Bitcoin Service Provider Licence El Salvador (BSP): Eligibility, Fees & Timeline

El Salvador remains one of the few jurisdictions in the world where Bitcoin holds the status of legal tender, making it a compelling domicile for exchanges, custodians, wallet providers and payment processors seeking regulatory clarity. Obtaining a bitcoin service provider licence El Salvador (commonly referred to as the BSP or Proveedor de Servicios de Bitcoin / PSB) is the gateway to operating lawfully within this framework. This guide distils the official regulator requirements drawn directly from the Banco Central de Reserva (BCR), the Comisión Nacional de Activos Digitales (CNAD), and the supervisory bodies that oversee anti-money-laundering compliance into a single, step-by-step English-language resource for applicants and their legal teams.

Who this guide is for:

• Bitcoin-native startups exchanges, wallets and custodians seeking the fastest route to a registered BTC operation.
• Payment processors fintech companies building Bitcoin payment rails for merchants in Latin America and beyond.
• In-house legal and compliance teams professionals benchmarking El Salvador against other crypto-licensing jurisdictions.
• Existing Digital Asset Service Providers (DASPs) firms already authorised under CNAD that want to understand how the BSP registry interacts with their PSAD licence.

At a glance: The Registro de Proveedores de Servicios de Bitcoin (BSP Registry) is administered by the BCR under the Reglamento de la Ley Bitcoin. Broader digital-asset authorisation including tokens, stablecoins and multi-asset platforms falls under the CNAD pursuant to Decreto No. 643 (LEAD). AML/CFT supervision is carried out by the Superintendencia del Sistema Financiero (SSF), with suspicious-transaction reporting flowing through the Unidad de Investigación Financiera (UIF) and its SIRAF platform. The allocation of supervisory responsibilities across these bodies has been documented in FATF/GAFILAT evaluation reports.

Regulators & Where You Register

CNAD Comisión Nacional de Activos Digitales

The CNAD is the primary authorisation body for Proveedores de Servicios de Activos Digitales (PSADs / DASPs). If your business handles digital assets beyond Bitcoin or if its Bitcoin activities are bundled with broader token services you will need CNAD pre-registration and authorisation. Under Decreto No. 643, the CNAD must issue a resolution within 20 business days of receiving a complete application, with a possible 10 business-day cure period if documentation is incomplete. The CNAD publishes downloadable forms and step-by-step guidance on its Cómo registrarse portal.

BCR Banco Central de Reserva (BSP Registry)

For businesses focused exclusively on Bitcoin as legal tender, the BCR maintains the Registro de Proveedores de Servicios de Bitcoin. Article 3 of the Reglamento de la Ley Bitcoin confirms the BCR’s role in receiving registration submissions and issuing registration receipts. Public reporting indicates rising BSP registration activity, underscoring the jurisdiction’s momentum in 2026.

SSF & UIF Supervision and Financial Intelligence

The SSF conducts ongoing AML/CFT supervision of registered providers, while the UIF receives suspicious-transaction reports through its SIRAF system. Together, these bodies ensure El Salvador’s Bitcoin services sector aligns with international standards. The UIF’s published guidance for PSAVs and PSBs details the specific reporting obligations, customer due diligence expectations and record-retention requirements that every BSP must meet.

How to Get a Bitcoin Service Provider Licence (BSP) in El Salvador Step by Step

The following process outlines the key stages for obtaining your bitcoin service provider licence El Salvador, whether through the BCR’s BSP registry (Bitcoin-only) or the CNAD’s PSAD pathway (multi-asset). Timelines are based on statutory provisions and typical real-world experience.

Step 1: Pre-Onboarding & Jurisdiction Decision (3–7 Days)

Before engaging with any regulator, determine whether your service model falls under the BSP registry (Bitcoin-only) or requires CNAD PSAD authorisation (multi-asset). Prepare an internal checklist covering corporate form, local commercial presence requirements, tax considerations and the projected asset scope. This is the stage where most applicants engage specialist advisory support to map their business activities against both the Ley Bitcoin and the LEAD (DL-643).

