title: Peru Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/peru/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Peru PE schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 75 sourced findings · 131 sources in the cumulative register 14 Modules baseline.modules[] 75 Findings modules[].findings[] 32 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) ## Jurisdiction brief ###### Latest update · 12 October 2026 #### Lead Signal The Banco Central de Reserva del Perú approved new rules governing firms that receive and later settle merchant proceeds from card, QR, and immediate-payment acceptance, covering fund-handling conditions, commissions, contracts and interoperability, with an effective date from 2027. This is a deliberate broadening of the central bank's conduct and fund-safeguarding reach into payment-acceptance and aggregator firms, firms that sit downstream of pure interoperability mandates and closer to merchant-facing settlement practice. #### Other Developments **Interoperability obligations extend to alias- and QR-based immediate payments regardless of underlying infrastructure.** Immediate-payment acceptance operations using alias or QR codes must comply with the BCRP's pre-existing interoperability rules, a requirement that applies independent of which technical infrastructure underpins the payment. This sits alongside, rather than replaces, the BCRP's phased interoperability strategy under Circular N.° 0024-2022-BCRP, which by April 2025 had already produced over 176 million interoperable transactions worth approximately S/11,000 million. #### Cross-Monitor Connections The new merchant-fund-handling rules reach payment-acceptance and aggregator firms that, in some cases, service the same gambling-sector merchants now subject to the SBS's extended SPLAFT anti-money-laundering obligations under Resolución SBS N.° 01015-2026 (effective 8 April 2026), a development financial-integrity is tracking separately. Both the BCRP's new conduct rules and the SBS's AML extension point to Peru's financial regulators broadening oversight of non-bank payment and gambling-adjacent intermediaries within the same period, even though the two instruments originate from different regulators acting under different statutory powers. #### Outlook The full text of the BCRP's new merchant-fund-handling circular was not independently retrieved this cycle, so confidence in its precise scope is capped at Probable pending direct verification; this is the principal near-term research gap. With an effective date of 2027, payment-acceptance and aggregator firms operating in Peru have a multi-year runway to adapt fund-handling, commissions, contracts and interoperability practices ahead of the rule's commencement, and the period between now and then is the window in which implementation detail should surface through BCRP guidance or circular text. _7 earlier updates not shown here._ ###### Standing brief · as of 5 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Peru's payments-regulatory architecture has undergone its most consequential restructuring in over a decade with BCRP Circular No. 0022-2025-BCRP, the new General Regulations for the National Payments System, in force from 1 April 2026 and replacing the 2010-era Circular 012-2010-BCRP under Payments Law 29440 as amended by Legislative Decree 1665. The circular's new PSP taxonomy recognises four established categories -- multi-operation companies, e-money issuers, Banco de la Nacion, and money-transfer companies -- and adds a fifth, the Entidad de Servicios de Pago (ESP), a non-SBS-supervised tier built for fintechs, with registration for ordinary payment agreements sitting alongside the prior BCRP-authorisation track for prominent payment systems. The liberalisation of market access is paired with tightened obligations: PSPs under the new regime must implement transaction controls, retain records for five years, promptly inform clients, and communicate transfer completion, with non-compliance risking fines up to 20 UIT and suspension or revocation. Cybersecurity provisions that had previously applied only to banks and SBS-supervised entities are extended under the same circular to ESPs and other payment-system participants. In parallel, SBS has twice amended its conduct and infractions regime this cycle -- Resolucion SBS N. 01689-2025 and Resolucion SBS N. 01029-2026 -- with the latter adding new very-grave infractions tied specifically to cybersecurity failings across financial, insurance, pensions, market-conduct and risk-management systems. The combined effect is a regulator opening the door to non-bank payment innovation while raising the compliance floor for everyone already inside the perimeter, a liberalising-but-tightening posture that recurs across this cycle's Peru findings. #### Other Developments Beyond the headline payments-system overhaul, the US-Peru remittance corridor recorded a historic USD 5,368 million in inbound flows during 2025, 56% originating from the United States and equivalent to 1.6% of GDP, with BCRP's June 2026 Inflation Report revising its 2026 and 2027 projections upward to USD 5,515 million and USD 5,735 million respectively. Law No. 32211 has exempted remittances sent via money-transfer companies from IGV and empowered Banco de la Nacion to offer accounts and loans to Peruvians residing abroad, while the four operating EEDEs have held direct access to the CCE's clearing and settlement services and BCRP's RTGS system since June 2023. Adding a further structural layer, the US Federal Reserve approved Banco de Credito del Peru's application to open a Miami branch, intended to enable faster, cheaper direct account-to-account transfers between BCP US and BCP Peru with fewer intermediaries -- deepening correspondent access alongside BCRP's existing list of approved first-category foreign banks. Enforcement activity against major banks intensified markedly. INDECOPI issued three distinct sanctions within the trailing window: against Interbank for failing to prevent continued card fraud after a client blocked their card (S/6,145.82 plus USD 45.95 refunded, with a four-year listing on the Register of Infractions and Sanctions), against Banco de Credito del Peru for inadequate ATM fraud controls following a card-retention incident (a 4-UIT fine upheld on second instance), and against Interbank again for issuing and activating a credit card without customer authorisation (3.49 UIT). Separately, INDECOPI recorded more than twenty thousand complaint reports against banking and financial services between 16 March and 24 July, with BCP, Interbank, BBVA, Banco Falabella and Scotiabank among the most-reported entities. On liability, SBS's rule requiring banks to assume responsibility for unrecognised card transactions absent proof of user fault has now been extended, for a second time, to cards issued before July 2025, with the deadline pushed to 1 June 2026. On product innovation, SBS published an Open Finance Roadmap in February 2026 anticipating the first data exchange under Open Finance by late 2027, while BCRP's TAPP payment-initiation infrastructure -- opening space for fintechs, bigtechs and telcos -- is targeted for a December 2026 launch. Digitalisation is accelerating alongside this: per-capita digital payments rose 45.8% between 2024 and 2025 to 665 annual payments per inhabitant, and interoperable Yape-Plin wallet transactions reached 132 million between June 2024 and June 2025. On digital money, Peru retains no comprehensive stablecoin or cryptoasset statute; Supreme Decree 006-2023-JUS requires VASPs to run AML programmes reporting to UIF-Peru, and BCRP's BiPay/Bitel CBDC-style pilot continues to scale, though the specific user and transaction figures obtained this cycle may already be stale against more recent independent reporting. On industry structure, Credicorp's Krealo continued fintech consolidation and investment activity, including the Culqi integration and stakes in paytech Akua and Colombian health-fintech Welli. #### Cross-Monitor Connections This cycle's AML/CFT developments carry direct relevance for the Financial Integrity Monitor. Supreme Decree No 008-2025-JUS, effective 14 May 2025, added private-offering investment-fund managers not supervised by SMV and factoring companies outside Ley 26702's scope as new UIF-obligated subjects, widening Peru's obligated-subject perimeter. A GAFI-aligned travel-rule obligation for virtual-asset service providers is also phasing in, though an automated verification challenge run this cycle flagged a likely source-misattribution: the operative instrument may be SBS Resolution 02648-2024 (August 2024) rather than the cited 'SBS Resolution No. 2024', and the effective date may fall in August 2026 rather than the November 2026 date carried in this cycle's findings. This caveat is carried at Assessed confidence pending primary-source confirmation and is flagged for deeper illicit-finance-specific analysis. Peru's AML institutional architecture otherwise rests on UIF-Peru, incorporated into SBS since 2007, operating under periodic GAFILAT mutual evaluation and tracking FATF high-risk jurisdiction listings as part of obligated subjects' ongoing due-diligence responsibilities. No independent illicit-finance-use conclusions are drawn here; the material is carried as a cross-reference only. #### Outlook The near-term regulatory calendar is dense. The PSP taxonomy's phased adaptation deadlines run through the end of 2026, the VASP travel-rule obligation is slated to bite from around November 2026 (subject to the confirmation caveat above), BCRP's TAPP payment-initiation infrastructure is targeted for a December 2026 launch, and SBS's Open Finance Roadmap points toward a first data exchange by late 2027. A draft expansion of the SBS regulatory sandbox to non-licensed fintech entities remains pending, with no confirmed effective date available this cycle. Taken together, Peru's trajectory over the next twelve to eighteen months is one of simultaneous market-access widening -- through the ESP tier, the sandbox, Open Finance and TAPP -- and compliance-floor raising, through cybersecurity infractions, extended bank liability for card fraud, and a strengthening consumer-complaints enforcement posture from INDECOPI. The US-Peru remittance corridor and the BCP Miami branch point to a parallel deepening of cross-border settlement infrastructure that will bear watching as a bellwether for correspondent-access dynamics elsewhere in the region. trust tier: ai_unverified ###### Latest update · 6 October 2026 #### Regulatory Status Peru's payments regulatory environment moved on multiple fronts this cycle. BCRP Circular No. 0017-2026-BCRP, regulating the Alias-Based Instant Payments Service and mandating interoperability for all Regulated Entities providing that service, entered into force on 13 September 2026. SBS's Open Finance programme progressed from a February 2026 roadmap through a diagnostic phase concluded on 6 July 2026 to a first regulatory proposal block published thereafter, though that proposal remains unverified as adopted. The BCRP's instant-payments platform, TAPP, is targeted to reach a Phase 3 controlled-deployment pilot in December 2026. Separately, the Travel Rule chapter of Peru's virtual-asset AML/CTF framework, previously due to commence in August 2026, has been postponed to 1 January 2029. #### Outlook Key items to track across subsequent cycles are the progression of the Open Finance regulatory proposal toward adoption, the TAPP Phase 3 pilot expected in December 2026, and practical compliance with the now-binding alias-based instant payments interoperability mandate. _3 earlier updates not shown here._ ###### Standing brief · as of 5 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Peru's payments-regulatory environment this cycle is best characterised as simultaneously liberalising market access and tightening conduct, resilience and enforcement obligations. BCRP Circular No. 0022-2025-BCRP, in force from 1 April 2026, replaces the 2010-era National Payment System regulation and introduces a new non-SBS-supervised Entidad de Servicios de Pago (ESP) tier for payment fintechs, while simultaneously extending cybersecurity obligations and conduct requirements to that same newly-recognised tier. SBS has separately tightened its own conduct and infractions regime twice within the cycle (Resolucion SBS N. 01689-2025 and Resolucion SBS N. 01029-2026), the latter adding cybersecurity-specific very-grave infractions across the financial sector. Enforcement intensity against major banks has risen visibly, with three distinct INDECOPI sanctions issued against Interbank and Banco de Credito del Peru for card-fraud and unauthorised-issuance failures, alongside more than twenty thousand consumer complaint reports logged against banking and financial services in a roughly four-month window. SBS's bank-liability rule for unrecognised card-fraud transactions has now fully phased in, following a twice-extended deadline to 1 June 2026. Structurally, the US-Peru remittance corridor reached a record USD 5,368 million in 2025, reinforced by an IGV exemption under Law No. 32211, EEDE access to CCE/RTGS settlement rails since 2023, and the US Federal Reserve's 2026 approval of a Miami branch for Banco de Credito del Peru. Product-development initiatives -- BCRP's TAPP payment-initiation infrastructure (targeted December 2026) and SBS's Open Finance Roadmap (first exchange targeted late 2027) -- point toward a further widening of market access ahead. No comprehensive stablecoin or cryptoasset statute exists; VASP oversight rests on AML-specific obligations under Supreme Decree 006-2023-JUS, with a travel-rule effective date still requiring verification. #### Outlook Peru's regulatory trajectory over the next twelve to eighteen months is likely to be defined by the practical implementation of the new PSP/ESP taxonomy and its accompanying cybersecurity and conduct obligations, continued INDECOPI enforcement pressure on banks' fraud-prevention controls, and the build-out of Open Finance and TAPP infrastructure that would open the market to fintechs, bigtechs and telcos beyond the current bank/EEDE structure. The US-Peru remittance and correspondent-banking corridor is deepening in parallel and merits continued monitoring as a structural bellwether. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-07-04 BCRP has newly asserted itself as regulator, supervisor and articulator of the national payments industry via the General Regulation of the National Payments System (Circular N° 0022-2025-BCRP, in force 1 April 2026), replacing 2010-era rules and requiring certain payment-industry actors to obtain BCRP authorisation to operate. Horizon · 2026-Q4 (±quarter) PSP taxonomy phased adaptation deadlines complete_in_force_pending · TT2_ Standing sub-brief · as of 5 July 2026 377 words · last cycle 2026-09-28 #### Licensing, Authorisation & Market Access Peru's e-money licensing architecture rests on Ley 29985 (Ley del Dinero Electronico), which reserves e-money issuance to SBS-supervised Empresas Emisoras de Dinero Electronico (EEDE) and multi-operation banks under Ley 26702 art.16-A/17.6, establishing EEDE as a dedicated non-bank licence category with its own minimum capital requirement. The operative implementing regulation is SBS Resolution No. 6284-2013, alongside sandbox regulation SBS Resolution No. 2429-2021 for novel business models. SBS continues actively authorising new EEDEs -- BiPay is the latest addition -- alongside incumbents Tarjetas Peruanas Prepago (Ligo/LigoPay, roughly 45% revenue share), Peruana Soluciones, Servitebca and GMoney, evidencing an active licensing pipeline under the existing regime. The defining development of this cycle is BCRP Circular No. 0022-2025-BCRP, the new General Regulations for the National Payments System, in force from 1 April 2026 and replacing the 2010-era Circular 012-2010-BCRP under Payments Law 29440 as amended by Legislative Decree 1665. It creates a four-category PSP taxonomy -- multi-operation companies, e-money issuers, Banco de la Nacion, and money-transfer companies -- plus a new non-SBS-supervised Entidad de Servicios de Pago (ESP) category built specifically for fintechs, with registration for ordinary payment agreements now available alongside the prior BCRP-authorisation track reserved for prominent payment systems. This is the first time Peru has created a payment-fintech licence tier that sits outside direct SBS prudential supervision, and it materially lowers the market-access threshold for smaller payment-services fintechs previously operating in a regulatory grey zone. The new regime is not access-only, however: PSPs must implement transaction controls, retain information for five years, promptly inform clients, and communicate transfer completion, with non-compliance capable of drawing fines up to 20 UIT and suspension or revocation risk. This compliance-cost overlay applies specifically to nonbank PSPs newly brought into the perimeter, distinguishing the ESP's lighter registration bar from a lighter compliance bar. #### Outlook The PSP taxonomy's phased adaptation deadlines run through the end of 2026, meaning the practical contours of ESP registration, and the extent to which it genuinely lowers barriers versus simply relocating them, will only become clear as fintechs work through adaptation over the coming two quarters. The continuing pace of new EEDE authorisations suggests the pre-existing licensed non-bank track remains an active parallel route rather than one fintechs are abandoning in favour of ESP status. Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access BCRP's General Regulation of the National Payments System, published as Circular No. 0022-2025-BCRP on 6 December 2025, entered into force on 1 April 2026. It replaces payments-system rules dating to 2010 and introduces a BCRP-authorisation requirement for certain payment actors, marking a material movement in the market-access regime governing who may participate in Peru's national payments system. This is the single most significant market-access development for the jurisdiction this cycle, and it lands alongside a parallel process at the supervisory conduct authority: SBS is separately reported to be preparing an Open Finance roadmap, with a November 2025 forum statement indicating publication was expected around December 2025. The practical effect of the new BCRP regulation is to formalise participant categories and technical standards for a payments landscape that has, over the preceding several years, expanded well beyond the bank-centric structure the 2010-era rules were built for. New authorisation requirements of this kind typically function as both a market-access gate and a supervisory tool, giving BCRP visibility into and control over an expanding population of payment-system participants, and the timing (entry into force just as underlying interoperability activity was reaching hundreds of millions of monthly transactions) suggests the regulation is responding to, rather than anticipating, market growth already under way. #### Outlook The practical implementation of the new authorisation requirement, including which categories of payment actor are captured and the transition arrangements for existing participants, is the item to watch most closely. Confirmation of the SBS Open Finance roadmap's publication, previously expected around December 2025, would clarify how the conduct-supervision track intersects with BCRP's market-access track going forward. **4 earlier distinct update(s)** Periodic update · new data 2026-09-21 #### Licensing, Authorisation & Market Access BCRP Circular 0022-2025-BCRP, in force since 1 April 2026, replaces the 2010-era regulation (Circular 012-2010-BCRP) governing Peru's National Payments System and is the anchor instrument for this cycle's licensing-and-access developments. This is a Confirmed-confidence finding corroborated across a T1 BCRP-adjacent report and a T3 law-firm alert. Under this new regime, Electronic Service Providers (ESPs) — the non-bank PI/EMI segment of the market — must submit authorisation documentation on a phased schedule ending 31 December 2026, with the specific phasing determined by each provider's 2025 average monthly transaction values. This is a Probable-confidence finding resting on a single T3 practitioner-guide source. The bank-PSP and non-bank PI/EMI distinction is structurally important here: bank participants in the payments system are already subject to existing prudential authorisation under banking law, whereas the phased ESP authorisation schedule is specifically targeted at closing an access-and-oversight gap for non-bank payment institutions and e-money issuers that previously operated with lighter-touch or no dedicated payments-specific authorisation. No T1-hosted primary text of Circular 0022-2025-BCRP was directly retrieved this cycle; the finding relies on T3 law-firm alert corroboration of a T1-adjacent BCRP report, a gap noted in this cycle's gaps register. #### Outlook The 31 December 2026 deadline for ESP authorisation filings is the key milestone to watch. How many ESPs successfully complete authorisation by that date, and whether BCRP grants any extensions to smaller providers further down the phased schedule, will determine the practical market-access effect of this reform on Peru's non-bank payments sector. Periodic update · new data 2026-09-08 #### Licensing, Authorisation & Market Access Peru's market-access architecture liberalised materially this cycle across three coordinated regulatory actions. The SBS approved Resolucion SBS N 01747-2026, a Banking-as-a-Service regulation, following a public consultation begun in May 2026 that attracted more than one hundred sector participants. The regulation allows banks and e-money issuers to expose their infrastructure to both supervised and unsupervised third parties, opening a formal pathway for fintechs to build regulated financial products on top of incumbent bank and e-money-issuer rails without themselves holding a full banking licence. Separately, the BCRP now formally recognises four payment-service-provider categories, including a newly created entidades de servicios de pago category specifically for unsupervised payment fintechs. Firms in this new category must report information to the BCRP within specified timeframes, giving the central bank visibility into a segment of the market that previously operated with less formal oversight, while stopping short of bringing these firms under full prudential supervision. The SBS also published a draft flexibilising financial licensing for EDEs (electronic money issuers), ETFs, and self-funded credit companies, cutting authorisation timelines by roughly forty percent, from approximately eighteen months to a maximum of nine months. This is a tier-1-sourced development from the official gazette El Peruano and represents a significant reduction in the time-to-market for new non-bank payment institutions. Finally, the SBS modified its 2021 novel-models regulatory sandbox regime via Resolucion SBS N 04142-2025, removing the prior requirement that sandbox participants already hold an SBS organisation authorisation before entering the sandbox. This specifically opens the sandbox to genuinely pre-authorisation fintech experimentation, a segment previously excluded by the prior rule's circularity. Taken together, these four actions constitute a coordinated liberalisation of Peru's payments market-access architecture: a new PSP category with lighter-touch reporting, a BaaS framework enabling infrastructure-sharing, faster licensing timelines for e-money issuers, and a genuinely open sandbox. The bank-versus-non-bank distinction remains structurally important throughout: banks and e-money issuers are the infrastructure providers under BaaS, while the new PSP category and sandbox reforms are aimed squarely at non-bank entrants. #### Outlook The practical test of the BaaS framework will be how many banks and e-money issuers actually expose infrastructure to third parties in the coming cycles, and how the SBS supervises firms that access that infrastructure without themselves being directly regulated. The new PSP category's reporting obligations to the BCRP will similarly need to be tested in practice; the specified timeframes for reporting were not detailed in this cycle's sourcing. The flexibilised licensing timeline and open sandbox together suggest continued near-term growth in new non-bank entrants to Peru's payments market. Periodic update · new data 2026-08-25 #### Licensing, Authorisation & Market Access Peru's national payments-system regulatory architecture has been substantially replaced this cycle. BCRP Circular 0022-2025-BCRP approved a new General Regulation for the National Payments System, in force since 1 April 2026, wholesale-replacing the prior Circular 012-2010-BCRP that had governed the sector for a decade and a half. The regulation is issued under the authority of Payments Law 29440 as amended by Legislative Decree 1665, giving it a statutory anchor distinct from a purely discretionary circular. This is a high-confidence, high-impact development sourced to a specialised Peruvian law-firm publication (Estudio Rodrigo), and it functions as the anchor instrument for several connected licensing and market-access changes landing in the same window. The most consequential of the connected changes is a phased authorisation requirement for Electronic Service Providers (ESPs) that do not manage deposit accounts or issue e-money — a category distinct from banks and from licensed non-bank payment institutions and e-money institutions (PI/EMI). These ESPs must submit authorisation documentation on a schedule keyed to their 2025 average monthly transaction values, with the process required to complete by 31 December 2026. Critically, the regulation allows ESPs to continue operating while their applications are processed, avoiding a market-access cliff-edge; this is a source-corroborated, high-confidence finding (Chambers and Partners practice guide). The second connected development is SBS Resolution 01747-2026, published 3 July 2026 in El Peruano, which establishes Peru's first express Banking-as-a-Service framework. The framework governs supervised BaaS providers that enable third parties — whether themselves supervised or not — to offer financial services via regulated digital infrastructure. This is a bank-and-nonbank-spanning instrument: the BaaS provider itself sits within SBS's supervisory perimeter, but the framework is explicitly designed to let both supervised and unsupervised third parties distribute financial services through that provider's regulated rails. The bank-versus-non-bank distinction is explicit and material throughout this cluster of reforms. Banks already operating within SBS's prudential perimeter face the new payments-system regulation and the BaaS framework as extensions of an existing supervisory relationship; non-bank PI/EMI-type providers and the newly-defined ESP category face a more consequential shift, since for many of them this cycle's regulation is the first formal authorisation touchpoint with SBS at all. This asymmetry — incremental extension for banks, first-time formalisation for many non-banks — is the analytical spine of this module's read on Peru this cycle. #### Outlook The 31 December 2026 ESP authorisation deadline is the clearest near-term checkpoint: it will reveal how many previously informal or lightly-regulated electronic service providers complete formal authorisation, and conversely how many exit the market rather than complete the process. The BaaS framework is too new to have generated a first wave of registered providers within this cycle's evidence base; the next material checkpoint is the first cohort of SBS-supervised BaaS providers and clarity on how SBS intends to supervise, or disclaim responsibility for, the unsupervised third parties such providers may enable. Periodic update · new data 2026-08-11 #### Licensing, Authorisation & Market Access Peru's core payments-regulatory framework was restructured this cycle by BCRP's new General Payments Regulation, issued under Circular Nº 0022-2025-BCRP and effective 1 April 2026, which replaces the central bank's 2010-era rulebook in its entirety. The most consequential structural change is the extension of BCRP authorisation to non-bank payment service providers performing acquiring, fund-disbursement, collection, and payment-initiation activities — functions that, prior to this cycle, operated in a comparatively unregulated or legally ambiguous space relative to bank-channel payment activity. The regulation applies a staggered compliance timeline: in-scope PSPs must complete authorisation by deadlines tiered according to monthly transaction volume, with the full compliance window running through the end of 2026. The finding is high-confidence, directly corroborated by a BCRP primary publication (the Reporte del Sistema Nacional de Pagos, March 2026) and independently corroborated by secondary industry and legal commentary describing the same instrument and effective date. The bank-versus-non-bank distinction is the analytical spine of this development. Banks and other BCRP-supervised financial entities already operated within an existing prudential-authorisation perimeter; the substantive change this cycle is squarely on the non-bank side, where payment fintechs performing acquiring, disbursement, collection, or initiation functions move from an unregulated or ambiguously regulated position into a formal BCRP authorisation requirement — a status the evidence describes as ending the sector's prior legal-grey-area position. This is a market-access-defining change: any new non-bank entrant must now plan around BCRP authorisation as a gating requirement rather than a voluntary or informal registration, and existing non-bank PSPs must sequence their authorisation applications against the volume-tiered deadline structure to remain in continuous legal operation through the transition. For market-access purposes, the practical effect is twofold. First, market entry for a new non-bank payment provider now runs through a defined BCRP authorisation process rather than through incorporation and informal market operation alone, raising the compliance bar for entry. Second, existing non-bank PSPs operating at higher monthly transaction volumes face nearer-term deadlines than smaller players, creating a de facto phased consolidation pressure across the non-bank segment. #### Outlook The compliance runway to monitor is the volume-tiered deadline structure itself: providers with higher monthly transaction volumes face nearer-term deadlines, and the full compliance window closes at the end of 2026. Confirmation of the primary full text of Circular Nº 0022-2025-BCRP — relied on this cycle through the BCRP's own periodic payments-system report and secondary legal commentary rather than direct retrieval of the circular itself — would strengthen confidence in the precise deadline tiers and any transitional provisions for PSPs already operating at the point the regulation took effect. **Sources and findings (6)** 1. T1 [https://www.bcrp.gob.pe/docs/Transparencia/Normas-Legales/ley-29985.pdf](https://www.bcrp.gob.pe/docs/Transparencia/Normas-Legales/ley-29985.pdf) retrieved 2026-07-04 2. T3 [https://ally-law.com/fintech-regulation-guide-peru/](https://ally-law.com/fintech-regulation-guide-peru/) retrieved 2026-07-04 3. T2 [https://www.estudiorodrigo.com/en/publications/fintech-alert-december-2025](https://www.estudiorodrigo.com/en/publications/fintech-alert-december-2025) retrieved 2026-07-04 4. T3 [https://iupana.com/2026/02/09/psp-peru-nuevo-actor-regulado-carga-responsabilidades-alinearse-estandar-financiero/](https://iupana.com/2026/02/09/psp-peru-nuevo-actor-regulado-carga-responsabilidades-alinearse-estandar-financiero/) retrieved 2026-07-04 5. T2 [https://www.estudiorodrigo.com/en/publications/fintech-alert-december-2025](https://www.estudiorodrigo.com/en/publications/fintech-alert-december-2025) retrieved 2026-07-04 6. T3 [https://hazlodigital.pe/dinero-electronico-que-son-las-eede-y-quien-lidera-este-ecosistema-de-pagos-digitales/](https://hazlodigital.pe/dinero-electronico-que-son-las-eede-y-quien-lidera-este-ecosistema-de-pagos-digitales/) retrieved 2026-07-04 ### W1b Conduct, Safeguarding & Promotions moved limited signal Confirmed confirmed 2026-07-04 BCRP has moved from interoperability-only regulation to a broader rulebook governing payment-acceptance/aggregator firms' handling and settlement of merchant funds, with safeguarding, contract and fee conditions effective from 2027. Movement — CHANGED BCRP approved new merchant-fund-handling and