Crypto Overview in Colombia

Regulatory data is for informational purposes only and may not reflect the most current legal developments. Always consult qualified professionals before making decisions.

Legal Classification and Regulatory Framework

Cryptocurrency Status

Colombia has no comprehensive cryptocurrency-specific law, leaving digital assets in a regulated gray area shaped by official opinions and sector circulars rather than dedicated legislation. The Banco de la República (BanRep, Colombia’s central bank) has confirmed that cryptocurrencies are not legal tender, money, or foreign currency under Colombian law. The Superintendencia Financiera de Colombia (SFC) has similarly concluded that crypto assets are not classified as currency or securities under capital-market rules.

For practical and tax purposes, cryptocurrencies are treated as intangible assets. This position was established by the Dirección de Impuestos y Aduanas Nacionales (DIAN) through Concepto 314 of 2018 and reinforced by Concepto 232 of 2021, which confirmed that crypto assets are susceptible to valuation and form part of an individual’s or corporation’s patrimony. Individuals may own, transact, and accept cryptocurrencies as payment, but no legal obligation requires merchants or businesses to accept them.

The Superintendencia de Sociedades has also clarified its position over time, initially restricting corporate contributions of crypto assets and later reversing course to permit them, treating crypto as intangible assets or inventory for corporate accounting purposes.

Principal Regulators

Three authorities share primary oversight of cryptocurrency-related activity in Colombia. The Superintendencia Financiera de Colombia (SFC) is the financial sector supervisor and has historically restricted supervised financial institutions from holding or intermediating crypto. The Unidad de Regulación Financiera (URF), attached to the Ministry of Finance, advises on regulatory design and has been central to drafting proposed VASP frameworks. The Banco de la República (BanRep) holds monetary authority and has issued formal statements on crypto’s non-currency status while researching a potential central bank digital currency (CBDC).

The Unidad de Información y Análisis Financiero (UIAF) serves as Colombia’s financial intelligence unit (FIU) and sits at the centre of anti-money-laundering enforcement. The Superintendencia de Sociedades oversees corporate entities and administers SARLAFT compliance obligations for crypto businesses. The DIAN handles tax administration and has stepped up crypto-monitoring capacity, including exchange-data requests and blockchain analytics, ahead of full Crypto-Asset Reporting Framework (CARF) alignment expected by 2027.

Crypto License in Colombia

Colombia does not yet have a mandatory crypto-specific license. The country’s approach has instead relied on a supervised pilot sandbox and evolving SARLAFT compliance obligations, with formal VASP licensing proposed but not yet enacted. Businesses considering market entry should plan for a licensing requirement within the near to medium term as the legislative process matures.

The SFC Sandbox: “laArenera”

The SFC operates a regulatory testing environment called “laArenera” (the sandbox), established under Decreto 1234 de 2020, which created the framework for a controlled testing space (Espacio Controlado de Prueba) for financial innovation. Between 2021 and 2024, the SFC ran a crypto pilot within this sandbox that allowed nine bank-and-exchange alliances to test real cash-in and cash-out flows between traditional financial institutions and crypto exchanges under SFC observation. Participating alliances included Banco de Bogota with Bitso and Buda, Bancolombia with Gemini, and Davivienda with Binance, among others.

The pilot was supervised by a multi-agency committee including the SFC, the Superintendencia de Sociedades, the UIAF, and the Presidency of the Republic. A notable milestone occurred in 2022 when Davivienda, within the sandbox, issued the first blockchain-tokenized bond in Latin America and the Caribbean, a 110-million-peso instrument using smart contracts and NFT technology. The sandbox operates under the current framework set out in Circular Externa 006 de 2025 (Parte I, Titulo I, Capitulo VIII).

Despite running for approximately three years, the pilot did not result in permanent formal regulations for VASPs. The SFC’s prohibition on supervised financial entities holding or intermediating crypto outside the sandbox context remained in place, and no general license category for crypto exchanges was created. The sandbox experience nonetheless informed ongoing legislative work and demonstrated that bank-exchange interoperability is technically feasible under regulatory observation.

Current Compliance Obligations

In the absence of a formal crypto license, businesses operating in Colombia’s crypto sector must meet obligations spread across several frameworks. Any legal entity engaging in virtual-asset activity above defined thresholds must implement a SARLAFT (Sistema de Administracion del Riesgo de Lavado de Activos y de la Financiacion del Terrorismo) risk-management system, as required by the Superintendencia de Sociedades. VASPs must file Suspicious Transaction Reports (STRs) and regular operational reports with the UIAF when they detect potential money laundering or terrorist financing. Standard corporate registration, tax enrollment with DIAN, electronic invoicing obligations, and data-protection compliance under Ley 1581 de 2012 apply regardless of crypto activity. DIAN is also ramping up information-gathering from exchanges ahead of CARF reporting deadlines, so VASPs serving Colombian customers should expect increased data-sharing requests in the near term.

