Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Panama PA

Domains (D1–D6)
2
Sources
15
Role actions
8
Horizon <90d
1
Jurisdiction profile
CleanTier BRisk: StableMixed

Panama exited the FATF grey list in October 2023 and the EU high-risk third-country list in June 2025.

MoreAML law criminalises laundering broadly and created a non-public UBO registry (Law 129/2020) under Superintendencia/UAF supervision, but domestic ML prosecution remains weak, professional-enabler oversight (CSPs, lawyers) is uneven, and no comprehensive VASP/crypto law is in force.

Key deficiencies
  • Non-public beneficial ownership registry limits third-party/journalistic verification of nominee-shareholder structures
  • Weak domestic prosecutorial capacity for complex professional-enabler money-laundering cases, exemplified by the 2024 mass acquittal in the Panama Papers trial
  • No comprehensive virtual-asset service provider (VASP) AML/CFT statute in force after the 2022 crypto bill was vetoed for insufficient controls
  • Ship registry (Panama flag) remains a preferred reflagging destination for vessels exiting sanctioned or scrutinised flags despite an active de-flagging campaign
  • Colon Free Zone transaction data remains incompletely integrated with customs systems, sustaining trade-based money-laundering exposure
Recent developments (18m)
  • EU Commission delisted Panama from the AML high-risk third-country list, effective June 2025
  • Panama's courts acquitted all 28 defendants in the Panama Papers money-laundering trial (July 2024), and Panama's new president publicly dismissed the ICIJ investigation as a 'hoax'
  • Panama Maritime Authority accelerated de-registration of sanctioned shadow-fleet tankers (approx. 128 vessels flagged for cancellation by March 2025, at least 70 already removed)
  • A former senior Mossack Fonseca executive, Christoph Zollinger, was set for trial in Germany (March 2026) on tax-evasion/criminal-organisation charges tied to Panama-based offshore structures
  • UNODC, with Canadian government support, ran a January 2026 high-level training for Panamanian regulators (Ministry of Economy and Finance, UAF, Attorney General's Office) on virtual-asset AML/CFT supervision
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Panama's financial-integrity posture this cycle is defined by a reinforcement of standing supervisory architecture rather than by new primary legislation. The Superintendencia de Bancos de Panama (SBP) issued Acuerdo No. 1-2026 on 27 January 2026, restating and sharpening the customer due diligence and beneficial-owner identification duties that Articles 112 to 114 of the Banking Law already impose on banks and fiduciaries, and tying those duties explicitly to United Nations Security Council freeze-list procedures. This is an architecture-level finding: the rule does not create a new obligation so much as it hardens the documentary and monitoring expectations sitting on an existing one, and it does so for the sector most exposed to correspondent-banking counterparty risk. Alongside this, Panama remains off the FATF grey list, a status unchanged since its October 2023 delisting and confirmed against the 19 June 2026 plenary roster of twenty-two listed jurisdictions.

The second thread this cycle is structural rather than enacted: Draft Law 314, the Ley Marco Integral de Tecnologias Financieras filed on 13 January 2026, would create dedicated licensing categories for virtual-asset service providers, payment-service providers and electronic-money issuers under joint SBP oversight, replacing the current arrangement in which such firms operate under general AML registration alone pursuant to Law 23 of 2015. The bill remains unenacted, and the only support located this cycle for its content and status is Tier-3 legal commentary; no Tier-1 primary legislative text was retrieved, which caps confidence at Probable rather than Confirmed.

Other Developments

Supervisory tightening without new legislation. Acuerdo 1-2026 is best read as compliance-architecture maintenance: it gives banks and fiduciaries a sharper documentary standard for customer and beneficial-owner identification and for maintaining transaction-monitoring capability, including frozen-asset procedures tied to UN Security Council lists, but it operates within the existing Banking Law framework rather than extending it to new entity types.

The VASP/PSP/EMI licensing gap persists. Firms offering virtual-asset, payment, or e-money services in Panama continue to rely on general AML registration under Law 23/2015 rather than any activity-specific licensing regime. Draft Law 314 is the vehicle proposed to close that gap, but its progress through the legislative process has not produced an enacted instrument this cycle, and the evidentiary base behind it remains thin.

