Crypto License in El Salvador: BSP & DASP Registration Guide 2026

The two license types cover non-overlapping asset classes. A BSP license covers Bitcoin-only operations. A DASP license covers all other digital assets: altcoins, stablecoins, tokenized securities, and utility tokens. The table below shows the key differences:

If your platform supports only BTC wallets or a BTC payment gateway, the BSP license covers your operations. If you list ETH, USDT, SOL, or any asset other than Bitcoin, you need a DASP license, regardless of whether you also handle Bitcoin.

LEAD does not create a combined license tier. If your exchange lists both Bitcoin and other digital assets, CNAD requires you to hold both a BSP and a DASP license simultaneously. This applies to:

• Multi-asset exchanges — any platform that trades BTC alongside ETH, stablecoins, or other tokens
• Custodians serving mixed portfolios — custody providers holding BTC and non-BTC assets for the same clients
• Payment processors — businesses that settle in BTC but also accept or convert stablecoins

Holding both licenses doubles the regulatory touch-points but does not double the minimum capital requirement. CNAD currently assesses capital adequacy on a consolidated basis. You file two separate applications, but a single compliance officer and a single AML/CFT policy framework can satisfy both.

In January 2025, El Salvador amended its Bitcoin Law and removed Bitcoin’s status as mandatory legal tender. Businesses are no longer required to accept BTC as payment. The reform was passed on 29 January 2025 as part of a broader IMF deal, published in the Official Gazette on 30 January 2025, and entered into force on 30 April 2025.

For licensees, the practical impact is limited but real:

• BSP license still exists — the LEAD framework and the BSP category remain in force. CNAD continues to register and supervise Bitcoin service providers. The 2025 reform did not repeal LEAD.
• No mandatory acceptance obligation — you no longer need to engineer your platform to accept BTC from customers who demand it. This removes one compliance constraint for merchants and payment processors.
• Chivo Wallet government operations — the state-run Chivo Wallet was wound down as part of the same reform. This removes a state-subsidised competitor from the market, not a regulatory constraint on your business.
• Tax treatment unchanged — digital asset income remains exempt from income tax for LEAD-licensed entities under Article 36 of the law. The 2025 reform did not alter LEAD’s tax provisions.

The GFI analysis of the 2025 LEAD amendments confirms that the core licensing architecture remained intact after the reform. If you were already planning a BSP or DASP application, the 2025 reform (passed January, effective April 2025) does not affect your eligibility or the application process.

What does change is the narrative you present to banking partners and institutional clients: El Salvador is no longer positioned as a “Bitcoin-only” economy. The LEAD framework positions it as a regulated multi-asset jurisdiction with FATF-compliant supervision, which is an easier sell to correspondent banks than the pre-2025 setup.

• Zero tax on crypto capital gains — El Salvador imposes no capital gains tax on Bitcoin or other digital asset profits. Foreign-sourced income is not taxed at the personal or corporate level.
• Low minimum capital requirement — The Digital Assets Issuance Law sets a minimum capital threshold of $2,000 for DASP and BSP registration. See the comparison table below for how this compares to other jurisdictions.
• USD as functional currency — El Salvador has used the US dollar as its primary currency since 2001. You hold, report, and remit in USD. There is no FX conversion layer, no currency risk on operating capital, and straightforward accounting for international clients.
• Purpose-built crypto law — The regulatory body is the Comisión Nacional de Activos Digitales (CNAD), a dedicated digital assets regulator rather than a traditional financial authority adapting existing rules. Licensing timelines and requirements are defined specifically for crypto businesses.
• Remittance and financial inclusion market — Remittances exceeded $10 billion in 2025, representing over 27% of GDP (The Central American Group, 2025). Approximately 64% of the adult population remains unbanked (World Bank Global Findex), creating a large addressable market for crypto payment, wallet, and remittance products that are structurally difficult to serve through traditional banking channels.
• No travel or residency requirement for directors — Entity formation and licensing do not require physical presence or local directors, though having a registered agent in-country is required.

