Launch a compliant crypto business in El Salvador with RUE. We advise on BSP and DASP licensing, CNAD-facing documentation, AML setup, and banking readiness.
Preparado por el equipo editorial de RUE · Revisado por Milana · Actualizado 30 septiembre 2026
Schedule Free ConsultationEl Salvador remains one of the few jurisdictions where crypto licensing is built around dedicated digital asset legislation rather than fragmented legacy rules. RUE helps founders determine whether they need a BSP registration, a DASP authorization, or a deeper perimeter analysis before launch.
"Como su punto de contacto, le ayudo a coordinar el proceso de licencia de principio a fin, mantener una comunicación clara y hacer avanzar su solicitud sin retrasos innecesarios."
RUE provides end-to-end support for crypto license projects in El Salvador: business-model scoping, company formation, compliance pack drafting, regulator-facing submissions, and post-license readiness.
We separate statutory requirements from market practice, structure AML/KYC/KYT controls around your real operating model, and help align licensing with banking, accounting, and cross-border expansion.
El Salvador built a specific legal regime around Bitcoin and digital assets, with **CNAD** as a named sector regulator rather than relying only on general financial law.
The jurisdiction distinguishes **Bitcoin Service Providers** from broader **Digital Asset Service Providers**, which is useful when structuring BTC-only versus multi-asset models.
El Salvador is often used for international crypto operations, but the license must still be mapped against target-country rules on solicitation, custody, payments, and securities.
The jurisdiction can be attractive where the activity falls within the statutory digital asset scope, but founders still need clean accounting segregation, AML controls, and banking strategy.
Obtaining a crypto license in El Salvador requires more than filing a company and submitting a short business description. In practice, the regulator expects a coherent operating model: legal entity, ownership transparency, AML governance, technical controls, and a documented explanation of how client assets, onboarding, transaction monitoring, and incident handling will work.
The exact package depends on whether your model falls under a BSP regime, a DASP regime, or a hybrid structure that touches both Bitcoin-specific and broader digital asset activities. The strongest applications show not only formal compliance, but also operational credibility: who manages risk, how client funds are segregated, what happens during a security incident, and how suspicious activity is escalated to the relevant authority.
You typically need an El Salvador company or another structure acceptable for local registration and licensing workflow, together with a registered address, constitutional documents, tax registration, and a clear ownership chain. Founders should expect disclosure of shareholders, directors, and ultimate beneficial owners (UBOs). If the ownership structure includes foreign holding companies, supporting corporate documents, legalization, apostilles, and Spanish translations often become timeline drivers.
In many projects, founders use a local operating company while keeping IP, treasury, or group governance at holding level. That can work, but only if intercompany functions, outsourcing, and decision-making are documented properly.
Market practice often uses an authorized capital benchmark of around USD 2,000 for the local company setup, but founders should not confuse company capital mechanics with full launch funding. The regulator and banks will care far more about whether the business has enough real runway to operate safely.
A serious application usually includes a funding memo, bank evidence, and a 12-month operating budget showing salaries, vendors, compliance tools, and security costs.
Founders, directors, and key control persons should be able to demonstrate professional credibility, clean background, and a logical connection to the proposed business. Expect requests for:
One practical point many founders underestimate: if the named director cannot explain the product, custody model, onboarding flow, or sanctions controls, the file looks weak even if the paperwork is formally complete.
Your AML/CFT framework must be tailored to the actual business model. A generic policy is usually the fastest route to regulator questions and banking friction. At minimum, the compliance stack should cover:
For transfer, exchange, custody, and remittance-like models, founders should also plan for Travel Rule implementation through internal workflows or interoperability tools such as TRISA/OpenVASP-type solutions.
The regulator does not review only legal text; it reviews whether the business can operate safely. For custody or wallet models, you should document:
ISO 27001 or SOC 2 are not statutory prerequisites, but they materially improve credibility with regulators, banks, institutional clients, and auditors.
The business plan should explain the product, customer journey, target markets, revenue logic, compliance controls, outsourcing, and risk management. A strong file usually includes:
One useful differentiator is a winding-down plan. It shows how client assets, records, and open positions would be handled if the business had to stop operations in an orderly way.
There is no universal one-line rule that every crypto company must maintain a large physical office in El Salvador, but a pure letterbox setup is usually a weak position. Higher-risk models such as exchange, custody, or remittance-like services should expect stronger scrutiny around local substance, responsible persons, and real management oversight.
In practice, founders often need:
The more your model touches fiat rails, custody, or retail onboarding, the more important local operational credibility becomes.
