Panama Crypto Regulation Explained (2026): The Honest Picture

If you are researching “Panama crypto regulation,” you have probably already met the marketing version — the “Panama crypto licence” that gets sold in glossy packages. Here is the honest version, because it changes what you should actually do. As of mid-2026, Panama has no dedicated crypto or virtual-asset licensing regime. Crypto is legal, but there is no licence to buy, no regulator issuing crypto authorisations, and no licence fee. The only binding obligations that touch a crypto business today are anti-money-laundering rules under Law 23 of 2015.

In our practice, the operators who get burned in Panama are the ones who paid for a “licence” that does not exist, then discovered no bank would take them seriously. The ones who succeed treat Panama for what it is: a legal, dollarised, bankable base where you operate as an AML-registered company now — and position to apply for a real licence the day the pending law goes live. This guide sets out the current rules, the pending bill, and the practical path in between.

Crypto is legal — but unregulated beyond AML

The single most misunderstood fact about Panama is this: legal and licensed are not the same thing. Nothing in Panamanian law prohibits dealing in crypto. You can buy, sell, hold, exchange and transfer digital assets, and you can build a business around doing so. What you cannot do is obtain a purpose-built crypto authorisation, because Panama has never enacted one. There is no equivalent to the EU’s CASP, Dubai’s VARA licence, or a Labuan DFS permit — no supervisor assessing crypto-specific capital, custody or conduct.

That absence cuts both ways. It means low friction and no bespoke licensing cost. It also means no supervised credential to show a bank, a payment partner or a counterparty — which, in 2026, is exactly what serious institutions want to see. The gap is filled by one thing only: anti-money-laundering law. And that part is not optional.

Law 23 of 2015 — the only binding rules today

Panama’s AML/CFT framework runs on Law 23 of 2015, the statute that created the country’s modern regime for obligated subjects (sujetos obligados). It was passed in the wake of intense international pressure — Panama has spent years working its way on and off the FATF grey list — so the state takes it seriously. The law defines who counts as an obligated subject, and crypto-related businesses fall inside that net. Once you are an obligated subject, you must register with the UAF (Unidad de Análisis Financiero), Panama’s financial-intelligence unit, and comply with the full AML toolkit.

In practice that means the same disciplines a regulated financial firm runs: a documented AML/CFT programme, a designated compliance officer, customer due diligence and KYC, ongoing transaction monitoring, record-keeping, and the filing of suspicious-transaction reports to the UAF. This is not a crypto licence dressed up under another name — it is a genuine, enforceable compliance obligation that exists whether or not a crypto law is ever passed. It is also the foundation of bankability: no reputable bank will open an account for a crypto business that cannot show a real, UAF-registered AML programme.

It helps to be precise about what “obligated subject” means here, because it is the crux of the whole regime. Law 23 of 2015 does not name “crypto exchange” as a category — it was written before crypto mattered in Panama — but its supervised and non-financial obligated-subject categories are broad enough that a business handling client value, exchanging assets or moving funds is expected to comply. That is why the practical answer to “how is crypto regulated in Panama?” is: through AML law, by analogy, not through a crypto-specific rulebook. The obligations are real; the crypto-tailored supervision simply is not there yet.

The pending law: Anteproyecto Ley N° 314

Panama’s regulatory gap is not for lack of trying. On 13 January 2026, the National Assembly received Anteproyecto Ley N° 314, the country’s first serious attempt at a dedicated fintech and crypto framework. If it becomes law, it would move Panama from “legal but unregulated” to a formal, supervised regime — defining VASPs and CASPs, setting the activities that trigger licensing, and introducing minimum capital, governance standards and a local compliance-officer requirement, with supervision formalised through Panama’s financial regulators and the UAF.

The honest caveat: as of mid-2026, Ley 314 had not been enacted. It is a draft — an anteproyecto — working through the legislative process, and nothing in it is binding today. Just as important, Panama has been here before. An earlier crypto bill cleared the Assembly in 2022 only to be partially objected to by the executive and struck down on constitutional grounds, so it never took full effect. That pattern of stalled reform is why we treat Ley 314 as genuinely promising but far from certain. We will not structure a client’s business around a statute that is not in force, and we would be sceptical of anyone who did.

Current rules vs. what Ley 314 would change

Here is the practical contrast between the regime you actually operate under today and the one the pending bill would create if enacted:

Read that table with one thing in mind: only the left column is real right now. The right column is what may arrive, and until it does, planning your launch around it is a bet on a legislature that has already reversed course once.

What operators and banks should actually do

If Panama is where you want to be based, the sensible move is to build the compliant structure now and stay licence-ready. Incorporate the S.A., obtain the Aviso de Operación, register with the UAF, and stand up a real AML/CFT programme with a named compliance officer. Done properly, that gives you a legitimate Panama operation today and a running start when — or if — Ley 314 opens a licensing window. When it does, a business that is already AML-registered and well-documented is first in the queue, not scrambling to catch up.

Banking is where honesty pays off most. Because Panama offers no supervised crypto credential, banks lean entirely on your AML programme and documentary pack to decide whether you are a risk worth taking. For gaming or crypto flows you will be working with an EMI or a crypto-friendly neobank rather than mainstream retail banks, and the strength of your UAF registration and KYC procedures is what opens those doors. This is precisely why the AML work is not a box-ticking exercise — it is your entire bankability case. Our Panama crypto cost breakdown sets out what that structure actually costs, and the flagship Panama crypto guide answers the blunt question — “is there a Panama crypto licence?” — in full.

One more decision matters: markets. A Panama structure confers no EU passporting, so if your users are in the EU you will still need an EU CASP under MiCA, and you should geo-block the United States and any sanctioned or FATF-listed territory. Plenty of operators run a legal Panama base alongside a licensed European entity; our EU CASP vs offshore VASP guide sets out when that pairing beats a single jurisdiction.

Panama’s crypto story in 2026 is genuinely a story of “not yet.” The law is coming, maybe soon — but you cannot bank on a draft, and you should not pay for a licence that does not exist. What you can do is operate cleanly and legally now, and be structured so that authorisation is a filing rather than a rebuild. If you want the honest trade-off for your specific model — Panama today, a licensed jurisdiction, or both — book a free consultation and we will map it against where your users actually are.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.