The Costa Rica Picture
Costa Rica suits operators who want a low-friction Latin American footprint with real institutional plumbing and territorial taxation. There is no crypto-specific licence. Crypto businesses operate as ordinary S.A. or S.R.L. companies under general commercial law, with AML/CFT obligations layered on through Law 7786 where the activity triggers SUGEF inscription as an APNFD.
The window for voluntary SUGEF APNFD inscription closes once Expediente 25.340’s reglamento publishes and mandatory registration opens; operators securing inscription now avoid the compliance queue and position entities for a clean transition to the VASP track, while those delaying face crowded infrastructure and delayed banking onboarding. This timing arbitrage is the real Costa Rica edge for non-EU operators who move first.
Three things give Costa Rica its edge. First, territorial taxation: only Costa Rica-source income is taxed, so foreign-source revenue from services performed outside the country is generally outside the tax base, subject to economic-substance tests reformed in 2023. Second, OECD membership since 2021, which carries real weight in correspondent-banking conversations that an unrated jurisdiction cannot match. Third, a USD-friendly, politically stable environment: the colón circulates alongside the dollar, a state bank launched a Bitcoin-exposure investment fund in early 2025, and US-aligned business hours suit operators serving North American markets. Costa Rica has neither a VASP licence nor a CASP authorisation, so the compliance burden is lighter than a full licensing regime, while still real.
Regulatory Framework
Crypto is legal in Costa Rica but is not legal tender. Cryptocurrencies are treated as virtual or intangible assets under a 2023 ruling of the tax authority (Dirección General de Tributación, DGT). No statute prohibits the activity, and the Banco Central de Costa Rica’s tolerancia vigilante position permits circulation and exchange of crypto for lawful purposes while maintaining that crypto cannot transit the national SINPE payments system.
What “SUGEF VASP registration” will mean
SUGEF VASP registration is an AML/CFT supervisory inscription with the Superintendencia General de Entidades Financieras under Acuerdo SUGEF 11-18 and, once in force, Article 15 quáter of Law 7786 as inserted by Expediente 25.340. The bill is explicit that the inscription no constituye una autorización para operar: it is registration as an obligated subject, not a licence to conduct crypto business. Tax treatment follows the DGT ruling: crypto held as a business activity attracts corporate income tax, and exchange, custody, and key-safekeeping services attract corporate income tax plus IVA at 13%.
How the Policy Evolved
Costa Rica’s crypto policy has been incremental rather than legislative. The Central Bank’s foundational 2017 comunicado and later technical notes established the tolerancia vigilante doctrine: circulation of crypto for lawful purposes is permitted because no law expressly prohibits it. Two earlier bills stalled, an Executive AML bill (Expediente 22.837) archived in December 2025 and a full MiCA-style market framework (23.415) that never advanced, before Expediente 25.340 was approved at second debate on 25 May 2026. The Liberty Reserve case, an early payment processor shut down by US authorities in 2013, remains the political backdrop; the new SUGEF mandate directly addresses the supervisory gap that case exposed. Around Law 7786, three other instruments matter: Law 9416 drives the annual RTBF beneficial-ownership filing (25% threshold), Law 9635 imposes 13% IVA on crypto services, and the OECD Crypto-Asset Reporting Framework is signed but not yet implemented domestically.
The Incoming SUGEF Regime
Costa Rica is mid-transition. Under the current regime, SUGEF inscription for crypto operators is voluntary where the activity falls within Article 15 or 15 bis of Law 7786. Once Expediente 25.340 takes effect, a new Article 15 quáter makes VASP inscription mandatory, with a three-month window for SUGEF to publish the implementing reglamento.
Under the new Article 15 quáter, obligated VASPs must implement AML/CFT controls, KYC and beneficial-ownership identification, sanctions screening, the FATF Travel Rule, and suspicious-transaction reporting. The regime captures the four core activities aligned with FATF Recommendation 15: exchanging virtual assets for legal-tender currencies, transferring virtual assets, custody and administration, and the issuance, offering or sale of virtual assets. Pure non-custodial wallet software, true peer-to-peer matching without custody, personal trading, and mining or validator infrastructure generally fall outside the inscription perimeter.
Key Milestones
| Milestone | Status |
|---|---|
| Second-debate approval | 25 May 2026 (bill text locked) |
| Executive sanction and Gaceta publication | Pending as of June 2026; starts the statutory clock |
| Reglamento publication | Within 3 months of Gaceta publication; defines inscription mechanics |
| First mandatory inscriptions | Reglamento date plus a transition window |
The practical implication is straightforward. Operators already in the market should complete voluntary APNFD inscription now where their activity arguably falls within Articles 15 or 15 bis. Inscription evidence eases banking onboarding and positions the entity for a clean conversion to the VASP track once the rules publish.