Key deliverables: Jurisdiction comparison matrix, corporate-structure decision, preliminary compliance gap analysis.

Step 2: CNAD Pre-Registration (If PSAD Activities Apply) Up to 20 Business Days

Applicants whose activities include or may include non-BTC digital assets should complete the CNAD pre-registration form available on the CNAD portal. Upon submission, the CNAD reviews the application and supporting documents. Decreto No. 643 mandates a resolution within 20 business days; if documentation is deficient, the applicant receives a 10 business-day cure period. Even Bitcoin-only businesses sometimes use this step to confirm scope with the CNAD and obtain written clarification before proceeding to the BCR.

Common objections: Incomplete beneficial-ownership disclosures, missing AML policy drafts, ambiguous descriptions of custody architecture. Preparing comprehensive documentation upfront significantly reduces delay.

Step 3: Company Formation & CNR Registration (2–4 Weeks)

Applicants must hold a valid Salvadoran legal entity. This involves registration with the Centro Nacional de Registros (CNR), obtaining a testimonio de escritura de constitución, a commercial registration (matrícula de comercio) and a taxpayer identification number (NIT). Notarisation of corporate documents is required.

Key deliverables: CNR registration certificate, notarised constitutive documents, NIT, matrícula de comercio.

Step 4: BCR BSP Registry Submission (Immediate Upon Readiness)

For Bitcoin-only service providers, the next step is submission to the BCR’s Registro de Proveedores de Servicios de Bitcoin. The required form and a digital copy of the constitutive documents are submitted directly. The BCR issues a registration receipt upon acceptance. Article 3 of the Reglamento de la Ley Bitcoin sets out the obligations attached to this registration, including compliance with BCR directives and cooperation with SSF supervisory requests.

Key deliverables: Completed BCR registration form, digital copies of all corporate documents, registration receipt.

Step 5: AML/KYC Programme Build & UIF SIRAF Registration (2–6 Weeks)

All BSPs and PSADs must develop a comprehensive AML/CFT programme and register with the UIF’s SIRAF reporting system. This includes drafting customer due diligence (CDD) and enhanced due diligence (EDD) policies, defining transaction-monitoring rules and alert thresholds, establishing SAR/STR reporting workflows, and appointing a designated compliance officer. The UIF guide for PSAVs/PSBs provides detailed templates and expectations.

Key deliverables: AML/CFT policy manual, KYC procedures, SIRAF registration confirmation, compliance officer appointment letter.

Step 6: Technical & Security Readiness (Concurrent)

Regulators expect evidence that custody, key-management, reconciliation, disaster-recovery and cybersecurity controls are robust. While El Salvador does not mandate a specific certification (such as SOC 2 or ISO 27001), providing independent audit evidence or recognised certifications strengthens the application materially.

Key deliverables: Custody architecture diagrams, key-management policies, disaster-recovery plan, penetration-test results, any third-party audit reports.

Step 7: Payment of Registration Fees

For CNAD PSAD applicants, fees are payable upon favourable resolution. The fee formula under DL-643 is based on multiples of the minimum wage (commerce and services sector) see the fees section below for worked examples. BCR BSP registration fees are administrative in nature. Fees may be payable in USD or BTC equivalent under the law.

Step 8: Post-Registration Notifications & Supervisory Readiness

After registration, the CNAD notifies the UIF and SSF. Providers should anticipate supervisory-readiness checks either on-site or remote and maintain a state of audit readiness from day one. The FATF/GAFILAT mutual evaluation framework underpins the SSF’s expectations regarding ongoing monitoring, periodic reporting and cooperation with financial intelligence requests.

Timeline Summary

Eligibility Who Can Apply and Minimum Thresholds

Legal Form & Registration

Applicants must be incorporated or registered in El Salvador. Required proof includes the CNR testimonio de escritura de constitución, a valid matrícula de comercio and a current NIT. Foreign entities typically incorporate a local subsidiary or branch.

