How to Get a Crypto License in Panama Online (2026), Step-by-step S.A., AML/UAF, Aviso & Bank Pack

Last reviewed: 21 May 2026

If you are researching how to get a crypto license in Panama online, the single most important fact to absorb is this: as of 21 May 2026, Panama has no enacted, standalone VASP licence. Draft Law No. 314, the Ley Marco Integral de Tecnologías Financieras, was introduced to the Asamblea Nacional on 13 January 2026, but it remains a draft. That does not mean you cannot operate legally or access Panamanian banks; it means the pathway is corporate and compliance-driven rather than licence-driven. The bankable route today requires incorporating a Sociedad Anónima (S. A.

), filing an Aviso de Operación through the Panama Emprende portal, registering with the Unidad de Análisis Financiero (UAF), building a documented AML/CFT programme, and assembling a documentary pack that satisfies the Superintendencia de Bancos de Panamá (SBP). This guide walks through each step in order, with timelines, required filings and practical bank-access strategies.

How Panama Currently Treats Crypto, The Compliance Decision

Panama crypto regulation currently operates through a patchwork of existing financial-sector obligations rather than a dedicated virtual-asset framework. The SBP supervises licensed banks and trust companies but does not issue a separate crypto or VASP licence. The UAF, Panama’s financial-intelligence unit, requires entities that handle funds or assets on behalf of third parties to register as sujetos obligados (obligated subjects) and to submit suspicious-transaction reports. Neither body has, to date, published a binding regulation that creates a standalone Panama crypto license category.

Draft Law No. 314 would change this. The Anteproyecto proposes a technology-neutral licensing framework covering exchanges, custodial wallets, e-money issuers and payment-service providers. It would grant the SBP explicit supervisory power over VASPs and align Panama with Financial Action Task Force (FATF) guidance on virtual assets. Until the Asamblea Nacional enacts the bill, however, industry observers expect operators to rely on the corporate-plus-AML pathway described below. For a deeper legislative analysis, see the Panama FinTech Law 2026, Draft Law No. 314 & SBP Rule 1‑2026 overview.

Step-by-Step: How to Get a Crypto License in Panama Online Through the Bankable Pathway

Because there is no enacted VASP regime, the phrase “crypto license” in Panama really describes a bundle of corporate, tax and AML registrations that together allow you to operate lawfully and, critically, open and maintain a bank account. Below are the eight sequential steps to register a crypto company in Panama online and build a bank-ready compliance file.

Step 1, Choose Entity and Corporate Form (S.A.)

The standard vehicle for a Panama crypto exchange or other digital-asset business is the Sociedad Anónima (S.A.), Panama’s joint-stock company. Key formation points:

• Minimum directors and officers. Three directors (who may be of any nationality) and three officers: president, secretary and treasurer. The same person may hold one directorship and one office.
• Registered agent. A Panamanian attorney or law firm must serve as the resident agent.
• Articles of Incorporation. Drafted in Spanish and executed before a Panamanian notary. The object clause should be broad enough to cover digital-asset services, payment processing and related fintech activities.
• Typical timeline. With a local agent managing filings electronically, incorporation through the Registro Público (Public Registry) usually takes between two and ten business days.
• Capital. There is no minimum paid-in capital requirement, but the authorised capital amount is stated in the articles and may carry nominal stamp-duty obligations.

Step 2, Tax Registration (RUC) and Municipal Requirements

Once the S.A. is registered, you must obtain a Registro Único de Contribuyente (RUC), Panama’s taxpayer identification number, from the Dirección General de Ingresos (DGI). The RUC is a prerequisite for the Aviso de Operación and for bank account opening. If the company has physical premises in a specific municipality, local municipal taxes and commercial permits may also apply.

Step 3, Aviso de Operación (Panama Emprende)

The Aviso de Operación is the operational notice that formally authorises a company to conduct business in Panama. It is filed electronically through the Panama Emprende portal, which is administered by the Ministerio de Comercio e Industrias (MICI). Required supporting documents typically include:

• Certified extract from the Registro Público (Public Registry)
• Copy of the legal representative’s identification
• RUC number
• Description of the commercial activity (use ISIC codes that cover financial services and technology)

Fees are modest and the Aviso can often be issued within one to three business days once all documents are uploaded. The Aviso de Operación is not a licence in the regulatory sense, but banks treat its absence as a red flag, without it, no serious Panamanian bank will proceed with account opening.