Structure & Requirements
Costa Rica imposes no fixed capital minimum, no general local-director requirement, and no formal substance test for crypto businesses as such. The binding requirements are the corporate-law minima for the chosen entity type, beneficial-ownership disclosure through RTBF, AML/CFT controls under Law 7786 where SUGEF inscription applies, and genuine substance where the operator intends to claim territorial-source treatment on foreign income.
| Requirement | Standard |
|---|---|
| Entity types permitted | Sociedad Anónima (S.A.) or Sociedad de Responsabilidad Limitada (S.R.L.) under the Código de Comercio |
| Minimum shareholders | S.A.: 2 at constitution; S.R.L.: 1 |
| Minimum directors / managers | S.A.: 3 officers plus a statutory auditor (comisario); S.R.L.: 1 gerente |
| Foreign ownership | 100% permitted |
| Resident agent | Mandatory if no director is domiciled in Costa Rica; must be a Costa Rican attorney with a local office |
| Registered office | Mandatory for service of process; physical premises not mandated |
| Minimum capital | No fixed minimum; nominal CRC 10,000–100,000 declared in practice |
| Beneficial ownership disclosure | RTBF annual declaration, 1–30 April; 25% threshold of capital or voting rights |
| AML/CFT inscription | Voluntary as APNFD today; mandatory as VASP under Article 15 quáter once 25.340 is in force |
| Firma Digital | Required for RTBF and most tax filings; available only to citizens and legal residents. Non-residents typically grant a power of attorney to a Costa Rican professional |
Set-Up, Timeline and the Real Bottlenecks
End-to-end set-up runs roughly 3 to 6 months. Incorporation is the fast part: the digital filing regime issues a numeric cédula jurídica within about a week. SUGEF inscription, where it applies, runs 4 to 8 weeks, and banking onboarding is the most variable element at 4 to 12 weeks. Operators with non-resident principals routinely lose a week or two arranging firma-digital powers of attorney, the most overlooked piece of the schedule; all filings are in Spanish, and document translations must be certified. The compliance documentation is where the real work sits, and SUGEF expects an AML programme genuinely tailored to the business model, referencing Law 7786 and Acuerdo SUGEF 11-18 rather than a template lifted from another jurisdiction. Generic policies trigger rework at inscription review and again at the bank.
Taxation
Costa Rica is a territorial-tax jurisdiction. Corporate income tax of 30% applies to Costa Rica-source profits, while income from sources outside the country is generally outside the tax base. For an operator serving non-Costa Rican customers, the effective rate on foreign-source revenue can be very low, provided the entity holds genuine economic substance to satisfy the 2023 reform.
| Tax | Rate | Crypto application |
|---|---|---|
| Corporate Income Tax | 30% standard; tiered scales for smaller companies | Local-source income only; foreign-source revenue outside the base, subject to substance |
| Capital Gains Tax (passive) | 15% | Personal crypto returns |
| Value-Added Tax (IVA) | 13% | Crypto exchange, custody, and key-safekeeping services |
| Withholding Tax | 15% | Dividends, interest and royalties to non-residents |
Costa Rica has not enacted domestic Pillar Two legislation, and the OECD global minimum tax applies only to multinational groups above EUR 750 million in consolidated revenue, a threshold unlikely to affect standalone operators. Costa Rica reports under the OECD Common Reporting Standard and has signed, but not yet implemented, the Crypto-Asset Reporting Framework; first crypto reporting is anticipated in 2027 or 2028.
Banking
Banking is a supporting consideration rather than the headline, but it is the stage that most often stalls a Costa Rica set-up. State banks and large private banks routinely decline crypto-business onboarding without SUGEF inscription evidence, institutional-grade AML documentation, and clean director KYC. Operators with all three in order can open accounts in 4 to 12 weeks; operators missing any can wait a long time.
The 2025 launch of a Bitcoin-exposure fund by a state bank signalled a degree of top-down acceptance of crypto as an asset class, and the conversation has shifted even if operating-account onboarding has not eased uniformly. In practice, many operators pair an onshore colón-denominated reserve account for tax and supplier payments with a licensed EU electronic money institution for day-to-day operating cash. The common mistake is sequencing banking after SUGEF inscription rather than running the two in parallel: the KYC packs overlap heavily, and running them concurrently can take weeks off the critical path.
