Why Choose Costa Rica for Crypto?
Costa Rica suits operators who want a low-friction Latin American footprint with institutional plumbing and territorial taxation. The country issues no crypto-specific licence; crypto businesses operate as ordinary S.A. or S.R.L. entities under general commercial law, with AML/CFT obligations layered on through Law 7786 where activities trigger SUGEF inscription as an APNFD.
Formation, APNFD inscription, and banking run 3 to 7 months (the Article 15 quáter VASP registration comes on top, on a timetable not yet set), with state charges of about USD 150 to 300 in Year 1 (about USD 550 to 710 with the minimum notarial fee for the incorporation deed) and a typical build of USD 5,100 to 20,300 quoted per case on top.
Territorial Taxation and OECD Membership
Costa Rica taxes only Costa Rica-source income. Corporate income tax is 30% on local-source profits with a tiered scale of 5% to 20% for companies whose gross income does not exceed CRC 119,174,000 in 2026;[16][28] foreign-source revenue from crypto exchange, custody, or transfer services performed outside the country is generally outside the Costa Rican tax base; the 2023 economic-substance reform applies separately to foreign-source passive income of multinational-group members. The country joined the OECD as its 38th member on ,[6] which carries more weight in correspondent-banking conversations than Panama’s status as a long-standing non-member.
Costa Rica signed the CARF MCAA on and sits in the OECD Global Forum’s first-exchanges-by-2028 cohort, where Panama signed on ; domestic implementing rules are still pending.
No Crypto Licence, Real Compliance Plumbing
Costa Rica has neither a VASP licence nor a CASP authorisation. Compare this with the British Virgin Islands, where the VASP Act 2022 has been in force since , or the Cayman Islands, whose VASP Act Phase 2 licence has governed custody and trading platforms since . The compliance burden in Costa Rica is real but lighter: SUGEF inscription under Articles 15 and 15 bis of Law 7786 (governed for APNFDs by Acuerdo SUGEF 11-18) and, since , mandatory VASP registration under Article 15 quáter, plus mandatory beneficial-ownership filing through the Registro de Transparencia y Beneficiarios Finales (RTBF) annually in April.
Ley 10961 (Expediente 25.340), published on and in force since , created a dedicated VASP registration duty; no implementing reglamento had appeared on the SUGEF regulations page by .
USD-Friendly Banking and a Live Institutional Crypto Product
The colón circulates alongside the United States dollar in everyday commerce, and most operating accounts run in USD. Banco Nacional de Costa Rica (BNCR), the country’s largest bank by total assets,[24] launched BN ETF Bitcoin on , the first Bitcoin-exposed investment fund offered by a regulated bank in Central America. The product invests in a portfolio of ETFs with Bitcoin exposure rather than holding spot Bitcoin directly; minimum investment is USD 100 and settlement is in dollars. The signal matters for crypto operators: a state bank now distributes a Bitcoin-exposure product to retail clients, which has eased the institutional conversation around onboarding crypto businesses.
Stable Democracy and US Time-Zone Alignment
Costa Rica abolished its standing army in 1948 and operates in the Central Standard Time zone (UTC minus 6). Both factors matter to operators serving North American markets: business hours overlap with the US Eastern and Pacific time zones, and the political environment is materially more stable than several Caribbean and Central American peers. Next to Saint Lucia, where crypto operators bank through a multi-provider stack of a regional bank and EU or UK EMIs, Costa Rica offers onshore banking alongside territorial tax treatment.
Regulatory Framework
Crypto is legal in Costa Rica but is not legal tender. Cryptocurrencies are treated as virtual or intangible assets per Dirección General de Tributación (DGT) Private Letter Ruling MH-DGT-OF-0460-2023, dated .[14] No statute prohibits the activity, and the Banco Central de Costa Rica’s tolerancia vigilante position permits circulation and exchange of crypto for lawful purposes while maintaining that crypto cannot transit the national SINPE payments system.[9]
What “SUGEF VASP registration” means in Costa Rica
SUGEF VASP registration is the AML/CFT supervisory inscription with the Superintendencia General de Entidades Financieras that Article 15 quáter of Law 7786, inserted by Ley 10961, has required since ; Acuerdo SUGEF 11-18 governs inscription only for the Article 15 and 15 bis activities. The Act states that the inscription no representa una autorización de operación: it is registration as an obligated subject, not a licence to conduct crypto business.[23] Tax treatment of crypto follows DGT Ruling MH-DGT-OF-0460-2023: crypto held as a business activity is subject to corporate income tax; exchange, custody, and key-safekeeping services are subject to corporate income tax and IVA at 13%.[14]
Regulatory History
Costa Rica’s crypto policy has been incremental rather than legislative. The Banco Central de Costa Rica issued its foundational comunicado on , confirming that Bitcoin and similar crypto-assets do not benefit from BCCR backing and cannot be considered foreign currency under the exchange regime.[7] BCCR Technical Note 001/2019 and a series of public statements through 2021 established the tolerancia vigilante doctrine: circulation of crypto for lawful purposes is permitted because no law expressly prohibits it.
Three legislative attempts preceded Ley 10961. Expediente 22.837 (the Executive’s first VASP AML bill) cleared first debate on but was reverted by an Article 148 bis motion and archived on by four-year statutory expiration. Expediente 23.415, the Ley de Mercado de Criptoactivos sponsored by Deputy Johana Obando in November 2022, proposed a full MiCA-style market framework including crypto-specific tax exemptions but has never advanced significantly.[15]
Ley 10961 (Expediente 25.340), filed in December 2025 and approved by unanimous second debate, was published in Alcance No. 78 to La Gaceta No. 113 on and has been in force since .
The Liberty Reserve case remains the political backdrop. Liberty Reserve incorporated in Costa Rica in 2006, was denied a Costa Rican money-transmitter licence in 2011, and was shut down by the US Southern District of New York on . Founder Arthur Budovsky pled guilty and was sentenced to 20 years’ imprisonment plus a USD 500,000 fine on . When Liberty Reserve was shut down, it had more than 5.5 million user accounts and had processed more than 78 million transactions worth over USD 8 billion.[20]
Every Costa Rican crypto-policy debate since has carried the Liberty Reserve weight, and the new SUGEF mandate in Expediente 25.340 directly addresses the gap that case exposed.[11]
Recent Regulatory Developments
- : Ley 10961 (Expediente 25.340) published in Alcance No. 78 to La Gaceta No. 113. It adds Article 15 quáter to Law 7786, mandates SUGEF VASP registration, extends to VASPs the Article 81 fines of 2 to 100 base salaries (range CRC 924,400 to 46,220,000 at the 2026 base salary of CRC 462,200[13]), and applies the FATF Travel Rule to incoming and outgoing virtual-asset transfers. It entered into force on ; no implementing reglamento had appeared on the SUGEF regulations page by .
- : Expediente 22.837 archived by four-year statutory expiration after an Article 148 bis motion reverted it from second to first debate.
- : BN ETF Bitcoin launched by BNCR, public availability from ;[8] first Bitcoin-exposure investment fund offered by a regulated Central American bank.
- : DGT Private Letter Ruling MH-DGT-OF-0460-2023 issued,[14] classifying crypto as virtual or intangible assets and confirming corporate income tax and IVA treatment.
- : GAFILAT final follow-up report closes the fourth round with Recommendation 15 (new technologies / virtual assets) still rated Non-Compliant,[10] flagging the absence of a VASP framework. This is the direct driver of Expediente 25.340.