Step 4, Public Registry Extract and Notarisation

Obtain a certified extract (certificado del Registro Público) confirming the S.A.’s good standing, directors, officers, registered agent and object clause. You will need notarised copies for the UAF, for each bank you approach and, if applicable, for any foreign-regulator recognition process. Extracts can be requested online through the Registro Público’s electronic portal.

Step 5, UAF Registration and Reporting

If your business handles, intermediates or custodies assets on behalf of clients, which covers virtually every Panama crypto exchange or custodial-wallet operator, you are likely classified as a sujeto obligado under Panama’s AML/CFT framework. Registration with the UAF is done through the ADSO (Administración de Sujetos Obligados) online platform on the UAF’s website. Upon registration you will be required to:

• Designate a compliance officer (oficial de cumplimiento)
• Submit Reportes de Operaciones Sospechosas (ROS), suspicious-transaction reports, whenever your monitoring triggers a red flag
• File Reportes de Transacciones en Efectivo (RTE) for cash transactions above the applicable thresholds
• Maintain records for the retention period mandated by the UAF (generally five years)

The detailed UAF registration walkthrough is covered in the dedicated section below.

Step 6, Design and Document an AML/CFT Programme

A written AML/CFT programme is essential both for UAF compliance and for convincing banks that your operation is well-controlled. The programme should include, at minimum:

• Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) procedures, identification, verification, beneficial-ownership determination and ongoing monitoring, aligned with FATF guidance on virtual assets
• Transaction-monitoring rules, thresholds, scenario-based alerts, and escalation workflows
• Suspicious-activity reporting, internal escalation to the compliance officer and external filing of ROS with the UAF
• Record-retention policy, minimum five-year retention of CDD files, transaction records and internal reports
• Training plan, annual AML/CFT training for all staff with documented attendance
• Compliance-officer appointment, named individual with direct reporting line to the board

Step 7, Operational and Technical Controls

Banks and, eventually, any future VASP regulator will scrutinise your operational infrastructure. Build and document the following before approaching a bank:

• Custody architecture. Cold-wallet versus hot-wallet split, multi-signature policies, key-ceremony procedures and insurance coverage (if available).
• AML transaction-monitoring technology. Integration with a blockchain-analytics provider for wallet screening and transaction tracing.
• Reconciliation procedures. Daily fiat-to-crypto reconciliation, proof-of-reserves methodology and audit trail.
• Cybersecurity framework. Penetration-testing schedule, incident-response plan and data-protection measures consistent with international standards.

Step 8, Build the SBP/Bank Documentary Pack

This is the step where many operators stall. Panamanian banks operate under SBP resolutions that impose strict KYC and risk-assessment obligations on the banks themselves. The bank’s compliance team will demand a comprehensive documentary pack before they even schedule an introductory call. Assemble the following:

• Certified Registro Público extract and Aviso de Operación
• Ultimate Beneficial Owner (UBO) declaration with supporting identification and source-of-funds documentation
• Detailed business plan covering products, target markets, expected transaction volumes and revenue model
• Payment-flow diagrams showing how fiat and crypto move through the business
• Complete AML/CFT programme (from Step 6)
• Technology-audit summary or third-party security assessment
• Proof of physical office and local staff (payroll records, lease agreement)
• Bank references (personal or corporate) and copies of existing client contracts

Industry observers note that operators who present the pack proactively, rather than waiting for piecemeal bank requests, experience significantly shorter onboarding timelines. A brief introductory email to the bank’s corporate-onboarding team might read: “We are a Panama-incorporated S.A. operating a digital-asset [exchange / custodial service]. We hold an Aviso de Operación, are registered with the UAF, and have a documented AML/CFT programme. Attached is our full documentary pack for your KYC review. We welcome a call to walk your compliance team through our payment flows and controls.”

Registering with the UAF and AML Compliance Details

UAF registration is the single most compliance-critical step for any Panama crypto license pathway. The UAF’s ADSO platform is the gateway for all sujetos obligados to manage their reporting obligations. The registration process involves the following stages:

• Account creation. Access the ADSO system via the UAF official website. The compliance officer (or authorised representative) creates an organisational account, entering the S.A.’s legal name, RUC, Aviso de Operación number and contact details.
• Compliance-officer designation. Upload the compliance officer’s identification, professional background and a board resolution confirming the appointment.
• AML programme upload. Attach the written AML/CFT programme, risk-assessment matrix and training plan.
• Ongoing reporting. Once registered, the entity must file ROS (suspicious-transaction reports) through ADSO whenever monitoring triggers warrant, and RTE (cash-transaction reports) when applicable thresholds are met. Reports must be filed within the timeframes established by the UAF’s operational manuals.
• Annual updates. The UAF expects annual confirmation of compliance-officer details, any material changes to the AML programme and updated risk assessments.