FATF status stable. Panama's continued absence from the FATF grey list is a confirmed, Tier-1-sourced fact, cross-checked directly against FATF's own list rather than inferred from commentary. There is no movement to report on EU high-risk-third-country status either, and nothing in this cycle's substrate suggests either list is under near-term review for Panama.

Cross-Monitor Connections

The Draft Law 314 licensing gap sits squarely on the FIM/WPM boundary: a jurisdiction with no activity-specific licensing perimeter for payment and e-money firms is, from a payments-market-access perspective, operating on bare AML registration, which is the same structural fact driving this cycle's World Payments Monitor findings on Panama. The absence of a dedicated VASP supervisory layer is also a standing input to the broader crypto-integrity tracker, since firms handling virtual assets in Panama are currently assessed against general AML registration rather than a sector-calibrated licensing test — a gap that persists until Draft Law 314, or something like it, is enacted.

Outlook

Absent enactment of Draft Law 314, Panama's AML/CTF architecture will likely continue to be reinforced incrementally at the supervisory-rule level — as Acuerdo 1-2026 illustrates — rather than through primary legislation extending licensing perimeters to new entity types. Whether the draft law advances remains uncertain on the evidence available this cycle; as scheduled, legislative movement would need Tier-1 confirmation before the current Probable-confidence assessment of its content and status could be upgraded. Panama's grey-list standing is not expected to shift absent a material change in FATF's own assessment process, which this cycle's sourcing does not indicate.

weekly_brief_draft · JID PA
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

Panama's digital-asset and financial-innovation sector continues to operate without a dedicated licensing perimeter. Virtual-asset service providers, payment-service providers and electronic-money issuers are presently subject only to general AML registration under Law 23 of 2015, a structural gap that has no sector-specific capital, governance or conduct overlay attached to it. The proposed remedy is Draft Law 314, the Ley Marco Integral de Tecnologias Financieras, filed with the Asamblea Nacional on 13 January 2026. The bill would bring VASPs, PSPs and EMIs under joint SBP oversight with dedicated licence categories, formalise a regulatory sandbox, and extend substantive regulation to crypto-assets for the first time in Panama's statutory framework. None of this has been enacted. The only support located this cycle for the bill's content and progress is Tier-3 legal commentary; no Tier-1 primary legislative text has been retrieved, and the Interpreter has accordingly capped confidence at Probable rather than Confirmed.

The architecture-over-incident framing matters here: this is not a story about a single enforcement action or a single firm, but about the durable absence of an activity-based licensing perimeter for an entire sector. Where a permissive registration-only regime persists without enforcement incident, that absence of friction is itself an analytically significant fact for anyone assessing Panama's exposure to crypto-sector misuse. Firms transacting with Panama-domiciled or Panama-touching VASP counterparties should note that the jurisdiction's current control is AML registration, not activity licensing, and that the counterparty-risk profile of such engagements is accordingly different from engaging a counterparty under a licensed regime.

The standing crypto-integrity tracker for Panama characterises Draft Law 314's progress as continuing through committee, with SBP maintaining the AML-registration-only approach via Law 23/2015 in the interim. Nothing in this cycle's substrate indicates a change to that posture, and no enactment date can be stated with confidence; the regulatory horizon entry for Draft Law 314 carries only a year-wide uncertainty band with an estimated 2027 Q1 impact date, which should be read as indicative rather than as a committed legislative timetable.

Outlook

As scheduled, Draft Law 314's path to enactment remains uncertain on the evidence available this cycle. Should it pass, Panama would acquire its first activity-based licensing perimeter for virtual-asset, payment and e-money firms, closing a structural gap that the sector has operated within for some years under Law 23/2015 registration alone. Until a Tier-1 primary legislative source is retrieved confirming either the bill's content or its legislative stage, this assessment remains Probable rather than Confirmed, and no claim about an enactment date should be read as more than indicative.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

Panama's AML/CTF architecture moved this cycle at the supervisory-rule level rather than through new primary legislation. The Superintendencia de Bancos de Panama issued Acuerdo No. 1-2026, dated 27 January 2026, which reinforces Banking Law Articles 112 to 114 obligations on banks and fiduciaries to document customer and beneficial-owner identification and to maintain transaction-monitoring capability, including frozen-asset procedures tied to United Nations Security Council lists. This text was retrieved directly from SBP's own publication, giving it Tier-1, Confirmed-tier support. The architecture-over-incident reading is that this is reinforcement of an existing statutory duty, sharpening documentary expectations rather than creating a new regulatory category or extending coverage to firms not already captured by the Banking Law.