Regulatory Overlap
Four overlapping regimes shape the Costa Rica compliance picture:
- Law 7786 (AML/CFT, 1998 as amended). Articles 15 and 15 bis create the APNFD obligation, triggered when an entity’s activity is sensitive to ML/TF risk.[21] Acuerdo SUGEF 11-18 governs inscription mechanics.[4]
- Law 9416 (Transparency and Beneficial Ownership, 2016). RTBF annual declaration filed via the BCCR’s Central Directo platform between 1 and 30 April each year. Beneficial owners are the natural persons holding 15% or more of the capital, directly or indirectly, a majority of the voting rights, or control by other means.[29] Non-filing blocks Registro Nacional certifications and triggers fines of 3 to 100 base salaries.[12]
- Law 9635 (Tax Modernisation, 2018). Imposes 13% IVA on services including crypto exchange, custody, and key-safekeeping per DGT Ruling MH-DGT-OF-0460-2023.[14]
- OECD CARF. Costa Rica signed the CARF MCAA on ; first exchanges are scheduled for 2028, with domestic implementation pending.[18]
Regulatory Transition: Pre-25.340 to Post-25.340
The Old Regime
The pre-Ley 10961 baseline rests on Law 7786 Articles 15 and 15 bis and Acuerdo SUGEF 11-18. Inscription was mandatory where the activity fell within those articles, but neither expressly named virtual-asset activity, and many crypto operators ran without inscription on the basis that their activity did not clearly fall within the Article 15 categories. That regime ended when Ley 10961 entered into force on ; the reglamento had not appeared on the SUGEF regulations page by .
The New Regime
Under Law 7786 as amended by Ley 10961, Article 15 quáter has made SUGEF VASP registration mandatory since , and obligated entities may not maintain commercial relations with unregistered VASPs.[23] The VASP obligations (KYC, UBO identification, sanctions screening, the Travel Rule, and STR reporting) are set out under Permitted Activities and Requirements below, and the penalty range under Enforcement.
Key Deadlines
| Milestone | Date | Impact |
|---|---|---|
| Second debate approval | [1] | Bill text locked |
| Ley 10961 publication | Published in Alcance No. 78 to La Gaceta No. 113 | |
| Entry into force | Mandatory VASP registration begins | |
| Reglamento publication | Not on the SUGEF regulations page as of | CONASSIF sets thresholds, compliance conditions and the scope of covered activities |
| Registration duty | From ; the Act sets no transitional period | Operators in scope must register; procedure and thresholds await the reglamento |
Practical Implications
Operators whose activity falls within Article 15 quáter must now register with SUGEF, and inscription evidence also eases banking onboarding. Because the reglamento will set thresholds and the scope of covered activities, operators should keep their activity mapping and AML programme ready to be checked against it on publication.
Permitted Activities and Regulatory Treatment
Costa Rica does not issue licence types for crypto activity. The compliance question is which AML obligations apply, not which licence to choose. The relevant categories are Article 15 (money-changing, transfers, fiduciary management) and Article 15 bis (broader catch-all including company-formation services and any activity sensitive to LC/FT risk) of Law 7786 and, since , Article 15 quáter VASP activity, which overlays the existing two.
Covered Activities (Article 15 quáter)
Article 15 quáter of Law 7786, as inserted by Expediente 25.340, captures four core VASP activities aligned with FATF Recommendation 15:[23]
- Exchange between virtual assets and legal-tender currencies, or between one or more forms of virtual assets. Centralised exchanges, OTC desks, fiat on-ramp and off-ramp providers, and crypto-to-crypto exchange services.
- Transfer of virtual assets. Wallet-to-wallet transfer services, custody-to-counterparty transfers, payment processors handling crypto.
- Custody and administration of virtual assets or of instruments enabling control of virtual assets. Custodial wallet providers, key-management services, exchange custody arms.
- Participation in, and provision of financial services related to, the issuance, marketing, offer, or sale of virtual assets, for the provider itself or for clients. Token-issuance and token-sale platforms and ICO/IEO/IDO operators.
For each activity, the Act lists ten preventive obligations, from customer due diligence to confidential suspicious-transaction reporting, adds those CONASSIF sets by regulation, and applies to incoming and outgoing virtual-asset transfers the obligations set for cross-border transfers, including the FATF originator and beneficiary information.[23]
What Does NOT Require Registration
The following activities fall outside the Article 15 quáter definition on its wording; CONASSIF’s reglamento is to settle the scope of Article 15 quáter, so re-check them against it:
- Pure non-custodial wallet software providers. Where the operator never controls user keys, the activity does not meet the custody trigger.
- Pure peer-to-peer matching without custody or settlement intermediation. True P2P platforms that neither hold funds nor settle trades typically fall outside the inscription perimeter, though SUGEF retains discretion under Article 15 bis where activity sensitivity emerges.
- Personal trading and personal holdings. Individual investment activity is not a business and is subject only to DGT capital-income/capital-gains treatment under the 2023 ruling.
- Mining and validator infrastructure. Activity does not fall within the FATF VASP definition and is not separately licensed in Costa Rica. Tax treatment follows general business rules.
- DAO governance participation, DeFi protocol use, and NFT collection. No specific guidance has been issued; absent custodial or fiat-exchange features, these fall outside the SUGEF perimeter.
Requirements
Costa Rica imposes no fixed capital minimum, no local-director requirement, and no formal substance test for crypto businesses. The binding requirements are corporate-law minima for the chosen entity type, beneficial-ownership disclosure through RTBF, AML/CFT controls under Law 7786 where SUGEF inscription applies, and, for a multinational-group member receiving foreign-source passive income, the economic substance needed to be a qualified entity under the 2023 reform.
Costa Rica Requirements Table
| Requirement | Standard |
|---|---|
| Entity types permitted | Sociedad Anónima (S.A.) or Sociedad de Responsabilidad Limitada (S.R.L.) under Código de Comercio (Law 3284) |
| Minimum shareholders / partners | S.A. and S.R.L.: 2 at constitution |
| Minimum directors / managers | S.A.: 3 (President, Secretary, Treasurer) plus a fiscal (supervisory officer); S.R.L.: 1 gerente |
| Foreign ownership | 100% permitted |
| Resident director | Not required |
| Resident agent | No longer required: Ley 10.597 (published 3 December 2024, applied from 4 June 2025) repealed the requirement and substituted a registered corporate email address for notices |
| Registered office | Mandatory for service of process; physical premises not mandated |
| Minimum capital | No fixed minimum; nominal CRC 10,000–100,000 declared in practice |
| Beneficial ownership disclosure | RTBF annual declaration via Central Directo, 1–30 April; threshold 15% of capital[12][29] |
| AML/CFT inscription | APNFD inscription under Law 7786 Articles 15 / 15 bis; mandatory VASP registration under Article 15 quáter since [23] |
| Tax registration | Mandatory with DGT via the TRIBU-CR platform, which replaced ATV on 6 October 2025; municipal patente per local municipality |
| Social security registration | CCSS registration mandatory if hiring local employees; INS workman’s compensation insurance |
| Accounting records | Books in Spanish; retained 5 years (10 years where books contain UBO data) |
| Firma Digital | Required for RTBF and most tax filings; available only to Costa Rican citizens and legal residents. Non-resident shareholders typically execute a general power of attorney to a Costa Rican professional |
Fit-and-Proper Assessment
No licence-style fit-and-proper approval applies, because no licence is issued. Acuerdo SUGEF 11-18 imposes director and beneficial-owner disclosure during APNFD inscription, and the regime is registration-based, not approval-based. Since , Article 15 quáter requires SUGEF to set regulatory measures to check the background of a VASP’s participants, associates and beneficial owners; those measures had not appeared on the SUGEF regulations page by .
The practical fit-and-proper test in Costa Rica today is the banking onboarding interview, not a regulatory hurdle. Banks routinely decline crypto-business onboarding without SUGEF inscription evidence and clean director documentation.
Local Representation
Costa Rica no longer requires a resident agent. Ley 10.597, published on 3 December 2024 and applied registrally from 4 June 2025, repealed the requirement in Article 18(13) of the Commercial Code and replaced it with a registered corporate email address for official notices, so naming a resident agent in the deed is now a registral defect. The binding local elements are that notice address and a registered office for service of process.
In practice, operators keep the notice address, the registered office and the annual filings with the same Costa Rican law firm.