Ownership & Beneficial Ownership

A certified shareholders’ register must be submitted, along with identification documents for all individuals holding 10 % or more of the entity’s share capital. Beneficial-ownership declarations are scrutinised against sanctions lists and PEP databases as part of the AML/CFT review.

Management & Technical Competence

CVs of directors and senior managers must demonstrate relevant experience in financial services, technology or compliance. Regulators may request evidence of prior audits, professional qualifications or sector-specific certifications.

Financial Requirements & Solvency

Established entities must submit audited financial statements (typically for the last three fiscal years). Startups without trading history provide detailed financial projections, capitalisation evidence and, where applicable, proof of committed funding.

Required Documentation Checklist

The following items form the core of any BSP or PSAD application. This list is aligned with both CNAD and BCR requirements:

• Corporate documents: Constitution (escritura de constitución), certificate of good standing, NIT, CNR registration.
• Governance documents: Bylaws, board minutes authorising the application, AML Officer appointment resolution.
• Financial statements: Audited accounts (last 3 years) or financial projections with capitalisation evidence for new entities.
• Compliance documentation: AML/CFT policy, transaction-monitoring description, KYC procedures, sanctions-screening methodology.
• Technical documentation: Custody architecture diagrams, key-management framework, SOC 2 / ISO 27001 reports (if available), disaster-recovery plan.
• Operational documents: Terms and conditions, customer-support SLA, complaint-handling procedure (including SSF contact information).
• CNAD-specific fields (for PSAD applications): Business plan, detailed list of services to be offered, description of digital assets to be handled, and fee payment reference per DL-643.

AML / KYC What Supervisors Will Test

Every holder of a bitcoin service provider licence El Salvador must satisfy rigorous AML/KYC standards enforced by the SSF and reported through the UIF. The following checkpoints are drawn from UIF guidance for PSAVs/PSBs and reflect FATF/GAFILAT evaluation criteria:

• Customer due diligence (CDD/EDD): Identity verification of all customers at onboarding, beneficial-owner identification, and risk scoring using a documented methodology. Enhanced due diligence applies to high-risk customers, PEPs and complex ownership structures.
• Source-of-funds checks: For transactions above defined thresholds and for any transaction flagged by risk indicators, providers must document the origin of funds.
• Transaction monitoring: Automated rules and manual reviews covering volume, velocity, geographic risk and counterparty exposure. Alert-handling workflows must be documented, with escalation timelines.
• SAR/STR reporting: Suspicious Activity Reports must be filed through the UIF’s SIRAF system within prescribed timeframes. Staff training on red-flag indicators is mandatory.
• Sanctions screening & PEP lists: Real-time screening against national and international sanctions lists, with ongoing monitoring and periodic re-screening.
• Record retention & audit trails: Transaction records and CDD files must be retained for the period prescribed by law. Providers should maintain immutable audit trails accessible to supervisors.
• Independent AML audit: An annual or periodic independent review of the AML programme is expected, with findings reported to senior management and the board.

Sample KYC matrix retail vs institutional:

DASP vs BSP Which Licence Is Right for Your Business?

Applicants frequently ask whether they need the BSP registration (Bitcoin-only, via BCR) or the PSAD/DASP authorisation (multi-asset, via CNAD). The answer depends on the scope of assets and services offered. The comparison table below summarises the key differences:

Recommendation: For Bitcoin-native firms those offering custody, wallet services, exchange or payment rails focused solely on BTC the BSP route through the BCR is typically faster and lower in cost. For businesses offering multiple token types, stablecoins or public digital-asset offerings, the PSAD/DASP pathway via CNAD is required. Some businesses pursue both registrations to maximise the range of services they can offer.

Official Fees How to Budget (Official Formulas & Worked Examples)

The CNAD publishes its fee formula under Decreto No. 643. The key figures are:

• Initial registration fee (PSAD): Equivalent to 15 minimum wages (commerce and services sector). The CNAD has indicated an example figure of $5,475 for the initial registral fee on its registration guidance page.
• Annual renewal fee (PSAD): Equivalent to 10 minimum wages.
• Additional certificates: $50 per certificate.

