Peru's SBS Resolution No. 02648-2024 applies AML/CFT risk-management and compliance duties to virtual asset service providers (PSAVs) supervised by UIF-Peru. It requires customer due diligence, recordkeeping and suspicious-transaction reporting. The resolution also contains a travel-rule chapter, but commencement of the travel rule has been deferred to 1 January 2029 through a later amendment — the travel rule is not currently effective.
Resolución SBS N.° 02648-2024 — Normas para la Gestión de Riesgos de LA/FT aplicable a PSAVs
Also known as: SBS Resolution No. 02648-2024 — AML/CFT Rules for VASPs
Overview
Key Details
Jurisdiction
PeruRegulator
Superintendency of Banking, Insurance and AFP (SBS) / UIF-Peru
Law Type
Regulation
Status
Partially EffectiveOfficial Law Number
Resolución SBS No. 02648-2024
Official Title
Resolución SBS N.° 02648-2024 — Normas para la Gestión de Riesgos de LA/FT aplicable a PSAVs
Enacted Date
August 1, 2024
Effective Date
August 2, 2024
Who This Law Applies To
Virtual asset service providers (PSAVs) supervised by UIF-Peru under the national AML/CFT framework.
Key Requirements
- Applies AML/CFT risk management and compliance duties to VASPs supervised by UIF-Peru.
- Requires customer due diligence, recordkeeping and suspicious-transaction reporting.
- Contains a travel-rule chapter with commencement deferred to 1 January 2029 — not currently effective.
Official Sources
Official instrument pageAttach the signed Resolution PDF and the latest amendment. Do not display the postponed travel rule as currently effective.
Related Laws
Peru: AML/CFT rule for virtual asset service providers
AML/CFT rule for virtual asset service providers
Peru subjects VASPs to AML/CFT supervision and reporting, but a complete prudential and conduct licensing framework remains under development.
Decision No. E/35/2023 — VASP Registration and AML/CFT Instructions
Decision No. E/35/2023 on Virtual Asset Service Provider Registration, Cancellation of Registration and AML/CFT Instructions
Oman's FSA Decision No. E/35/2023 requires registration with the Oman Financial Services Authority (formerly Capital Market Authority) before carrying on covered virtual-asset activities in the Sultanate of Oman. It implements AML/CFT, governance and compliance requirements, and provides registration, cancellation and supervisory procedures. This is a VASP registration/AML regime and should be distinguished from any future full licensing framework.
BCB Resolutions No. 519, 520 and 521 of 2025 — Virtual Asset Regulatory Framework
Resoluções BCB nos. 519, 520 e 521, de 10 de novembro de 2025
Brazil's Central Bank (BCB) Resolutions No. 519, 520 and 521 of 10 November 2025 implement the virtual-asset regulatory framework under the supervision of the Central Bank. Resolution 519 establishes VASP authorisation procedures; Resolution 520 sets activity, governance, controls, security and conduct requirements; Resolution 521 integrates specified virtual-asset operations into Brazil's foreign-exchange and international-capital rules. Commencement is staged during 2026 — verify the effective date for each resolution separately.
IOSCO Policy Recommendations for Crypto and Digital Asset Markets (2023)
Policy Recommendations for Crypto and Digital Asset Markets — Final Report (FR11/2023)
The IOSCO Policy Recommendations for Crypto and Digital Asset Markets (2023) contain 18 recommendations grounded in the principle of consistent regulation of economically equivalent activities. They address conflicts of interest, market manipulation, custody, disclosure, retail risks and cross-border cooperation. IOSCO recommendations are not self-executing domestic law — implementation depends on member regulators in their respective jurisdictions.
Financial Market Digitalisation Act (Finanzmarktdigitalisierungsgesetz — FinmadiG)
Gesetz zur Digitalisierung des Finanzmarktes (Finanzmarktdigitalisierungsgesetz — FinmadiG)
Germany's Financial Market Digitalisation Act (FinmadiG) aligns German financial-market law with MiCA and DORA, establishes national supervisory powers and enforcement mechanisms for BaFin, and addresses the transition from existing German crypto-custody regulation. It applies to German financial entities, CASPs and other firms affected by MiCA/DORA national implementation.
Regulation (EU) 2024/1624 — Anti-Money Laundering Regulation (AMLR)
Regulation (EU) 2024/1624 of the European Parliament and of the Council on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing
Regulation (EU) 2024/1624 (AMLR) is a directly applicable EU regulation creating AML/CFT obligations for obliged entities, expressly including crypto-asset service providers (CASPs). It works with the AMLA Regulation, AMLD6 and the EU crypto travel rule. Note: the regulation is legally in force, but general application date is 10 July 2027 — it should not be described as currently applicable to CASPs.