AML/CFT and Travel Rule
The binding AML/CFT regime is Law 7786 supplemented by CONASSIF Acuerdo 12-21 (AML risk-prevention reglamento).[22] Where SUGEF inscription applies, operators must implement KYC and customer due diligence with risk-based classification, PEP identification per SUGEF Acuerdo 13-19, beneficial-ownership identification, sanctions screening, ongoing transaction monitoring, and STR reporting to the UIF within the ICD.
Travel Rule status: not a standalone obligation before Ley 10961. Since , Article 15 quáter embeds the FATF Travel Rule directly, requiring VASPs to obtain and maintain originator and beneficiary information at the FATF standard for incoming and outgoing virtual-asset transfers.[23] Threshold amounts are left to CONASSIF’s reglamento, which had not appeared on the SUGEF regulations page by .
SUGEF expects AML policies that reference Law 7786, Acuerdo SUGEF 11-18, and the specific operational realities of the operator’s business model; a generic policy carried over from another jurisdiction is not treated as Costa Rica-compliant.
Application Process
Costa Rica’s set-up process runs five stages from pre-incorporation to operational banking. The post-June 2025 digital filing regime issues a numeric cédula jurídica within 5 to 7 business days; La Gaceta publication adds 8 days. Formation, APNFD inscription, and banking together run 3 to 7 months, and banking is the least predictable of the three; the Article 15 quáter VASP registration is not included, as its timing is not yet set.
Application language: Spanish. All filings with SUGEF, the Registro Nacional, and the DGT are conducted in Spanish through the SUGEF Directo, Crear Empresa, and TRIBU-CR platforms respectively. Document translations into Spanish must be certified.
Pre-application engagement: None available. SUGEF does not offer formal pre-application meetings for APNFD or VASP applicants. The closest equivalent is informal consultation through a Costa Rican attorney experienced in SUGEF filings.
Visual Timeline
Entity Formation
Forming a Costa Rica entity is the first step. See the full Costa Rica company formation guide →. Includes name reservation (or, post-Law 10729 of , automatic numeric cédula assignment), beneficial-owner identification, notarial constitution deed, Registro Nacional filing through the Crear Empresa platform, and La Gaceta publication.
Tax and Municipal Registration
DGT inscription through the TRIBU-CR platform; municipal patente per local jurisdiction; CCSS social-security registration if hiring; INS workman’s compensation insurance.
SUGEF APNFD Inscription
The existing APNFD inscription is filed through the SUGEF Directo IPO (Inscripción de Personas Obligadas) system and requires firma digital, AML documentation, an IBAN-linked exclusive-use bank account per registered activity, and Tipo 1/2/3 risk classification per Acuerdo SUGEF 13-19. VASP registration has been mandatory under Article 15 quáter since , but no VASP-specific filing procedure had been verified for this guide as of ; confirm with SUGEF how an Article 15 quáter registration is filed before relying on this route.
Banking Onboarding
State or private banks. Most variable stage. State and private banks typically require SUGEF inscription evidence, AML documentation, and director KYC. EMI parallel onboarding (European, UK) often runs concurrently and reduces critical-path dependency on local banking.
RTBF Filing and Operational Launch
Annual RTBF declaration during the 1–30 April window through Central Directo. First-year filings outside the April window are filed via general power of attorney to a Costa Rican firma-digital holder.
Costa Rica-specific AML/CFT policies, the Enterprise-Wide Risk Assessment, the Travel Rule implementation plan, and the sanctions screening framework are drafted within the licensing engagement by the independent specialist introduced for the case. The compliance documentation is the most time-intensive component of any Costa Rica VASP set-up: 6 to 10 weeks of specialist work that generic templates cannot shortcut.
Required Documents
Costa Rican notarial and SUGEF practice requires a standardised set of corporate, personal, and compliance documentation. The DGT and SUGEF publish item lists; the substantive depth lives in the underlying instruments, not in any one filing form. Per SUGEF’s APNFD guidance for Acuerdo 11-18,[5] the inscription review focuses on whether the AML programme is genuinely tailored to the applicant’s business model.
Corporate Documents
- Notarial constitutive deed (escritura constitutiva) drafted by a Costa Rican notary, executed in Spanish, registered with the Registro Nacional via the Crear Empresa platform.
- Articles of association integrated into the constitutive deed for S.A. and S.R.L. entities.
- Cédula jurídica issued by the Registro Nacional (post-Law 10729 numeric format: e.g. “3-101-XXXXXX”).
- La Gaceta publication record for the constitution notice.
- Board / director / gerente appointments evidenced by registered acts.
Personal Documents (all directors, officers, beneficial owners)
- Passport or cédula for each director, officer, signatory, and beneficial owner (15% or more, the RTBF threshold).
- Criminal-record certificate (antecedentes penales) from the country of residence and from any country where the individual has resided in the preceding five years, apostilled or legalised.
- Bank reference letter for directors and beneficial owners.
- CV / professional resume documenting relevant experience.
- Proof of address (utility bill or bank statement, within three months).
Compliance Documentation
The compliance documentation is the most heavily scrutinised component of any Costa Rica VASP set-up. These documents are drafted within the licensing engagement by the independent specialist introduced for the case: bespoke and Costa Rica-specific, not templates adapted from other jurisdictions. Each document must reflect the applicant’s specific business model, risk profile, and operational structure.
- AML/CFT Policy Manual: Operational manual covering CDD, risk classification, transaction monitoring, sanctions screening, and STR procedures, referenced to Law 7786 and Acuerdo SUGEF 11-18.
What it covers
The AML/CFT Policy Manual is the operational backbone of any Costa Rica APNFD or VASP inscription. SUGEF expects the document to identify the obligated subject under Law 7786 Article 15 (or 15 bis, or 15 quáter since ), name the compliance officer with their cédula and SUGEF certification status, and describe the firm-specific risk-based methodology.
SUGEF rejection of the manual is the single most common cause of inscription delay; templates from other Latin American jurisdictions trigger rework. The manual must align with the firm’s actual operational reality.
- Enterprise-Wide Risk Assessment: ML/TF, operational, technology, and jurisdictional risk identification, with risk-scoring methodology and mitigation matrix.
What it covers
The Enterprise-Wide Risk Assessment documents the firm’s identification and assessment of ML/TF, technology, and jurisdictional risks. SUGEF’s Acuerdo 13-19 risk-based methodology requires the firm to position itself in Tipo 1, 2, or 3 risk classification and to evidence the risk inputs supporting that classification. Costa Rica-specific risk inputs (counterparty geography, customer profile, product complexity) must be reflected. The assessment is the foundation for the compliance officer’s annual report to SUGEF.
- Sanctions Screening Procedures: Procedural document covering OFAC SDN, EU consolidated list, UN Security Council, Costa Rica UIF lists, and screening-frequency protocols.
What it covers
Costa Rica VASPs must screen against multiple sanctions lists: OFAC SDN, the EU consolidated financial-sanctions list, UN Security Council sanctions lists, and Costa Rica UIF-published designated persons. Screening is required at onboarding, at counterparty designation, and on a recurring schedule that is risk-based but typically daily for high-risk segments. SUGEF examiners commonly request evidence of screening hits, false-positive triage records, and escalation logs.
- KYC and Client Onboarding (incl. KYB): Customer due diligence, enhanced due diligence for PEPs and high-risk profiles, beneficial-ownership identification, document-collection, and verification standards.
What it covers
The KYC procedure must implement risk-based classification per Acuerdo SUGEF 13-19, identification of politically exposed persons per Article 15, beneficial-ownership identification through to the natural person, and ongoing monitoring. For institutional clients, the KYB component must include cross-border ownership-tree review and source-of-funds verification. SUGEF examiners pay particular attention to the firm’s handling of jurisdictions with limited corporate transparency.
- Travel Rule Implementation: Procedures for obtaining, retaining, and transmitting originator and beneficiary information for incoming and outgoing virtual-asset transfers per FATF Recommendation 16.