interoperability rules for payment-acceptance/aggregator firms, effective from 2027_A new BCRP circular materially broadens conduct and safeguarding requirements beyond the prior interoperability-only scope_ Standing sub-brief · as of 5 July 2026 275 words · last cycle 2026-10-12 #### Conduct, Safeguarding & Financial Promotions Safeguarding of e-money float in Peru is anchored in Ley 29985 art.6, which mandates that e-money issuers constitute fideicomisos (trusts) as the guarantee mechanism for the value of e-money issued, with SBS empowered to regulate alternative guarantee modalities; user data is separately protected under Ley 29733. This trust-based mechanism remains the core safeguarding architecture for nonbank e-money issuers and has not been altered this cycle. Conduct regulation has tightened on two fronts. Resolucion SBS N. 01689-2025 amended the Reglamento de Gestion de Conducta de Mercado (Res. 3274-2017) and the Reglamento de Infracciones y Sanciones (Res. 2755-2018) to align with Ley 32294, introducing a new seven-business-day deadline for informing customers of credit-denial decisions. Subsequently, Resolucion SBS N. 01029-2026 added new light-to-very-grave infractions for consumer protection, including a grave infraction for non-compliance with advance-payment or instalment rules causing at least 20 UIT of economic harm to users, and separately incorporated new very-grave infractions specifically tied to cybersecurity failings across financial, insurance, pensions, market-conduct and risk-management systems -- an overlap with this cycle's W3 and W7 findings. Consumer protection in the promotions space continues to run through Law 31143, which protects financial-services consumers from usury, complementing INDECOPI's general consumer-protection mandate as the authority for financial promotions, advertising and complaints-handling. #### Outlook The direction of travel is unambiguously tightening: two successive SBS resolutions within roughly a year have added disclosure deadlines, new infraction categories, and cybersecurity-specific sanctions exposure. Because the new PSP/ESP regime under BCRP Circular 0022-2025-BCRP layers additional nonbank-specific conduct obligations on top of this SBS baseline, nonbank PSPs face a compounding compliance burden through 2026 as both regulators' new obligations phase in concurrently. Periodic update · new data 2026-10-12 #### Conduct, Safeguarding & Financial Promotions The Banco Central de Reserva del Perú approved new rules for firms that receive and later settle merchant proceeds from card, QR and immediate-payment acceptance. The rules cover fund-handling conditions, commissions, contracts and interoperability, and take effect from 2027. This extends BCRP conduct and safeguarding regulation beyond its prior focus on payment-system interoperability mandates into the fund-handling practices of payment-acceptance and aggregator firms specifically, firms that hold merchant proceeds between the point of customer payment and eventual settlement to the merchant. A related interoperability requirement applies to immediate-payment acceptance operations using alias or QR codes: these must comply with the BCRP's pre-existing interoperability rules regardless of the underlying technical infrastructure processing the payment. This confirms that interoperability obligations are infrastructure-agnostic and apply at the level of the payment-acceptance function itself rather than being tied to a specific rail or technology stack. These new conduct rules sit alongside the BCRP's established phased interoperability strategy under Circular N.° 0024-2022-BCRP, which by April 2025 had already delivered over 176 million interoperable transactions worth approximately S/11,000 million, evidence of a payments market where interoperability is already operationally mature even as the central bank now extends its regulatory reach into fund-handling and commercial-terms conduct for the firms operating within that interoperable system. #### Outlook The full text of the new fund-handling circular was not independently retrieved this cycle; current confidence in its precise scope is Probable, based on press reporting rather than the underlying BCRP text. With a 2027 effective date, the period ahead is the window in which payment-acceptance and aggregator firms should expect further BCRP implementation guidance clarifying the specific fund-handling, commission-disclosure and contract-term conditions the rule will impose. **Sources and findings (5)** 1. T1 [https://www2.congreso.gob.pe/sicr/cendocbib/con5_uibd.nsf/70BE9E43003ADE32052581B40070FB60/$FILE/29985.pdf](https://www2.congreso.gob.pe/sicr/cendocbib/con5_uibd.nsf/70BE9E43003ADE32052581B40070FB60/$FILE/29985.pdf) retrieved 2026-07-04 2. T2 [https://www.ey.com/es_pe/technical/tax-alert/modifican-reglamento-sistema-financiero-sbs](https://www.ey.com/es_pe/technical/tax-alert/modifican-reglamento-sistema-financiero-sbs) retrieved 2026-07-04 3. T1 [https://www.infobae.com/peru/2026/04/10/sbs-aprueba-nuevas-infracciones-para-empresas-afp-de-seguros-y-bancos/](https://www.infobae.com/peru/2026/04/10/sbs-aprueba-nuevas-infracciones-para-empresas-afp-de-seguros-y-bancos/) retrieved 2026-07-04 4. T4 [https://ally-law.com/fintech-regulation-guide-peru/](https://ally-law.com/fintech-regulation-guide-peru/) retrieved 2026-07-04 5. T1 [https://lpderecho.pe/sbs-modifica-su-reglamento-de-infracciones-y-sanciones-de-los-sistemas-supervisados-resolucion-sbs-01029-2026/](https://lpderecho.pe/sbs-modifica-su-reglamento-de-infracciones-y-sanciones-de-los-sistemas-supervisados-resolucion-sbs-01029-2026/) retrieved 2026-07-04 ### W2 Stablecoins & Digital Money Confirmed confirmed 2026-07-04 Peru has no comprehensive cryptoasset or stablecoin statute. Supreme Decree 006-2023-JUS requires VASPs to run AML/CFT programmes reporting to UIF-Peru, with a GAFI-aligned travel-rule obligation phasing in for VASPs (effective date/instrument number requires verification — see gaps_register wpm-int-1). BCRP runs a live retail CBDC/offline-payments pilot (BiPay/Bitel) reaching several million users. Standing sub-brief · as of 5 July 2026 305 words · last cycle 2026-07-05 #### Stablecoins & Digital Money Peru has no comprehensive cryptoasset or stablecoin legal framework, and cryptoassets are not recognised as official payment methods. The most significant crypto-specific instrument remains Supreme Decree 006-2023-JUS, which requires Virtual Asset Service Providers (PSAVs) to implement AML systems and report to the UIF. SBS, SMV and BCRP maintain a supervisory-gap posture: SBS issues risk warnings and would only authorise or register crypto companies if a pending framework law is enacted; SMV limits its role to risk warnings and advertising restrictions; and BCRP focuses on distinguishing crypto from legal tender while separately running its own CBDC pilot. A GAFI-aligned travel-rule obligation for VASPs is reported to take effect from November 2026, though this cycle's automated verification challenge flags a likely source-misattribution -- the operative instrument may be SBS Resolution 02648-2024 (dated August 2024) rather than the cited resolution, with an effective date closer to August 2026. Confidence on this specific point is held at Assessed pending primary-source confirmation. On the CBDC side, BCRP and Viettel/Bitel launched Peru's first CBDC Innovation Pilot under an October 2024 framework agreement aimed at facilitating digital-payment access for the unbanked, running for one calendar year with a possible one-year extension. The associated BiPay digital-currency pilot has been reported reaching 4.9 million users and 23.5 million cumulative transactions using offline-capable technology aimed at financially excluded sectors, though this figure is itself flagged as potentially stale relative to March-June 2026 reporting suggesting an extension to March 2027 with somewhat different user and transaction counts. #### Outlook Peru's digital-money posture over the next cycle will likely be defined less by new legislation than by implementation detail: confirming the correct VASP travel-rule instrument and effective date, and refreshing BiPay pilot metrics against a primary BCRP source, are both flagged as priorities for the next research pass rather than settled facts this cycle. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T3 [https://www.lightspark.com/knowledge/is-crypto-legal-in-peru](https://www.lightspark.com/knowledge/is-crypto-legal-in-peru) retrieved 2026-07-04 2. T1 [https://chambers.com/content/item/6839](https://chambers.com/content/item/6839) retrieved 2026-07-04 3. T1 [https://practiceguides.chambers.com/practice-guides/banking-regulation-2025/peru/trends-and-developments](https://practiceguides.chambers.com/practice-guides/banking-regulation-2025/peru/trends-and-developments) retrieved 2026-07-04 4. T2 [https://elperuano.pe/noticia/299251-pagos-digitales-y-regulacion-conoce-los-cambios-regulatorios-que-vienen-en-peru](https://elperuano.pe/noticia/299251-pagos-digitales-y-regulacion-conoce-los-cambios-regulatorios-que-vienen-en-peru) retrieved 2026-07-04 5. T1 [https://www.lightspark.com/knowledge/is-crypto-legal-in-peru](https://www.lightspark.com/knowledge/is-crypto-legal-in-peru) retrieved 2026-07-04 ### W3 Operational Resilience & Critical Infrastructure Confirmed confirmed 2026-07-04 Operational resilience for SBS-supervised entities governed by Resolucion SBS 504-2021 (proportionate three-tier SGSI-C), complementing Res. 2116-2009. The new BCRP payments regulation (Circular 0022-2025-BCRP) extends analogous cybersecurity expectations, previously bank-only, to ESPs and other payment-system participants. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/peru/) Standing sub-brief · as of 5 July 2026 260 words · last cycle 2026-09-28 #### Operational Resilience & Critical Infrastructure Peru's baseline operational-resilience regime is Resolucion SBS No. 504-2021, which establishes the Reglamento para la Gestion de la Seguridad de la Informacion y Ciberseguridad, requiring a proportionate Information Security and Cybersecurity Management System (SGSI-C) and amending Corporate Governance/Risk, Operational Risk, Card and E-money Operations regulations. The regime differentiates three proportionality levels: 'general application' for banks, financieras, cajas, insurers, AFPs, Banco de la Nacion, e-money issuers and cash-transport firms; 'simplified' for Edpymes, Fondo Mivivienda, Agrobanco, COFIDE and money-transfer companies; and 'reinforced' for larger, systemically concentrated firms. Regulated entities must report to SBS when a cybersecurity incident has significant impact via loss or theft of information, internal or external fraud, negative reputational impact, or interruption of operations. The most consequential development this cycle is that BCRP Circular 0022-2025-BCRP extends cybersecurity and information-security provisions -- previously applicable only to banks and SBS-supervised entities -- to ESPs and other payment-system participants for the first time, materially broadening the resilience perimeter to cover nonbank PSPs newly recognised under the new payments regulation. More broadly, Peru's cybersecurity compliance landscape combines data-protection duties under Law 29733, SBS's financial-sector rules, and cybercrime legislation under Law 30096, with PCI DSS mandatory for payment processing and PeCERT coordinating the national cybersecurity strategy. #### Outlook The extension of SGSI-C-equivalent cybersecurity obligations to ESPs, combined with SBS's parallel addition of very-grave cybersecurity infractions under Resolucion SBS N. 01029-2026, signals that operational-resilience expectations for nonbank payment fintechs will converge rapidly toward bank-grade standards over the 2026 adaptation window, raising compliance costs for the newly-scoped ESP tier discussed under W1a. Periodic update · new data 2026-09-28 #### Operational Resilience & Critical Infrastructure BCRP is piloting TAPP, a public payment-initiation platform described as UPI-inspired, as the fourth phase of its retail-payments interoperability strategy. Reporting indicates TAPP is expected to enter a testing phase between June and July 2026, with operations targeted to begin toward the end of the year. A platform of this kind, built and operated at the central-bank level rather than by a private consortium, represents a significant piece of critical payments infrastructure whose resilience characteristics, uptime, and operational governance will bear directly on the reliability of Peru's broader digital-payments ecosystem once launched. The central bank's direct role in building and piloting this infrastructure, rather than solely regulating privately-operated rails, is itself a notable structural feature: it places BCRP in the position of both regulator and infrastructure operator for one of the country's prospective payment-initiation rails, a dual role worth tracking as the platform moves from testing toward operational status. #### Outlook Whether TAPP completes its testing phase on the reported June-to-July 2026 timeline and proceeds to the targeted late-2026 operational launch is the concrete near-term milestone for this module. Any public disclosure of TAPP's resilience testing, incident-response arrangements, or governance structure would be a useful indicator of how BCRP is managing its dual regulator-operator role for this platform. **5 earlier distinct update(s)** Periodic update · new data 2026-09-21 #### Operational Resilience & Critical Infrastructure Circular 0022-2025-BCRP imposes a defined set of operational-resilience obligations on payment-system participants: risk-management, information-security and cybersecurity policies, and participation in business-continuity testing. Non-compliance carries fines of up to 20 UIT. This is a Probable-confidence finding resting on a single T3 practitioner-guide source, and it applies to payment-system participants generally, without distinguishing between bank-PSP and non-bank PI/EMI participants — a notable structural feature, since it means the same resilience-testing and cybersecurity-policy standard applies across both segments of the market under this instrument. This operational-resilience layer sits alongside, and shares its legal basis with, the licensing and authorisation reforms tracked under W1a: both stem from the same Circular 0022-2025-BCRP instrument, in force since 1 April 2026. No further detail on the specific content of the required risk-management or cybersecurity policies, or on how BCRP intends to supervise business-continuity testing in practice, was located this cycle. #### Outlook The practical enforcement of the 20 UIT fine structure for non-compliance is the item to watch: whether BCRP issues its first sanctions under this resilience framework in the coming cycles would meaningfully upgrade the current single-source finding and demonstrate the regime's practical teeth. Periodic update · new data 2026-09-14 #### Operational Resilience & Critical Infrastructure The Banco Central de Reserva del Perú issued Circular N° 0022-2025-BCRP, published in December 2025, approving a new General Regulation of the National Payment System that replaces the 2010-era rulebook governing Peru's payment-system infrastructure. The new regulation entered into force on 1 April 2026 and establishes phased adequacy deadlines running through the end of 2026, applicable across the full range of payment-system participants: banks, fintechs, acquirers and technology providers are all captured, with no carve-out distinguishing bank from non-bank participants in the compliance timeline. This is a bank-and-non-bank-parity approach to infrastructure modernisation — the new rulebook does not sequence non-bank PSPs behind banks in adequacy obligations, but requires both categories to reach compliance on the same phased schedule through end-2026. The practical effect of replacing a rulebook that had stood since 2010 is significant: Peru's payment-system infrastructure standards had not been comprehensively updated across a period that saw substantial growth in fintech and e-wallet participation in the market. The new regulation's phased-adequacy structure suggests BCRP recognised that immediate full compliance was not realistic given how much has changed operationally since 2010, and opted instead