FATF Status & International Standing
Costa Rica is not on the FATF grey or black list as of February 2026. It is a member of GAFILAT, the regional FATF-style body, and was placed in enhanced follow-up after its 2015 mutual evaluation. The 2023 follow-up report re-rated Costa Rica’s Recommendation 15 (new technologies and virtual assets) from Compliant to Non-Compliant, flagging the absence of a VASP framework. That re-rating is the direct policy driver behind Expediente 25.340. The next material milestone is the GAFILAT fifth-round mutual evaluation, anticipated post-2026, and the reform is timed to close the Recommendation 15 gap before it begins.
EU Market Access
A Costa Rica entity has no EU passporting rights, and MiCA contains no third-country equivalence regime. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative, for the specific service requested. ESMA’s guidelines, applicable from April 2025, interpret this restrictively: EU-targeted marketing, EU-language website content, geo-targeted advertising, app-store availability in EU stores, or use of EU-based influencers all void the exemption. It is designed for isolated contacts, not systematic EU market access. For detail, see Reverse Solicitation Under MiCA →.
Advantages and Limitations
Costa Rica offers low regulatory friction, territorial taxation, and OECD-member institutional credibility, set against banking caution, no EU passporting, and the political backdrop of the Liberty Reserve case. The trade-off is workable for operators serving non-EU markets and less workable for those whose core market is European.
- No crypto-specific licence required as of June 2026, giving the lowest regulatory friction of any sizeable Latin American jurisdiction.
- Territorial taxation can produce a very low effective rate on foreign-source crypto revenue, subject to the 2023 economic-substance reform.
- OECD membership and a USD-friendly economy carry weight in correspondent-banking conversations.
- A US-aligned time zone suits operators serving North American markets.
- × No EU passporting and no third-country equivalence under MiCA. Operators targeting EU clients should obtain a CASP authorisation in an EU member state, or rely only on the narrow reverse-solicitation exemption under MiCA Article 61 for isolated, genuinely unsolicited contacts.
- × Banking onboarding is the practical bottleneck. Run SUGEF inscription, EMI onboarding, and local bank applications in parallel; institutional-grade AML documentation is a precondition for serious bank consideration.
- × The Liberty Reserve legacy persists in correspondent-banking diligence. Real substance, clean directors, and inscription evidence neutralise it; pure shell structures amplify it.
- × The Expediente 25.340 regime is pending. Voluntary inscription now positions the entity for a clean conversion to the VASP track once the rules publish.
How Costa Rica Compares
Costa Rica sits in the Central America peer group alongside Panama, El Salvador and the Caribbean light-touch tier represented by Saint Lucia. Cyprus provides the EU cross-tier reference: a MiCA CASP authorisation with full 30-state passporting. Each plays a different role in the decision.
| Factor | Costa Rica | Panama | El Salvador | Saint Lucia | Cyprus (EU ref.) |
|---|---|---|---|---|---|
| Licence Type | No licence; SUGEF VASP AML registration pending (Exp. 25.340) | No licence; Bills 247/326 pending | DASP licence under LEAD 2023 + BTCSP under Bitcoin Law | Virtual Asset Business Licence (VABA) | MiCA CASP authorisation |
| Regulator | SUGEF (AML) / BCCR (monetary) | SBP (banking) / Asamblea | CNAD (Comisión Nacional de Activos Digitales) | FSRA | CySEC |
| Timeline | 3–6 months | 4–8 weeks (corp); banking variable | 3–6 months | 3–4 months | 6–12 months |
| Min. Capital | No fixed minimum | Nominal | USD 2,000 | USD 50,000 | EUR 50,000–150,000 |
| Corporate Tax | 30% local; 0% effective foreign-source (territorial) | 25% local; territorial | 0% on digital-asset activities for DASP licensees; 30% otherwise | 30% (territorial) | 12.5% standard CIT |
| Local Presence | Resident agent if no local director | Resident agent | Local compliance officer mandatory | Registered agent | Substantive local presence |
| EU Passporting | No | No | No | No | Yes (30 EEA states) |
| FATF Status | Not listed; R.15 Non-Compliant 2023 follow-up | Not listed (removed from EU AML list July 2025) | Not listed | Not listed | Not listed |
| Best For | Non-EU operators, territorial tax, low friction | LatAm operators, USD environment, larger banking | Bitcoin-positioned brand, 0% on DASP activities | Caribbean light-touch, speed priority | Operators needing full EU market access |
Within Central America, Costa Rica and Panama are the two remaining jurisdictions with no operative crypto licence. Costa Rica’s OECD membership and territorial-tax mechanics make it the credibility-weighted choice; Panama’s larger banking sector makes it the operational-depth choice. Against El Salvador, the trade-off is brand versus tax mechanics. Costa Rica wins on regulatory simplicity for operators whose revenue is genuinely foreign-source.
