Colombia remains the largest Latin American market without a crypto framework. Successive bills to regulate exchanges have died in Congress since 2021, the supervised sandbox pilot that let banks work with exchanges concluded without producing permanent rules, and the financial superintendency's position stands: crypto is neither currency nor security, regulated institutions face restrictions on direct exposure, and platforms operate outside the perimeter. What does apply is AML and tax. Exchanges report to the UIAF financial intelligence unit, and DIAN Resolution 000240 of December 2025 adopted the OECD's Crypto-Asset Reporting Framework, so covered providers collect user and transaction data from tax year 2026 and file their first reports in May 2027.
Peer-to-peer volumes, stablecoin savings, and Venezuelan-border flows keep adoption among the region's highest, which is the standing argument, so far unsuccessful, for the framework bills that keep returning to Congress.
The instruments
AML reporting for virtual asset operations
Exchanges and virtual asset businesses serving Colombia report transactions and suspicious operations to the UIAF; no licensing or prudential regime attaches.