These advantages come with real operational constraints.

• Banking access is limited — Opening a corporate bank account in El Salvador remains difficult. Most international banks remain cautious toward crypto-licensed entities, and domestic banking infrastructure is limited. Operators typically rely on EMI accounts or neobank solutions while local banking relationships develop. This is the most common operational friction point cited by licensed entities.
• Spanish-language bureaucracy — All regulatory submissions, filings, and correspondence with CNAD are conducted in Spanish. If your team does not have Spanish-language legal capacity, you will need local counsel for every stage of the licensing process and ongoing compliance filings.
• Regulatory track record is short — The CNAD framework has been operational since 2023. There is limited precedent for how the regulator handles enforcement, license renewals, or cross-border disputes. Operators who rely on demonstrated regulatory predictability may find this uncertainty uncomfortable in the short term.
• Limited international recognition — An El Salvador VASP license does not provide passporting rights into the EU, UK, or other major markets. You can operate globally under the license, but counterparties in regulated jurisdictions may require you to hold local authorizations regardless.
• Country risk premium — Some institutional counterparties and banking partners apply heightened due diligence to El Salvador-licensed entities due to the country’s historical credit ratings and the novel nature of its crypto policy. This does not prevent business but can lengthen onboarding processes with larger partners.

The table below compares El Salvador against four commonly used crypto licensing jurisdictions on the criteria that most affect cost and operational structure. All figures reflect 2026 requirements.

El Salvador leads on cost and speed. The UAE and EU offer stronger banking access and international credibility, but at significantly higher capital and operational cost. Panama has no statutory capital requirement but also lacks a crypto-specific regulatory framework, which increasingly matters for institutional counterparties conducting due diligence on your license. If your primary markets are outside the EU and you are optimizing for cost-efficient licensing with a credible legal basis, El Salvador is competitive with any of these options.

El Salvador passed the Bitcoin Law in June 2021, requiring all businesses to accept Bitcoin for payment and obligating the government to provide a digital wallet (Chivo). The law put the jurisdiction on the map but offered no licensing framework for VASP operators.

The gap was filled by the Ley de Emisión de Activos Digitales (LEAD), passed in 2023 and in force since 1 February 2023, which the government published in full in English. The LEAD does several things the Bitcoin Law did not:

• VASP registration mandate — any entity offering exchange, custody, transfer, or issuance of digital assets in or from El Salvador must register with the regulator before operating.
• Token issuance rules — companies wishing to issue digital tokens (including security tokens) must file an issuance prospectus and obtain approval.
• AML/CFT obligations — registered VASPs are subject to the Financial Investigation Unit (FIU) standards aligned with FATF Recommendation 15, including travel rule compliance.
• Investor protection provisions — disclosure requirements for issuers, mandatory custody segregation, and complaint-handling procedures.

The full English text of the LEAD is available directly from CNAD: Ley de Activos Digitales 2023, English translation (CNAD). A supplementary issuance regulation is published by InvestInElSalvador: Ley de Emisión de Activos Digitales (PDF).

The Comisión Nacional de Activos Digitales (CNAD) was created by the LEAD as the single competent authority for digital assets in El Salvador. Before CNAD existed, oversight was fragmented across three bodies with overlapping mandates:

CNAD’s core supervisory functions under the LEAD include:

• VASP registration — reviewing and approving applications, setting fit-and-proper standards for directors and beneficial owners.
• Ongoing supervision — periodic reporting obligations, on-site inspections, and the power to impose sanctions or revoke registration.
• Token issuance approvals — prospectus review for public token offerings.
• AML/CFT oversight — coordinating with the FIU on suspicious transaction reports and travel rule enforcement.

CNAD publishes its regulatory guidelines and the VASP register on its official site: CNAD (cnad.gob.sv). Operators should also monitor SSF publications, as secondary regulations for specific activity types continue to be issued.