What it covers
Travel Rule implementation has been required under Article 15 quáter since .[23] The procedures must specify how the firm obtains, retains, and transmits originator and beneficiary information for incoming and outgoing virtual-asset transfers, the data fields covered, the counterparty due-diligence applied to receiving VASPs, and the protocol for transfers to or from unhosted wallets. The applicable threshold is left to CONASSIF’s reglamento; firms should plan for the FATF standard of USD/EUR 1,000.
- Transaction Monitoring Framework: Rules-based and behavioural monitoring scenarios, alert thresholds, false-positive management, escalation paths to STR filing.
What it covers
The Transaction Monitoring Framework must document scenario design (typology-based rules: structuring, rapid movement, sanctions-adjacent activity), threshold-setting logic, alert triage, and the escalation path to STR filing with the UIF. Costa Rica’s UIF sits within the ICD and receives STRs through a defined electronic channel. The framework should evidence at least annual scenario review and the firm’s documented response to UIF feedback.
- Restricted Countries and Jurisdictions Matrix: Internal list of jurisdictions where the firm declines or restricts service, with rationale tied to FATF, OFAC, and EU lists.
What it covers
The restricted-jurisdictions matrix must identify FATF black-listed and grey-listed countries (after the June 2026 plenary Costa Rica is on neither list), OFAC comprehensively sanctioned jurisdictions, EU high-risk third countries, and any firm-specific restrictions. The matrix must be reviewed at least at every FATF plenary cycle (February, June, October) and after material sanctions updates.
- STR/SAR Procedures: Internal procedure for suspicious-transaction reporting to the UIF, including the trigger criteria, internal escalation, and tipping-off prohibition.
What it covers
STR procedures are governed by Law 7786 Articles 25–27 and require reports to the UIF (within ICD) where the firm identifies operations that lack apparent economic or lawful justification. Procedures must cover the internal escalation chain, the compliance-officer review, the documentation standard, the prohibition on tipping off the client, and record-retention requirements (10 years for STR-related records).
- Compliance Monitoring Programme: Annual compliance-officer report, periodic testing schedule, breach-handling procedures.
What it covers
The Compliance Monitoring Programme defines the compliance officer’s annual report to senior management and to SUGEF, the periodic testing schedule (typically risk-based, quarterly for high-risk areas), and the breach-handling procedures including remediation timelines and escalation to the board. SUGEF examiners review the annual report and the prior year’s testing logs at inspection.
- Risk Appetite Statement: Recommended. Senior-management-approved statement of the categories of risk the firm accepts, those it restricts, and the quantitative limits applied.
What it covers
A Risk Appetite Statement is not explicitly required by Acuerdo SUGEF 11-18 but is standard practice and SUGEF examiners commonly request it. The statement should articulate management-approved positions on counterparty types, product complexity, jurisdictional exposure, and operational concentration; it should also state the quantitative limits and the override approval pathway.
- Data Protection Policies: Compliance with Law 8968 (Protection of Persons Against the Processing of Their Personal Data) and Decree 37554-JP.
What it covers
Data protection in Costa Rica is governed by Law 8968 of 2011 and Decree 37554-JP, supervised by PRODHAB (Agencia de Protección de Datos de los Habitantes). The policy must address consent, purpose limitation, data-subject rights, breach-notification timing, cross-border transfer mechanics (relevant for cloud-based custody and KYC providers), and integration with the AML record-retention obligation.
Business Plan and Financial Projections
Three-year revenue, customer-acquisition, and cost projections; product roadmap; counterparty list (categories, not names); banking and EMI strategy; technology stack and custody architecture. SUGEF does not formally require a business plan for APNFD inscription, but banks require one at onboarding, and the Ley 10961 reglamento may introduce a formal requirement.
Technology and Operational Documentation
Custody architecture (hot/cold segregation, key-management procedures), cybersecurity policy, business-continuity plan, incident-response procedures, and third-party-risk register. Costa Rica has no formal ICT-risk regulation equivalent to DORA; technology documentation is required by banks and may be addressed in the Ley 10961 reglamento.
Costs and Pricing
Costa Rica has no licence fee, and the two figures that matter sit far apart. What the state charges is small and fixed by published tariff: about USD 150 to 300 in Year 1, or about USD 550 to 710 with the minimum notarial fee for the incorporation deed. What the work costs is the rest, and it is quoted per case: USD 5,100 to 20,300 in Year 1 and USD 3,700 to 10,300 a year thereafter. The variance reflects entity level (S.A. versus S.R.L.), advisory tier (local firm versus international firm), and SUGEF inscription scope.
Statutory Cost
| Statutory item (source) | Amount (USD equivalent at 28 August 2026 FX) |
|---|---|
| Registro Nacional 2026 tariff: company constitution ₡46,220, book legalisation ₡13,400, cédula jurídica ₡2,000[25] | ≈ USD 130 |
| Education-and-culture stamp on registration (₡5,000)[30] | ≈ USD 11 |
| Corporation tax under Law 9428 for the incorporation year: the ₡69,330 base band, pro rata to the months left[2][26] | 0–150 |
| SUGEF APNFD inscription (Acuerdo SUGEF 11-18)[5] | No fee |
| Notarial incorporation deed, minimum fee under arancel art. 95(a) (₡181,500)[17] | ≈ USD 400 |
| Statutory cost, Year 1 | ~550–710 |
The statutory figure leaves out the fiscal, Bar Association and archive stamps, which scale with the declared capital and stay small for a nominal capital, the La Gaceta extract, charged by length, and IVA on the notary’s fee. From Year 2 the recurring company charges are the Law 9428 corporation tax, ₡69,330 to ₡231,100 a year by band (about USD 150 to 510), due in January,[26] and the education-and-culture stamp tax, ₡5,000 to ₡18,000 by capital (about USD 11 to 40), due 31 March;[27] MEIC-registered micro and small enterprises are exempt from the Law 9428 tax. A registered VASP must also contribute to SUGEF’s supervision costs under Article 15 quáter; no regulation setting the amount had appeared on the SUGEF regulations page by .[23] The SUGEF APNFD inscription and the RTBF filing under Law 9416 and Decree 44390-H carry no fee, though non-filing of the RTBF is fined at 3 to 100 base salaries.[12] The municipal patente is levied annually on revenue, typically 0.1% to 0.5%, so it cannot be stated as a fixed amount.
Government fees in Costa Rica are small; the cost of doing this properly is in the advisory and compliance documentation, not in regulator filings.
Typical Build Cost (quoted per case)
| Build item | Amount (USD) |
|---|---|
| Registered office, first year | 300–2,400 |
| Company formation advisory (S.A. or S.R.L.) | 800–4,500 |
| SUGEF APNFD inscription advisory | 500–5,000 |
| Compliance documentation (AML/CFT policy manual, risk assessment, sanctions framework, Travel Rule, transaction monitoring, KYC/KYB) | 2,500–6,000 |
| Accounting, tax filings, RTBF and statutory returns, first year | 1,000–2,400 |
| Typical build, Year 1 (quoted per case) | 5,100–20,300 |
| Registered office (annual) | 300–2,400 |
| Compliance documentation refresh (annual) | 1,000–2,500 |
| Accounting, tax filings, RTBF and statutory returns (annual) | 1,800–3,600 |
| Compliance officer, part-time or outsourced (annual) | 600–1,800 |
| Typical build, annual ongoing from Year 2 (quoted per case) | 3,700–10,300 |
Banking application costs sit outside both figures: they run USD 0 to 5,000 depending on bank, EMI mix, and onboarding complexity. Costa Rican notarial fees follow a regulated tariff with binding minimums, and the spread reflects scope, from an entry-level S.R.L. to a full-service S.A.