for a managed transition running the length of 2026. #### Outlook The phased adequacy deadlines under Circular 0022-2025-BCRP complete at the end of 2026. Whether banks, fintechs, acquirers and technology providers all reach compliance on comparable timelines, or whether non-bank participants lag, will be the key marker of whether this infrastructure modernisation delivers genuine parity in practice or simply parity on paper. No further granularity on specific adequacy sub-milestones within 2026 was available this cycle. Periodic update · new data 2026-09-08 #### Operational Resilience & Critical Infrastructure Peru's central bank has issued a binding universal-interoperability mandate that fundamentally restructures the country's payments infrastructure. Circular N 0017-2026-BCRP, published 15 July 2026, requires all banks, cajas, fintechs and e-wallets to accept and process instant alias, QR, or mobile-number-based transfers up to S/30,000 per operation, on a twenty-four-hour, seven-day, three-hundred-sixty-five-day basis, and explicitly prohibits any institution from discriminating against a transfer based on which institution originated it. The circular enters into force approximately sixty days after publication, landing around mid-September 2026. This is a tier-1-sourced, Confirmed development with high impact rating: it closes what had previously been a fragmented interoperability landscape in which a transfer's success could depend on which wallet or bank the sender and recipient each held accounts with. By mandating universal acceptance regardless of origin institution, the BCRP is treating payment interoperability as critical infrastructure requiring binding, not voluntary, standardisation. The BCRP is separately reported to be piloting a further structural development: a UPI-inspired instant-payments platform, internally referenced as TAPP, targeted for a pilot beginning end-2026. The stated design goal is payment initiation that is independent of the specific wallet or bank the underlying user holds their account with, a step beyond simple acceptance-mandate interoperability toward a shared initiation layer. This pilot is sourced to tier-3 reporting only, with lower confidence than the binding Circular 0017-2026 mandate, and should be read as a probable but not yet confirmed development. The bank-versus-non-bank distinction is structurally central to both developments: the interoperability mandate applies uniformly across banks, cajas municipales, fintechs and e-wallets alike, meaning non-bank payment institutions face the same binding infrastructure obligation as licensed banks, a notable levelling of resilience obligations across the bank/non-bank divide that is less common in payments regulation generally. #### Outlook The immediate catalyst to watch is compliance readiness ahead of the circular's entry into force around mid-September 2026; smaller cajas and e-wallets with less mature technical infrastructure may face the greatest integration burden. Beyond that near-term milestone, the TAPP pilot's progress through end-2026 will indicate whether Peru moves toward a genuinely wallet-agnostic payment-initiation model, which would represent a further structural step beyond the current interoperability mandate. Periodic update · new data 2026-08-25 #### Operational Resilience & Critical Infrastructure BCRP Circular 0017-2026 requires all interoperable-payment participants — banks, cajas, fintechs and digital wallets alike — to support instant transfers keyed to a DNI (national identity document) alias rather than requiring senders to know a recipient's account number. The obligation takes effect sixty days after publication, with phased availability rolled out per institution rather than as a single simultaneous cutover. This is an infrastructure-interoperability mandate with direct operational-resilience implications. The choice of the DNI as the payment alias is a notable design decision. Rather than introducing a payments-specific identifier, Peru is building its instant-payments interoperability layer directly on top of its existing national identity infrastructure. This lowers the friction of alias adoption, but it also concentrates operational-resilience risk: any disruption or data-quality issue in the national identity system's records has a direct and immediate knock-on effect on payments-alias resolution across every participating institution simultaneously. Because the mandate applies across banks, cajas, fintechs and digital wallets without exception, it is a rare instance in this cycle's evidence base of a single obligation applying identically across the bank/non-bank divide that otherwise structures much of Peru's payments-regulatory architecture. This is a probable-tier, moderately-sourced finding (The Rio Times, tier 3) rather than a confirmed reading of the underlying BCRP circular text itself, and the precise technical specification for alias-resolution infrastructure is not established in this cycle's evidence base. The operational-resilience stakes of this mandate compound with the other infrastructure-facing changes landing in the same period, including the new National Payments System regulation's authorisation and reporting requirements and the card-sector two-factor-authentication and liability-shift obligations. No source in this cycle's evidence base documents an actual operational incident, outage, or fraud event connected to the DNI-alias mandate; this is expected given the obligation's recency and phased rollout. #### Outlook The phased, per-institution rollout structure means instant-payment interoperability via DNI alias will not reach full market coverage on a single date; the practical checkpoint to watch is which institutions have gone live with alias-resolution support as the compliance window progresses through the remainder of 2026. A second item to watch is whether BCRP publishes any technical standard, uptime requirement, or fraud-control specification alongside the interoperability mandate; none has surfaced in the evidence base for this cycle. Periodic update · new data 2026-08-11 #### Operational Resilience & Critical Infrastructure Two Peru-specific crypto-sector items are tracked here this cycle, one carried under the Sentinel.gi feed convention and one as a short dashboard entry. Chapter VIII (Regla de Viaje) of Resolución SBS N.° 02648-2024 — Peru's Travel Rule for virtual-asset service providers — enters into force on 1 August 2026, closing a two-year grace period for domestic and foreign-branch VASPs. This item carries an AML/CFT dimension that is routed to the Financial Integrity Monitor under the standing Sentinel-feed convention; it is noted here only for its operational-infrastructure relevance to VASPs' compliance-system readiness ahead of the 1 August commencement date, without independent illicit-finance analysis. Separately, as a dashboard item, Proyecto de Ley N.° 1042/2021-CR — the broader legislative vehicle that would establish a dedicated crypto-asset framework — remains stalled in committee since being sent back on 19 March 2025, with no enactment timeline. The structural gap this leaves is the continued absence of a dedicated crypto-asset licensing regime in Peru, a condition unchanged by the Travel Rule's narrower CTF-specific commencement. #### Outlook The commencement date of 1 August 2026 for the Travel Rule is the operational milestone to track for VASP readiness; any implementation friction or infrastructure gap among affected VASPs would be a relevant operational-resilience signal, though full illicit-finance analysis of the Rule itself sits with the Financial Integrity Monitor. No near-term legislative movement on Proyecto de Ley N.° 1042/2021-CR is currently evidenced. **Sources and findings (5)** 1. T1 [https://cms.law/en/per/publication/sbs-emite-el-reglamento-para-la-gestion-de-la-seguridad-de-la-informacion-y-la-ciberseguridad-y-dictamina-otras-disposiciones](https://cms.law/en/per/publication/sbs-emite-el-reglamento-para-la-gestion-de-la-seguridad-de-la-informacion-y-la-ciberseguridad-y-dictamina-otras-disposiciones) retrieved 2026-07-04 2. T3 [https://gestion.pe/tecnologia/sbs-propone-medidas-para-reforzar-la-seguridad-de-la-informacion-y-ciberseguridad-noticia/](https://gestion.pe/tecnologia/sbs-propone-medidas-para-reforzar-la-seguridad-de-la-informacion-y-ciberseguridad-noticia/) retrieved 2026-07-04 3. T1 [https://cms.law/en/per/publication/sbs-emite-el-reglamento-para-la-gestion-de-la-seguridad-de-la-informacion-y-la-ciberseguridad-y-dictamina-otras-disposiciones](https://cms.law/en/per/publication/sbs-emite-el-reglamento-para-la-gestion-de-la-seguridad-de-la-informacion-y-la-ciberseguridad-y-dictamina-otras-disposiciones) retrieved 2026-07-04 4. T2 [https://practiceguides.chambers.com/practice-guides/fintech-2026/peru/trends-and-developments](https://practiceguides.chambers.com/practice-guides/fintech-2026/peru/trends-and-developments) retrieved 2026-07-04 5. T3 [https://resguard-solutions.com/blog/en/peru-cybersecurity-compliance/](https://resguard-solutions.com/blog/en/peru-cybersecurity-compliance/) retrieved 2026-07-04 ### W4 Scheme & Network Compliance limited signal Probable confirmed 2026-07-04 Card-scheme conduct governed by BCRP's Card Payment Agreements Regulation (Circular 0027-2022-BCRP, the 'APT Regulation'); interoperability across QR/wallet rails mandated under Circular 024-2022-BCRP. PCI DSS certification is a de facto requirement for major acquirers (Niubiz, Culqi, Izipay). Merchant discount rates cluster around 3.4%-4.0% plus IGV. Standing sub-brief · as of 5 July 2026 234 words · last cycle 2026-10-06 #### Scheme & Network Compliance Card-scheme conduct in Peru is governed by BCRP Circular 0027-2022-BCRP (the APT Regulation), which requires registration with BCRP of card issuers and acquirers, sets compensation-and-settlement obligations, mandates interoperability among participants, and requires disclosure of MCC classifications. Complementing this, BCRP Circular No 024-2022-BCRP approved the Interoperability Regulations for Payment Services provided by PSPs, agreements and payment systems -- a framework credited with enabling 132 million interoperable transactions between digital wallets Yape and Plin between June 2024 and June 2025, a major structural interoperability success metric for Peru's retail-payments strategy. On the acquiring side, Niubiz (formerly VisaNet) remains Peru's largest acquirer, with over 300,000 affiliated merchants and 25 years of trading history, using CyberSource antifraud technology alongside PCI DSS Level 1 certification and card tokenisation. Its merchant pricing runs to a one-off S/300+IGV affiliation fee, S/50+IGV monthly maintenance, a 3.45%+IGV commission on Visa transactions and 3.98%+IGV on Mastercard, plus roughly $0.15+IGV per transaction. Izipay, a rival acquirer, is certified under PCI DSS Level 1, which it states guarantees protection and secure handling of cardholder information for its payment-link and e-commerce products. #### Outlook Scheme conduct in Peru remains structurally stable this cycle, with the APT Regulation and interoperability circular continuing to anchor card and wallet-rail conduct. The 132-million-transaction interoperability metric suggests continuing rapid uptake of the newer wallet-based rails, which may over time exert competitive pressure on the card-scheme fee structures documented above. Periodic update · new data 2026-10-06 #### Scheme & Network Compliance BCRP Circular No. 0017-2026-BCRP, governing the Alias-Based Instant Payments Service, entered into force on 13 September 2026, sixty calendar days after its publication in El Peruano on 15 July 2026. The circular directly binds Regulated Entities providing the alias-based instant payments service to an interoperability requirement, stating that all such entities must ensure interoperability and comply with the specific regulations the Central Bank issues on the matter. This is a scheme-compliance obligation, not a voluntary technical standard: it establishes that alias-based payment addressing and routing across providers must function on an interoperable basis, with the Central Bank reserving the authority to issue further specific regulation on implementation. The interoperability mandate sits within a national-federal regulatory layer, administered by the Banco Central de Reserva del Perú (BCRP), and applies to the account-to-account payment instrument category. Its significance for scheme and network compliance is structural: a central-bank-mandated interoperability floor for alias-based instant payments changes the competitive and technical baseline for every participant offering such a service, removing the possibility of closed-loop alias systems that do not interconnect with the broader regulated ecosystem. The circular's sixty-day commencement clause, now elapsed, means the obligation is presently in force rather than pending. This development connects structurally to the BCRP's broader instant-payments platform work. The central bank's own Financial Stability Report from November 2025 describes a Phase 3 of the instant-payments platform (TAPP) targeted to conclude in December 2026 with a pilot evaluating controlled deployment of new platform functionality. The alias-based interoperability circular and the TAPP platform roadmap both bear on how payment addressing, routing, and settlement for instant payments function in Peru, and a participant's compliance posture under the circular is likely to intersect with its technical integration into the TAPP platform as that moves through its own phased rollout. #### Outlook With the interoperability circular now in force, the near-term question for scheme and network compliance in Peru is whether the Central Bank follows through with the specific supplementary regulations the circular itself contemplates, and how quickly Regulated Entities achieve actual interoperable alias-based payment routing in practice as opposed to nominal compliance. The TAPP Phase 3 pilot, expected in December 2026, is the next concrete milestone against which practical interoperability progress can be assessed. **Sources and findings (5)** 1. T1 [https://www.bcrp.gob.pe/docs/Transparencia/Normas-Legales/Circulares/2022/circular-0027-2022-bcrp-anexos.pdf](https://www.bcrp.gob.pe/docs/Transparencia/Normas-Legales/Circulares/2022/circular-0027-2022-bcrp-anexos.pdf) retrieved 2026-07-04 2. T1 [https://chambers.com/content/item/6839](https://chambers.com/content/item/6839) retrieved 2026-07-04 3. T3 [https://adratechsystems.com/recursos/izipay-vs-niubiz-vs-culqi-comparativa-peru](https://adratechsystems.com/recursos/izipay-vs-niubiz-vs-culqi-comparativa-peru) retrieved 2026-07-04 4. T4 [https://adratechsystems.com/recursos/niubiz-peru-guia-completa-costos-integracion](https://adratechsystems.com/recursos/niubiz-peru-guia-completa-costos-integracion) retrieved 2026-07-04 5. T3 [https://www.izipay.pe/link-de-pago/](https://www.izipay.pe/link-de-pago/) retrieved 2026-07-04 ### W5 Payment Corridor Dynamics Confirmed confirmed 2026-07-04 BCRP's phased retail-payments Interoperability Strategy has materially transformed domestic payment corridors, generating over 263 million monthly transactions by December 2025 and driving digital payments per adult to 665/year in 2025 (+45.8% YoY); a fourth interoperability phase (payment initiators/open payments) is under evaluation for Q2 2026. Standing sub-brief · as of 5 July 2026 282 words · last cycle 2026-09-28 #### Payment Corridor Dynamics The US-Peru remittance corridor is the dominant cross-border payment flow into Peru and reached a record USD 5,368 million in 2025, 56% originating from the United States and equivalent to 1.6% of GDP, per BCRP-recorded inbound remittance data. BCRP's June 2026 Inflation Report revised its forward projections upward to USD 5,515 million for 2026 and USD 5,735 million for 2027, pointing to sustained corridor growth. Two structural developments reinforce this trajectory. Law No. 32211, enacted December 2024, exempts remittances sent to Peru via money-transfer companies from IGV and permits Banco de la Nacion to offer accounts and loans to Peruvians residing abroad -- a fiscal and market-access measure explicitly targeting diaspora remittance flows. Separately, the four operating EEDEs (Peruana Soluciones, Tarjetas Peruanas Prepago, Servitebca and GMoney) have