A license does not guarantee a bank account. Banking is usually the real bottleneck after approval. Founders should prepare a separate onboarding pack for banks or EMIs covering:
Software-only or analytics businesses typically face less friction than custodial exchanges, OTC desks, or remittance-heavy models with retail fiat flows.
Compare El Salvador con otras jurisdicciones por regulador, actividades permitidas, plazo de revisión, tasas, capital, sustancia local y permisos transfronterizos. La autorización MiCA/CASP pertenece al marco de la UE; una licencia local en El Salvador no proporciona pasaporte de la UE.
6 jurisdicciones en esta tabla
* Esta tabla se centra en las condiciones de autorización MiCA/CASP. Utilice el icono de configuración para personalizar países y parámetros.
The tax position of a licensed crypto business in El Salvador should be analyzed by activity type, not by slogan. The most common market oversimplification is to say that El Salvador offers “0% tax” for crypto across the board. That is too broad. The more accurate approach is to distinguish between income that falls within the statutory digital asset framework and income that remains subject to ordinary tax rules.
For digital asset licensing, online sources often show different USD numbers because they convert the statutory fee formula into dollars using different wage benchmarks or outdated assumptions. The cleaner way to read the rule is as a formula:
That means the exact USD amount can change if the official benchmark changes. Founders should therefore verify the current wage reference and regulator practice at the time of filing rather than relying on recycled figures from old articles.
The Digital Assets Issuance Law (LEAD) is commonly cited for tax benefits linked to qualifying digital asset activity. However, tax treatment still depends on how the revenue is characterized, where it is sourced, and whether it clearly falls inside the protected statutory scope. A licensed company may still have taxable streams such as consulting income, unrelated fiat services, local payroll obligations, or non-qualifying service revenue.
The government fee is only one line item. In practice, founders should budget separately for company formation, notarization, apostilles, sworn translations, legal drafting, AML manuals, cybersecurity policies, local corporate maintenance, accounting, and banking onboarding. For many projects, these soft costs exceed the statutory fee several times over.
A crypto license in El Salvador is not a one-time filing event. Licensed businesses must maintain real AML, governance, security, and reporting controls after approval.
A crypto license in El Salvador usually means one of two regulatory tracks: a BSP route for Bitcoin-focused services and a DASP route for broader digital asset services under the modern digital assets framework. In practice, the key question is not what you call the business, but what functions it performs: exchange, custody, transfer, issuance support, placement, or operation of a digital asset platform.
The legal architecture most founders need to understand is this:
In real projects, the end-to-end timeline is usually 3-6 months, not “20 business days from zero to license.” The often-cited ~20 business days refers only to a regulator review stage after a complete submission. It does not include company formation, translations, compliance drafting, clarifications, or banking.
RUE advises founders on the full path: scope analysis, local entity setup, AML/KYC/KYT framework, filing package, and post-license readiness. For businesses comparing jurisdictions, see also our broader crypto license 2026 overview and crypto regulations hub.
Yes, but the phrase “crypto-friendly” needs qualification in 2026. El Salvador remains strategically important because it still combines a pro-digital-assets policy stance with dedicated legislation and a visible regulator. What changed is that founders can no longer rely on the simplified 2021 narrative alone.
The correct way to read the jurisdiction after the 2025 reform cycle is to separate three layers:
That distinction matters. A founder may like El Salvador’s public positioning, but approval still depends on ordinary regulatory fundamentals: ownership transparency, credible governance, sanctions controls, and a defensible product perimeter. This is also why older statements such as “all merchants must accept Bitcoin” should not be repeated without reform context in 2026.
Responda unas preguntas rápidas para saber si esta jurisdicción se adapta a su negocio de criptomonedas
Según sus respuestas, esta jurisdicción se ajusta bien a los requisitos de su negocio. Resumen rápido:
Autorización recomendada
Registro como proveedor de servicios de Bitcoin y/o autorización de la CNAD como proveedor de servicios de activos digitales, según las actividades.
Presupuesto estimado
€24.000 – €35.000
Plazo estimado
4–6 meses
Pasaporte de la UE
No disponible con esta autorización local. El acceso al mercado de la UE requiere una evaluación separada conforme a MiCA.
We first determine whether your model falls under BSP, DASP, both, or a grey-zone perimeter analysis. This stage maps services, token flows, custody, target markets, and banking dependencies. Typical duration: 1-2 weeks.
We incorporate the El Salvador entity, prepare constitutional documents, register the company, and coordinate tax and corporate formalities. Apostilles, translations, and foreign shareholder documents usually drive timing. Typical duration: 2-6 weeks.
