Costa Rica does not issue a formal crypto license. That statement remains true in 2026. Virtual asset businesses can operate through standard company incorporation handled by Costa Rica crypto company formation lawyers, all without government licensing approval.
But compliance obligations are real and enforced. Two frameworks matter most: AML/CFT under Law No. 7786 and RTBF beneficial ownership reporting under Ley 9416. Missing either one carries financial penalties and operational restrictions.
This guide covers what virtual asset businesses must know about both requirements in 2026. Recent enforcement actions, filing deadlines, and legislative changes are included. A “Who Can Help” section lists firms that specialize in Costa Rica crypto compliance.
The 2026 Reality: No License, But Mandatory Compliance
As of mid-2026, Costa Rica has not enacted a dedicated VASP licensing law. Crypto businesses incorporate as standard S.A. or S.R.L. companies. They include virtual asset clauses in their corporate objects. They operate without waiting for regulator approval.
However, the era of using Costa Rica as a zero-compliance jurisdiction is over. In late 2025, SUGEF shut down an unregistered platform that had processed over $50 million in transactions without KYC procedures. Fines were imposed on the operator.
Two compliance pillars apply to every virtual asset business:
- AML/CFT under Law No. 7786 – mandatory for all entities conducting virtual asset activities
- RTBF beneficial ownership filing under Ley 9416 – annual declaration required for all legal entities
AML/CFT Requirements Under Law No. 7786
Virtual asset businesses fall under Law No. 7786, Costa Rica’s primary anti-money laundering legislation. The same AML rules that apply to banks and financial institutions apply to crypto companies. SUGEF monitors compliance across all covered entities. The ICD, which serves as the country’s financial intelligence unit, receives all suspicious activity reports.
Costa Rica crypto licensing attorneys recommend documenting every step of the compliance program for SUGEF inspection readiness.
The 2026 AML/CFT compliance checklist includes these items:
- Documented AML/CFT policy containing risk evaluation and transaction oversight
- KYC and CDD protocols for every customer (identity checks, verification, continuous monitoring)
- Enhanced scrutiny for politically exposed persons and higher-risk client categories
- Suspicious transaction reporting directly to the ICD
- Travel Rule compliance for virtual asset transfers crossing borders
- A designated compliance officer, either internal staff or outsourced provider
- Five-year minimum retention period for all compliance records
Costa Rica crypto licensing lawyers who know this territory help operators build compliance systems that meet SUGEF standards. Mandatory registration is coming. Companies that already have proper frameworks face a much smoother transition when the requirement takes effect.
Legislative Update: VASP Registration Bill Passed
May 27, 2026, marked a turning point for Costa Rica’s crypto regulatory landscape. The Legislative Assembly voted unanimously to approve Amendment No. 25.340 to Law No. 7786. The amendment adds Virtual Asset Service Providers to the list of entities covered by the nation’s AML/CFT regulatory regime for the first time.
Key provisions of the new amendment:
- Mandatory registration with SUGEF for all VASPs operating in Costa Rica
- The amendment establishes six mandatory compliance pillars for registered VASPs:
- Customer due diligence protocols; transaction record-keeping systems; reporting of suspicious transactions, including attempted but failed transactions; ongoing risk assessment procedures, information sharing and cooperation with authorities; data protection and confidentiality controls
- Public VASP registry maintained by SUGEF
- Financial institutions barred from servicing unregistered VASPs
- Dual penalty structure: fixed fines from $1,800 to $90,000 (2 to 100 base salaries) OR proportional fines of 5% to 50% of transaction value
The approved amendment now sits with the executive branch awaiting the president’s signature. After signing, publication in La Gaceta (the official government gazette) triggers a three-month window for SUGEF to issue implementing regulations.
Important distinction: Registration with SUGEF is not an operating license. The amendment explicitly states that registration “does not constitute an operating permit or government authorization”. However, the banking access control creates a de facto market entry barrier. Unregistered VASPs cannot maintain relationships with Costa Rican financial institutions.
RTBF Beneficial Ownership Filing 2026: Deadlines and Requirements
Ley No. 9416, known as the Law to Improve the Fight Against Fiscal Fraud, created the Registro de Transparencia y Beneficiarios Finales (RTBF). Every Costa Rican legal entity must submit an annual declaration identifying who ultimately owns or controls the company.
Key RTBF requirements for 2026:
- Filing period: April 1 to April 30, 2026
- Filing method: Legal representative must file using their digital signature (firma digital) via the BCCR Central Directo portal
- UBO threshold: Individuals with 25% or more ownership or control must be declared
- Foreign representatives: If no legal representative is a Costa Rican national or permanent resident with a digital signature, a general power of attorney (generalísimo) must be granted to a third party with a valid digital signature
Critical change for 2026: Special powers of attorney are no longer accepted. Only a general power of attorney (generalísimo) can be used for RTBF filing by a third party.
