle directly?
• Payment initiation. Are you initiating or authorising transactions, or only passing data?
• Customer relationship. Is the master merchant account and acquiring relationship in your name or the sponsor’s?
• AML responsibility. Even without an SBP banking licence, acting as an intermediary in the payment chain can bring you within the AML and reporting obligations supervised under Panama’s framework.

Because the SBP and UAF frameworks are the primary reference points, any assessment should be validated against the current regulatory text and supervisory guidance rather than assumptions carried over from other markets.

Foreign PayFacs serving Panamanian merchants

A frequent commercial scenario is a foreign payment facilitator wanting to serve Panamanian merchants and settle cross‑border without establishing a local licensed entity. This is possible in limited configurations, but it carries real friction. Where the service is actively marketed to and used by Panamanian businesses, Panamanian supervisors may expect transaction visibility and may treat the arrangement as falling within local oversight. Even where a foreign structure is technically workable, local acquirers and banks frequently insist on a local arrangement, a sponsor, agent or branch, before they will support the BIN. The practical reality is that cross‑border‑only models often fail at the banking relationship stage even when they survive the legal analysis.

Practical bank expectations and contractual controls

Banks and acquirers in Panama will generally expect a robust AML programme, contractual access to sub‑merchant data, audit rights and clear liability allocation before sponsoring a payment facilitator. These commercial requirements often exceed the bare legal minimum, so treat the bank’s due‑diligence checklist as a practical gatekeeper to market entry.

Panamanian AML supervision, what it means for PayFacs

Panama’s AML/CFT regime, anchored in Law 23 of 2015 (as amended) and the regulations issued under it, is the regulatory backbone that shapes how payment facilitators must design their onboarding, monitoring and settlement architecture. For facilitators, the headline is that the expectation of transaction‑level visibility and documented customer due diligence reaches down to the sub‑merchant layer, not just the master merchant relationship. Panama has invested heavily in strengthening this framework following the Financial Action Task Force (FATF) monitoring of recent years.

Key obligations that affect PayFac architecture

While the precise section references should be confirmed against the official regulatory text, the practical thrust of the framework for intermediaries centres on a cluster of reinforced obligations:

• Enhanced customer due diligence (CDD/KYC). Strong identification and verification requirements, applied not only to direct clients but to the sub‑merchants a facilitator boards.
• Beneficial ownership verification. Identifying and verifying the natural persons who ultimately own or control each sub‑merchant, an area the FATF has repeatedly emphasised for Panama.
• Transaction monitoring. Ongoing, risk‑based monitoring with the ability to see transaction‑level activity, detect anomalies and act on them.
• Reporting obligations. Clear lines to the UAF for suspicious transaction reporting, with defined internal escalation.
• Record retention and audit rights. Maintaining documentation and audit trails so that supervisors and sponsors can reconstruct onboarding decisions and monitoring actions.

The architectural implication is significant: a facilitator that previously relied on the acquirer to “own” compliance cannot safely assume that position. The facilitator needs its own data access, its own monitoring capability and its own records.

Practical compliance implications for onboarding, monitoring and settlements

In practice, the framework pushes payment facilitators towards tighter integration between their onboarding systems, their monitoring tools and their settlement logic. Sanctions and watchlist screening must run at onboarding and on an ongoing basis. Transaction monitoring must be able to flag velocity spikes, mismatches between declared and actual activity, and other red flags at the sub‑merchant level. Settlement should be designed so that funds can be held, delayed or reversed where compliance concerns arise, rather than paid out automatically. As a practical interpretation, facilitators that cannot demonstrate this end‑to‑end control to their sponsor bank will struggle both to secure sponsorship and to satisfy supervisory expectations.

Onboarding and monitoring sub‑merchants

Sub‑merchant onboarding Panama is where the AML framework bites hardest, because the facilitator is the party that actually recruits and screens the underlying businesses. A defensible, repeatable onboarding and monitoring programme is a precondition for operating credibly. The following checklists reflect market practice and should be adapted with local counsel to the specific regulatory text and UAF guidance.