We prepare the AML/CFT manual, risk assessment, KYC/KYT workflow, sanctions controls, governance documents, cybersecurity policy, client disclosures, and 3-year business plan. Typical duration: 2-6 weeks.
We submit the licensing package to the relevant authority and ensure the file is internally consistent. A complete first filing materially improves review speed and reduces clarification rounds. Typical duration: 1 week.
The regulator reviews the file and may issue questions or clarification requests. The often-cited review period of about 20 business days should be understood as a review-stage estimate after complete submission, not the total project timeline.
After approval, the company proceeds with final registry status, internal implementation, and operational go-live preparation. Any conditions attached to approval must be satisfied before full launch.
We support bank or EMI onboarding, accounting setup, customer onboarding controls, and post-license compliance calendar. Banking often takes 4-8 weeks or longer depending on risk profile and fiat exposure.
Consulte las cuestiones clave que fundadores, equipos de cumplimiento y responsables jurídicos suelen necesitar confirmar antes del lanzamiento.
Yes, foreign founders can obtain a crypto license in El Salvador, but usually through a local legal entity and a documented local compliance structure. In practice, the regulator and banks will expect transparency on ownership, source of funds, governance, and who is responsible for AML and day-to-day control.
Foreign ownership is workable, but fully remote “paper-only” setups are usually weaker than structures with real operational substance, clear local representation, and properly legalized corporate documents.
The cost has two layers: statutory fees and the full project budget. The statutory fee is commonly expressed as 15 × the applicable monthly minimum wage, with annual renewal commonly expressed as 10 × the applicable monthly minimum wage. Because websites convert that formula into USD differently, published numbers often conflict.
The real launch budget usually starts from around USD 18,000+ for simpler cases and can rise to USD 40,000-60,000+ for custody, exchange, or tokenization projects once legal, compliance, translations, and banking work are included.
A realistic end-to-end timeline is usually 3-6 months. The commonly mentioned ~20 business days refers only to a regulator review stage after a complete filing. It does not include company formation, document legalization, compliance drafting, or banking.
Best-case projects with simple structure and fast document collection can move faster. Delayed cases can take 6+ months, especially where ownership is complex or the business model is hybrid.
Often yes in practice, especially for higher-risk models, although the exact local-presence expectation depends on the business profile. Exchange, custody, payment, and remittance-like activity usually require stronger compliance ownership and more visible local substance than software-only models.
At minimum, the company should have a clearly identified person responsible for AML/CFT controls, suspicious activity escalation, and regulator-facing compliance communication.
Yes, but only subject to the laws of each target market. An El Salvador license does not automatically authorize you to market or provide services in the EU, UAE, UK, US, or other jurisdictions. Cross-border rules on solicitation, custody, securities, payments, and consumer protection may still apply.
This is why RUE usually combines local licensing analysis with a target-market review before launch.
BSP is generally the Bitcoin-focused route, while DASP covers broader digital asset services. BSP is usually relevant for BTC payments, BTC custody, BTC exchange, and Bitcoin transfer activity. DASP is generally relevant for multi-asset exchange, custody, token issuance support, transfer services, and platform operation under the digital assets framework.
Hybrid businesses may need both regimes analyzed together rather than choosing one label by intuition.
Yes, but the answer is more nuanced than in 2021. El Salvador remains a notable jurisdiction because it combines a public digital-assets policy stance with dedicated legislation and a named regulator. However, founders should distinguish the political Bitcoin narrative from the actual licensing, AML, and banking realities in 2026.
A jurisdiction can be crypto-friendly and still require serious compliance. Those two things are not contradictory.
Not always. Pure non-custodial software, analytics, or infrastructure may fall outside the licensing perimeter if the provider does not control client assets, execute transfers, or intermediate transactions. However, labels are not decisive.
If the platform has admin control, embedded swap execution, fee capture linked to regulated activity, or practical control over value transfer, a deeper legal analysis is required.
No, a license does not guarantee banking. Banks and EMIs apply their own risk appetite, onboarding standards, and source-of-funds review. A license improves credibility, but it does not remove concerns around custody, fiat rails, sanctions exposure, or high-risk geographies.
For many projects, banking strategy should be planned in parallel with licensing rather than after approval.
The most common causes are incomplete filings, weak compliance packs, and unclear business scope. Delays also arise from missing apostilles, inconsistent ownership charts, vague token descriptions, poor source-of-funds evidence, and unrealistic financial projections.
Another common issue is filing before the founders have decided who controls custody, who handles AML, and which countries they actually want to serve. Those questions should be answered before submission, not during regulator Q&A.