Timeline
| Stage | Duration | Cumulative |
|---|---|---|
| Pre-incorporation (UBO collection, structuring, firma digital arrangements) | 1–2 weeks | 1–2 weeks |
| Notarial incorporation and Registro Nacional filing | 1–4 weeks | 2–6 weeks |
| Tax / municipal / CCSS / INS registration | 2–3 weeks | 4–9 weeks |
| SUGEF APNFD inscription (where activity falls within Law 7786 Articles 15 / 15 bis) | 4–8 weeks | 8–17 weeks |
| Banking onboarding (state, private, or EMI) | 4–12 weeks | 12–29 weeks |
| Total for these stages (excl. SUGEF VASP registration) | 3–7 months | 12–29 weeks |
Costa Rica’s post-June 2025 digital-filing regime issues a numeric cédula jurídica within 5 to 7 business days of submission via the Crear Empresa platform, with La Gaceta publication adding 8 days. The bottleneck is no longer notarial filing; it is the SUGEF inscription review and banking onboarding. Operators with non-resident principals lose 1 to 2 weeks arranging firma-digital powers of attorney; this is the most overlooked piece of the schedule.
Taxation
Costa Rica is a territorial-tax jurisdiction: corporate income tax of 30% applies to Costa Rica-source profits, and income genuinely earned from sources outside Costa Rica is generally outside the tax base. Source depends on where and how the income is generated, not on where the customer lives: crypto services performed in Costa Rica can produce Costa Rica-source taxable profit even when every customer is abroad.[31]
Costa Rica has not enacted domestic Pillar Two legislation.
The GloBE revenue test for multinational groups is at least EUR 750 million in at least two of the four preceding fiscal years. Whether a group owes top-up tax depends on the applicable implementing laws, exclusions, and safe harbours; incorporation here alone does not decide that result.[33]
Crypto Tax Treatment
| Tax | Rate | Crypto application |
|---|---|---|
| Corporate Income Tax | 30% standard; tiered 5–20% up to CRC 119,174,000 gross (2026) | Costa Rica-source income, including services performed in Costa Rica for foreign customers; genuinely foreign-source crypto revenue generally outside the base[16][31] |
| Capital Gains Tax (passive) | 15% | Personal crypto returns per DGT Ruling MH-DGT-OF-0460-2023[14] |
| Value-Added Tax (IVA) | 13% | Applies to crypto exchange, custody, and key-safekeeping services per DGT 2023 ruling[14] |
| Withholding Tax (dividends) | 15% | Non-resident shareholders |
| Withholding Tax (interest, royalties) | 15% interest; 25% royalties | Non-resident counterparties |
| Payroll tax | n/a (employer social security 26.83% from 1 January 2026) | CCSS contribution on local payroll |
| Stamp duty | n/a on most commercial documents | Notarial transactions carry timbres |
Territorial Source and the 2023 Substance Reform
Costa Rica’s territorial principle means crypto revenue earned from services performed outside Costa Rica for non-resident clients generally falls outside the tax base. The 2023 reform (Law 10381), adopted to secure removal from the EU list of non-cooperative jurisdictions in , added a separate rule for specified foreign-source passive income received by multinational-group members that do not meet the qualified-entity test, which turns on adequate economic substance.[31] The reform did not change the general territorial rule for active business income; it tightened the treatment of holding-company arrangements and pure passive structures.
Local substance does not turn active income into foreign-source income. When the office, staff, and decision-making that deliver a crypto service are in Costa Rica, the profit can be Costa Rica-source even if every customer is abroad; whether any active income is genuinely foreign-source depends on where and how it is generated. Substance matters for the separate passive-income rule, where a nominee-only structure does not meet the qualified-entity test.[31]
CRS/CARF Reporting
Costa Rica implemented the OECD Common Reporting Standard (CRS) and reports automatically through the AEOI framework. The Crypto-Asset Reporting Framework (CARF) is signed but not yet domestically implemented: Costa Rica signed the CARF MCAA on and sits in the OECD Global Forum’s first-exchanges-by-2028 cohort, where Panama signed on . Domestic implementing rules remain pending.[18]
Ongoing Compliance & Post-Registration
A Costa Rica crypto entity carries a recurring compliance load whether or not SUGEF inscription applies. The minimum annual obligations are corporate (annual corporation tax, accounting filings, RTBF declaration, annual corporate tax return Form 102 through TRIBU-CR) plus AML/CFT (where inscribed) and municipal (patente renewal). The Law 9428 corporation tax (about USD 150 to 510 by band) and the education-and-culture stamp tax (about USD 11 to 40) are the recurring company charges, and a registered VASP also contributes to SUGEF’s supervision costs once the amount is set; the annual build runs USD 3,700 to 10,300 depending on scope.
Annual Reporting Obligations
- Corporate income-tax return Form 102, filed through TRIBU-CR for legal persons. For the calendar year 2025, the filing and payment deadline was ; use Hacienda’s applicable annual deadline rather than assuming 15 March is always a working-day deadline.[32]
- Annual Corporation Tax (Law 9428), due January, scaled to base salary.
- Education-and-culture stamp tax, due 31 March, ₡5,000 to ₡18,000 by declared capital.
- RTBF beneficial-ownership declaration, filed via Central Directo during 1–30 April. Non-filing blocks Registro Nacional certifications and triggers fines 3–100 base salaries.[12]
- Municipal patente renewal, annual per local municipality.
- CCSS social-security and INS workman’s-compensation contributions, monthly where employees are on payroll.
- Compliance officer annual report to senior management and (where inscribed) to SUGEF.
- AML training records for staff with customer-contact roles.
Renewal Fees / Supervision Fees
No SUGEF renewal fee applies to APNFD inscription; the inscription persists once granted and is reviewed at SUGEF examination cycles. Since , Article 15 quáter requires VASPs to contribute to SUGEF’s actual supervision costs under the parameters of Articles 174 and 175 of Law 7732; no regulation setting the amount had appeared on the SUGEF regulations page by .
Recurring costs in the absence of regulator renewal fees: registered office (USD 300–2,400), accounting, tax filings and RTBF (USD 1,800–3,600), compliance officer (USD 600–1,800 part-time, more for full-time), and the annual compliance documentation refresh (USD 1,000–2,500).
Regulatory Inspections
SUGEF inspections of APNFDs are risk-based and typically focus on the AML programme’s design quality, the firm’s risk classification under Acuerdo SUGEF 13-19, and evidence of ongoing transaction monitoring. Inspections are scheduled with notice for routine cycles and conducted without notice where SUGEF receives intelligence from the UIF or counterparty regulators. Since , SUGEF supervises VASPs for AML/CFT on a risk basis under Article 15 quáter; its VASP-specific supervisory practice will depend on the reglamento.
Enforcement
Before Ley 10961, enforcement was limited to general Law 7786 powers: fines, public censure, and referral to the Ministerio Público for criminal money-laundering offences. Since , the Article 81 sanctions reach VASPs: fines of 2 to 100 base salaries (CRC 924,400 to 46,220,000 at the 2026 base salary of CRC 462,200, about USD 2,100 to 100,000 at the 28 August 2026 rate), including for refusing to register, and 5% to 50% of the transaction amount for failing to record transactions of USD 10,000 or more;[23] obligated entities may not maintain commercial relations with unregistered VASPs. SUGEF must also ensure that no one habitually carries out these virtual-asset activities in Costa Rica without being registered, with the same inspection and sanction powers.[23]
The Liberty Reserve case remains the touchstone for enforcement-reach assessments. Costa Rica’s Judicial Investigation Organization (OIJ) was among the foreign agencies that assisted the US investigation.[20]
Banking
Costa Rica is one of the more workable banking jurisdictions in Latin America for crypto operators, but it is not easy. State banks and large private banks routinely decline crypto-business onboarding without SUGEF inscription evidence, AML documentation, and director KYC. Operators with all three in order can open accounts in 4 to 12 weeks; operators missing any can wait indefinitely.