Onboarding checklist (KYC, contracts, risk profiling)

A practical onboarding flow for a payment facilitator Panama operation should capture and verify, at minimum:

1. Legal identity. Company registration details, legal form and registered address of the sub‑merchant.
2. Beneficial ownership. Identification and verification of ultimate beneficial owners and controlling persons.
3. Representative identity. Verification of the individual signing on behalf of the business, with government‑issued ID.
4. Business activity. Description of the goods or services sold, expected transaction volumes and average ticket size, so the risk profile can be benchmarked.
5. Risk tiering. Assigning each sub‑merchant a risk category (for example, standard versus high‑risk sectors) that drives the depth of due diligence.
6. Sanctions and PEP screening. Screening the entity, owners and representatives against sanctions and politically exposed persons lists.
7. Enhanced due diligence triggers. Additional checks where high‑risk indicators are present, such as high‑risk sectors, complex ownership or cross‑border exposure.
8. Contractual terms. A sub‑merchant agreement that grants the facilitator data access, audit rights, the ability to suspend settlement and clear obligations on the sub‑merchant to cooperate with compliance requests.
9. PII handling. A defined approach to storing and protecting personal data gathered during onboarding, consistent with Panama’s personal data protection law (Law 81 of 2019).

Documenting why each sub‑merchant was approved, and what evidence supported the decision, is as important as the decision itself.

Ongoing monitoring and red flags

Onboarding is only the starting point; the framework expects continuous oversight. A monitoring programme should watch for and act on indicators such as:

• Volume anomalies. Transaction values or frequency that materially exceed the profile declared at onboarding.
• Chargeback and refund spikes. Patterns suggesting fraud, dissatisfaction or transaction laundering.
• Activity mismatch. Transactions inconsistent with the stated business type.
• Structuring signals. Transactions appearing designed to stay below reporting or review thresholds.
• Geographic risk. Unexpected cross‑border flows or exposure to higher‑risk jurisdictions.

Periodic reviews, with high‑risk sub‑merchants reviewed more frequently, should refresh KYC data, re‑screen against sanctions lists and confirm that the risk tier remains accurate. Where red flags cannot be resolved, the facilitator should be able to escalate, file a suspicious transaction report and, if necessary, off‑board the sub‑merchant.

Recordkeeping, audit trails and UAF reporting lines

Maintain complete records of onboarding decisions, monitoring alerts, investigations and reports, retained for the periods required under the applicable rules. Reporting lines to the UAF for suspicious transactions should be documented, with a named compliance officer and a defined escalation path so that both the sponsor bank and the regulator can see a clear, auditable chain of accountability.

BIN sponsorship, card‑program management and settlement architectures in Panama

Because a payment facilitator operates on another institution’s BIN, the BIN sponsorship Panama arrangement is the commercial foundation of the whole model. The sponsor, usually a licensed acquirer, provides access to the card networks and carries the regulated settlement activity, while the facilitator manages the sub‑merchant programme. Getting this relationship and the surrounding settlement design right is what turns a compliant model into a workable business.

BIN sponsorship options and pros/cons

There are two broad routes to sponsorship for a payment facilitator Panama operation:

• Local acquirer sponsorship. Partnering with a Panamanian acquirer that holds the BIN and settles in local currency. This is typically faster to activate where the bank relationship is strong, keeps settlement onshore and aligns naturally with SBP and UAF expectations, but ties the facilitator to that acquirer’s risk appetite and onboarding standards.
• International sponsor with local presence or agent. Using an international sponsor while maintaining a local arrangement to satisfy banking and supervisory expectations. This can open cross‑border capability but tends to involve longer negotiations, FX considerations and more complex compliance coordination.

In both cases, the sponsor will demand contractual access to sub‑merchant data, audit rights and robust indemnities, reflecting the fact that the compliance stakes are high for everyone in the chain.

Settlement flows and reconciliation controls

Settlement design determines where money sits and who bears risk at each moment. Panama uses the US dollar as legal tender alongside the balboa, which simplifies some cross‑border flows. In a local‑sponsored model, the acquirer typically settles into a facilitator pool, from which sub‑merchants are paid. In a cross‑border model, settlement crosses jurisdictions and introduces FX and timing complexity. Whatever the structure, strong reconciliation controls are essential: matching scheme settlement against sub‑merchant payouts, maintaining the ability to delay or withhold funds where compliance concerns arise, and keeping an auditable record of every movement. Liability for chargebacks, fraud losses and compliance failures should be explicitly allocated between acquirer, facilitator and sub‑merchant in the governing contracts.