Practical recordkeeping is not optional. The UAF may request transaction logs, CDD files and internal investigation notes during inspections. Maintaining a centralised, auditable compliance database, rather than scattered spreadsheets, is the most effective way to manage this requirement. For broader context on international AML expectations that Draft Law 314 aims to codify, the FATF’s guidance on virtual assets and VASPs provides the foundational standard.

Bank Access: Documentary Pack and Winning the Bank Relationship

Securing a Panamanian bank account is the hardest practical hurdle for any digital-asset business. Banks supervised by the SBP face their own regulatory exposure and are cautious about crypto-related clients. The table below summarises the documentary items banks typically require, mapped to the relevant compliance source.

If a bank raises concerns about “crypto risk,” address them head-on: explain that the company is UAF-registered, that its AML programme mirrors FATF standards, and that custody controls are documented and auditable. Early indications suggest that operators offering non-custodial services face a lower friction threshold, but even they should prepare the full pack to avoid delays. For operators who cannot secure a direct bank account, Banking-as-a-Service (BaaS) partnerships with a sponsor bank or an international EMI represent a viable interim solution.

Set Up as a Sociedad Anónima (S.A.), Corporate and Substance Considerations

The S.A. is the default corporate vehicle for fintech operations in Panama. Below is a summary of formation practicalities and expected costs for entrepreneurs considering how to register a crypto company in Panama online.

Substance matters. While Panama law does not impose a minimum-employee requirement for an S.A., banks increasingly look for genuine local presence: a physical office, at least one Panama-resident director and local payroll. Nominee directors are legally permissible but raise red flags during bank KYC reviews, using them may extend onboarding timelines or trigger enhanced due diligence. The likely practical effect of Draft Law 314, if enacted, would be to formalise substance expectations by conditioning a VASP licence on demonstrable local operations. Panama’s territorial tax system means that income sourced outside Panama is generally not subject to income tax; however, transactions involving Panamanian clients or local infrastructure may attract tax obligations, and professional guidance is essential.

How to Get a Crypto License in Panama Online, Obligations by Entity Type

Not every digital-asset business triggers the same compliance burden. The comparison table below maps the current obligations and the expected Draft Law 314 requirements across three common entity types.

For a broader comparison of how licensing obligations differ across jurisdictions, see the crypto license guide for Poland under MiCA or the Australian crypto licence guide for exchanges and custody businesses.

Practical Checklist and Sample 90-Day Timeline

The following timeline assumes an operator starting from scratch with no Panamanian entity. Actual durations depend on the responsiveness of local agents, the completeness of your documents and bank appetite at the time of application.

Operators who prepare their AML programme and bank pack in parallel with incorporation (rather than sequentially) can often compress this timeline by two to four weeks. For an in-depth look at building an exchange from the ground up, see the launching a crypto exchange, step-by-step guide.

Conclusion, Your Panama Crypto License Roadmap in 2026

Understanding how to get a crypto license in Panama online requires accepting the current legal reality: there is no enacted standalone VASP licence as of 21 May 2026. Draft Law No. 314 may eventually create one, but operators cannot wait. The actionable path is clear, incorporate an S. A. , obtain the Aviso de Operación, register with the UAF, deploy a robust AML/CFT programme and build a documentary pack that addresses every question a Panamanian bank’s compliance team will ask. Operators who treat this corporate-plus-compliance pathway with the same rigour they would apply to a formal licence application are the ones who get banked, stay compliant and position themselves to transition smoothly if and when the draft law is enacted.

For background on why a crypto license matters and how to approach one correctly, or to find a qualified Panama FinTech practitioner, visit the Global Law Experts lawyer directory.

Sources

1. Unidad de Análisis Financiero (UAF), Official Site
2. Superintendencia de Bancos de Panamá (SBP)
3. Panama Emprende / MICI, Aviso de Operación Portal
4. Panama Banking News, Anteproyecto de Ley No. 314
5. SBP, Laws and Regulations Document Library
6. FATF, Guidance on Virtual Assets and VASPs
7. Global Law Experts, Panama FinTech Law 2026: Draft Law No. 314 & SBP Rule 1‑2026