The launch of BN ETF Bitcoin by BNCR was a watershed:[8] the largest state bank distributing a Bitcoin-exposure product to retail clients signals top-down institutional acceptance of crypto as an asset class. Operating-account onboarding has not eased uniformly, but the conversation has shifted. Per Acuerdo SUGEF 11-18 Article 22, banks may open APNFD accounts pending SUGEF inscription but must keep the account inactive until inscription evidence is produced.[5]
External European and UK Electronic Money Institutions (EMIs) and payment institutions are widely used by Costa Rica crypto operators as a parallel solution. The typical pattern places primary operating cash in a multi-currency fintech platform licensed in a major EU member state and maintains a colón-denominated reserve account onshore for tax and supplier payments. Multi-currency neobanks domiciled in Lithuania, Spain, or the United Kingdom serve this segment.
The common mistake is sequencing banking after SUGEF inscription rather than in parallel. In practice, banking onboarding starts with KYC documentation that overlaps materially with SUGEF inscription packs; running them concurrently shortens the critical path by 6 to 10 weeks for operators with clean directors.
Jagelski & Partners’ banking partner network includes 90+ institutions across European EMIs, multi-currency fintech platforms, Caribbean-domiciled neobanks, and regional Latin American banks with crypto risk appetite. A licence without banking access is a certificate on the wall: learn about our Banking service →
Pre-qualified introductions pull the 4–12 week onboarding range towards its floor. Jagelski & Partners scopes banking options in writing and introduces an independent specialist before a licence application is filed. You contract directly with the specialist; account approval remains the financial institution's decision.
European and UK EMIs, multi-currency fintech platforms, Caribbean-domiciled neobanks, and regional Latin American banks with crypto risk appetite, paired with the onshore colón reserve account most operators keep for tax and supplier payments.
Explore Banking SolutionsFATF Status & International Standing
Costa Rica is on neither the FATF grey list nor its black list after the plenary.[10] Costa Rica is a member of GAFILAT (Grupo de Acción Financiera de Latinoamérica), the regional FATF-style body, and was placed in enhanced follow-up after its July 2015 fourth-round mutual evaluation. Costa Rica’s Recommendation 15 (new technologies and virtual assets) is rated Non-Compliant, flagging the absence of a VASP framework. This is the direct policy driver behind Expediente 25.340.[10] The 4th-round cycle concluded with a final follow-up report adopted on 14 December 2023.
EU Market Access
A Costa Rica crypto entity does not have EU passporting rights, and MiCA contains no third-country equivalence regime under which the European Commission could recognise a Costa Rica registration as equivalent to a CASP authorisation.
MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative, for the specific crypto-asset or service requested. ESMA’s guidelines (published , applicable from ) list signs that a firm is likely to be regarded as soliciting EU clients, judged on all the facts: advertising, promotions and influencer or affiliate campaigns aimed at EU clients, and a website or app in an EU language that is not customary in international finance. A firm that solicits EU clients, directly or through third parties, cannot rely on the exemption.[19] The exemption offers no route to systematic EU market access.
For a detailed analysis of what constitutes solicitation and the documentation requirements, see Reverse Solicitation Under MiCA →.
Advantages and Limitations
Costa Rica offers low regulatory friction, territorial taxation, and OECD-member institutional credibility, against banking caution, no EU passporting, and the political backdrop of the Liberty Reserve case. The trade-off is workable for operators serving non-EU markets; less workable for operators whose core market is European.
- No crypto-specific licence required. Since , VASPs must register with SUGEF for AML/CFT supervision, which is not an operating licence, so friction stays lower than in a licensing regime.
- Territorial taxation can produce a 0% effective rate on genuinely foreign-source crypto revenue, though services performed in Costa Rica can be taxable there even when the customers are abroad.
- OECD membership since carries weight in correspondent-banking conversations.[6]
- USD-friendly operating environment with deep dollarised commercial infrastructure and live institutional Bitcoin exposure via BN ETF Bitcoin.[8]
- UTC minus 6 time zone aligns business hours with US Eastern and Pacific markets.
- No EU passporting and no third-country equivalence under MiCA. Mitigation: operators targeting EU clients can obtain a separate CASP authorisation in an EU member state (full market access via passporting) or, where a client approaches them at its own exclusive initiative, may fall within the narrow reverse-solicitation exemption under MiCA Article 61, judged on all the facts.
- Banking onboarding remains the practical bottleneck. Mitigation: parallel sequencing of SUGEF inscription, EMI onboarding, and local bank applications shortens the critical path; institutional-grade AML documentation is a precondition for serious bank consideration.
- Liberty Reserve reputational legacy persists in correspondent-banking conversations. Mitigation: real economic substance, clean director documentation, and inscription evidence neutralise the legacy at the diligence stage; pure shell structures amplify it.
- Ley 10961 is in force, but its reglamento is not yet published. Mitigation: map the activity to Article 15 quáter and prepare the AML programme and registration file now, because registration is already mandatory and banks ask for inscription evidence.
- GAFILAT fifth-round mutual evaluation is upcoming. Mitigation: build the AML programme to FATF standards from inception; the firm’s compliance posture is its own protection regardless of national-level evaluation outcomes.
How Costa Rica Compares
Costa Rica sits in the Central America peer group alongside Panama (no licence; PL 247 pending) and El Salvador (formal DASP authorisation under LEAD 2023, 0% tax on digital-asset activities for licensees), with Saint Lucia as the Eastern Caribbean reference (a statutory licence under the Virtual Asset Business Act 2022, administered by the FSRA, which had issued none by 16 June 2026). Cyprus provides the EU cross-tier reference: MiCA CASP authorisation with full 30-state passporting. Each plays a different role in the buyer’s decision.
| Factor | Costa Rica | Panama | El Salvador | Saint Lucia | Cyprus (EU ref.) |
|---|---|---|---|---|---|
| Licence Type | No licence; mandatory SUGEF VASP AML registration since (Ley 10961) | No licence; PL 247 pending | DASP licence under LEAD 2023 + BTCSP under Bitcoin Law | Virtual Asset Business Licence (VABA); none issued by June 2026 | MiCA CASP authorisation |
| Regulator | SUGEF (AML) / BCCR (monetary) | None designated for VASPs | CNAD (Comisión Nacional de Activos Digitales) | FSRA | CySEC |
| Timeline | About 3–7 months (excl. SUGEF VASP registration) | 2–4 weeks (corp); banking 1–3 months | 3–6 months | About 5–8 months | 8–14 months |
| Capital / prudential safeguards | No fixed minimum | Nominal | USD 2,000 | No statutory floor; FSRA expects EC$300k–1.3m by activity | Annex IV class floors: EUR 50,000–150,000 |
| Year 1 all-in | USD 5,700–21,000 (statutory about 550–710; build 5,100–20,300) | USD 10,560–39,110 | USD 53,800–150,600 | USD 34,000–59,000 | EUR 217,000–462,000 + pro-rata annual fees |
| Corporate Tax | 30% local; 0% effective foreign-source (territorial) | 25% local; territorial | 0% on digital-asset activities for DASP licensees; 30% otherwise | 30% Saint Lucia-source; foreign-source exempt | 15% standard CIT (from 1 January 2026) |
| Local Presence | Registered office; corporate email for notices | Resident agent | Legal representative + compliance officer and alternate | Registered office + place of business; principal representative if registered abroad | Substantive local presence |
| EU Passporting | No | No | No | No | Yes (30 EEA states) |
| FATF Status | Not listed; R.15 Non-Compliant 2023 follow-up | Not listed (off the EU AML high-risk list from 5 August 2025) | Not listed | Not listed | Not listed |
| Best For | Non-EU operators, territorial tax, low friction | LatAm operators, USD environment, larger banking | Bitcoin-positioned brand, 0% on DASP activities | Counterparties requiring a statutory VASP licence, below the premium offshore cost band | Operators needing full EU market access |
For MiCA CASPs, the amounts shown are Annex IV class floors. Prudential safeguards must equal at least the higher of the applicable Annex IV class floor and 25% of the previous year’s fixed overheads. A new firm uses projected fixed overheads for its first 12 months; the permitted deductions apply. Qualifying own funds, an insurance policy or comparable guarantee, or a combination may meet the requirement. MiCA Article 67(1)–(4).