had direct access to the CCE's clearing and settlement services and BCRP's RTGS system since June 2023, giving nonbank e-money issuers direct access to systemically important settlement infrastructure as part of BCRP's phased retail-payments interoperability strategy. Most notably this cycle, the US Federal Reserve authorised Banco de Credito del Peru (BCP) to open a branch in Miami, intended to make remittances faster and cheaper by enabling direct account-to-account transfers between BCP US and BCP Peru with fewer intermediaries -- a cross-border infrastructure development with clear read-across to W12 correspondent banking and W13 commercial intelligence. #### Outlook The corridor's growth trajectory, fiscal exemption, nonbank settlement access, and now a Fed-approved direct-branch settlement channel together point to a maturing, increasingly disintermediated US-Peru remittance corridor. The next research cycle should track whether other Peruvian banks follow BCP's lead in seeking direct US correspondent presence, and whether EEDEs' settlement access is extended further under BCRP's interoperability strategy. Periodic update · new data 2026-09-28 #### Payment Corridor Dynamics BCRP's retail-payments interoperability strategy has reached substantial scale: the central bank's own data shows more than 263 million monthly interoperable transactions recorded by December 2025 across the strategy's first two phases. BCRP's March 2026 National Payments System Report separately confirms that digital payments per adult reached 665 per year in 2025, an average of 1.8 digital payments per day, representing a 45.8% increase versus 2024. These two data points, sourced directly from the central bank, corroborate one another and together describe a domestic payments corridor that has moved decisively toward high-frequency, interoperable digital payment usage over the course of 2025. A fourth phase of the interoperability strategy is now under evaluation: BCRP is reported to be considering a new regulation for payment initiators, targeted for the second quarter of 2026, which would extend the open-payments model further by formalising the role of third-party payment-initiation providers within the interoperable rails already built out in phases one and two. #### Outlook Whether BCRP's evaluation of the payment-initiators regulation concludes with a published rule around the targeted second-quarter 2026 window is the principal item to track. Continued growth in the monthly interoperable-transaction count, if disclosed in a subsequent BCRP report, would confirm whether the corridor's rapid 2025 growth trajectory has been sustained into 2026. **3 earlier distinct update(s)** Periodic update · new data 2026-09-21 #### Payment Corridor Dynamics BCRP Circular 0017-2026-BCRP, published 15 July 2026, mandates 24/7 interoperable instant payments in Peruvian soles via alias — mobile number, national ID (DNI), or QR code — with full interoperability required across banks, cajas municipales, fintechs and digital wallets. The mandate takes effect 60 calendar days after publication. This is a Probable-confidence finding, corroborated by a T3 law-firm alert and a T4 press report, both citing the same instrument and effective-date mechanics. The alias-based interoperability requirement is structurally significant because it spans the full range of payment-system participant types — banks, cajas, fintechs, and digital wallets alike — rather than being confined to bank-to-bank rails. This positions Peru's domestic instant-payments corridor as a genuinely cross-sector interoperable rail rather than a bank-centric real-time payment system layered on top of a fragmented non-bank ecosystem. #### Outlook The effective date, falling approximately 60 days after the 15 July 2026 publication, places the mandate's operational go-live in the third quarter of 2026. The item to watch is whether all covered participant types — particularly smaller cajas and fintechs — achieve interoperability compliance by that date, or whether BCRP grants phased extensions similar to the ESP authorisation schedule under Circular 0022-2025-BCRP. Periodic update · new data 2026-09-14 #### Payment Corridor Dynamics Circular N° 0017-2026-BCRP, published 15 July 2026, mandates that all digital-payment providers in Peru — spanning banks, cajas municipales, fintechs and e-wallets — permit instant, interoperable transfers of up to S/30,000 to any recipient, accessible via payment alias, QR code, mobile phone number or national identity number (DNI), operating twenty-four hours a day. The rule takes effect approximately sixty days after publication. This is a universal interoperability mandate in the fullest sense: it does not create a new scheme limited to a subset of providers, but requires the existing population of digital-payment providers, regardless of institutional type, to interoperate on common instant-transfer rails. The S/30,000 ceiling and the alias/QR/phone/DNI addressing options are the two structural features that define this corridor. The multiple addressing methods lower the practical friction of initiating a transfer — a sender need not know a recipient's account number, only a phone number, DNI, or scanned QR code — while the S/30,000 ceiling sets a meaningful but bounded transaction-size limit for the instant-transfer rail, distinguishing it from higher-value settlement channels that may carry different risk controls. Because the mandate applies identically across banks, cajas, fintechs and e-wallets, it removes what would otherwise be a structural advantage for bank-affiliated providers in offering instant, low-friction transfers, and puts non-bank PSPs on the same functional footing for this transaction type. #### Outlook The near-term marker to watch is the roughly sixty-day period following the 15 July 2026 publication date, after which the mandate takes legal effect; whether the full population of digital-payment providers — banks, cajas, fintechs and e-wallets alike — demonstrates operational readiness by that date will be the first real test of this corridor's practical universality. Beyond that, whether transaction volumes on the mandated instant-transfer rail concentrate among particular provider types, or distribute evenly as the interoperability design intends, is a further open question with no data available this cycle. Periodic update · new data 2026-08-11 #### Payment Corridor Dynamics BCRP codified a nationwide instant-payments interoperability mandate this cycle via Circular N° 0017-2026-BCRP, dated 15 July 2026, requiring 24/7/365 interbank instant transfers with alias and QR-code addressing and a per-transaction cap of S/30,000. The mandate builds on BCRP's earlier collaboration with India's NPCI on a UPI-style Retail Payments Platform initiative, extending that groundwork into a binding interoperability circular rather than a pilot or voluntary arrangement. The finding is high-confidence, sourced to secondary Peruvian media reporting of the BCRP circular; the primary circular text itself was not independently retrieved this cycle. For corridor dynamics specifically, alias- and QR-based addressing lowers the practical friction of person-to-person and person-to-merchant instant transfers by removing the need for account-number exchange. The S/30,000 per-transfer cap functions as a risk-containment ceiling on the instant rail specifically, distinguishing it from higher-value interbank settlement channels that continue to operate under existing arrangements. Combined with BCRP's parallel authorisation of non-bank PSPs under the new General Payments Regulation, the interoperability mandate extends the practical reach of instant payments beyond bank-to-bank corridors into corridors that non-bank payment initiators and collectors can now participate in on a formally authorised basis, materially accelerating Peru's retail-payments modernisation trajectory. Instant-payments interoperability mandates of this kind typically function as a market-structure equaliser between incumbent banks and newer non-bank payment providers: because the rail's addressing and settlement mechanics are standardised at the central-bank level rather than negotiated bilaterally between participants, a smaller non-bank payment initiator gains access to the same instant-transfer rail as an incumbent bank, provided it clears the separate BCRP PSP authorisation bar introduced under the General Payments Regulation this cycle. This linkage means the practical value of instant-rail access is now conditioned on a compliance gate that did not exist in this form before this cycle. #### Outlook The item to monitor next cycle is adoption depth: whether interbank instant-transfer volumes materially shift toward the alias/QR rail now that the mandate is formally codified, and whether the S/30,000 cap becomes a binding constraint on use cases that would otherwise migrate to the instant rail from slower interbank channels. Corroboration of the primary BCRP circular text would also confirm whether any corridor-specific carve-outs or phased rollout provisions apply beyond the headline mandate reported this cycle. **Sources and findings (5)** 1. T1 [https://forbes.pe/economia-y-finanzas/2026-02-27/bcrp-las-remesas-del-exterior-crecieron-117-en-2025](https://forbes.pe/economia-y-finanzas/2026-02-27/bcrp-las-remesas-del-exterior-crecieron-117-en-2025) retrieved 2026-07-04 2. T1 [https://revistaganamas.com.pe/bcrp-eleva-proyeccion-de-remesas-al-pais-y-preve-nuevos-records-en-2026-y-2027/](https://revistaganamas.com.pe/bcrp-eleva-proyeccion-de-remesas-al-pais-y-preve-nuevos-records-en-2026-y-2027/) retrieved 2026-07-04 3. T1 [https://www.infobae.com/peru/2025/02/27/remesas-hacia-el-peru-bordearon-los-us5000-millones-en-2024-y-envios-serian-exonerados-de-igv-este-ano/](https://www.infobae.com/peru/2025/02/27/remesas-hacia-el-peru-bordearon-los-us5000-millones-en-2024-y-envios-serian-exonerados-de-igv-este-ano/) retrieved 2026-07-04 4. T1 [https://www.bcrp.gob.pe/eng-docs/Publications/white-paper-interoperability.pdf](https://www.bcrp.gob.pe/eng-docs/Publications/white-paper-interoperability.pdf) retrieved 2026-07-04 5. T3 [https://larepublica.pe/amp/economia/2026/04/28/bcp-en-estados-unidos-que-significa-la-aprobacion-de-la-reserva-federal-y-como-beneficiara-a-clientes-y-empresas-hnews-1346324](https://larepublica.pe/amp/economia/2026/04/28/bcp-en-estados-unidos-que-significa-la-aprobacion-de-la-reserva-federal-y-como-beneficiara-a-clientes-y-empresas-hnews-1346324) retrieved 2026-07-04 ### W6 Industry Structure & Commercial Probable confirmed 2026-07-04 Peru's payments market is dominated by five universal banks alongside a growing EEDE segment led by TPP (Ligo/LigoPay, ~45% revenue share) and bank-affiliated super-app wallets Yape/Plin. Credicorp has consolidated fintech assets (Culqi) under Krealo; a 242-strong COOPAC sector and a fast-growing Peru Payments Association (4 to 34 members) round out the structure. Standing sub-brief · as of 5 July 2026 236 words · last cycle 2026-09-28 #### Industry Structure & Commercial Dynamics Five universal banks continue to control most deposits and loans in Peru, though competition from niche lenders and fintechs is reshaping service delivery, with digital wallets filling banking voids in underserved areas. Within the e-money segment, Tarjetas Peruanas Prepago (TPP/Ligo/LigoPay) has consolidated as revenue leader among the four registered EEDEs per SBS financial statements to July 2025, with a 45% share. Consolidation activity continues around Credicorp: Culqi was acquired by Credicorp Capital and integrated into the group's digital-payments ecosystem via its Krealo venture arm. Elsewhere in the fintech venture landscape, Leasy raised over US$28 million in debt and equity for vehicle financing, and Riqra exceeded US$1 billion in B2B e-commerce transactions. A less-covered but structurally important segment is Peru's 242 credit and savings cooperatives (COOPAC), which operate under SBS supervision and play an important financial-inclusion role especially where traditional banking has low presence; since 2025 they have benefited from the Cooperative Deposit Insurance Fund. Industry-association growth is also notable: the Peru Payments Association grew from 4 to 34 members in its first year, encompassing fintechs, acquirers, non-bank issuers, wallets and technology providers. #### Outlook The combination of continuing bank dominance, active EEDE competition, Credicorp-led consolidation, and a rapidly-growing industry association points to a market structure in transition rather than settled. COOPAC payments-product detail remains under-covered and is flagged as a priority gap for the next research cycle, given the segment's financial-inclusion significance. Periodic update · new data 2026-09-28 #### Industry Structure & Commercial Dynamics The Peru Payments Association has grown from 4 founding members at the start of 2025 to 37 members by the end of the year, with a stated target of 60 members by the end of 2026. This rate of growth, an almost tenfold increase in membership within a single year, indicates rapid formalisation of industry structure around Peru's payments-liberalisation programme, as new fintech, digital-bank and payment-service entrants join a common industry body rather than operating in isolation. Commentary characterises the barrier between digital wallets and traditional banks as having completely disappeared following BCRP's interoperability consolidation, a characterisation consistent with separately reported COMEXPERU commentary describing the reform programme as opening the payments system to new actors, including digital banks, fintechs, bigtechs and telecommunications companies, under an open-payments model. Together these signals describe an industry structure in active transition from a bank-dominated model toward a more heterogeneous set of participants operating on common interoperable rails. #### Outlook Whether the Peru Payments Association reaches its stated target of 60 members by the end of 2026 is a concrete, trackable indicator of continued industry consolidation around the common interoperability infrastructure. Continued entry by digital banks, fintechs, bigtechs and telecommunications companies into the payments space, as anticipated under the open-payments model, is the broader structural trend to monitor. **Sources and findings (5)** 1. T3 [https://www.rapyd.net/blog/peru-payments-guide/](https://www.rapyd.net/blog/peru-payments-guide/) retrieved 2026-07-04 2. T3 [https://hazlodigital.pe/dinero-electronico-que-son-las-eede-y-quien-lidera-este-ecosistema-de-pagos-digitales/](https://hazlodigital.pe/dinero-electronico-que-son-las-eede-y-quien-lidera-este-ecosistema-de-pagos-digitales/) retrieved 2026-07-04 3. T3 [https://www.fynsa.com/en/newsletter/boom-fintech-en-peru-startups-financieras-impulsan-la-innovacion-y-la-inclusion-en-2025/](https://www.fynsa.com/en/newsletter/boom-fintech-en-peru-startups-financieras-impulsan-la-innovacion-y-la-inclusion-en-2025/) retrieved 2026-07-04 4. T1 [https://www.comexperu.org.pe/articulo/riesgos-para-la-estabilidad-del-sistema-financiero-peruano-en-2025](https://www.comexperu.org.pe/articulo/riesgos-para-la-estabilidad-del-sistema-financiero-peruano-en-2025) retrieved 2026-07-04 5. T3 [https://perupayments.com/en/bcrp-publicara-reglamento-clave-en-pagos-digitales-y-sbs-la-hoja-de-ruta-para-las-finanzas-abiertas/](https://perupayments.com/en/bcrp-publicara-reglamento-clave-en-pagos-digitales-y-sbs-la-hoja-de-ruta-para-las-finanzas-abiertas/) retrieved 2026-07-04 ### W7 Legal & Litigation Confirmed confirmed 2026-07-04 Enforcement activity centres on INDECOPI consumer-protection sanctions against banks for unauthorised/unrecognised card transactions and unauthorised card issuance, running parallel with SBS's own sanctioning regime, expanded via Res. 01029-2026. INDECOPI has visibly stepped up scrutiny of banks' fraud-prevention controls through 2025-2026. Standing sub-brief · as of 5 July 2026 289 words · last cycle 2026-08-05 #### Legal & Litigation Enforcement activity against major banks intensified markedly. INDECOPI ordered Interbank to refund S/6,145.82 and USD 45.95 plus interest after a client suffered continued fraudulent card transactions despite blocking the card, with a four-year listing on the Register of Infractions and Sanctions -- an enforcement