Panama's position relative to international list-based regimes is unchanged. The jurisdiction remains off the FATF grey list, a status confirmed directly against FATF's own list of jurisdictions under increased monitoring and unchanged since Panama's October 2023 delisting; the 19 June 2026 plenary roster of twenty-two listed jurisdictions does not include Panama. This is a Confirmed, Tier-1-sourced finding, cross-checked against the primary FATF source rather than inferred from secondary commentary.

The three-pillar balance across AML, CTF and CPF findings is worth noting explicitly: this cycle's sourced material concentrates on the AML pillar (customer due diligence, beneficial-ownership identification, transaction monitoring), with the CTF dimension represented only through the UN Security Council freeze-list procedures referenced in Acuerdo 1-2026, and no CPF-specific signal with a Panama nexus identified. This is consistent with the general pattern in which AML generates more enforcement and rule-making volume than CTF or CPF, and the absence of CTF/CPF-specific movement this cycle should not be read as an assessment that those pillars are static in substance, only that no sourced finding addressing them specifically arose this cycle.

The structural gap in Panama's broader financial-integrity perimeter — the absence of activity-based licensing for VASPs, PSPs and EMIs, addressed in the Crypto, Digital Assets, and Financial Innovation domain this cycle — bears on the AML/CTF regime insofar as those firms currently sit within general AML registration under Law 23/2015 rather than under a sector-calibrated supervisory structure comparable to the banking sector's. Acuerdo 1-2026 applies to banks and fiduciaries specifically; it does not extend to the VASP/PSP/EMI population, which remains the subject of the still-unenacted Draft Law 314.

Outlook

Panama's AML/CTF trajectory this cycle is one of incremental supervisory reinforcement within the existing Banking Law framework, not legislative expansion. Grey-list status is stable and, as scheduled, is not expected to shift absent a material change in FATF's own assessment process, which no source this cycle indicates is underway. The more consequential open question for Panama's broader financial-integrity architecture is whether Draft Law 314 is enacted, extending licensed supervision to the VASP/PSP/EMI population currently outside the banking-sector perimeter that Acuerdo 1-2026 reinforces.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
Proposed2027-Q1 · ±year

Draft Law 314 (Ley Marco Integral de Tecnologias Financieras) VASP/PSP/EMI licensing

Would create Panama's first dedicated licensing perimeter for virtual-asset service providers, payment-service providers and electronic-money issuers under joint SBP supervision, plus a formal regulatory sandbox.
1 dated · 4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

SBP Acuerdo 1-2026 sharpens customer and beneficial-owner due-diligence documentation standards for banks and fiduciaries.

Banks and fiduciaries operating in or through Panama face a sharpened documentary standard for customer and beneficial-owner identification and transaction monitoring, including UN Security Council freeze-list procedures, under existing Banking Law obligations.

1 evidence refs
Compliance

The VASP/PSP/EMI licensing gap in Panama persists pending Draft Law 314.

Firms with Panama-facing virtual-asset, payment or e-money exposure continue to operate against a general AML-registration standard rather than an activity-specific licensing framework; this affects how counterparty due diligence on such firms should be calibrated.

2 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Panama remains off the FATF grey list while its AML architecture is reinforced at the supervisory-rule level.

Panama's standing as a non-grey-listed jurisdiction is unchanged, and the sharpening of bank AML obligations under Acuerdo 1-2026 signals continued incremental tightening rather than a destabilising regulatory event.

2 evidence refs
CTO

Draft Law 314 would introduce Panama's first activity-based licensing regime for crypto-asset and payment platforms.

