Crypto License in Costa Rica

No. Costa Rica does not issue a standalone crypto license. Law No. 10961 instead creates SUGEF registration for providers within Article 15 quater from 19 September 2026. In commercial use, “Costa Rica crypto license” may refer loosely to the company, compliance and registration workstream, but it is not the name of a legal authorization. The first step is to confirm whether the actual activities fall within the statutory VASP definition.

Yes. An in-scope provider must register with SUGEF from 19 September 2026. Law No. 10961 has been enacted, but as of 4 September 2026 it has not yet commenced. Whether a particular business is in scope is addressed in the activity-perimeter answer below. No VASP-specific public procedure was identified on the checked SUGEF pages as of 4 September 2026, but that finding does not defer the statutory effective date.

No. SUGEF registration has a narrower legal effect than an operating license. From 19 September 2026, Article 15 quater will place an in-scope provider within SUGEF’s risk-based AML / CFT / CPF registration and supervision framework. It will not validate the business model, authorize every product, create market-access rights or replace company incorporation. The filing status and public record should be confirmed against current SUGEF materials.

From 19 September 2026, registration will apply to businesses within the activity-based definition in Article 15 quater. Law No. 10961 defines exchange between virtual assets and fiat or other virtual assets, transfers, custody, deposit, administration or control, and specified financial services related to issuance, commercialization, offering or sale. Mining, software, non-custodial products, NFTs, DeFi and tokenization require individual analysis because the result depends on the company’s actual role, control and customer relationship.

A foreign-facing model will not be automatically exempt from SUGEF registration. From commencement, Article 15 quater will direct SUGEF to prevent habitual in-scope activity in Costa Rican territory by unregistered providers, regardless of legal domicile or stated place of operation. A Costa Rican company serving customers abroad therefore needs a factual review of management, personnel, contracting, custody, transaction flows and customer relationships. See the territorial provision in Law No. 10961.

There is no reliable fixed price before the business model and ownership structure are assessed. The scope may include classification, incorporation, corporate documents, AML / KYC controls, registration preparation, banking support and ongoing compliance. Law No. 10961 also contemplates supervisory contributions, while the amount and payment mechanics require confirmation under the applicable framework. Check the latest SUGEF regulations before relying on any fee estimate.

The process does not have one combined timeline. Company incorporation, compliance preparation and SUGEF review are separate stages with different dependencies. Corporate timing depends on the structure and document readiness. Compliance timing depends on the products, customer risks and existing controls. The regulator’s review follows the procedure in force and cannot be guaranteed. No VASP-specific public review period was identified on the checked SUGEF regulations page as of 4 September 2026.

Not every VASP should be assumed to need the same compliance-officer structure. Once effective, Article 15 quater will require SUGEF to consider size, structure, number of operations, employees, volume and risk exposure. On that basis, SUGEF will be able to require a compliance officer or authorize a differentiated structure. The company should still assign clear responsibility, independence, reporting lines and escalation procedures while the appropriate model is assessed.

From 19 September 2026, yes, subject to the applicable Conassif rules. Law No. 10961 will require providers to obtain and retain the prescribed information for incoming and outgoing virtual-asset transfers, including information related to origin and destination. The exact operational requirements, thresholds and implementation mechanics will depend on the rules issued by Conassif. Travel Rule readiness should therefore be designed against the current Costa Rican framework, not a generic foreign template.

Potentially, but neither company formation nor SUGEF registration guarantees a bank account. Banks and EMIs apply their own risk appetite and review the UBOs, source of funds and wealth, jurisdictions, counterparties, transaction flows and AML controls. From commencement, Law No. 10961 also restricts covered entities from maintaining commercial relationships with an unregistered Article 15-quater provider. Banking should be handled as a separate due-diligence workstream.

Yes, an existing Costa Rican company can be acquired. The transaction gives the buyer a corporate vehicle, not immediate regulated status. Any SUGEF position must be confirmed under the current framework after reviewing the entity’s history and proposed activity. Ownership, control and business-model changes may require updates, notifications or new steps. Review the acquisition through the ready-made company section above and the current SUGEF regulations before closing.

No general Costa Rican CARF reporting duty for 2026 follows from the OECD commitment alone. Costa Rica has committed to implementing CARF in time to commence exchanges by 2028. The OECD Global Forum commitment list was updated on 23 June 2026. Applicable provider obligations require separate review of Costa Rican implementing legislation, effective dates, nexus and scope. CARF is a tax-transparency framework and remains separate from SUGEF VASP registration under Law No. 10961.

Choose another jurisdiction if its legal effect and market access match the business more closely. An EU-facing model may require the authorization framework under MiCA. El Salvador has a separate digital-asset provider route administered by the CNAD, while Canadian virtual-currency MSBs register with FINTRAC. The comparison should consider customers, products, custody, payments, distribution, banking and the type of regulatory status counterparties expect.