precedent on refund and APP-fraud protection duties. Separately, INDECOPI's Arequipa regional office confirmed, on second instance, a 4-UIT (S/21,453) fine against Banco de Credito del Peru for failing to provide adequate service after allowing six unrecognised operations following an ATM card-retention incident, faulting the bank for not applying pattern-based fraud alerts. A third action saw INDECOPI fine Interbank 3.49 UIT (S/19,195) for issuing and activating a Visa Access credit card without customer authorisation, ordering cancellation of the card, elimination of the associated debt, and refund of payments made under pressure -- the third distinct INDECOPI enforcement action against Interbank within the trailing window, forming a pattern signal. Running in parallel, Resolucion SBS N. 01029-2026 updated the Reglamento de Infracciones y Sanciones across financial, insurance, pensions, market-conduct and risk systems, incorporating new very-grave infractions especially in cybersecurity. Also relevant to this module, Resolucion SBS N. 00771-2026 granted a second extension, to 1 June 2026, of the deadline for banks to assume full liability for unrecognised card-fraud losses on cards issued before July 2025, citing the logistical burden of mass card renewal with reinforced two-factor authentication. #### Outlook Three distinct INDECOPI sanctions against two major banks within a single trailing window, layered on top of an expanded SBS infractions regime, suggest enforcement intensity against bank PSPs' fraud-prevention and authorisation controls will remain elevated through 2026, with the now-passed 1 June 2026 liability deadline likely to generate a fresh wave of disputes over legacy-card fraud claims. Periodic update · new data 2026-08-11 #### Legal & Litigation BCRP repealed its 2010-era Regulation of Electronic Money Payment Agreements effective 1 April 2026, consolidating its provisions into the new General Payments Regulation issued under Circular Nº 0022-2025-BCRP. This is a legal-infrastructure consolidation rather than a litigation event: the prior standalone e-money regulation is folded into the broader payments rulebook rather than repealed without replacement. The change is high-confidence, directly sourced to BCRP's own March 2026 payments-system report, and reflects the Peruvian e-money market's concentration to a single surviving issuer, Banco Compartamos's BIM platform. #### Outlook No litigation activity was evidenced for Peru's payments sector this cycle. The item to monitor is whether the consolidated e-money provisions within the new General Payments Regulation alter redemption or safeguarding obligations for e-money holders relative to the repealed 2010 framework; that comparison was not independently evidenced this cycle. **Sources and findings (5)** 1. T1 [https://larepublica.pe/economia/2025/11/08/cliente-de-interbank-sufre-fraude-pese-a-bloquear-su-tarjeta-indecopi-sanciona-al-banco-por-incumplir-su-deber-de-proteccion-atmp-687600](https://larepublica.pe/economia/2025/11/08/cliente-de-interbank-sufre-fraude-pese-a-bloquear-su-tarjeta-indecopi-sanciona-al-banco-por-incumplir-su-deber-de-proteccion-atmp-687600) retrieved 2026-07-04 2. T1 [https://www.infobae.com/peru/2025/05/12/indecopi-multa-al-bcp-cajero-se-comio-tarjeta-de-cliente-y-banco-permitio-retiros-ilegales-por-mas-de-s-15-mil/](https://www.infobae.com/peru/2025/05/12/indecopi-multa-al-bcp-cajero-se-comio-tarjeta-de-cliente-y-banco-permitio-retiros-ilegales-por-mas-de-s-15-mil/) retrieved 2026-07-04 3. T1 [https://larepublica.pe/sociedad/2026/05/11/indecopi-sanciona-a-interbank-con-mas-de-s19000-por-entregar-tarjeta-de-credito-sin-autorizacion-934010](https://larepublica.pe/sociedad/2026/05/11/indecopi-sanciona-a-interbank-con-mas-de-s19000-por-entregar-tarjeta-de-credito-sin-autorizacion-934010) retrieved 2026-07-04 4. T1 [https://lpderecho.pe/sbs-modifica-su-reglamento-de-infracciones-y-sanciones-de-los-sistemas-supervisados-resolucion-sbs-01029-2026/](https://lpderecho.pe/sbs-modifica-su-reglamento-de-infracciones-y-sanciones-de-los-sistemas-supervisados-resolucion-sbs-01029-2026/) retrieved 2026-07-04 5. T1 [https://www.infobae.com/peru/2026/03/18/sbs-a-partir-de-junio-bancos-deberan-responder-por-fraudes-en-tarjetas-de-credito-emitidas-antes-de-julio-de-2025/](https://www.infobae.com/peru/2026/03/18/sbs-a-partir-de-junio-bancos-deberan-responder-por-fraudes-en-tarjetas-de-credito-emitidas-antes-de-julio-de-2025/) retrieved 2026-07-04 ### W8 Merchant Acquiring & Risk limited signal Probable confirmed 2026-07-04 Card acquiring concentrated among Niubiz (market leader), Culqi (Credicorp-owned) and Izipay, all PCI DSS certified. Onboarding-to-settlement speed varies materially; QR-based wallet rails (Yape, Plin) operate largely outside formal card-scheme chargeback mechanics. Standing sub-brief · as of 5 July 2026 230 words · last cycle 2026-10-12 #### Merchant Acquiring & Risk Peru's card-acquiring market is concentrated among Niubiz, Culqi and Izipay. Niubiz leads by volume, with over 300,000 affiliated merchants processing more than 400 million transactions annually and offering negotiated commercial rates for merchants above roughly S/500,000 in monthly volume. All four major acquiring gateways -- Niubiz, Izipay, Culqi and Mercado Pago -- comply with PCI DSS and process chargebacks, but Yape/Plin QR transfers lack a formal chargeback mechanism, with disputes resolved bank-to-bank and fraud risk mitigated via biometric authentication -- a structural gap between card-rail and wallet-rail dispute mechanics. Merchant-onboarding timelines vary sharply by acquirer: Culqi offers 24-48 hour express verification, Izipay 3-5 business days, and Niubiz 1-2 weeks with more bureaucratic, documentation-heavy processing, making onboarding speed a competitive differentiator. Izipay applies real-time antifraud validation and PCI DSS Level 1 protections to its payment-link product, with funds settling to merchant bank accounts the next business day regardless of receiving bank. Third-party payment-technology partners, such as Nuvei, position their offerings around reducing risk, chargebacks and simplifying PCI DSS compliance for acquirers integrating with Niubiz in the Peruvian market. #### Outlook The persistent absence of a formal chargeback mechanism for QR-wallet transfers stands out as the acquiring segment's clearest structural gap relative to card rails, and is likely to draw increasing regulatory or scheme-level attention as Yape/Plin transaction volumes continue to scale under the interoperability framework discussed in W4. Periodic update · new data 2026-10-12 #### Merchant Acquiring & Risk The BCRP's new fund-handling rules, effective from 2027, bear directly on merchant-acquiring practice in Peru because they govern firms that receive and later settle merchant proceeds from card, QR and immediate-payment acceptance. The conditions set by the rule touch fund-handling itself, commissions charged on acceptance and settlement, the contractual terms between acquirers or aggregators and merchants, and interoperability obligations for the acceptance infrastructure involved. For a merchant-acquiring or payment-aggregation business operating in Peru, this is a central-bank-level tightening of the regulatory conditions attached to holding and settling merchant funds, rather than a scheme-level or bilateral-contract matter. The interoperability dimension of the new rule is explicit: immediate-payment acceptance operations using alias or QR codes must comply with the BCRP's existing interoperability rules regardless of underlying infrastructure, meaning a merchant-acquiring firm cannot structure its technical stack to sit outside the interoperability mandate. This confirms that Peru's interoperability regime, already evidenced by the BCRP's own reporting of over 176 million interoperable transactions worth approximately S/11,000 million by April 2025 under the phased strategy of Circular N.° 0024-2022-BCRP, continues to extend its reach as acceptance and aggregation business models evolve. #### Outlook Merchant-acquiring and payment-aggregation firms operating in Peru have until 2027 to bring fund-handling, commission-disclosure and contractual practices into line with the new BCRP conditions. The specific detail of what the rule requires of acquirers versus aggregators, and whether any distinction is drawn between bank-affiliated and non-bank acquiring models, was not confirmed in the press reporting available this cycle and should be verified against the BCRP's own circular text once available. **1 earlier distinct update(s)** Periodic update · new data 2026-08-25 #### Merchant Acquiring & Risk SBS Regulation 2286-2024 mandates two-factor authentication for all card transactions — debit, credit and mobile-wallet-linked cards alike — and shifts liability for unrecognised-transaction losses onto issuers and acquirers, with the shift fully in force as of 1 July 2025 following phased implementation across 2024 and 2025. This is a probable-tier, moderately-sourced finding (Feedzai, tier 3) describing a structural reallocation of fraud-loss exposure within Peru's merchant-acquiring value chain. The mandate's scope — all card transactions, without carve-outs identified in the evidence base — means acquirers and issuers cannot selectively apply two-factor authentication only to higher-risk transaction profiles. This has direct merchant-acquiring implications: acquirers must ensure their merchant-facing payment infrastructure supports two-factor authentication flows across the full range of card-transaction types they process, and the liability shift gives acquirers a direct financial incentive to ensure merchants' technical integrations correctly implement the required authentication steps. This liability reallocation is now over a year into full effect, giving Peru's card-acquiring and issuing institutions a meaningful implementation runway; the evidence base for this cycle does not include fraud-loss volume data, dispute-rate statistics, or any regulatory review of the liability shift's practical operation, which is a material gap for assessing whether the reallocation has achieved its evident policy goal without generating a disproportionate compliance burden on smaller acquirers. Because this obligation predates the current cycle's other headline developments — the national payments-system regulation, the BaaS framework, and the DNI-alias mandate — it should be read as part of the standing compliance baseline against which those newer measures are layered, rather than as this cycle's news in its own right. #### Outlook The primary item to watch is whether SBS, a card scheme, or an industry association publishes any data on dispute volumes, fraud-loss allocation, or authentication-failure rates since the liability shift took full effect in July 2025. A second item is whether the two-factor-authentication mandate is extended or adjusted for emerging card-adjacent payment forms as Peru's broader payments-infrastructure modernisation continues to develop in parallel. **Sources and findings (5)** 1. T3 [https://adratechsystems.com/recursos/izipay-vs-niubiz-vs-culqi-comparativa-peru](https://adratechsystems.com/recursos/izipay-vs-niubiz-vs-culqi-comparativa-peru) retrieved 2026-07-04 2. T3 [https://adratechsystems.com/recursos/guia-completa-pasarelas-pago-peru-2026](https://adratechsystems.com/recursos/guia-completa-pasarelas-pago-peru-2026) retrieved 2026-07-04 3. T3 [https://adratechsystems.com/recursos/guia-completa-pasarelas-pago-peru-2026](https://adratechsystems.com/recursos/guia-completa-pasarelas-pago-peru-2026) retrieved 2026-07-04 4. T3 [https://www.izipay.pe/link-de-pago/](https://www.izipay.pe/link-de-pago/) retrieved 2026-07-04 5. T3 [https://www.nuvei.com/apm/niubiz](https://www.nuvei.com/apm/niubiz) retrieved 2026-07-04 ### W9 Product Innovation & Market Development Confirmed confirmed 2026-07-04 2025-2026 marks a transformative phase for Peruvian payments product development: new PSP framework, SBS Open Finance Roadmap (Feb 2026) targeting first data exchange by late 2027, BCRP TAPP infrastructure slated for December 2026, expanded regulatory sandbox, and scaling BiPay CBDC/offline-payments pilot. Horizon · 2027-Q4 (±year) Open Finance first data exchange_proposed · TT2_ Horizon · 2026-12 (±quarter) BCRP TAPP payment-initiation infrastructure launch_proposed · TT3_ Horizon · 2027-Q4 (±year) Open Finance first data exchange_proposed · TT2_ Standing sub-brief · as of 5 July 2026 282 words · last cycle 2026-10-06 #### Product Innovation & Market Development 2025-2026 marks a transformative phase for Peruvian payments product development. The new General Regulation of the National Payment System provides a comprehensive PSP framework, an expanded regulatory sandbox opens doors for fintech innovation, and an Open Finance Roadmap charts a path toward a more competitive, inclusive financial system. SBS published its Open Finance Roadmap in February 2026, anticipating the first data exchange under Open Finance by late 2027, with continued BCRP circulars on payment services and possible SMV sandbox mechanisms expected in the interim. BCRP's new TAPP infrastructure opens space for fintechs, bigtechs and telcos with innovative business models, starting with a payment-initiation model, with launch expected for December 2026. A draft regulation separately aims to open the SBS regulatory sandbox to non-licensed entities such as fintech companies, allowing pilot projects lasting 18 months (renewable for 12 more); sandbox participation does not itself confer authorisation to operate -- though no confirmed effective date for this draft expansion was retrievable this cycle. Adoption metrics underline the pace of change: digitalisation per capita rose 45.8% between 2024 and 2025 to reach 665 annual payments per inhabitant, with 2026 seeing a further acceleration to an average of 1.105 billion monthly transactions, a 45% increase versus 2025. The 132 million interoperable Yape-Plin transactions recorded between June 2024 and June 2025 further evidence rapid uptake of the newer open payment-rail infrastructure. #### Outlook With TAPP targeted for December 2026 and Open Finance's first exchange targeted for late 2027, Peru is building toward platform-level payments competition that would open the market beyond the current EEDE/bank duopoly to fintechs, bigtechs and telcos. The unconfirmed sandbox-expansion timeline remains the clearest near-term information gap in this module. Periodic update · new data 2026-10-06 #### Product Innovation & Market Development Peru's Open Finance regulatory track advanced materially this cycle. The Superintendencia de Banca, Seguros y AFP (SBS) published an Open Finance Roadmap (Hoja de Ruta de Finanzas Abiertas) in February 2026, setting out its planned approach to open finance regulation. SBS subsequently concluded the roadmap's diagnostic phase on 6 July 2026, and shortly thereafter published a first regulatory proposal block. That proposal gathers the principal findings from the diagnostic stage together with input received through stakeholder meetings, moving the Open Finance programme from a diagnostic exercise into a concrete draft-rule stage. The proposal has not been verified as approved or currently in force, and its precise scope, including which categories of regulated entities it would cover and its proposed start dates, has not been confirmed from the underlying resolution text. This progression is a genuine product-access regulatory development rather than a discrete commercial product launch: it is the regulatory architecture that will eventually govern data-sharing and product interoperability across fintechs and incumbent financial institutions in Peru, distinct from any specific firm's announced product. The move from diagnostic to proposal stage indicates the Open Finance track in Peru has passed its exploratory phase and entered a period where the shape of eventual obligations is becoming more concrete, even though adoption and an effective date remain unconfirmed. In parallel, BCRP's instant-payments platform (TAPP) is progressing toward its own next milestone. Per the central bank's November 2025 Financial Stability Report, Phase 3 of the platform is expected to conclude in December 2026 with a pilot to evaluate controlled deployment of new platform functionality. While TAPP is