Compare every crypto jurisdiction side by side →
Costa Rica and Panama, the two peers in this comparison with no crypto licensing law, both lack a crypto licence. Costa Rica’s OECD membership and territorial-tax mechanics make it the credibility-weighted choice; Panama’s larger banking sector and longer history of international finance make it the operational-depth choice.
Against El Salvador, the trade-off is brand versus tax mechanics: El Salvador’s Bitcoin-first brand is a recruiting and PR asset for crypto-native operators, and the 0% rate on DASP-licensed digital-asset activities is materially better than Costa Rica’s territorial structure for operators whose revenue is primarily domestic. Costa Rica wins on regulatory simplicity for operators whose revenue is genuinely foreign-source.
When Costa Rica Is the Right Choice
Choose Costa Rica if:
- Your customer base is primarily outside the European Union and outside Costa Rica.
- You value OECD-member institutional credibility above licence-as-brand signalling.
- You want a low-cost, low-friction set-up with real territorial-tax mechanics.
- You can accept 4 to 12 weeks of banking onboarding work as a known cost.
Consider alternatives if:
- You need systematic EU market access: Cyprus, Lithuania, or Malta via MiCA CASP authorisation.
- You want a Bitcoin-native brand and 0% tax on licensed digital-asset activities: El Salvador’s DASP licence under LEAD 2023.
- You need larger banking depth at the cost of an additional jurisdiction: Panama.
- Your counterparties require a statutory VASP licence rather than an AML registration: Saint Lucia’s VABA licence, although the FSRA had issued none by 16 June 2026.
Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.
Common Mistakes in Costa Rica Applications
Costa Rica’s regulatory simplicity hides three structural traps that catch first-time applicants. SUGEF’s guidance on Acuerdo 11-18 is published and clear, but operators consistently misjudge the operational realities. Banking is harder than the legal framework suggests; tax is more nuanced than the territorial headline implies; and the firma-digital constraint affects every filing pathway.
- Treating SUGEF inscription as optional. Before Ley 10961, activity outside Articles 15 and 15 bis was not subject to registration under those articles; whether a given crypto activity fell inside them was a classification question. Since , Article 15 quáter makes registration mandatory for VASP activity, and obligated entities may not keep commercial relations with unregistered VASPs.
- Underestimating the firma-digital constraint for non-resident principals. Firma digital is required for RTBF filings and most tax filings; only Costa Rican citizens and legal residents can hold it. Non-resident shareholders must arrange a general power of attorney to a Costa Rican professional, which takes 1 to 2 weeks plus apostille time and often delays the overall schedule.
- Adapting a generic AML manual. SUGEF expects Costa Rica-specific procedures that reference Law 7786, Acuerdo SUGEF 11-18, and the firm’s specific business model. Templates from other Latin American or offshore jurisdictions trigger rework at inscription review and again at banking onboarding.
- Assuming foreign customers or local substance deliver 0%. Services performed in Costa Rica can produce Costa Rica-source income even when every customer is abroad, and a local office, staff, or decision-making do not change that. The 2023 reform is a separate rule for foreign passive income of multinational-group members that are not qualified entities; a 0% position needs income genuinely generated outside Costa Rica.
- Sequencing banking after SUGEF inscription. SUGEF inscription and banking onboarding share material KYC and documentation requirements. Running them sequentially adds 6 to 10 weeks to the critical path. Run them in parallel.
- Forgetting the RTBF April window. RTBF beneficial-ownership filing is annual in April. Non-filing blocks Registro Nacional certifications, which freezes the entity’s ability to update directors, change registered office, or evidence good standing to banks. Calendar the April window from Year 1.
Frequently Asked Questions
Yes. Crypto is legal in Costa Rica but is not legal tender; only the Costa Rican colón has legal-tender status under Law 7558. Cryptocurrencies are treated as virtual or intangible assets per DGT Private Letter Ruling MH-DGT-OF-0460-2023.[14] Costa Rica’s Banco Central position, articulated in 2017 and confirmed since, is tolerancia vigilante: circulation and exchange of crypto for lawful purposes are permitted because no law expressly prohibits them, but crypto cannot transit the SINPE national payments system.
No. Costa Rica issues no crypto-specific licence. Crypto operators incorporate an ordinary Sociedad Anónima or Sociedad de Responsabilidad Limitada and apply Law 7786 AML/CFT obligations where the activity falls within Articles 15 or 15 bis. Ley 10961 (Expediente 25.340) was published in Alcance No. 78 to La Gaceta No. 113 on and has been in force since , making SUGEF VASP AML registration mandatory.[23]
Three to seven months for formation, APNFD inscription, and banking; this does not yet cover the Article 15 quáter VASP registration, for which no filing procedure had been verified for this guide as of . Entity formation runs 1 to 4 weeks (post-June 2025 digital filing issues a cédula jurídica within 5 to 7 business days plus 8 days for La Gaceta publication). Tax and municipal registration adds 2 to 3 weeks.
SUGEF APNFD inscription, where activity falls within Articles 15 or 15 bis, runs 4 to 8 weeks. Banking onboarding is the variable element at 4 to 12 weeks. Parallel sequencing of SUGEF inscription and banking shortens the critical path materially.
There is no single Ley Marco de Criptoactivos enacted in Costa Rica. Three distinct bills are commonly conflated: Expediente 22.837 (Executive AML reform, archived by statutory expiration); Expediente 23.415 (Ley de Mercado de Criptoactivos, sponsored by Deputy Johana Obando, pending in committee with no significant advancement); and Ley 10961 (Expediente 25.340), published in Alcance No. 78 to La Gaceta No. 113 on and in force since , which is an AML reform inserting Article 15 quáter into Law 7786 rather than a comprehensive crypto-market framework.
Costa Rica is a territorial-tax jurisdiction. Corporate income tax is 30% on Costa Rica-source profits with tiered scales of 5% to 20% for companies with gross income up to CRC 119,174,000 in 2026.[16] Genuinely foreign-source crypto revenue is generally outside the tax base, but services performed in Costa Rica can produce Costa Rica-source income even when the customers are abroad. The 2023 economic-substance reform is a separate rule for foreign passive income of multinational-group members.
Crypto-related services are subject to IVA at 13% per DGT Ruling MH-DGT-OF-0460-2023.[14] Personal crypto returns fall under the 15% capital-income/capital-gains regime.
Yes, with prerequisites. State banks and large private banks routinely require SUGEF APNFD inscription evidence, institutional-grade AML documentation, and director KYC before considering crypto-business onboarding. Onboarding timelines run 4 to 12 weeks with all prerequisites in order. Operators typically combine an onshore colón-denominated reserve account with a multi-currency fintech platform licensed in a major EU member state for operating cash. The launch of BN ETF Bitcoin by BNCR has eased the institutional conversation.[8]
Not on a systematic basis. A Costa Rica registration does not grant EU market access or passporting rights, and MiCA contains no third-country equivalence regime. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative for the specific service requested.
ESMA’s guidelines published and applicable from list signs that a firm is likely to be regarded as soliciting EU clients, judged on all the facts, such as advertising and influencer campaigns aimed at EU clients and a website in an EU language not customary in international finance; a firm that solicits EU clients cannot rely on the exemption.[19] Operators seeking systematic EU market access should obtain a separate CASP authorisation in an EU member state. See Reverse Solicitation Under MiCA for detail.
No. Costa Rica is not on the FATF grey list or black list after the FATF plenary.[10] Costa Rica is a GAFILAT member and was placed in enhanced follow-up after its July 2015 fourth-round mutual evaluation; the 4th-round cycle concluded with a final follow-up report adopted on 14 December 2023. Costa Rica’s Recommendation 15 (virtual assets) is rated Non-Compliant, flagging the absence of a VASP framework. This was the direct policy driver behind Expediente 25.340.[10] The fifth-round mutual evaluation is anticipated post-2026.