In December 2024, El Salvador reached a staff-level agreement with the IMF on a $1.4 billion Extended Fund Facility, formally approved by the IMF Executive Board in February 2025. The IMF conditioned the arrangement on scaling back the Bitcoin Law’s most expansive provisions. The National Assembly passed the required amendments on 29 January 2025, with the reform entering into force on 30 April 2025 (90 days after publication in the Official Gazette).

The practical effect of the 2025 amendments:

• Mandatory acceptance removed — private businesses are no longer legally required to accept Bitcoin as payment. Acceptance is now voluntary.
• Legal tender scope narrowed — Bitcoin retains a status recognized by law, but the obligation on the state to guarantee Bitcoin-denominated transactions through the Chivo wallet system was reduced.
• LEAD framework intact — the VASP licensing regime, CNAD’s authority, AML/CFT obligations, and token issuance rules were not amended. The 2025 reforms addressed the Bitcoin Law only.
• Chivo wallet operations curtailed — the government-operated Chivo wallet reduced its active role, with the state stepping back from direct retail crypto infrastructure.

The IMF agreement commits El Salvador to further fiscal and financial sector reforms through 2028, so track secondary regulatory updates from CNAD throughout your license term.

Your operating entity must be incorporated in El Salvador. The Sociedad de Responsabilidad Limitada (SRL), the local equivalent of an LLC, is the structure most applicants use. It offers limited liability, straightforward profit repatriation, and is accepted by CNAD.

• Minimum shareholders — at least 2 shareholders are required. Shareholders may be individuals or corporate entities; foreign ownership is permitted at 100%.
• Entity type — SRL (recommended) or Sociedad Anónima (SA). Foreign companies applying as branches face additional compliance steps and are generally slower to approve.
• Local legal representative — you must appoint a resident legal representative in El Salvador. This person acts as the registered point of contact for CNAD and bears formal responsibility for regulatory communications. The representative does not need to be a director or shareholder.
• Registered address — a physical registered office address in El Salvador is required. A virtual office address accepted by the commercial registry is sufficient at application stage.
• Corporate governance documents — articles of incorporation, shareholder registry, and internal regulations must be notarized and in Spanish or accompanied by a certified translation.

El Salvador sets a low capital threshold for the DASP (BSP) license.

• Minimum authorized capital — $2,000 USD. This is the statutory floor for an SRL in El Salvador and is accepted as sufficient capital for DASP registration.
• Deposit at registration — 5% of authorized capital ($100 on a $2,000 capital base) must be deposited to a bank account at the time of company registration and evidenced in the application.
• Ongoing capital adequacy — CNAD may impose additional capital or liquidity requirements depending on the specific activities licensed (e.g., custody of client assets requires higher reserves). Confirm the applicable threshold for your specific service category before filing.
• Bank account — proof that the entity holds an active business bank account, either in El Salvador or with a correspondent bank that services Salvadoran entities, is required as part of the financial documentation bundle.

Every document originating outside El Salvador must be apostilled or notarized and, where applicable, translated into Spanish by a certified translator. Prepare these before submitting to CNAD. Incomplete packages are returned without review.

• Passports — notarized and apostilled copies for all directors, beneficial owners, and shareholders holding 10% or more.
• Proof of address — utility bill or bank statement dated within the last 3 months for each director and significant shareholder.
• Corporate incorporation documents — notarized articles of incorporation, shareholder registry, and certificate of good standing for the El Salvador entity.
• Business plan — a detailed narrative covering the services to be offered, target markets, revenue model, and projected transaction volumes for the first 24 months.
• AML/KYC policies — written Anti-Money Laundering and Know Your Customer procedures aligned with El Salvador’s AML Law and FATF recommendations. Must name a designated Compliance Officer.
• Power of attorney — notarized power of attorney authorizing your local legal representative to act on behalf of the company before CNAD and other Salvadoran authorities.
• Proof of technical infrastructure — description of the technology platform, hosting arrangements (including data residency), cybersecurity controls, and wallet or custody architecture. Third-party security audit reports strengthen the application.
• Financial statements or capitalization proof — evidence of the deposited capital and, for established companies, audited accounts for the prior year.
• CVs and professional backgrounds — detailed résumés for all directors and key management, including prior roles in financial services or technology.