When Costa Rica Fits, and When It Does Not
Costa Rica fits when your customer base is primarily outside the European Union and outside Costa Rica, you value OECD-member credibility over a licence-as-brand signal, you want a low-friction set-up with real territorial-tax mechanics, and you can accept several weeks of banking onboarding as a known cost.
Look elsewhere if you need systematic EU market access, where a MiCA CASP authorisation in Cyprus, Lithuania, or Malta is the right home; if you want a Bitcoin-native brand, where El Salvador leads; or if you prioritise banking depth, where Panama has the edge. The first three of those are jurisdictions we deliver in ourselves.
Frequently Asked Questions
Is crypto legal in Costa Rica?
Yes. Crypto is legal in Costa Rica but is not legal tender; only the Costa Rican colón has legal-tender status under Law 7558. Cryptocurrencies are treated as virtual or intangible assets under a 2023 ruling of the tax authority. The Central Bank position, articulated in 2017 and confirmed since, is tolerancia vigilante: circulation and exchange of crypto for lawful purposes are permitted because no law expressly prohibits them, but crypto cannot transit the SINPE national payments system.
Does Costa Rica have a crypto licence?
No. As of June 2026, Costa Rica issues no crypto-specific licence. Crypto operators incorporate an ordinary Sociedad Anónima or Sociedad de Responsabilidad Limitada and apply Law 7786 AML/CFT obligations where the activity falls within Articles 15 or 15 bis. On 25 May 2026 the Asamblea Legislativa approved Expediente 25.340 in second debate, introducing mandatory SUGEF VASP AML registration once the implementing reglamento publishes. That registration is not an authorisation to operate.
What is the tax on crypto in Costa Rica?
Costa Rica is a territorial-tax jurisdiction. Corporate income tax is 30% on Costa Rica-source profits, with tiered scales for smaller companies. Foreign-source crypto revenue is generally outside the tax base, subject to the 2023 economic-substance reform for passive foreign-source income. Crypto-related services are subject to IVA at 13%, and personal crypto returns fall under the 15% capital-income and capital-gains regime.
Can a Costa Rica crypto company open a bank account?
Yes, with prerequisites. State banks and large private banks routinely require SUGEF inscription evidence, institutional-grade AML documentation, and director KYC before considering crypto-business onboarding. Operators commonly combine an onshore colón-denominated reserve account with a licensed EU electronic money institution for operating cash. The 2025 launch of a Bitcoin-exposure investment fund by a state bank has eased the institutional conversation.
Can a Costa Rica crypto firm serve EU clients?
Not on a systematic basis. A Costa Rica registration does not grant EU market access or passporting rights, and MiCA contains no third-country equivalence regime. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative for the specific service requested. ESMA interprets this restrictively: EU-targeted marketing, EU-language website content, geo-targeted advertising, app-store availability, or EU-based influencer reach all void the exemption. Operators seeking systematic EU market access should obtain a CASP authorisation in an EU member state. See Reverse Solicitation Under MiCA for detail.
Is Costa Rica on the FATF grey list?
No. Costa Rica is not on the FATF grey list or black list as of February 2026. It is a GAFILAT member and was placed in enhanced follow-up after its 2015 mutual evaluation. The 2023 follow-up report re-rated Costa Rica’s Recommendation 15 (virtual assets) from Compliant to Non-Compliant, flagging the absence of a VASP framework. That was the direct policy driver behind Expediente 25.340, and the fifth-round mutual evaluation is anticipated post-2026.
Does Tomberg & Partners set up crypto businesses in Costa Rica?
We handle crypto structuring and compliance in Costa Rica, and we deliver crypto licensing in the jurisdictions we serve, including Lithuania, Cyprus, Gibraltar, Malta, Poland and Switzerland, through a controlled network of vetted in-country specialists we work with directly. If you are weighing Costa Rica against one of those, book a free consultation and we will give you a straight answer on where your business is best placed.
Deciding Where to Set Up?
We will tell you honestly whether Costa Rica fits, what the trade-offs are, and where we can take the work end to end. We deliver crypto licensing in the jurisdictions we serve, and we stand behind the outcome.
Banking & Payments
A company and a licence still need a bank account
Banking is one of our three core services. We help high-risk and regulated businesses open the bank and payment accounts that others refuse: we work directly with EU EMIs, payment institutions and crypto-aware banks, confirm appetite before you apply, and make the introduction. Take it with your company and licence, or on its own.
Related Pages
- Costa Rica Company Formation: S.A. and S.R.L. structures under the Código de Comercio
- Crypto Licensing Overview: the jurisdictions we deliver in
- Reverse Solicitation Under MiCA: the limits on serving EU clients from outside the EU
- Solutions for Crypto Exchanges: set-up for centralised and decentralised exchanges