D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.
Panama exited the FATF grey list in October 2023 and the EU high-risk third-country list in June 2025.
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Panama's digital-asset and financial-innovation sector continues to operate without a dedicated licensing perimeter. Virtual-asset service providers, payment-service providers and electronic-money issuers are presently subject only to general AML registration under Law 23 of 2015, a structural gap that has no sector-specific capital, governance or conduct overlay attached to it. The proposed remedy is Draft Law 314, the Ley Marco Integral de Tecnologias Financieras, filed with the Asamblea Nacional on 13 January 2026. The bill would bring VASPs, PSPs and EMIs under joint SBP oversight with dedicated licence categories, formalise a regulatory sandbox, and extend substantive regulation to crypto-assets for the first time in Panama's statutory framework. None of this has been enacted. The only support located this cycle for the bill's content and progress is Tier-3 legal commentary; no Tier-1 primary legislative text has been retrieved, and the Interpreter has accordingly capped confidence at Probable rather than Confirmed.
The architecture-over-incident framing matters here: this is not a story about a single enforcement action or a single firm, but about the durable absence of an activity-based licensing perimeter for an entire sector. Where a permissive registration-only regime persists without enforcement incident, that absence of friction is itself an analytically significant fact for anyone assessing Panama's exposure to crypto-sector misuse. Firms transacting with Panama-domiciled or Panama-touching VASP counterparties should note that the jurisdiction's current control is AML registration, not activity licensing, and that the counterparty-risk profile of such engagements is accordingly different from engaging a counterparty under a licensed regime.
The standing crypto-integrity tracker for Panama characterises Draft Law 314's progress as continuing through committee, with SBP maintaining the AML-registration-only approach via Law 23/2015 in the interim. Nothing in this cycle's substrate indicates a change to that posture, and no enactment date can be stated with confidence; the regulatory horizon entry for Draft Law 314 carries only a year-wide uncertainty band with an estimated 2027 Q1 impact date, which should be read as indicative rather than as a committed legislative timetable.
As scheduled, Draft Law 314's path to enactment remains uncertain on the evidence available this cycle. Should it pass, Panama would acquire its first activity-based licensing perimeter for virtual-asset, payment and e-money firms, closing a structural gap that the sector has operated within for some years under Law 23/2015 registration alone. Until a Tier-1 primary legislative source is retrieved confirming either the bill's content or its legislative stage, this assessment remains Probable rather than Confirmed, and no claim about an enactment date should be read as more than indicative.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
Panama's AML/CTF architecture moved this cycle at the supervisory-rule level rather than through new primary legislation. The Superintendencia de Bancos de Panama issued Acuerdo No. 1-2026, dated 27 January 2026, which reinforces Banking Law Articles 112 to 114 obligations on banks and fiduciaries to document customer and beneficial-owner identification and to maintain transaction-monitoring capability, including frozen-asset procedures tied to United Nations Security Council lists. This text was retrieved directly from SBP's own publication, giving it Tier-1, Confirmed-tier support. The architecture-over-incident reading is that this is reinforcement of an existing statutory duty, sharpening documentary expectations rather than creating a new regulatory category or extending coverage to firms not already captured by the Banking Law.
Panama's position relative to international list-based regimes is unchanged. The jurisdiction remains off the FATF grey list, a status confirmed directly against FATF's own list of jurisdictions under increased monitoring and unchanged since Panama's October 2023 delisting; the 19 June 2026 plenary roster of twenty-two listed jurisdictions does not include Panama. This is a Confirmed, Tier-1-sourced finding, cross-checked against the primary FATF source rather than inferred from secondary commentary.
The three-pillar balance across AML, CTF and CPF findings is worth noting explicitly: this cycle's sourced material concentrates on the AML pillar (customer due diligence, beneficial-ownership identification, transaction monitoring), with the CTF dimension represented only through the UN Security Council freeze-list procedures referenced in Acuerdo 1-2026, and no CPF-specific signal with a Panama nexus identified. This is consistent with the general pattern in which AML generates more enforcement and rule-making volume than CTF or CPF, and the absence of CTF/CPF-specific movement this cycle should not be read as an assessment that those pillars are static in substance, only that no sourced finding addressing them specifically arose this cycle.