Card‑network rules, how Visa and Mastercard requirements interact with Panamanian supervision

Alongside Panamanian regulation, a payment facilitator must satisfy the card schemes. Visa and Mastercard operate their own payment facilitator and acquirer programme rules, covering registration, sub‑merchant onboarding standards, data sharing, monitoring and chargeback liability. These scheme requirements are global and generic, but in Panama they must be read together with the SBP and UAF frameworks, which localise and in some respects reinforce them.

Scheme onboarding versus supervisory expectations

Scheme rules set baseline onboarding and monitoring standards that a facilitator must meet to board sub‑merchants under a sponsor’s BIN, including identity verification, prohibited‑business screening and transaction monitoring. Panamanian AML rules overlay locally enforced obligations on top of these: enhanced CDD, beneficial ownership verification and UAF reporting lines. In practice the two frameworks point in the same direction, but the local expectations are enforced by a local supervisor with its own interpretation, so compliance with scheme rules alone is not sufficient. A payment facilitator Panama operation needs to map scheme requirements and local obligations side by side and build a single programme that satisfies both.

Liability allocation and dispute handling

The schemes allocate significant liability, notably for chargebacks and sub‑merchant misconduct, to the acquirer and, through contract, down to the facilitator. Dispute handling, chargeback representment and fraud‑loss responsibility should therefore be clearly addressed in both the sponsor agreement and the sub‑merchant agreement, so that each party knows who bears the cost when a transaction is disputed or a sub‑merchant fails.

Practical operating models and contract clauses

There is no single correct structure; the right model depends on your market, your banking access and your risk appetite. Three options recur in practice, each with distinct trade‑offs.

Model comparison

Whichever model you choose, certain contract clauses are essential (illustrative, non‑legalised wording to be drafted by counsel):

• KYC and data rights. The facilitator’s right to collect, access and share sub‑merchant data for compliance purposes.
• Audit rights. The sponsor’s and facilitator’s right to audit compliance records and onboarding decisions.
• Indemnities. Clear allocation of losses for fraud, chargebacks and compliance breaches.
• Fee flows. Transparent treatment of scheme fees, settlement timing and reserves.
• Suspension and termination. The right to suspend settlement or off‑board a sub‑merchant on compliance grounds.

Risk checklist before launch, readiness assessment

Before committing to a BIN sponsor or go‑live, work through a readiness assessment covering the critical dependencies:

• Licensing triggers. Confirmed with local counsel whether your fund flows bring you within SBP or UAF scope.
• AML programme maturity. Documented policies, a named compliance officer, risk tiering and UAF reporting lines in place.
• Data and technology capability. KYC tooling, sanctions screening and transaction‑level monitoring that reach the sub‑merchant layer.
• Contractual and indemnity mapping. Sponsor and sub‑merchant agreements that allocate liability, grant data and audit rights and allow settlement controls.
• Bank and acquirer acceptance. A sponsor that has reviewed and accepted your programme.
• Dispute flows. Clear chargeback and fraud‑loss handling aligned with scheme rules.

Next steps

Operating a payment facilitator Panama model is achievable, but it demands careful alignment between Panamanian AML expectations, card‑network programme rules and a workable BIN sponsorship and settlement architecture. The practical path runs through a defensible onboarding and monitoring programme, clear contractual liability allocation and a sponsor bank that has accepted your compliance design. Specialist support can accelerate this, from a compliance audit and contract drafting to bank and acquirer introductions and regulatory liaison. If you are assessing a payment facilitator Panama launch, engaging experienced Panama FinTech counsel early will reduce licensing uncertainty and improve your chances of securing sponsorship on workable terms.

Sources

1. Superintendencia de Bancos de Panamá (SBP)
2. Unidad de Análisis Financiero (UAF), Panama
3. Financial Action Task Force (FATF)
4. Bank for International Settlements (BIS)
5. International Monetary Fund (IMF)
6. Banco Nacional de Panamá