primarily an infrastructure development rather than a product-access regulatory theme, its timing alongside the Open Finance proposal reflects a broader pattern of Peru's payments authorities advancing multiple modernisation tracks concurrently this cycle. #### Outlook The Open Finance proposal's progression toward adoption, and the scope of regulated entities it will eventually cover, are the key items to track in coming cycles; confirmation of its approval status and effective date would mark the next material milestone. The TAPP Phase 3 controlled-deployment pilot targeted for December 2026 is the parallel infrastructure milestone bearing on the same broader modernisation push. **5 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Product Innovation & Market Development The wallet-to-bank barrier in Peru's payments market is described in industry commentary as having effectively disappeared following BCRP's interoperability consolidation, reflecting a maturation of product development in which digital wallets and traditional bank accounts now function as interoperable participants in a common payments ecosystem rather than separate, siloed products. This is a product-development outcome distinct from the underlying regulatory or infrastructure changes driving it, though it is a direct consequence of BCRP's interoperability strategy and the accompanying growth in industry participation described elsewhere this cycle. An emerging product sub-vertical flagged for 2026 is AI-based SME credit-scoring for alternative lending, though the evidentiary basis for this development this cycle is limited and the finding should be treated as an early, uncertain signal rather than a confirmed market trend. #### Outlook Whether AI-based SME credit-scoring for alternative lending develops into a substantiated product trend, with named providers or transaction volumes, is the item to watch for confirmation in a subsequent cycle. Continued consolidation of wallet and bank-account interoperability into single-product user experiences is the broader trend already under way and worth tracking for further evidence. Periodic update · new data 2026-09-21 #### Product Innovation & Market Development BCRP is reportedly evaluating a new regulation for payment initiators, targeted for Q2 2026, as the fourth phase of its broader open-finance and interoperability roadmap, coordinated with SBS. This is an Uncertain-confidence finding resting on a single T3 industry-association source, and no confirmed instrument has been published this cycle. This payment-initiators regulation, if it materialises, would sit as a distinct fourth phase alongside the payments-system overhaul (Circular 0022-2025-BCRP) and the instant-payments mandate (Circular 0017-2026-BCRP) already in force or taking effect this cycle — together forming a four-part sequenced modernisation programme spanning licensing, resilience, real-time payment corridors, and now potentially open-finance payment initiation. The regulatory-product-access framing here (a thematic regulatory development) is distinct from any specific announced commercial payment-initiation product launch, which would instead fall under commercial-intelligence coverage. #### Outlook Whether BCRP publishes the payment-initiators regulation within its targeted Q2 2026 window, or whether the timeline slips, is the key uncertainty to track. Given the single-source, Uncertain-confidence basis for this finding, corroboration from a second source or a formal BCRP consultation announcement would materially strengthen confidence in this development in the next cycle. Periodic update · new data 2026-09-14 #### Product Innovation & Market Development Two linked product-development tracks define this module's signal for Peru this cycle. First, BCRP's Transferencias Automáticas de Pagos (TAPP) platform, developed under a 2024 agreement between BCRP and India's National Payments Corporation and explicitly modelled on India's UPI system, is targeted to begin pilot operation in late 2026. TAPP is designed to open instant-payments rails directly to fintechs and merchants, extending Peru's interoperability push beyond bank-to-bank settlement and into a retail-payments architecture where non-bank participants can plug into the platform directly rather than through bank intermediation. Second, and complementary to TAPP, BCRP announced it is evaluating a new regulation for payment initiators — "iniciadores de pagos" — as part of Phase 4 of its broader interoperability roadmap, with issuance targeted for the second quarter of 2026. A payment-initiator regulation would give third-party providers a defined legal basis to initiate payments on behalf of customers directly from their accounts at other institutions, the open-banking-style capability that TAPP's retail architecture would need in order to function as a genuine multi-provider platform rather than a bank-centric rail with fintech access as an afterthought. Running in parallel, the Superintendencia de Banca y Seguros y AFP separately signalled a forthcoming Open Finance and Open Banking roadmap around the turn of 2025 into 2026. This SBS-side signal has not yet been clearly integrated with BCRP's Phase 4 payment-initiator work in available reporting, leaving open the question of whether Peru will end up with one coherent open-banking framework or two regulatory tracks addressing overlapping ground from different institutional angles. #### Outlook The Q2 2026 target for BCRP's payment-initiator regulation and the late-2026 target for TAPP's pilot launch are the two markers to watch, and their sequencing matters: if the payment-initiator regulation is finalised before TAPP's pilot begins, third-party initiators would have a clear legal basis to build on the platform from day one. If TAPP's pilot proceeds first, early platform design may need to accommodate initiator-regulation requirements retrospectively. Whether SBS's Open Finance roadmap converges with or diverges from BCRP's Phase 4 track remains an open structural question with no resolution visible this cycle. Periodic update · new data 2026-09-08 #### Product Innovation & Market Development Peru's digital-payments market grew sharply through 2025 and into 2026, driven substantially by the interoperability improvements building toward the BCRP's July 2026 mandate. BCRP's own national payments-system report, published March 2026, found that digital payments per adult reached 665 per year in 2025, an increase of 45.8 percent versus 2024, a growth rate the report attributes to wallet and debit-card usage expansion tied to the interoperability rollout already under way. This is a tier-1-sourced, Confirmed figure directly from the central bank's own systemic reporting. Separate tier-3 industry-forum reporting from August 2026 places the figure somewhat higher, at 767 digital payments per adult per year, and situates Peru third in Latin America by this measure behind Brazil and Chile, and second specifically when measured against the banked population. This higher figure carries materially weaker sourcing than the BCRP's own tier-1 report and should be treated as a directional industry estimate rather than an official statistic; the two figures are not necessarily measuring an identical basket of payment types or an identical population base. Alongside this growth, the SBS re-denominated e-money and basic-account transaction and balance limits in UIT (unidad impositiva tributaria, Peru's tax-unit index) terms rather than fixed soles amounts, via Resolucion SBS N 00704-2026 dated 12 March 2026. This is a product-design-relevant change: rather than requiring periodic manual revision of soles-denominated limits, the new UIT-indexed structure adjusts automatically each year as the tax-unit value changes, giving e-money product design more predictable long-term limit trajectories. Read together, these developments show a market where usage growth, infrastructure mandate, and product-parameter design are moving in a mutually reinforcing direction: rising usage volumes are both the product of, and the justification for, continued infrastructure and product-limit modernisation. #### Outlook The next cycle's BCRP national payments-system report will be the key indicator of whether the growth trajectory continues once the universal-interoperability mandate takes effect in mid-September 2026; a further acceleration in digital-payments-per-adult figures would corroborate the causal link industry commentary has drawn between interoperability and usage growth. The gap between the BCRP's own 665-per-adult figure and the higher tier-3 767 figure also warrants reconciliation in future reporting. Periodic update · new data 2026-08-25 #### Product Innovation & Market Development Three distinct product and market-development signals surfaced for Peru this cycle. First, SBS published its Open Finance roadmap in February 2026, beginning with Open Banking, and explicitly cited approximately ninety-two percent household mobile and telecom penetration — sourced to OSIPTEL data — as market-readiness context. This is a high-confidence, well-sourced finding (Chambers and Partners) describing a policy-level signal of direction rather than a binding technical mandate. Second, BiPay obtained Empresa Emisora de Dinero Electrónico (EEDE) authorisation via SBS Resolution 00173-2026, dated 21 January 2026, converting a DNI-linked digital-wallet pilot into a formally licensed e-money issuer. This finding is sourced to a primary regulatory publication rather than commercial commentary, giving it the highest confidence rating among this cycle's W9 findings. The BiPay conversion is a concrete, first-party-confirmed instance of SBS's e-money-issuer authorisation pipeline actively processing a pilot-to-licence transition. Third, BCRP's March 2026 national payments-system report documents growing stablecoin use as a cross-border payment and value-transfer instrument. This finding sits at the boundary between World Payments' product-innovation lens and the Crypto Monitor's stablecoin-regime ownership; per this cycle's subscription arrangement, the digital-asset regulatory reading of this observation belongs to the Crypto Monitor's coverage, and this module does not analyse it further beyond noting that BCRP itself is the source of the underlying market observation. Taken together, the Open Finance roadmap and the BiPay authorisation point toward a Peruvian payments product landscape diversifying along two axes simultaneously: a policy-driven opening of account-information access, and a licensing-driven formalisation of previously pilot-stage e-money products. #### Outlook The clearest near-term product-development checkpoint is whether SBS follows the February 2026 Open Finance roadmap with a published technical standard or binding API-access mandate. A second item to watch is whether other digital-wallet pilots beyond BiPay follow the same pilot-to-EEDE-licence conversion path, which would indicate SBS's e-money authorisation pipeline is becoming a repeatable route to market for wallet products. **Sources and findings (6)** 1. T2 [https://practiceguides.chambers.com/practice-guides/fintech-2026/peru/trends-and-developments](https://practiceguides.chambers.com/practice-guides/fintech-2026/peru/trends-and-developments) retrieved 2026-07-04 2. T2 [https://practiceguides.chambers.com/practice-guides/fintech-2026/peru/trends-and-developments](https://practiceguides.chambers.com/practice-guides/fintech-2026/peru/trends-and-developments) retrieved 2026-07-04 3. T3 [https://elperuano.pe/noticia/299251-pagos-digitales-y-regulacion-conoce-los-cambios-regulatorios-que-vienen-en-peru](https://elperuano.pe/noticia/299251-pagos-digitales-y-regulacion-conoce-los-cambios-regulatorios-que-vienen-en-peru) retrieved 2026-07-04 4. T1 [https://chambers.com/content/item/6839](https://chambers.com/content/item/6839) retrieved 2026-07-04 5. T3 [https://elperuano.pe/noticia/299251-pagos-digitales-y-regulacion-conoce-los-cambios-regulatorios-que-vienen-en-peru](https://elperuano.pe/noticia/299251-pagos-digitales-y-regulacion-conoce-los-cambios-regulatorios-que-vienen-en-peru) retrieved 2026-07-04 6. T1 [https://chambers.com/content/item/6839](https://chambers.com/content/item/6839) retrieved 2026-07-04 ### W10 Consumer Protection & APP Fraud Confirmed confirmed 2026-07-04 Consumer protection runs on a dual track: INDECOPI (Ley 29571) handles individual complaints via mandatory Libro de Reclamaciones, with fines up to 450 UIT; SBS mandates bank liability for unrecognised card transactions absent proof of user fault, with the pre-July-2025-card liability deadline extended twice, now to 1 June 2026. Standing sub-brief · as of 5 July 2026 261 words · last cycle 2026-07-05 #### Consumer Protection & APP Fraud Consumer protection in Peru's payments space runs on a dual track. The Codigo de Proteccion y Defensa del Consumidor (Ley 29571) empowers INDECOPI to receive and resolve consumer complaints, fine violators, mediate through conciliation, and order corrective measures such as refunds, with serious infractions drawing fines of up to 450 UIT. The mandatory Libro de Reclamaciones mechanism requires providers to respond within 30 calendar days, with automatic fines for non-response and refusal to provide the book itself treated as an INDECOPI-sanctionable infraction. On card-fraud liability specifically, INDECOPI's Consumer Protection Commission has set refund criteria: a user may request a refund when card cloning is shown, in cases of micropayment abuse, or where the client's authentication scheme fails to meet minimum security requirements established in regulation. Since July 2025, financial-system entities have had to assume responsibility for unrecognised card transactions unless they demonstrate user fault; the deadline extending this obligation to pre-July-2025 cards has been pushed to 1 June 2026 under Resolucion SBS 00771-2026. Complaint volumes remain high: INDECOPI recorded over twenty thousand reports against banking and financial services in the 16 March-24 July window, with recurring issues including undue charges, refund disputes and inadequate service, and BCP, Interbank, BBVA, Banco Falabella and Scotiabank among the most-reported entities. #### Outlook With the bank-liability deadline for legacy cards now passed as of 1 June 2026, and complaint volumes remaining elevated, the coming cycle is likely to test how consistently banks apply the user-fault standard in practice, and whether INDECOPI's enforcement pace (evidenced in W7) continues to escalate in response. