#
Colombia has no dedicated statute establishing a licensing or registration regime for virtual asset service providers (VASPs). The Superintendencia Financiera de Colombia (SFC) has instead relied on supervisory circulars since 2014 to bar SFC-supervised entities (banks) from directly holding, investing in, or brokering virtual currencies, and ran a time-limited regulatory sandbox (2020-2021) allowing selected banks to pilot fiat on/off-ramp partnerships with crypto exchanges without altering the underlying regulatory framework. No confirmation of a superseding dedicated VASP law has been located in this research pass.
Into this gap, the draft Estatuto Antiterrorista has introduced the first proposed statutory licensing gateway for crypto-asset activity in Colombia: any person or company operating with crypto-assets would be required to hold a licence granted under regulation the Executive would subsequently issue. As of 15-19 October 2026 this clause remains pre-legislative, having passed a review step before the Consejo de Politica Criminal but not yet been formally filed in Congress. Its content, scope and timeline are accordingly uncertain, and no thresholds, licence categories or application procedures have been specified.
Enforcement exposure for unlicensed crypto activity is similarly undefined under current law. No crypto-specific administrative fine maxima, criminal offences, or publication-of-measures regime exists; the SFC and UIAF retain their general enforcement powers, but these apply to crypto activity only insofar as it intersects their existing supervised scope, rather than as a dedicated crypto-enforcement framework. Separately, Banco de la Republica guidance holds that crypto-assets do not meet the legal-tender function, since they are not issued by a central bank and do not carry unlimited discharge-of-debt power, though this is a guidance-level determination rather than a binding statutory classification.
Outlook
The pivotal development to watch is whether the Estatuto Antiterrorista's crypto-licensing clause is formally filed in Congress, with current signals pointing to the fourth quarter of 2026, though the timeline is uncertain given the bill has not yet cleared pre-legislative review. If filed and enacted, it would convert Colombia's current unregulated gap into a licensed gateway for the first time; until then, the archived fate of Proyecto de Ley 510 de 2025 stands as a reminder that a comprehensive crypto statute has come close to passage in Colombia before without succeeding.
No periodic updates recorded in this cycle
Sources and findings (12)
- T3CoinDesk — In March 2014 the SFC ruled that Bitcoin does not qualify as legal tender in Colombia and barred SFC-supervised entities, including banks, from holding, investing in, or brokering transactions involving virtual currencies. retrieved M4 binding in force
- T3CoinDesk — Between 2020 and 2021 the SFC ran a regulatory sandbox that selected nine crypto exchanges (from fourteen applicants) — including Binance, Gemini and Bitso — to pilot fiat on/off-ramp partnerships with regulated Colombian banks (Bancolombia, Davivienda, Banco de Bogotá), while stating the pilot had no impact on the existing regulatory framework applicable to crypto assets. retrieved M3 non-binding
- T3 · SemanaColombia VASP legal framework — Colombia currently has no comprehensive law specifically licensing or authorising Virtual Asset Service Providers; existing obligations derive from AML, tax and corporate provisions rather than a dedicated licensing statute. retrieved M4 non-binding
- T2 · CriptoInformeBill 510 of 2024 — Approved only in its first legislative debate as of early 2026, aiming to establish clear VASP licensing rules. retrieved M3 binding proposed
- T3 · SemanaSuperintendencia Financiera de Colombia — Prohibits supervised financial entities from holding, investing in, or intermediating digital currencies. retrieved M4 binding in force
- T3 · SemanaColombia (crypto-licensing perimeter) — No statutory licence, registration or notification required for crypto-asset services; Proyecto de Ley 510/2025 archived in 2026 without second-debate vote. retrieved M4 non-binding in force
- T3 · SemanaColombia Fintech — Renewed, on 28 Oct 2026, a six-point legislative agenda calling for a VASP supervisory framework, public registry, FX-regime updates and real-world-asset tokenisation rules. retrieved M3 non-binding in force closed
- T3SFC LaArenera regulatory sandbox — The crypto cash-in/cash-out pilot cohort under Resolucion 314 de 2021 ended 13 June 2024; no successor crypto-specific sandbox track has been announced. retrieved M3 binding in force
- T2Proyecto de Ley 510 de 2025 — Archived by the Camara de Representantes in 2026 under article 190 of Ley 5 de 1992, leaving no successor comprehensive VASP statute in force. M4 binding in force closed
- T3Colombia (crypto enforcement) — No crypto-specific administrative fine maxima, criminal offences or publication-of-measures regime for unlicensed crypto-asset activity exists; general SFC/UIAF enforcement powers apply only where crypto activity intersects existing supervised scope. retrieved M3 binding in force
- T2Draft Estatuto Antiterrorista — Any person or company operating with crypto-assets must hold a licence granted under regulation the Executive would subsequently issue; pre-legislative as of 15-19 October 2026, not yet filed in Congress. retrieved M4 non-binding new