Ley 10961 (Expediente 25.340), in force since , requires SUGEF VASP registration, not a licence. The distinction matters: registration is AML/CFT supervisory inscription as an obligated subject; it is not an authorisation to operate a crypto business. The law text explicitly preserves this distinction, stating la inscripción ante la Superintendencia no representa una autorización de operación.[23] CONASSIF’s implementing reglamento, which had not appeared on the SUGEF regulations page on , is to set the compliance conditions, thresholds and scope of covered activities; the Act itself already requires VASPs to contribute to SUGEF’s supervision costs and has SUGEF check the background of their participants and beneficial owners.
Costa Rica has no dedicated tokenisation or tokenised-securities law. A token that qualifies as a security falls under the conventional securities law via SUGEVAL; separately, providing virtual-asset services involving tokens can trigger the Article 15 quáter AML/CFT registration regime under Ley 10961. There is no crypto licence to extend to tokenised securities. Where the vehicle is a fund, route via fund licensing.
Set Up Your Costa Rica Crypto Business
Jagelski & Partners scopes your written brief and introduces the independent specialist who coordinates the entire Costa Rica process: from entity formation through SUGEF inscription and banking. From the introduction onward, the specialist is your single point of contact through delivery.
Not ready to submit a brief? Ask Emma first. She answers now and can collect your written brief for a specialist introduction.
References
Show all references
- Delfino.cr, Asamblea aprueba regulación de criptoactivos contra lavado de dinero, , delfino.cr, accessed .
- Asamblea Legislativa de Costa Rica, Ley 9428, Impuesto a las Personas Jurídicas (articles 2 and 3: a company formed during the period pays the article 3(a) rate in proportion to the months left), pgrweb.go.cr, accessed .
- Asociación Bancaria Costarricense, Diputados presentan nueva iniciativa que busca regular los activos virtuales y sus proveedores, abc.fi.cr, accessed .
- SUGEF, Preguntas frecuentes APNFDs (February 2023), sugef.fi.cr, accessed .
- SUGEF, Capacitación Acuerdo SUGEF 11-18 (18 March 2025), sugef.fi.cr, accessed .
- OECD, OECD welcomes Costa Rica as its 38th Member, oecd.org, accessed .
- La Nación, Banco Central advierte de riesgos al utilizar criptomonedas como el bitcoin, nacion.com, accessed .
- Banco Nacional de Costa Rica, Fondos en criptomonedas y S&P 500 ya se encuentran disponibles para el público en general, bncr.fi.cr, accessed .
- La Nación, Banco Central se declara tolerante y vigilante con las criptomonedas, nacion.com, accessed .
- GAFILAT, Costa Rica Follow-Up Reports (2018, 2023, 2024), fatf-gafi.org, accessed ; FATF, Jurisdictions under Increased Monitoring and High-Risk Jurisdictions subject to a Call for Action, 19 June 2026 (Costa Rica on neither list), fatf-gafi.org, accessed .
- Tico Times, Costa Rica Moves Forward with Crypto Regulation to Combat Financial Crime, ticotimes.net, accessed .
- Consortium Legal, Register of Transparency and Ultimate Beneficiaries (RTBF) in Costa Rica, consortiumlegal.com, accessed .
- Poder Judicial de Costa Rica, Salario base 2026 (Sesión 113-2025), pj.poder-judicial.go.cr, accessed .
- STEP, Costa Rican tax authority clarifies tax treatment of crypto-assets, step.org, accessed .
- EY, Costa Rica: Proyecto de Ley de Mercado de Criptoactivos, ey.com, accessed .
- PwC, Costa Rica Corporate Tax Summaries, taxsummaries.pwc.com, accessed .
- Procuraduría General de la República, SINALEVI, Decreto Ejecutivo 41457-JP, Arancel de Honorarios por Servicios Profesionales de Abogacía y Notariado, Article 95(a), current version (minimum fee for a company constitution ₡181,500) and Decreto Ejecutivo 43704-JP-MEIC (annulled: suspended by the Tribunal Contencioso Administrativo on 9 November 2023 and annulled on 16 February 2024), sinalevi.go.cr, accessed .
- OECD, Signatories of the Multilateral Competent Authority Agreement on Automatic Exchange of Information pursuant to the Crypto-Asset Reporting Framework, CARF-MCAA signatories; OECD Global Forum, Commitments to implement the Crypto-Asset Reporting Framework, CARF commitments, accessed .
- European Securities and Markets Authority, Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030), esma.europa.eu, accessed .
- United States Department of Justice, Liberty Reserve Founder Sentenced to 20 Years, justice.gov, accessed .
- Procuraduría General de la República (SCIJ), Ley sobre estupefacientes, sustancias psicotrópicas y legitimación de capitales (Law 7786), pgrweb.go.cr, accessed .
- CONASSIF, Reglamento para la prevención del riesgo de legitimación de capitales (Acuerdo CONASSIF 12-21), sugef.fi.cr, accessed .
- Imprenta Nacional de Costa Rica, Ley N.° 10961 (reform of Ley 7786 inserting Article 15 quáter), Alcance No. 78 to La Gaceta No. 113, 19 June 2026, imprentanacional.go.cr, accessed .
- La Nación, ¿Cuáles son los bancos más grandes de Costa Rica? Así quedó el ranking por activos en el primer semestre de 2026 (SUGEF data; Banco Nacional total assets CRC 8.66 trillion), , nacion.com, accessed .
- Registro Nacional de Costa Rica, Aranceles del Registro de Personas Jurídicas, año 2026 (company constitution ₡46,220; book legalisation ₡13,400; cédula jurídica ₡2,000; updated 6 January 2026), rnpdigital.com, accessed .
- Ministerio de Hacienda, Aviso: vencimiento del Impuesto a las Personas Jurídicas, período 2026 (₡69,330, ₡115,550, ₡138,660 and ₡231,100, that is 15% to 50% of the ₡462,200 base salary), hacienda.go.cr, accessed .
- Ministerio de Hacienda, Aviso: vencimiento del impuesto de timbre de educación y cultura, 31 March 2026 (₡5,000 to ₡18,000 by capital band, all mercantile companies), hacienda.go.cr, accessed .
- EY, Costa Rica: Ministerio de Hacienda estableció los tramos del impuesto sobre la renta para el período fiscal 2026 (Decreto Ejecutivo 45333-H, La Gaceta No. 229, 5 December 2025: reduced scale for legal persons with gross income up to ₡119,174,000), ey.com, accessed .
- Poder Ejecutivo de Costa Rica, Decreto Ejecutivo 44390-H, Reglamento del Registro de Transparencia y Beneficiarios Finales (13 February 2024), articles 2 (substantive participation: 15% or more of the capital) and 9 (beneficial owners of legal persons), decree text (ey.com), accessed .
- Ministerio de Hacienda, Ley 5923 Timbre de Educación y Cultura: tarifas (₡5,000 in the act of inscription or any other registrable act; annually ₡5,000 to ₡18,000 by net capital; updated January 2022), hacienda.go.cr, accessed .
- Asamblea Legislativa de Costa Rica, Ley 10381, reform of the Income Tax Act (Ley 7092) (Article 1: income from services performed in Costa Rica is Costa Rica-source regardless of the parties’ residence; Articles 2 bis to 2 quinquies: foreign-source passive income of multinational-group entities that are not qualified entities), La Gaceta No. 180, , imprentanacional.go.cr, accessed .
- Ministerio de Hacienda, CP-11-2026: Plazo para presentar y pagar impuesto sobre la renta/utilidades (13 March 2026; Form 102 for legal persons and the 16 March 2026 deadline), hacienda.go.cr, accessed .
- OECD, Consolidated Commentary to the Global Anti-Base Erosion Model Rules (2026), Chapter 1, Article 1.1, paragraphs 3–6 (inclusive threshold and two-of-four-year test), oecd.org, accessed .