Example A Small wallet startup (new company): A Bitcoin-only wallet provider applying via the BCR BSP registry faces primarily administrative registry fees. If the provider also seeks PSAD scope from the CNAD, the initial PSAD fee of approximately $5,475 applies, plus $50 for any additional certificates. BCR registration itself does not carry the same scaled-fee structure.

Example B Mid-sized BTC exchange: An exchange handling Bitcoin only through the BSP route budgets for BCR administrative fees plus the full AML programme build-out (legal, audit and technology costs). If the exchange later adds multi-asset services requiring PSAD authorisation, it should budget the initial CNAD fee (~$5,475) plus the annual renewal (~$3,650) and variable costs for external audit and compliance advisory.

Currency note: Under DL-643, many fees are payable in USD or BTC equivalent.

Download: CNAD + BCR BSP Registration Checklist (One-Page PDF)

To streamline your application, Global Law Experts has prepared a CNAD/BCR-aligned registration checklist covering every document category: corporate formation certificates, beneficial-ownership identification, audited financial statements, AML/CFT programme components, technical and custody architecture documentation, and operational policies. The checklist is structured to mirror the regulator’s own filing requirements, reducing the risk of omissions and cure-period delays.

Checklist contents: Corporate documents (constitution, NIT, CNR certificate) · Governance (bylaws, board minutes, AML Officer appointment) · Financials (3-year audited statements or projections) · Compliance (AML/CFT policy, KYC procedures, sanctions-screening methodology) · Technical (custody architecture, key management, DR plan) · Operational (terms & conditions, complaint-handling procedure).

Download checklist the fillable PDF link will be available on this page.

GLE Advisory Fixed-Price vs Full-Service Packages

Global Law Experts offers structured advisory packages designed to match the needs of businesses at every stage of their bitcoin service provider licence El Salvador application:

Each package includes fixed-fee pricing confirmed at intake. Deliverables are tailored to the applicant’s corporate structure, asset scope and existing compliance maturity.

Official Documents & Where to Apply

The following official sources contain the forms, statutes and guidance referenced throughout this page:

• CNAD Registration portal & downloadable forms: cnad.gob.sv/es/como-registrarse/
• Decreto No. 643 (LEAD) Full statute with reforms: DL-643 PDF on CNAD site
• Reglamento de la Ley Bitcoin (Diario Oficial) BCR BSP registry obligations: OAS-hosted Diario Oficial copy
• UIF Guide for PSAV/PSB (SIRAF & AML/KYC expectations): UIF PSAV guidance PDF
• FATF/GAFILAT Mutual evaluation report on El Salvador: FATF/GAFILAT report

Regulators may update forms and fee schedules periodically. This page was last reviewed on July 27, 2026. Readers are encouraged to verify current requirements directly with the CNAD and BCR before filing.

Sources

• Comisión Nacional de Activos Digitales (CNAD) Registration guidance: https://cnad.gob.sv/es/como-registrarse/
• Decreto No. 643 Ley de Emisión de Activos Digitales (LEAD), with reforms: https://cnad.gob.sv/wp-content/uploads/2024/08/DL-643-LEAD-con-Reformas-1.pdf
• Reglamento de la Ley Bitcoin Diario Oficial (OAS-hosted): https://www.oas.org/en/sla/dlc/mesicic/docs/mesicic6_slv_a59.pdf
• Unidad de Investigación Financiera (UIF) Guide for PSAV/PSB: https://www.uif.gob.sv/wp-content/uploads/instructivos/GUIA_UIF_PSAV.pdf
• FATF/GAFILAT Mutual evaluation report, El Salvador: https://www.fatf-gafi.org/content/dam/fatf-gafi/fsrb-mer/Spanish-El%20Salvador.pdf.coredownload.inline.pdf
• El Salvador BCR Bitcoin registry activity reporting (El Diario de Hoy): https://historico.elsalvador.com/historico/935690/bitcoin-bcr.html