This guide to crypto licensing Costa Rica explains where the law stands in 2026, what a virtual asset service provider must do to operate lawfully, and how founders and compliance officers can move from company formation to banking and full AML/CFT readiness. The regulatory position is shifting quickly, recent primary-law developments point toward an emerging VASP regime, and much of the commentary circulating online is either outdated or promotional. Here we translate statute into practical, jurisdiction-focused steps, citing primary sources and time-stamping interpretations so you can plan with confidence. If you are evaluating market entry, this is the canonical reference for crypto licensing Costa Rica as the framework matures.
This landing page is written for founders, in-house counsel, compliance officers and investors who need a clear, lawyer-led view of crypto licensing in Costa Rica. It covers the current legal status of virtual assets, how the term “VASP” (virtual asset service provider) is understood, the step-by-step process for setting up and complying, the realities of banking access, AML/CFT obligations, tax treatment and cross-border risk. Rather than restate marketing claims, it grounds each statement in primary sources, the Asamblea Legislativa, the official gazette La Gaceta, the Banco Central de Costa Rica (BCCR), the Ministerio de Hacienda and SUGEF, and flags where the law remains in flux.
The headline for crypto licensing Costa Rica in 2026 is that the “no licence required” narrative is being overtaken by an emerging virtual asset framework. Founders should treat AML/CFT readiness, corporate substance and banking engagement as the three pillars of operational viability.
Understanding crypto regulation Costa Rica requires separating three layers: what is already law, what is pending, and what the central bank and supervisor say about day-to-day operations. A virtual asset service provider Costa Rica must navigate all three, because practical constraints (especially banking) can be stricter than the black-letter requirement.
Primary legislation is the anchor for any analysis of crypto licensing Costa Rica. The enacting text of Law No. 10961 and its definitional scope should be read directly from the Asamblea Legislativa and confirmed against the official promulgation in La Gaceta, which records publication and effective dates. Where a statute introduces or adjusts definitions of virtual assets and the providers that deal in them, those definitions determine which businesses fall inside the regime. Because the drafting and gazette record govern the precise scope, this guide directs you to the source texts rather than paraphrasing provisions that may be amended. As at the review date, confirm the exact articles and effective date in La Gaceta before relying on any particular interpretation.
Two bills, Bill 23.415 and Bill 25.340, are central to the future of VASP Costa Rica. These legislative files, tracked on the Asamblea Legislativa bill archive, point toward a formal framework for virtual asset service providers, including registration, AML obligations and supervisory touchpoints. If enacted in their anticipated form, industry observers expect them to crystallise registration or authorisation duties, define supervised activities more tightly, and align national rules with international standards. Because bill status can change between parliamentary sessions, always confirm the current reading stage and any adopted text on the Asamblea’s file pages and in La Gaceta before treating a provision as binding.
The Banco Central de Costa Rica (BCCR) has consistently distinguished between the national currency (the colón) as legal tender and virtual assets, which are not legal tender. Its public statements on virtual currencies frame the risk environment that banks and users should weigh. On the supervisory side, the Superintendencia General de Entidades Financieras (SUGEF) oversees financial institutions and AML/CFT compliance within the banking system. For a virtual asset service provider Costa Rica, SUGEF guidance matters indirectly but decisively: it shapes how banks assess crypto-related clients and what compliance evidence they expect. Monitoring both the BCCR and SUGEF is essential because their positions influence fiat operations more than any single licence ever could.
Before the latest developments, Costa Rica had no dedicated statutory licence for virtual asset businesses, and many providers simply operated through ordinary corporate vehicles. That gap generated the “no licence needed” messaging still echoed across the SERP. The emerging framework marks a clear shift: the trajectory of crypto regulation Costa Rica is toward defined VASP obligations and formal AML/CFT expectations. Treating the old position as current is now a material compliance risk.
Short answer: operating a crypto business is permitted, but the question “do you need a crypto license Costa Rica?” increasingly depends on the activity. As the VASP framework develops, registration or authorisation becomes the expected route for providers that exchange, custody or transmit virtual assets. Confirm the live requirement against Law No. 10961 and the pending bills.
Internationally, the Financial Action Task Force (FATF) defines a virtual asset service provider by reference to the services it performs. National interpretation tends to follow this template. Activities most likely to bring a business within scope for a crypto license Costa Rica include:
A passive holding vehicle, a software developer that never touches client assets, or a non-custodial technology provider may operate through a standard company without triggering VASP registration. By contrast, any business that takes custody, converts fiat, or acts as an intermediary in transactions is squarely within the territory where registration or authorisation is expected under the developing framework. The safest approach for crypto licensing Costa Rica is to map each revenue line against the statutory definitions and FATF categories, then confirm the classification against the current text of Law No. 10961 and the bill pages before committing to a model. For a deeper procedural view, see our forthcoming VASP registration walkthrough (Costa Rica).
