Uruguay

Licensing, Authorisation & Market Access

Banco Central del Uruguay has finalised a comprehensive licensing regime for virtual-asset service providers, completing Resolution SSF No. 2026-444 under the authority of Ley N degrees 20.345 and adding a new Title VII-TER to the Compilation of Securities Market Regulations. This is a non-bank-focused market-access instrument: the authorisation requirement targets legal entities providing virtual-asset services on a regular and professional basis where the underlying assets are deemed by the BCU to be financial instruments, a population that sits outside the traditional bank-licensing perimeter. The transitional design is the key market-access mechanic to track. Existing operators may apply for BCU authorisation during a window running from 1 September 2026 through 31 March 2027, and critically, may continue operating while their application is under review, meaning market presence is not interrupted by the review process itself. New entrants face a materially different standard: authorisation must be secured before any operation may commence, with no equivalent continuity allowance. This bank/non-bank and incumbent/new-entrant asymmetry is the structural spine of the licensing development.

This licensing event sits inside a considerably broader strategic frame. The BCU has published its Payments System Roadmap 2026-2030, a five-pillar document, and its Board approved, on 5 June 2026, draft legislation for a national Open Finance System, described as one of the roadmap's core strategic lines. The VASP authorisation regime and the Open Finance bill are therefore both licensing/market-access developments proceeding under the umbrella of the same multi-year roadmap, even though they concern different market segments, digital assets on one hand and account-data-sharing infrastructure on the other. Both developments point toward a BCU actively expanding and formalising the categories of entity that may participate in Uruguay's payments and digital-asset markets, rather than a BCU narrowing market access.

The evidentiary basis for the VASP authorisation finding is strong at the level of the underlying legal instrument, sourced to Tier-1 primary material for the finalisation and transitional-window mechanics. The Open Finance bill approval, by contrast, is corroborated only at Probable confidence via secondary reporting (Mobile Money LatAm), since the bill text itself was not independently retrieved this cycle; the approval date of 5 June 2026 should be read with that sourcing caveat in mind even as the general direction, that a formal Open Finance framework is advancing through the BCU's own legislative process, is well supported by the roadmap document itself.

Outlook

The operative window through 31 March 2027 will determine how much of Uruguay's existing virtual-asset operator population converts from unauthorised to authorised status, continues in pending-review status, or exits the market rather than complete the authorisation process. In parallel, the Open Finance bill's progress through the remaining legislative steps after Board approval is the item to track for the broader market-access agenda; a Board approval is a necessary but not sufficient step toward a codified Open Finance regime, and the roadmap's own five-year horizon suggests further market-access instruments, beyond these two, should be expected to emerge from the same strategic document over the multi-year period ahead.

Stablecoins & Digital Money

Uruguay's Banco Central del Uruguay finalised a definitive authorisation regime for virtual-asset service providers via Circular N° 2507, published 16 July 2026, which incorporates the framework into the Recopilación de Normas del Mercado de Valores. The regime covers exchange, transfer and custody of virtual assets, and sits within BCU's broader 2026-2030 Payment System Roadmap, which names eventual integration of stable virtual assets into the payment system as a strategic direction rather than a near-term operational commitment.

For custody-service providers specifically, the regime sets prudential thresholds: a minimum net worth of UI 1,000,000, a BCU guarantee of no less than UI 600,000, and a standing deposit at BCU of at least UI 50,000. These figures derive from law-firm commentary on the Circular's provisions rather than from independently retrieved primary text of the Circular itself.

Existing PSAV operators are afforded a registration window running from 1 September 2026 to 31 March 2027, during which they may continue operating while their applications are processed, with general compliance across all Circular N° 2507 provisions due by 30 June 2027. This staged timeline distinguishes the regime's legal finalisation from its practical, on-the-ground implementation, which remains incomplete until mid-2027.