Penalties for non-compliance:
- Monetary fine of 2% of gross income from the previous fiscal period
- Minimum fine of three base salaries, maximum of 100 base salaries
- Inclusion on the non-compliant entities list maintained by the General Directorate of Taxation
- Restrictions on issuing legal status certificates
- Inability to register documents before the National Registry
RTBF filing should never be an afterthought for operators setting up a Costa Rica entity. Law firms managing the incorporation process typically include this filing in their service package. Missing the April 30 cutoff brings automatic fines and restrictions on registry services.
OECD CARF: Coming in 2027
Costa Rica has not yet activated the OECD’s Crypto-Asset Reporting Framework. That will change soon. The international timeline leaves no room for delay. January 1, 2027 marks the start of data collection. The first automatic cross-border exchanges of crypto financial information follow in 2028.
Virtual asset businesses should prepare data collection and transaction reporting capabilities now. The RTBF framework and SUGEF registration both align with CARF requirements. Businesses that treat compliance as optional today will face disruption when CARF takes effect.
Territorial Tax: 0% on Foreign-Sourced Income
Costa Rica’s territorial tax system remains a major advantage for virtual asset businesses . Income generated from clients and operations outside Costa Rica is not subject to local corporate income tax.
Tax overview for 2026:
| Tax Category | Rate |
| Foreign-sourced crypto income | 0% |
| Costa Rican-sourced crypto income | 30% |
| Capital gains tax on crypto (individuals) | 0% |
| VAT on crypto transactions | Not applicable |
The 0% rate applies only to genuinely foreign-sourced income. Income from Costa Rican clients or domestic activities is subject to tiered domestic rates. CARF reporting in 2027-2028 will increase scrutiny on income sourcing claims.
Banking Access: What to Expect
Costa Rican banks apply enhanced due diligence to crypto-related businesses. Traditional accounts are difficult to open without documented AML/CFT frameworks, a clear business model, and proper compliance infrastructure.
Once the SUGEF registration amendment is enacted, only registered VASPs will be eligible for banking and financial services in Costa Rica. In practice, most Costa Rica crypto companies currently use offshore fintech partners, Electronic Money Institutions (EMIs), and stablecoin-based settlement for operational cash management.
A Costa Rica crypto business setup law firm can help prepare the compliance file needed for banking applications. But no firm can guarantee account approval. The decision rests with each financial institution.
Where to Get Professional Compliance Support
The following firms specialize in Costa Rica crypto compliance, AML/CFT framework design, RTBF filing, and banking preparation.
Gofaizen & Sherle is a leading legal consulting firm for crypto licensing with extensive experience in Costa Rica’s compliance-based framework. The firm handles entity formation, AML/KYC policy design aligned with FATF recommendations, RTBF filing through a local representative with a digital signature, and banking onboarding support.
Their team monitors legislative developments, including Bill 25.340 (now passed) and prepares clients for SUGEF registration. The Crypto Law Index CLPAI 2026.1 ranking places Gofaizen & Sherle among the top three crypto licensing law firms globally. They support both emerging startups and established exchanges expanding into Latin America.
CAIA Legal is a heritage Costa Rican corporate firm offering a 3-day entity setup for FinTech and crypto businesses. The firm maintains strong relationships with local banking partners. Their AML/KYC programs align with SUGEF requirements under Law No. 7786. Additional services include token issuance guidance, ICO/STO support, DeFi advisory, and stablecoin regulatory analysis for on-ramp and off-ramp operations.
Global Law Experts features a payment-flow-first methodology for crypto businesses. The firm maps licensing triggers based on how money moves through operations. Their AML/CTF frameworks satisfy local supervisors and international banks. Institutional banking experience helps fiat custody operators prepare compliance files that banks require before onboarding.
Final Thoughts
Costa Rica in 2026 offers virtual asset businesses a fast, low-cost entry point. A formal crypto license does not exist. Company formation takes 2 to 3 weeks. Compliance preparation adds 4 to 6 weeks.
But AML/CFT compliance under Law No. 7786 is mandatory and enforced. RTBF beneficial ownership filing must be completed annually by April 30. The newly passed VASP registration amendment will require SUGEF registration once enacted. Financial institutions will only service registered VASPs.
Choosing the right legal counsel makes the difference between a compliant operation and one that faces constant disruptions. Good firms build compliance systems that function immediately but also handle the transition to mandatory registration without friction.
A Costa Rica crypto business legal setup firm can build the entity and compliance framework simultaneously.
Operators who treat AML and RTBF requirements as optional right now will discover their mistake when penalties arrive, bank accounts close, and registry services stop.