CNAD applies fit-and-proper vetting to everyone who controls or manages the licensed entity: directors, beneficial owners, and shareholders with significant holdings. The assessment covers three areas: honesty, financial soundness, and competence.

• Criminal record — no convictions for fraud, money laundering, terrorist financing, or financial crime. Criminal background checks from each country of residence in the past 5 years are required.
• Regulatory history — no prior license revocations, prohibitions, or disciplinary actions by a financial regulator in any jurisdiction. Disclose any past regulatory proceedings even if resolved favorably.
• Financial integrity — no personal insolvency, undischarged bankruptcy, or unsatisfied court judgments relating to financial obligations. A credit reference or solvency declaration may be requested.
• Professional competence — at least one director or key officer must have demonstrable experience in financial services, compliance, or technology relevant to crypto asset services. This is assessed through CVs and references, not a formal exam.
• Source of funds — directors and significant shareholders must be able to explain the origin of the capital invested in the business. Bank statements, investment records, or a notarized declaration of source of wealth are acceptable.

CNAD sets these fees by regulation. They are non-negotiable and payable directly to the regulator. The figures below apply to a single Digital Asset Service Provider (DASP) license type.

You must incorporate a Salvadoran legal entity before applying to CNAD. These are one-time costs paid to lawyers, notaries, and the commercial registry.

The wide range in advisory fees reflects the complexity of your business model. A straightforward single-activity DASP application with clean ownership structure sits toward the lower end. Multi-jurisdictional structures, complex beneficial ownership chains, or applications requiring multiple CNAD meetings push costs higher.

CNAD requires licensed DASPs to maintain active AML/CFT compliance, a designated compliance officer, and audited financials. These are recurring annual obligations.

The compliance officer cost depends on whether you hire locally or use an outsourced service provider. A full-time local hire in San Salvador will typically cost more than $15,000 per year inclusive of employment taxes; an outsourced compliance service covers the regulatory requirement at the lower end of the range.

The table below separates first-year costs (which include one-time setup fees) from the recurring annual run-rate once you are operational.

For context, Malta’s VFA license application fees range from €6,000 to €24,000 depending on license class, and Lithuania requires €50,000–€150,000 in minimum capital under MiCA CASP authorization. The bulk of your first-year costs are professional fees, which you can control by building compliance infrastructure in-house rather than outsourcing it. Operators with existing AML/CFT frameworks from other jurisdictions typically land toward the lower end of the advisory fee range.

The exemptions below apply to entities that hold a valid CNAD license and maintain LEAD registration. “Crypto income” means revenue directly derived from trading, exchange, custody, issuance, or transfer of digital assets as defined by the Digital Assets Issuance Law.

The LEAD exemption on municipal taxes and import duties matters most for infrastructure-heavy operations. A mining company or a data center running node infrastructure can import equipment and operate within a municipality without paying local levies that would otherwise apply to commercial entities in El Salvador.

Not every revenue line qualifies for the crypto exemption. If your licensed entity also earns from conventional business activities (consulting fees, SaaS subscriptions unrelated to digital assets, or Salvadoran real estate), that income is subject to the standard corporate income tax rate of 30%. You need to keep clean accounting separation between exempt crypto income and taxable non-crypto income. Mixing them without clear allocation creates audit exposure.

Employee payroll taxes apply normally regardless of LEAD status. Social security contributions and income tax withholding on staff salaries follow standard Salvadoran labor and tax law. If you hire locally, budget for those obligations. Most licensed crypto businesses operating in El Salvador maintain a lean local presence (one or two compliance officers) and keep the bulk of staff in other jurisdictions, which keeps the payroll exposure small.

Several jurisdictions market themselves as zero-tax destinations for crypto businesses. The differences lie in what the zero rate actually covers, what license or substance you need to qualify, and what corporate tax applies once your revenue crosses a threshold. The table below compares El Salvador with the UAE, Panama, and BVI on the metrics that matter most.