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T3 [https://abogadope.com/pages/indecopi-consumidor.html](https://abogadope.com/pages/indecopi-consumidor.html) retrieved 2026-07-04 2. T1 [https://gestion.pe/tu-dinero/finanzas-personales/operaciones-bancarias-no-reconocidas-por-clientes-en-que-casos-pueden-ser-reembolsadas-bancos-en-peru-sanciones-de-indecopi-noticia/](https://gestion.pe/tu-dinero/finanzas-personales/operaciones-bancarias-no-reconocidas-por-clientes-en-que-casos-pueden-ser-reembolsadas-bancos-en-peru-sanciones-de-indecopi-noticia/) retrieved 2026-07-04 3. T1 [https://www.infobae.com/peru/2026/03/18/sbs-a-partir-de-junio-bancos-deberan-responder-por-fraudes-en-tarjetas-de-credito-emitidas-antes-de-julio-de-2025/](https://www.infobae.com/peru/2026/03/18/sbs-a-partir-de-junio-bancos-deberan-responder-por-fraudes-en-tarjetas-de-credito-emitidas-antes-de-julio-de-2025/) retrieved 2026-07-04 4. T3 [https://abogadope.com/pages/indecopi-consumidor.html](https://abogadope.com/pages/indecopi-consumidor.html) retrieved 2026-07-04 5. T1 [https://www.indecopi.gob.pe/en/-/desde-el-16-de-marzo-al-24-de-julio-el-indecopi-registro-mas-de-veinte-mil-reportes-contra-el-servicio-bancario-y-financiero](https://www.indecopi.gob.pe/en/-/desde-el-16-de-marzo-al-24-de-julio-el-indecopi-registro-mas-de-veinte-mil-reportes-contra-el-servicio-bancario-y-financiero) retrieved 2026-07-04 ### W11 AML/CFT & Financial Crime (Sentinel.gi-fed) [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/peru/#sec-dom-D7) limited signal Confirmed confirmed 2026-07-04 Sentinel position: Peru's AML/CFT payments-context posture anchored on UIF-Peru (housed within SBS since 2007) as FIU, under GAFILAT mutual-evaluation oversight. Recent expansions bring private investment-fund managers and non-Ley-26702 factoring companies into the obligated-subject perimeter (DS 008-2025-JUS), and a GAFI-aligned travel rule for VASPs is phasing in (instrument/date requires verification). Horizon · 2026-11 (±quarter) VASP travel-rule obligation takes effect_adopted · TT1_ Standing sub-brief · as of 5 July 2026 255 words · last cycle 2026-10-06 #### AML/CFT & Financial Crime (Sentinel.gi-fed) This module's intelligence is sourced from the Sentinel.gi feed and is carried here as baseline institutional context rather than original illicit-finance analysis; readers seeking deeper illicit-finance-specific treatment should consult the Financial Integrity Monitor directly. UIF-Peru, Peru's financial intelligence unit, was created under Ley 27693 (2002) and incorporated into SBS as a specialised unit with functional and technical autonomy under Ley 29038 (2007), responsible for receiving, analysing and transmitting information to detect money-laundering and terrorist-financing across obligated payment-sector subjects. Peru has undergone four GAFILAT mutual-evaluation rounds (2003, 2005, 2013 and 2018) assessing its AML/CFT system. Effective 14 May 2025, Supreme Decree No 008-2025-JUS added private-offering investment-fund managers not supervised by SMV, and factoring companies outside Ley 26702's scope, as new UIF-obligated subjects, widening the obligated-subject perimeter. A GAFI-aligned travel-rule obligation for VASPs is reported to become effective from November 2026, posing information-management and inter-institutional cooperation challenges -- though, as flagged under W2, an automated verification challenge this cycle raises doubt over the precise instrument number and effective date, suggesting the correct citation may be SBS Resolution 02648-2024 with an August 2026 effective date. UIF-Peru's training materials also track FATF's periodic high-risk jurisdiction listings -- including North Korea, Iran and Myanmar -- as part of obligated subjects' ongoing due-diligence responsibilities. #### Outlook The obligated-subject perimeter is expanding and the travel-rule obligation is approaching, but the precision of the travel-rule's instrument citation and effective date should be treated as unconfirmed pending primary-source verification, a point flagged for follow-up analysis by the Financial Integrity Monitor. Periodic update · new data 2026-10-06 #### AML/CFT & Financial Crime This development is sourced from the financial-integrity monitor's AML/CTF regime tracking and is rendered here without independent World Payments analysis: SBS Resolution No. 01917-2026 postpones the commencement of Chapter VIII (Travel Rule) of SBS Resolution No. 02648-2024 from 1 August 2026 to 1 January 2029. The Travel Rule chapter implements FATF Recommendation 16 for virtual asset transfers in Peru and was previously due to take effect in August 2026. For readers tracking payments-sector AML/CFT exposure, the relevant fact is the revised commencement date: obligations requiring originator and beneficiary information to accompany qualifying virtual asset transfers in Peru now take effect on 1 January 2029 rather than the originally scheduled date. For full analytical treatment of this development, see the financial-integrity monitor's AML/CTF Regime coverage, which carries the underlying source and interpretive detail. #### Outlook The commencement date to track for Peru's virtual-asset travel-rule obligations is 1 January 2029. Further detail and ongoing tracking of this obligation sit with the financial-integrity monitor. **Sources and findings (8)** 1. T1 [https://www.sbs.gob.pe/Portals/5/jer/BOLETIN-INFORMATIVOS/2025/BOLETIN_UIF_146.pdf](https://www.sbs.gob.pe/Portals/5/jer/BOLETIN-INFORMATIVOS/2025/BOLETIN_UIF_146.pdf) retrieved 2026-07-04 2. T? FIM (sentinel.gi) per-JID baseline profile — Peru — AML/CFT architecture centres on SBS's Unidad de Inteligencia Financiera (UIF-Perú), Law 26702 (Financial System Law) and CONTRALAFT coordination. Peru underwent a 2018 GAFILAT/FATF on-site evaluation (MER published 2019, FUR 2020). Lawyers, accountants and cooperativas remain weakly supervised; no VASP-specific AML statute exists. 3. T2 FIM (sentinel.gi) regulatory_horizon_register (issue FIM-BASE-HRZ-001) — Peru presidential transition following contested 2026 runoff 4. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness 5. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: national divergence 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: legal-gap 7. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: political-constraint 8. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: enforcement-absence ### W12 Correspondent Banking, Settlement & Access Confirmed confirmed 2026-07-04 BCRP operates/designates Sistema LBTR (RTGS), the CCE, and the SLMV. BCRP maintains an approved list of first-category foreign correspondent banks, and in 2026 approved BCP's Miami branch, deepening direct US-Peru correspondent access. Standing sub-brief · as of 5 July 2026 267 words · last cycle 2026-08-05 #### Correspondent Banking, Settlement & Access BCRP designates, regulates and supervises Peru's systemically important payment infrastructures: Sistema LBTR (the RTGS system), the CCE (deferred net settlement of low-value instruments), and the SLMV securities-settlement arrangement. The BCRP LBTR settlement circular sets Pre-Reserva minimum liquidity requirements (at least 0.25% of obligations) for Type I (banks) and Type II CCE participants, provides intraday repo operations to cover debit balances, and establishes settlement priority rules for CCE/SLMV over standard transfer orders. The module's analytical spine is the persistent asymmetry between bank and non-bank access to this infrastructure. BCRP maintains an approved list of first-category foreign banks (minimum US$1.4 billion capital) used for reserve placement and correspondent purposes, spanning HSBC USA, Credit Suisse USA, MUFG Union Bank and Morgan Stanley -- a bank-only correspondent channel. This cycle's most significant development narrows that asymmetry at the margin: the US Federal Reserve's approval of Banco de Credito del Peru's Miami branch reinforces financial ties between Peru and the US, expanding financial services and simplifying international transactions and account-opening for cross-border clients, though this remains a bank-led development rather than one extending direct correspondent access to nonbank PSPs. Peru's broader financial-system structure includes four government-owned entities -- BCRP, Banco de la Nacion, COFIDE, and the Agrarian Bank -- with SBS policy generally following BIS regulatory guidelines. #### Outlook The bank/non-bank correspondent-access asymmetry remains structurally intact even as BCP deepens its own direct US settlement channel; EEDEs' CCE/RTGS access documented in W5 is a domestic, not cross-border, exception to this asymmetry, and the coming cycle should watch for any move to extend correspondent-style cross-border access to nonbank PSPs. Periodic update · new data 2026-08-11 #### Correspondent Banking, Settlement & Access SBS took two liberalising actions this cycle relevant to non-bank access and settlement infrastructure. Resolución SBS Nº 04142-2025, dated 24 November 2025, widens the regulatory sandbox available to novel financial models, opening more concrete pathways for fintechs to validate innovative solutions ahead of full licensing. Separately, SBS announced the start of an Open Finance/Open Banking regulatory roadmap, coordinated with BCRP, the securities regulator SMV, and Peru's data-protection authority, though no publication date for the roadmap has yet been confirmed. Both items carry assessed-to-high confidence and are sourced to specialist Peruvian legal commentary rather than direct retrieval of the underlying SBS resolutions. The correspondent-banking and access analytical spine here is the bank-versus-non-bank asymmetry: a widened sandbox and an Open Finance roadmap are both mechanisms that principally benefit non-bank entrants and smaller institutions seeking structured pathways into functions — data-sharing, novel product validation — that incumbent banks can typically already access through existing infrastructure. Read alongside the new PSP authorisation regime and the instant-payments interoperability mandate tracked elsewhere this cycle, the sandbox widening and Open Finance announcement together indicate that Peru's 2026 payments-regulatory programme has a market-access-broadening dimension that runs in parallel with its supervisory-perimeter-tightening dimension. #### Outlook The Open Finance/Open Banking roadmap's publication date is the key unresolved item: its eventual scope will determine how data-sharing obligations interact with the existing PSP authorisation regime and could materially reshape correspondent-style access arrangements between banks and non-bank participants. Confirmation of take-up under the widened sandbox — specific fintechs admitted and outcomes achieved — was not evidenced this cycle and would be the natural next data point. **Sources and findings (5)** 1. T1 [https://www.bcrp.gob.pe/en/payments-system.html](https://www.bcrp.gob.pe/en/payments-system.html) retrieved 2026-07-04 2. T1 [https://www.bcrp.gob.pe/docs/Transparencia/Normas-Legales/Circulares/2021/circular-0029-2021-bcrp.pdf](https://www.bcrp.gob.pe/docs/Transparencia/Normas-Legales/Circulares/2021/circular-0029-2021-bcrp.pdf) retrieved 2026-07-04 3. T1 [https://www.bcrp.gob.pe/docs/Transparencia/Normas-Legales/Circulares/2015/circular-036-2015-bcrp.pdf](https://www.bcrp.gob.pe/docs/Transparencia/Normas-Legales/Circulares/2015/circular-036-2015-bcrp.pdf) retrieved 2026-07-04 4. T3 [https://larepublica.pe/amp/economia/2026/04/28/bcp-en-estados-unidos-que-significa-la-aprobacion-de-la-reserva-federal-y-como-beneficiara-a-clientes-y-empresas-hnews-1346324](https://larepublica.pe/amp/economia/2026/04/28/bcp-en-estados-unidos-que-significa-la-aprobacion-de-la-reserva-federal-y-como-beneficiara-a-clientes-y-empresas-hnews-1346324) retrieved 2026-07-04 5. T3 [https://www.trade.gov/country-commercial-guides/peru-trade-financing](https://www.trade.gov/country-commercial-guides/peru-trade-financing) retrieved 2026-07-04 ### W13 Commercial Intelligence (M&A, Investment & Product) limited signal Probable confirmed 2026-07-04 Trailing-12-month commercial activity centres on Credicorp/Krealo's fintech consolidation and venture investment (Culqi CEO change, Akua and Welli investments), alongside major regulatory-driven market events: BCRP's new payments regulation, SBS's Open Finance Roadmap, and the Fed's approval of BCP's Miami branch. Standing sub-brief · as of 5 July 2026 233 words · last cycle 2026-09-21 #### Commercial Intelligence (M&A, Investment & Product) Krealo, Credicorp's venture-capital arm, invested in paytech Akua, which raised US$13 million to scale its payments platform, and separately entered Colombian health-fintech startup Welli -- an investment whose value was not publicly disclosed. Culqi, Credicorp's fintech, appointed Spencer Friedman -- with experience at Rappi, Uber and Deloitte -- as its new CEO effective September 2025, a leadership-change event carried here as a dated entry rather than a closed-enum commercial event. Regulatory-market events also reshaped the commercial landscape this cycle. In April 2026 the US Federal Reserve approved Banco de Credito del Peru's application to open a branch in Miami, a strategic international-expansion event expected to be measured on profitability, remittance volume, and bilateral trade dynamism. BCRP's publication of Circular No. 0022-2025-BCRP in December 2025, approving the new General Regulation of the National Payments System, formally brought payment fintechs into the National Payment System perimeter for the first time. SBS published its Open Finance Roadmap in February 2026, marking the formal start of Peru's open-banking construction process in coordination with BCRP. #### Outlook Krealo's continuing deployment of venture capital into payments and adjacent fintech (Akua, Welli) alongside Culqi's leadership refresh point to sustained investment appetite within the Credicorp ecosystem specifically, even as the sector's most consequential commercial catalysts this cycle were regulatory rather than transactional -- the new payments regulation, the Open Finance Roadmap, and the Fed's Miami-branch approval. Periodic update · new data 2026-09-21 #### Commercial Intelligence & Fintech Peru's registered fintech population grew to 237 as of year-end 2024, up from 203 the prior year, per EY Law data cited in BCRP's own March 2026 report. This is a Probable-confidence figure: while it appears in a T1-hosted BCRP document, the underlying count originates from third-party EY Law data rather than a BCRP-generated statistic, and no independent primary count was cross-checked this cycle. This growth figure is a discrete sector-level metric rather than a specific announced commercial event — no individual M&A transaction, funding round, or product launch was identified for Peru this cycle, and this sub-brief accordingly does not report any commercial_events[] entries. The growth signal should be read as structural market-development context, complementing rather than substituting for the specific regulatory reforms tracked elsewhere in this cycle's brief (W1a, W3, W5, W9). #### Outlook Whether the fintech-count growth trajectory continues into 2025-2026 figures, and whether any specific M&A activity or funding rounds materialise among Peru's growing fintech population, are the items to watch for future commercial-intelligence coverage of this jurisdiction. **1 earlier distinct update(s)** Periodic update · new data 2026-08-11 #### Commercial Intelligence & Fintech Two discrete commercial-intelligence items are tracked for Peru this cycle. The Peru Payments Association grew its membership from four to thirty-four associates in its first year of operation, a rapid formalisation of the private payments-industry base that runs ahead of, and appears to anticipate, the new BCRP PSP authorisation regime tracked separately this cycle. Separately, Banco de Crédito del Perú's bank-integrated crypto pilot platform, branded 'Criptococos,' was authorised in 2025 as a product launch by an incumbent bank rather than a licensed independent VASP; the pilot illustrates incumbent-bank crypto-as-rail market entry ahead of any formal crypto-asset licensing regime in Peru. Confidence in the BCP pilot item is low, resting on a single tier-four source and the amount of the initiative was not publicly disclosed; the Peru Payments Association membership figure is assessed-confidence. #### Outlook No further commercial developments — additional M&A, funding rounds, or product launches — were evidenced for Peru's payments and fintech sector this cycle beyond the two items noted above. The item to monitor is whether other incumbent banks follow BCP's lead into bank-integrated crypto pilots ahead of Peru's still-absent dedicated crypto licensing framework. **Sources and findings (5)** 1. T3 [https://gestion.pe/noticias/credicorp/](https://gestion.pe/noticias/credicorp/) retrieved 2026-07-04 2. T3 [https://gestion.pe/noticias/credicorp/](https://gestion.pe/noticias/credicorp/) retrieved 2026-07-04 3. T3 [https://larepublica.pe/amp/economia/2026/04/28/bcp-en-estados-unidos-que-significa-la-aprobacion-de-la-reserva-federal-y-como-beneficiara-a-clientes-y-empresas-hnews-1346324](https://larepublica.pe/amp/economia/2026/04/28/bcp-en-estados-unidos-que-significa-la-aprobacion-de-la-reserva-federal-y-como-beneficiara-a-clientes-y-empresas-hnews-1346324) retrieved 2026-07-04 4. T2 [https://www.estudiorodrigo.com/en/publications/fintech-alert-december-2025](https://www.estudiorodrigo.com/en/publications/fintech-alert-december-2025) retrieved 2026-07-04 5. T2 [https://practiceguides.chambers.com/practice-guides/fintech-2026/peru/trends-and-developments](https://practiceguides.chambers.com/practice-guides/fintech-2026/peru/trends-and-developments) retrieved 2026-07-04 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Peru| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{"legal_accessibility": {"per_product": {"account_to_account": "regulated", "cards": "regulated", "prepaid_emoney": "licensed-emi"}}}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 75 finding(s), 131 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).