The following procedural roadmap takes a business from decision to operational readiness. It applies to most models and should be read alongside the live statutory position, because specific registration duties for crypto licensing Costa Rica continue to evolve. Treat each step as a work-stream that runs partly in parallel rather than a strict sequence.
Step 1, Decide activity model & legal form, and confirm VASP classification. Choose between a limited liability company (Sociedad de Responsabilidad Limitada), a stock corporation (Sociedad Anónima) or a branch of a foreign entity. Map your activities against the VASP definitions to determine whether registration applies. Typical documents: business plan, activity matrix, shareholder/beneficial-owner details. Timeline: 1–2 weeks of advisory work. Common pitfall: underestimating custody exposure and mis-classifying the business as out of scope.
Step 2, Corporate formation. Incorporate the chosen vehicle and complete filings with the Registro Nacional. Typical documents: articles of incorporation executed before a notary, powers of attorney, passport/ID of directors and shareholders, registered address and legal representative details, and shareholder register with ultimate beneficial ownership. Timeline: commonly a few weeks depending on notarial scheduling and registry processing. Common pitfall: incomplete UBO disclosures that later block bank onboarding. See our company formation checklist for the full document list.
Step 3, VASP registration / authorisation (if required). Where the activity is in scope, prepare the application pack for the relevant authority as the framework is finalised. Typical documents: AML/CFT policies, appointment of a compliance/AML officer, internal control manual, governance structure, fit-and-proper evidence for key persons and, where applicable, capital or solvency documentation. Timeline: variable and dependent on the regime’s commencement, build in contingency. Common pitfall: treating registration as a formality rather than a substantive readiness test.
Step 4, AML/CFT programme. Build the compliance programme that regulators and banks will scrutinise: customer due diligence (CDD) and enhanced due diligence (EDD) for higher-risk clients, transaction monitoring, sanctions and PEP screening, and suspicious activity reporting to the financial intelligence unit. Timeline: 4–8 weeks to design and operationalise. Common pitfall: policies on paper with no working monitoring tooling.
Step 5, Operational readiness. Decide between a custodial and non-custodial model, select secure key-management and wallet infrastructure, and document information-security standards. Timeline: parallel to Steps 3–4. Common pitfall: adopting a custodial model without the heightened controls and insurance posture it demands.
Step 6, Banking & fiat plumbing. Prepare a due-diligence pack for bank engagement: corporate documents, AML/CFT manual, evidence of transaction monitoring, UBO transparency and expected flows. Approach institutions with a realistic risk narrative. Timeline: often the longest single step; weeks to months. Common pitfall: approaching banks before the compliance programme is demonstrably live.
Step 7, Ongoing compliance. Establish reporting cadence, periodic independent AML audits, staff training and record-retention schedules. Timeline: continuous. Common pitfall: letting policies drift out of date as the statutory framework changes.
Together these steps describe practical crypto company setup Costa Rica from entity to market. The sequence is deliberately conservative: because crypto licensing Costa Rica is tightening rather than loosening, building to the higher standard from day one reduces rework and protects banking relationships.
Banking is where theory meets reality. For many founders, securing fiat rails is harder than any licensing step, and it is the single most common reason a Costa Rican crypto venture stalls.
Practical answer: yes, but selectively. Banking for crypto firms Costa Rica is possible, yet institutions apply an elevated risk profile. Approval hinges on demonstrating a credible, operating AML/CFT programme and transparent ownership. Expect enhanced due diligence and a longer onboarding cycle than an ordinary business would face.
Where direct banking is slow, firms often combine channels: licensed fiat partners or payment institutions, correspondent-banking arrangements accessed through regulated intermediaries, and stablecoin rails for settlement between parties. Each alternative carries its own compliance and counterparty-risk considerations, and SUGEF-aligned expectations still apply to the regulated institutions that sit behind these arrangements.
Lead with the compliance story, not the technology. Present a concise, evidence-backed pack; be candid about the business model; and frame the bank’s residual risk as manageable because of your controls. A well-prepared virtual asset service provider Costa Rica that can show working monitoring and clean UBO data materially improves its odds. For a deeper treatment, see our forthcoming guide on banking for crypto firms in Costa Rica.
Eligibility for a crypto license Costa Rica, and, equally, for banking access, rests on people, governance and records. These expectations track international AML standards and the emerging VASP framework.