El Salvador and the UAE both offer a regulated path with a zero rate on crypto income, but the UAE introduces a 9% corporate tax once taxable profit passes AED 375,000 (roughly USD 102,000). Panama's territorial system is attractive but provides no formal crypto licensing framework, which creates correspondent banking and institutional counterparty problems. BVI offers zero tax across the board and no license requirement, but that same lack of regulatory infrastructure means BVI-registered crypto firms are increasingly excluded from banking relationships and institutional deals. El Salvador's CNAD license gives you documented regulatory standing while preserving the full zero-rate benefit on crypto income.

Standard CDD applies to all customers at onboarding. At minimum, you must collect and verify: full legal name, date of birth, nationality, residential address, and a government-issued photo ID. For corporate customers, verification extends to UBOs (ultimate beneficial owners) holding 25% or more of shares or voting rights.

Source-of-funds verification is required for VASP/digital-asset transactions exceeding $1,000 (cumulative or single), aligned with the GAFILAT-recommended threshold for virtual asset transfers. Customers must document the origin of funds (payslips, business income statements, or equivalent) before processing the transaction. Note: the general Salvadoran AML cash-reporting threshold is $10,000; the $1,000 limit applies specifically to digital-asset and Travel-Rule-covered transactions.

Enhanced Due Diligence (EDD) is mandatory for three categories:

• Politically Exposed Persons (PEPs) — current or former senior public officials, their immediate family members, and known close associates. EDD requires senior management sign-off and annual review of the relationship.
• High-risk jurisdictions — customers or counterparties connected to FATF grey-list or black-list countries. Transactions require documented risk assessment and, where appropriate, enhanced monitoring or outright refusal.
• Unusual transaction patterns — structuring, rapid layering across wallets, transactions inconsistent with the customer’s stated business or risk profile. These trigger EDD review and, where suspicion cannot be resolved, STR filing.

All CDD and EDD records must be retained for a minimum of 15 years from the end of the customer relationship or the date of the transaction, whichever is later, as required by El Salvador’s AML framework — currently the Special Law for the Prevention, Control, and Sanction of Money Laundering (Legislative Decree No. 426, October 2025) and FIU Instructions of November 2021 that remain in force until new regulations are issued. Records must be retrievable and producible to CNAD or the FIU within a defined timeframe upon request.

El Salvador has implemented the FATF Travel Rule for virtual asset transfers. Any transfer of $1,000 or more requires the originating VASP to transmit the following information to the beneficiary VASP:

• Originator data — full name, account number (wallet address), and either physical address, national ID number, date and place of birth, or customer identification number.
• Beneficiary data — full name and account number (wallet address).

The receiving VASP must screen the incoming data against sanctions lists and take risk-based action where a match is identified. Travel Rule compliance requires integration with a compliant Travel Rule solution (e.g., TRISA, OpenVASP, or a commercial provider) before processing cross-VASP transfers.

Suspicious Transaction Reports (STRs) must be filed with El Salvador’s FIU (Financial Investigation Unit — Unidad de Investigación Financiera) within 24 hours of the compliance team determining that a transaction or attempted transaction is suspicious. The 24-hour window runs from the point of determination, not from when the transaction was first identified as unusual. This is a strict deadline: late filing is itself a violation. STRs are filed confidentially; tipping off the subject of the report is prohibited.

El Salvador applies a risk-tiered approach to the appointment of a Money Laundering Reporting Officer (MLRO). The tier that applies to your entity depends on the nature and risk level of the activities covered by your CNAD registration.

Regardless of tier, the MLRO must:

• Hold a position of sufficient seniority — the MLRO must have the authority to refuse or halt transactions and to escalate to the board without obstruction.
• Be accessible to the FIU — able to receive and respond to information requests, including during STR investigations.
• Oversee annual AML/KYC training — all staff who handle customer onboarding, transactions, or compliance functions must complete documented AML/KYC training each calendar year. Training records are subject to inspection.
• Maintain and review the AML/KYC policy — the written policy must reflect current FATF standards and be updated whenever material regulatory changes occur.