Technical architecture decisions for platforms operating in or through Panama should anticipate a possible future licensing perimeter with governance and sandbox provisions, though the bill remains unenacted and only Tier-3-sourced this cycle.

2 evidence refs
Risk

Panama's crypto/payments sector remains on general AML registration rather than activity-specific licensing, a standing exposure-concentration factor.

The absence of a sector-calibrated licensing perimeter for VASPs, PSPs and EMIs is a structural, not episodic, risk factor for exposure concentration in Panama-facing fintech counterparties, pending Draft Law 314's uncertain enactment.

3 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

SBP's Acuerdo 1-2026 is a Tier-1-sourced reinforcement of existing Banking Law due-diligence duties.

Audit-trail expectations for bank and fiduciary customer and beneficial-owner documentation have been sharpened under Acuerdo 1-2026; control-testing scope should reflect the restated Article 112-114 documentary standard.

1 evidence refs
Decision lens
MLRO

SBP Acuerdo 1-2026 sharpens customer and beneficial-owner due-diligence documentation standards for banks and fiduciaries.

Compliance

The VASP/PSP/EMI licensing gap in Panama persists pending Draft Law 314.

Legal

No material change this cycle.

Board

Panama remains off the FATF grey list while its AML architecture is reinforced at the supervisory-rule level.

CTO

Draft Law 314 would introduce Panama's first activity-based licensing regime for crypto-asset and payment platforms.

Risk

Panama's crypto/payments sector remains on general AML registration rather than activity-specific licensing, a standing exposure-concentration factor.

Operations

No material change this cycle.

Audit

SBP's Acuerdo 1-2026 is a Tier-1-sourced reinforcement of existing Banking Law due-diligence duties.

Shared evidence: 3 refs
Scenario sketches

Illustrative scenario: AMLA transition and cross-border supervisory reach

As an illustrative orientation only, the gradual shift from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-state 6AMLD transposition, could over time reshape how non-EEA correspondent relationships and cross-border obliged entities are assessed from an EU-facing supervisory perspective. This is architecture-over-incident illustration of a structural mechanism, not an observed development with a Panama nexus, and not a prediction of how or whether Panama-facing relationships would be affected.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo material change found with a Panama nexus this cycle.
T2 · EU AML Package / AMLAno_changePanama is outside the EEA; AMLR/6AMLD/AMLA transposition tracking does not apply directly.
T3 · FATF Grey Listno_changePanama remains off the FATF grey list; 19 June 2026 plenary list of 22 jurisdictions does not include Panama.
T4 · Beneficial-Ownership Register Statusno_changeNo sourced movement on Panama's BO registration mechanics this cycle.
T5 · Crypto & Digital-Asset IntegritywatchDraft Law 314's VASP/PSP/EMI licensing proposal continues through committee; SBP maintains AML-registration-only approach via Law 23/2015 in the interim.
T6 · Sanctions Regime Divergenceno_changeNo Panama-specific EU/US/UK listing divergence identified this cycle.
Registers

Enforcement actions

  • Panama Maritime Authority announced the cancellation of registration for vessels sanctioned by the US, its allies, or the UN, following a prior pledge to penalise blacklisted vessels; at least 70 tankers had already been removed by the announcement date. 27 Mar 2025
  • Panama cancelled registration of six ships sailing under its flag after the UK blacklisted 30 vessels the prior week, carrying out what the Authority termed an 'expedited cancellation.' 2 Dec 2024
  • Following OFAC's designation of 155 shadow-fleet tankers in January 2025 — the most extensive US action against the fleet to date — Panama's ship registry began de-listing 68 of the sanctioned vessels flying its flag. 23 Jan 2025
  • Panama's courts concluded the high-profile Panama Papers money-laundering trial, with judge Baloisa Marquínez acquitting all 28 defendants over their alleged role in setting up shell companies used in Brazil- and Germany-linked bribery and corruption scandals, citing insufficient evidence and inadmissible electronic evidence. 5 Jul 2024
  • GAFILAT issued a first enhanced follow-up report analysing Panama's progress addressing technical compliance deficiencies identified in its 2018 Mutual Evaluation Report, re-rating several FATF Recommendations while keeping Panama in the enhanced follow-up process. 1 Jun 2025