Outlook

The two dates to track are 31 March 2027, when the registration window for existing PSAV operators closes, and 30 June 2027, the general compliance deadline for the full Circular. Whether BCU's roadmap commitment to eventual stable-virtual-asset integration into the payment system advances beyond a strategic goal into concrete rulemaking is a separate question not yet addressed by Circular N° 2507 itself.

Operational Resilience & Critical Infrastructure

Uruguay's Banco Central has reinforced client-authentication requirements for electronic payment instruments, with the main amendments taking effect on 1 October 2026 through Circular N° 249, which substitutes article 364.1 of the Recopilación de Normas de Regulación y Control del Sistema Financiero. The rule requires two-factor authentication across a broad set of digital-channel touchpoints: general access to digital channels, transfers and payments, non-presential loan applications, and any change to sensitive client data. This is a meaningfully broader scope than an authentication rule confined to transaction-initiation alone, since it extends the control point to channel access itself.

The obliged population under the measure is wide, spanning banks, financial-intermediation cooperatives, credit administrators, financial-services firms, exchange houses, fund-transfer companies and peer-to-peer lending platforms. This breadth means the operational-resilience uplift touches both traditional deposit-taking institutions and a range of non-bank payment and lending intermediaries operating in Uruguay, without the rule drawing a differentiated compliance path between the two categories based on the evidence available this cycle.

Coverage of the measure rests on secondary press commentary rather than the primary BCU circular text itself, which was not directly located this cycle. The direction of travel, however, is consistent: Uruguay's payments regulator has been moving from narrower, transaction-triggered security requirements toward a more general digital-channel authentication standard, and the October 2026 effective date marks the most recent step in that trajectory.

Outlook

The principal item to watch is whether the primary circular text becomes available for direct review, which would allow confirmation of the precise scope and any exemptions within the obliged-entity population. More broadly, the trajectory toward broader digital-channel authentication requirements suggests further operational-resilience measures may follow, particularly if incident patterns in the Uruguayan payments market continue to implicate digital-channel access points rather than transaction-specific vectors alone.

Product Innovation & Market Development

Banco Central del Uruguay, via Resolución N° 145/2026, remitted two draft bills to the Ministry of Economy and Finance this cycle: a regulatory sandbox bill intended to support financial and payments innovation, and an Open Finance (Sistema de Finanzas Abiertas) bill that would mandate interoperable, consent-based data-sharing across financial-services providers. Both bills were sent to MEF rather than directly to Parliament, reflecting their current pre-legislative stage.

The Open Finance proposal is structurally significant because it would introduce a consent-based data-portability mandate into Uruguay's financial-services landscape, a product-access regulatory theme distinct from any single product launch. The regulatory sandbox, by contrast, is a framework mechanism intended to lower the barrier for testing new financial and payments products under supervised conditions, rather than itself constituting a product-access mandate.

Both proposals form part of BCU's coordinated payments-modernisation agenda for the 2026-2030 period, which also encompasses the virtual-asset authorisation regime and the e-money institution resilience tightening tracked elsewhere this cycle.

Outlook

The key open question is whether either bill advances from remission to the Ministry of Economy and Finance into formal parliamentary introduction. Until that step occurs, both the sandbox and the Open Finance framework remain proposals rather than binding law.

Commercial Intelligence & Fintech

Infinia, a company connecting traditional banking rails to digital-asset infrastructure, closed an oversubscribed Series A funding round of US$13.5 million, led by Bain Capital and Variant Fund, announced between 9 and 16 July 2026. The round's amount is publicly disclosed at US$13.5 million; no further valuation or use-of-proceeds detail beyond the headline round size has been located.

This discrete commercial event occurred contemporaneously with BCU's finalisation of the PSAV authorisation regime under Circular N° 2507, also dated July 2026, though the two developments are reported independently with no sourced claim connecting them causally.

Outlook

No further disclosed terms of the Infinia round beyond the amount, lead investors and round stage have been located this cycle.