CNAD and the FIU have enforcement authority over registered entities. The penalty framework is graduated based on severity and recurrence:

• Administrative fines — up to 1,200 monthly minimum wages in the commerce sector per violation for legal entities (approximately $490,000 at current rates). Fines can be cumulative where multiple breaches are identified in a single investigation cycle. Common triggers include late STR filing, incomplete CDD records, and failure to apply Travel Rule procedures.
• License suspension — CNAD may suspend a registration pending remediation where systemic compliance failures are identified. Suspension prevents the entity from conducting regulated activities until the deficiency is corrected and CNAD issues a reinstatement.
• License revocation — available for repeat violations or material breaches. Revoked entities are prohibited from re-applying for a defined period and are listed publicly.
• Criminal referral — serious violations (willful non-filing of STRs, deliberate falsification of CDD records, or active facilitation of money laundering) are referred to the Attorney General’s office for criminal prosecution under El Salvador’s AML law. Individuals, including the MLRO and senior management, face personal liability.

The practical implication: the 15-year record retention requirement and 24-hour STR deadline are the two areas where enforcement actions are most frequently triggered in comparable VASP jurisdictions. Building automated monitoring and a documented escalation workflow is the most effective way to stay within both requirements.

Your CNAD license must be renewed each year before the expiration date. The renewal fee is $3,650 per year. Submit the renewal application to CNAD in advance; late submissions risk a lapse in authorization, which requires a full re-application.

Beyond the annual renewal, licensed entities must meet a quarterly reporting cadence:

• Financial statements — audited profit-and-loss, balance sheet, and cash flow figures for each quarter, filed within 30 days of quarter close.
• Transaction volumes — aggregate counts and values broken down by asset type and service category (exchange, custody, transfer, etc.).
• Compliance incidents — any AML/CFT alerts triggered, suspicious transaction reports (STRs) filed, and remediation actions taken during the quarter.
• Annual external audit — all licensed entities must commission an independent external audit of financial records and compliance controls once per calendar year. The audit report must be submitted to CNAD as part of the renewal package.

CNAD may conduct unannounced inspections at any time. You must keep records in a format that can be produced immediately on request. Key operational requirements include:

• Inspection-ready records — transaction logs, KYC/KYB files, wallet addresses, counterparty data, and internal audit trails must be accessible and current at all times.
• Qualified compliance staff — at least one dedicated compliance officer with demonstrable AML/CFT expertise must remain on staff throughout the license term. Personnel changes require notification to CNAD (see License Modification below).
• Secure technology infrastructure — systems handling customer assets or data must meet minimum cybersecurity standards. Annual penetration testing by a qualified third party is required, with results made available to CNAD on request.
• Business continuity plan — a documented disaster recovery plan covering system outages, data loss scenarios, and key-person dependencies must be maintained and tested at least once per year.

Not every operational change requires a new license, but CNAD must be notified at least 30 days before any of the following:

• Changes to business activities — adding or removing a service category (e.g., expanding from exchange to custody services).
• Ownership changes — any transfer of shares or beneficial ownership exceeding the threshold specified in your license conditions.
• Key personnel changes — replacing the compliance officer, CEO, or other individuals named in the original application.

CNAD reviews modification requests before the change takes effect. Operating with unapproved modifications constitutes a breach of license conditions.

Surrendering the license requires a formal application to CNAD rather than simply ceasing operations. The surrender process involves a 90-day wind-down period during which the entity must:

• Notify all active clients in writing that services will be discontinued, giving them sufficient time to transfer assets or migrate to another provider.
• Close or transfer open positions and return customer funds in accordance with the terms agreed at account opening.
• Submit a final compliance report to CNAD covering the wind-down period, including any incidents or STRs filed during that time.
• Retain all transaction and KYC records for the minimum statutory retention period (15 years per current AML law) after the surrender is confirmed.

Entities that walk away without following the surrender process face regulatory sanctions that can affect the principals personally and bar them from future CNAD applications.