The structural gap in Panama's broader financial-integrity perimeter — the absence of activity-based licensing for VASPs, PSPs and EMIs, addressed in the Crypto, Digital Assets, and Financial Innovation domain this cycle — bears on the AML/CTF regime insofar as those firms currently sit within general AML registration under Law 23/2015 rather than under a sector-calibrated supervisory structure comparable to the banking sector's. Acuerdo 1-2026 applies to banks and fiduciaries specifically; it does not extend to the VASP/PSP/EMI population, which remains the subject of the still-unenacted Draft Law 314.
Panama's AML/CTF trajectory this cycle is one of incremental supervisory reinforcement within the existing Banking Law framework, not legislative expansion. Grey-list status is stable and, as scheduled, is not expected to shift absent a material change in FATF's own assessment process, which no source this cycle indicates is underway. The more consequential open question for Panama's broader financial-integrity architecture is whether Draft Law 314 is enacted, extending licensed supervision to the VASP/PSP/EMI population currently outside the banking-sector perimeter that Acuerdo 1-2026 reinforces.
Commercial Activity is not yet covered for this jurisdiction in this report.
Banks and fiduciaries operating in or through Panama face a sharpened documentary standard for customer and beneficial-owner identification and transaction monitoring, including UN Security Council freeze-list procedures, under existing Banking Law obligations.
Firms with Panama-facing virtual-asset, payment or e-money exposure continue to operate against a general AML-registration standard rather than an activity-specific licensing framework; this affects how counterparty due diligence on such firms should be calibrated.
No material change for this persona this cycle
Panama's standing as a non-grey-listed jurisdiction is unchanged, and the sharpening of bank AML obligations under Acuerdo 1-2026 signals continued incremental tightening rather than a destabilising regulatory event.
Technical architecture decisions for platforms operating in or through Panama should anticipate a possible future licensing perimeter with governance and sandbox provisions, though the bill remains unenacted and only Tier-3-sourced this cycle.
The absence of a sector-calibrated licensing perimeter for VASPs, PSPs and EMIs is a structural, not episodic, risk factor for exposure concentration in Panama-facing fintech counterparties, pending Draft Law 314's uncertain enactment.
No material change for this persona this cycle
Audit-trail expectations for bank and fiduciary customer and beneficial-owner documentation have been sharpened under Acuerdo 1-2026; control-testing scope should reflect the restated Article 112-114 documentary standard.
SBP Acuerdo 1-2026 sharpens customer and beneficial-owner due-diligence documentation standards for banks and fiduciaries.
The VASP/PSP/EMI licensing gap in Panama persists pending Draft Law 314.
No material change this cycle.
Panama remains off the FATF grey list while its AML architecture is reinforced at the supervisory-rule level.
Draft Law 314 would introduce Panama's first activity-based licensing regime for crypto-asset and payment platforms.
Panama's crypto/payments sector remains on general AML registration rather than activity-specific licensing, a standing exposure-concentration factor.
No material change this cycle.
SBP's Acuerdo 1-2026 is a Tier-1-sourced reinforcement of existing Banking Law due-diligence duties.
As an illustrative orientation only, the gradual shift from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-state 6AMLD transposition, could over time reshape how non-EEA correspondent relationships and cross-border obliged entities are assessed from an EU-facing supervisory perspective. This is architecture-over-incident illustration of a structural mechanism, not an observed development with a Panama nexus, and not a prediction of how or whether Panama-facing relationships would be affected.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No material change found with a Panama nexus this cycle. |
| T2 · EU AML Package / AMLA | no_change | Panama is outside the EEA; AMLR/6AMLD/AMLA transposition tracking does not apply directly. |
| T3 · FATF Grey List | no_change | Panama remains off the FATF grey list; 19 June 2026 plenary list of 22 jurisdictions does not include Panama. |
| T4 · Beneficial-Ownership Register Status | no_change | No sourced movement on Panama's BO registration mechanics this cycle. |
| T5 · Crypto & Digital-Asset Integrity | watch | Draft Law 314's VASP/PSP/EMI licensing proposal continues through committee; SBP maintains AML-registration-only approach via Law 23/2015 in the interim. |
| T6 · Sanctions Regime Divergence | no_change | No Panama-specific EU/US/UK listing divergence identified this cycle. |