Proposed VASP Licensing Framework

The most advanced legislative proposal is Proyecto de Ley 510 de 2025, co-sponsored by Representative Julian Lopez and Senator Gustavo Moreno. The bill passed its first of four required congressional debates on May 20, 2025, but remains pending and had not been enacted as of late 2025. It represents Colombia’s third legislative attempt at a VASP framework, following Proyecto de Ley 139 of 2021 and Proyecto de Ley 267 of 2022, neither of which became law.

If enacted, PL 510/2025 would create a formal VASP registry administered by the Superintendencia de Sociedades, introduce mandatory risk-disclosure obligations (including confirmation that crypto is not legal tender and that transactions are irreversible), align Colombia with FATF Recommendation 15, and establish CARF-compatible data-reporting requirements to DIAN. Businesses planning to operate in Colombia should track the bill’s remaining three congressional debates, as passage would trigger concrete registry and licensing deadlines.

Tax Treatment

The DIAN has established a crypto-taxation framework through existing tax code provisions rather than crypto-specific legislation. The foundational positions were set out in Concepto 314 of 2018 and Concepto 232 of 2021, both confirming crypto assets as intangible assets susceptible to valuation and inclusion in patrimony.

Colombian residents holding crypto assets must report them in their annual income-tax return at fair market value converted to Colombian pesos (COP). The holding-period rule determines the applicable rate: gains on assets held for more than two years qualify for the preferential 15% capital-gains rate, while gains on shorter-held assets are taxed at progressive ordinary income-tax rates, which can reach 39% in higher brackets. Income from mining, staking, or payment in crypto is recognized as taxable income at the market value of the coins at the time of receipt.

VAT does not apply to crypto-asset sales themselves, as crypto is not classified as industrial property. However, exchange fees and related crypto services rendered in Colombia are subject to the standard 19% VAT rate. Businesses must comply with electronic-invoicing requirements for services provided within the country. Wealth tax may apply to individuals whose total net assets, including crypto holdings, exceed the established threshold (172 million COP as of recent assessments), with all values converted to COP for reporting.

DIAN is progressively enhancing enforcement, using exchange-reported data and blockchain-analytics tools. Penalties for unreported crypto gains range from 5% to 20% of the unreported amount, with criminal liability possible for large-scale evasion. All transaction records must be retained for five years.

Market Characteristics

Adoption and Scale

Colombia has grown into one of the most active cryptocurrency markets in Latin America. According to Chainalysis data, Colombia recorded approximately $25 billion in crypto activity between July 2023 and June 2024, rising to $44.2 billion in transactions between July 2024 and June 2025. The country ranks fifth in the region by adoption and approximately 29th globally, with an estimated five million Colombians holding crypto assets.

Peer-to-peer trading platforms see particularly strong volumes, partly because the historical restriction on banks engaging with crypto pushed activity toward P2P markets and informal channels. Remittances are a meaningful driver: Colombians seeking cost-efficient cross-border transfers have adopted crypto as an alternative rail, especially for corridors where traditional banking fees are high.

Banking Relationships

The relationship between traditional banking and crypto businesses in Colombia has been difficult. The SFC’s long-standing restriction on supervised financial entities holding or intermediating digital currencies effectively closed the door on mainstream banking services for exchanges. This led to account closures and forced some operators to cease Colombian operations or seek offshore structures.

A notable development is Bancolombia Group’s Wenia platform, which allows holders of Bancolombia savings or checking accounts to trade cryptocurrencies. Wenia is incorporated in Bermuda, representing a regulatory workaround rather than a direct integration of crypto services into the Colombian licensed banking system. The sandbox pilot demonstrated that interoperability is technically possible, and PL 510/2025 could open a clearer path for banking relationships if enacted.

Industry and Innovation

The Colombian crypto industry is primarily composed of exchange platforms, P2P marketplaces, and payment-service providers. International platforms serve Colombian users with peso trading pairs, while local startups focus on accessible trading and remittance use cases. Fintech integration has grown, with some platforms partnering with licensed entities or structuring through foreign jurisdictions to navigate the regulatory environment.

Beyond financial services, Colombia has explored blockchain for public-sector applications. The central bank piloted blockchain use cases for high-value payment systems in collaboration with Ripple and the Ministry of Information and Communications Technologies (MinTIC). Blockchain has also been trialled for property-title authentication, addressing longstanding land-distribution record issues. The Banco de la Republica continues to research a potential CBDC, though no implementation timeline has been announced. The bank’s instant-payment system, Bre-B, was launched to modernize domestic payment infrastructure independently of any CBDC development.

Colombia is not subject to the European Union’s Markets in Crypto-Assets (MiCA) regulation, but its FATF membership and commitment to OECD standards, including CARF adoption, will continue to shape compliance obligations. The regulatory trajectory points toward formalization, with PL 510/2025 the most concrete step taken to date. Businesses operating in or entering the Colombian market should monitor remaining congressional debates and prepare compliance infrastructure for a VASP registry and enhanced DIAN reporting obligations.