A VASP Costa Rica is expected to appoint a dedicated AML/compliance officer with real authority, maintain a documented governance structure, and separate compliance oversight from commercial functions. The compliance function must be resourced to run CDD, monitoring and reporting on an ongoing basis, not merely to pass an initial review.
Readiness checklist:
Use the table below to compare indicative thresholds and expected timelines for crypto licensing Costa Rica against a regional alternative, Panama. All figures are indicative only; cost ranges reflect components (application, compliance implementation, capital where applicable and banking fees) rather than fixed fees, and should be validated against primary sources and live advisory scoping. See our forthcoming Costa Rica vs Panama crypto comparison for detail.
| Requirement | Costa Rica | Panama (regional alternative) |
|---|---|---|
| Specific VASP licence required? | Emerging, registration/authorisation expected under the developing framework (Law No. 10961 + pending bills) | No dedicated comprehensive VASP licensing regime historically; evolving |
| Typical cost range (application + compliance programme) | Indicative: moderate, driven mainly by compliance build and legal work rather than statutory fees | Indicative: moderate, similar emphasis on compliance implementation |
| Expected timeline to market | Weeks for incorporation; additional time for AML build and banking; registration timing subject to regime commencement | Weeks to a few months depending on structure and banking |
| Banking access difficulty | Medium–High | Medium–High |
The practical takeaway is that cost and timeline in both jurisdictions are dominated by compliance implementation and banking engagement rather than by licence fees. Budgeting for a robust programme up front is almost always cheaper than remediating a rejected bank application later.
Anti-money-laundering controls are the operational heart of crypto licensing Costa Rica. A strong AML crypto Costa Rica programme is simultaneously a legal obligation, a licensing prerequisite and the key to banking. The expectations align with FATF standards, which national rules interpret for domestic application.
Suspicious activity is reported to the national financial intelligence unit (UAF/FIU), with the broader supervisory architecture reinforced by SUGEF for regulated institutions. Reporting triggers include suspicious transactions, unusual patterns inconsistent with a client’s profile, and other circumstances mandated by law. A virtual asset service provider Costa Rica must be able to detect, escalate and file reports promptly, and to document the decision trail.
The FATF framework, published by the Financial Action Task Force, is the benchmark national supervisors look to when assessing whether these controls are adequate for AML crypto Costa Rica.
Programmes should be tested by periodic independent audit and supported by recurring staff training. Audit findings must feed back into policy updates, a static programme signals weakness to both supervisors and banks assessing AML crypto Costa Rica risk.
For a full template-driven approach, see our forthcoming AML/CFT compliance playbook.
Tax is model-dependent and should be confirmed with the authority. The Ministerio de Hacienda / Dirección General de Tributación is the authoritative source for guidance and rulings on how crypto assets are treated.
Income derived from crypto-related activity may fall within corporate income tax where it constitutes taxable Costa Rican-source income; value-added tax and withholding considerations can arise depending on the nature of the service and the counterparties involved. Because characterisation drives outcome, each revenue line should be analysed separately against current guidance from Hacienda.
Where the treatment of a specific model is uncertain, obtaining a private ruling from the tax authority is the most reliable route to certainty. Document the facts precisely, because rulings are fact-specific and the operational model materially affects the answer.
A trading desk, a custodian and a payment-service provider can face materially different tax positions. Aligning the operational model, the corporate structure and the tax analysis early avoids costly restructuring later. See our forthcoming explainer on the tax treatment of crypto assets for detail.
Supervisory attention is concentrating on AML/CFT adequacy and on institutions that service crypto clients. Firms should expect scrutiny of beneficial ownership, source of funds and the robustness of monitoring as crypto regulation Costa Rica matures.
Effective sanctions screening, counterparty diligence and the ability to block or freeze transactions are essential. Correspondent-banking risk flows downstream to local institutions, which is why a credible sanctions programme strengthens both compliance and banking prospects.
The path through crypto licensing Costa Rica in 2026 is clear in principle: confirm your VASP classification against current law, incorporate, build a working AML/CFT programme, and prepare a banking pack that proves your controls. Start with the crypto licensing Costa Rica framework here, then work through the company formation checklist, VASP registration walkthrough and AML/CFT compliance playbook to operationalise each step.
posted 3 minutes ago
posted 22 minutes ago
posted 41 minutes ago
posted 49 minutes ago
posted 1 hour ago
posted 1 hour ago
posted 2 hours ago
posted 2 hours ago
posted 2 hours ago
posted 2 hours ago
posted 2 hours ago
posted 3 hours ago
Find the right Legal Expert for your business
Send welcome message