Sanctions changes

  • OFAC designated 155 shadow-fleet tankers in January 2025, its most extensive single action against Russia's shadow fleet to date, including vessels flagged under Panama's registry, triggering Panama's de-flagging response. 23 Jan 2025
  • The European Commission updated its delegated regulation listing high-risk third countries under AMLD IV, delisting Panama alongside Barbados, Gibraltar, Jamaica, the Philippines, Senegal, Uganda and the UAE, removing the requirement for EU obliged entities to apply enhanced due diligence specifically keyed to Panama's AML/CFT deficiencies. 10 Jun 2025

Regulatory horizon (register)

  • Panama's next FATF/GAFILAT Mutual Evaluation under 5th round methodology
  • Next GAFILAT enhanced follow-up report on Panama AML/CFT reforms
  • Prospective Panama VASP/crypto AML legislation
  • Zollinger Mossack Fonseca-linked trial in Cologne, Germany

Active schemes

  • [HIGH] Panama flag-of-convenience reflagging for shadow-fleet tankers
  • [HIGH] Nominee-shareholder and private-foundation BO opacity
  • Colon Free Zone trade-based laundering / peso exchange
  • Hizballah revenue generation via Panama free-trade zones
Sources
  1. FATF
  2. FATF/GAFILAT
  3. GAFILAT
  4. European Commission
  5. FinCEN, US Department of the Treasury
  6. FinCEN, US Department of the Treasury
  7. Bloomberg
  8. Bloomberg
  9. Bloomberg
  10. OCCRP
  11. ICIJ
  12. ICIJ
  13. Global Witness
  14. UNODC
  15. ICIJ
Coverage gaps
The 2024 acquittal of all 28 Panama Papers defendants, inclu…
The 2024 acquittal of all 28 Panama Papers defendants, including Mossack Fonseca's founders, on money-laundering charges — with the presiding court dismissing key electronic evidence on chain-of-custody grounds — demonstrates persistent weakness in Panama's capacity to secure domestic convictions against professional enablers of offshore shell-company networks.
Panama's beneficial-ownership registry (Law 129/2020) is hel…
Panama's beneficial-ownership registry (Law 129/2020) is held privately by supervisory authorities rather than made publicly accessible, restricting the ability of banks, foreign law enforcement, and investigative journalists to independently verify nominee-shareholder and private-foundation ownership structures.
Panama has no comprehensive VASP/crypto AML statute in force…
Panama has no comprehensive VASP/crypto AML statute in force after President Cortizo vetoed the 2022 crypto bill for lacking adequate anti-money-laundering controls; capacity-building continues via UNODC training but no replacement legislation has been enacted.
Despite an active de-flagging campaign against already-sanct…
Despite an active de-flagging campaign against already-sanctioned vessels, Panama's registry continues to receive newly-reflagged shadow-fleet tankers exiting other flags before they are individually designated, reflecting a structural lag between vessel-level sanctions designation and registry-level screening.
Colon Free Zone administration and Panamanian Customs system…
Colon Free Zone administration and Panamanian Customs systems remain incompletely integrated for electronic transaction tracking, sustaining the trade-based money-laundering vulnerability long identified by FATF and FinCEN typology reporting on the zone.

Evidence

Confidence-tiered claims

Acuerdo No. 1-2026 reinforces Banking Law Arts. 112-114 CDD/beneficial-owner identification and UN Security Council freeze-list procedures for banks and fiduciaries SRC-fim-PA-001
Confirmed · 1 source
Remains off the FATF grey list; not among the 22 jurisdictions on the 19 June 2026 plenary roster SRC-fim-PA-002
Probable · 1 source
Draft Law 314 would create dedicated VASP/PSP/EMI licensing under joint SBP oversight, closing the current AML-registration-only gap under Law 23/2015 SRC-fim-PA-003
Probable · 1 source
No enacted sector-specific VASP/PSP/EMI licensing regime; firms rely on general AML registration under Law 23/2015 SRC-fim-PA-003
Probable · 1 source
stable
Probable