Crypto License in Panama

Six categories of crypto business must register as a supervised entity in Panama and implement an AML/CTF program aligned with UAF and SSNF requirements: crypto exchanges (crypto-to-fiat and crypto-to-crypto), custodial wallets, crypto payment processors, OTC desks, token issuance platforms operated by the project, and ecosystems where the platform controls token movement. The trigger is custody or operational control over client assets and funds, not the technology used. Four categories of crypto-adjacent activity are not subject to AML supervision in Panama.

Subject to AML/CTF supervision under UAF and SSNF:

• Crypto exchanges and OTC desks: crypto-to-fiat and crypto-to-crypto transactions.
• Custodial wallets and services that store private keys.
• Crypto payment processors and payment gateways.
• OTC platforms and large transaction processing services.
• Token issuance platforms operated by the project.
• Ecosystems where the platform controls token movement.

Not subject to AML/CTF supervision:

• Software developers without access to client assets.
• Consulting and technical support providers that do not conduct transactions.
• Mining projects.
• Non-custodial staking, where users retain full control over their assets.

Four operational models are most commonly used by crypto businesses in Panama: crypto exchange (crypto-fiat and crypto-crypto), custodial wallet / custody services, payments / processing / OTC, and token issuance (utility or platform tokens). Panama does not issue model-specific licenses such as “exchange license” or “wallet license” — instead, each model is built as an S.A. with an AML/CTF and governance setup tailored to its operations, calibrated to satisfy banking and EMI counterparties. The compliance focus differs by model, as detailed below.

Model: Crypto exchange (crypto-fiat / crypto-crypto)

What matters in practice:

• AML/CTF program (KYC, KYT, sanctions screening, suspicious transaction reporting workflows).
• Custody and settlement controls (who holds keys, how withdrawals are approved).
• Security controls and incident response.
• Clear Terms of Service, Risk Disclosure, and complaints handling.

Model: Custodial wallet / custody services

What matters in practice:

• Segregation logic and access controls.
• Recovery procedures and audit trails.
• Enhanced due diligence for high-risk users and large flows.

Model: Payments / processing / OTC

What matters in practice:

• Source of funds and source of wealth checks for higher-risk flows.
• Transaction monitoring rules and escalation.
• Alignment with bank or EMI onboarding requirements.

Model: Token issuance (utility / platform tokens)

What matters in practice:

• Token description, allocation, and disclosure pack.
• AML controls for primary distribution.
• Legal classification review where tokens may resemble securities features (case-by-case).

A crypto business in Panama must satisfy eleven requirements covering corporate form, governance, compliance, and disclosure: incorporation as an S.A. (Sociedad Anónima), three directors, a registered agent, registration in the Public Registry, a RUC tax ID, an Aviso de Operación through MICI, publication of mandatory company information on the website, a three-year business plan, corporate and personal documents, an AML/CTF compliance program, and a description of the technological infrastructure. No physical office, local director, or minimum statutory capital is required — but $50,000 in proof of funds is recommended for bank account approval. The list below details each requirement.

• S.A. corporate form. The Sociedad Anónima is the standard structure for crypto services — flexible, accepted by international banks, and suitable for cross-border operations. The Specialized Financial Institution (SFI) category applies to specific financial-intermediation models.
• Three directors. Panama law requires a minimum of three directors: President, Secretary, and Treasurer. Directors may be non-residents of any nationality.
• Registered agent. Each Panama company must have a registered agent that maintains corporate records and serves as the regulatory point of contact. Gofaizen & Sherle acts as registered agent for client S.A.s as part of the standard package.
• Public Registry and RUC. After incorporation documents are filed, the company becomes a legal entity in the Public Registry and receives a Registro Único de Contribuyentes (RUC) tax identification number from the Dirección General de Ingresos (DGI).
• Aviso de Operación. A commercial operating notice (Aviso de Operación, also called Licencia Comercial) is issued through the Ministry of Commerce and Industry (MICI). It is mandatory for any S.A. conducting commercial activity within Panama; offshore-only models with no Panamanian counterparties or operations may not require it. Gofaizen & Sherle assesses whether your operating model triggers this requirement during scoping.
• Mandatory website disclosure. The company must publish its commercial name, legal address, contact details, domain name, Terms of Use, and Privacy Policy on its corporate website. This is a banking onboarding prerequisite.
• Three-year business plan. A written plan describing services, business model, company structure, financial projections, and risk-management approach. Required by banks and EMIs at onboarding.
• Corporate and personal documents. Notarized passports of directors and shareholders, proof of address, resumes, criminal record certificates, and full ownership structure documentation.
• Proof of financial stability. Panama law does not set a minimum capital requirement, but banks and EMI providers typically require proof of funds between $10,000 and $50,000, depending on the operating model.
• AML/CTF program. Internal AML/KYC procedures, Customer Due Diligence (CDD), Ultimate Beneficial Owner (UBO) identification, suspicious transaction monitoring, sanctions screening, and reporting to UAF — in line with Law No. 23 of 2015 and SSNF guidance.
• Technological infrastructure description. Description of IT architecture, security measures, and internal control systems. Required at banking onboarding and during SSNF supervisory reviews.

The standard document package for crypto company setup in Panama is the following:

• Passports or IDs of directors and shareholders. Notarized copies for the corporate registry and AML procedures.
• Proof of address. Utility bill or bank statement issued within the last 90 days, for each director and shareholder.
• Due diligence form. Contains information about the company, controlling persons, source of funds, and business activity.
• Three-year business plan. Services description, market, monetization, financial projections, and risk-management approach.
• Description of crypto activities. List of services (exchange, custody, payments, token issuance) with AML controls and internal procedures.
• Corporate documents. Articles of Incorporation, registered agent appointment, director resolutions.
• Proof of financial stability. Bank statements or capital deposit confirmation ($50,000 recommended for banking).

Three regulatory developments are tracked for Panama crypto in 2026: several draft crypto-asset bills are pending in the National Assembly (Bill 247, Bill 326, Draft Law 314) — none enacted as of mid-2026, and no standalone VASP license regime is in force; Panama participates in OECD Crypto-Asset Reporting Framework (CARF) discussions on international tax transparency, including signing the CARF-MCAA (02-12-2025); and UAF guidance for supervised non-financial entities continues to tighten on transaction monitoring and STR reporting thresholds. The territorial tax principle remains unchanged, and no special tax on digital asset transactions is planned. For operating businesses, the practical implication is heavier AML/CTF compliance rather than a license-application process.

The operational trend for 2026 is not new licensing, but tighter onboarding standards from banks and EMIs and higher evidence requirements on source of funds, KYT (Know Your Transaction), and sanctions controls.