title: Uruguay Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/uruguay/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Uruguay UY schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 63 sourced findings · 143 sources in the cumulative register 14 Modules baseline.modules[] 63 Findings modules[].findings[] 16 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) No modules moved this cycle. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal Uruguay's Banco Central tightened operational-resilience requirements for electronic payment instruments this cycle, with a reinforced two-factor authentication regime entering into force on 1 October 2026 under Circular N° 249, which substitutes article 364.1 of the Recopilación de Normas de Regulación y Control del Sistema Financiero. The new rule mandates two-factor client authentication for digital-channel access generally, not only for transfers and payments, extending to non-presential loan applications and changes to sensitive client data. The obliged population spans banks, financial-intermediation cooperatives, credit administrators, financial-services firms, exchange houses, fund-transfer companies and peer-to-peer lending platforms, giving the measure broad reach across Uruguay's banked and non-bank payment-services landscape alike. #### Other Developments None evidenced this cycle beyond the Lead Signal item; the single cleared module this cycle is Operational Resilience & Critical Infrastructure. #### Cross-Monitor Connections The reinforced-authentication regime connects to financial-crime-adjacent monitoring insofar as stronger client-authentication controls at the point of digital-channel access and transaction initiation bear on fraud and account-takeover risk, a dimension more fully developed in Financial Integrity Monitor coverage of Uruguay's AML/CFT architecture where professional-liability and obliged-entity perimeter changes are tracked separately. #### Outlook The primary open question is whether Uruguay's payments regulator extends the authentication-hardening trajectory further, from narrow transaction-triggers toward a more general digital-channel access standard, a direction the newly in-force rule already partially embodies. The primary BCU circular text was not directly retrieved this cycle, with current coverage resting on secondary press commentary; confirmation against the official circular text would strengthen the evidentiary basis for this finding going forward. _2 earlier updates not shown here._ ###### Standing brief · as of 8 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Uruguay's virtual-asset regulatory perimeter has crossed a compliance threshold that will reshape how stablecoin-adjacent providers operate in the market. The 30 June 2026 deadline for existing operators to comply with Ley 20.345, enacted in September 2024, has now passed, bringing Proveedores de Servicios de Activos Virtuales Financieros (PSAVF) — providers of stable or exchange-type virtual assets treated as e-money-equivalent — under a Banco Central del Uruguay (BCU)-supervised licensing perimeter distinct from non-financial virtual-asset providers. The law requires minimum capital of 1,500,000 UI, a 50,000 UI BCU deposit, and a 2,000,000 UI guarantee for PSAVF authorisation. This sits alongside BCU's separate conceptual framework, under which issuers of stable virtual assets are treated as e-money issuers regulated under existing Sistema de Pagos rules rather than a bespoke stablecoin statute — meaning Uruguay has chosen to fold stablecoin-adjacent activity into its existing e-money licensing architecture rather than create a parallel regime. Dedicated stablecoin/RWA-specific reserve and redemption rules remain unenacted pending further BCU proposals, an acknowledged gap in the current framework. #### Other Developments Uruguay's payments licensing architecture continues to rest on Ley 19.210 and the BCU's Recopilación de Normas del Sistema de Pagos (RNSP) Libro VII, which establish the Instituciones Emisoras de Dinero Electrónico (IEDE) non-bank licensing route alongside the conventional bank/Institución de Intermediación Financiera (IIF) route, most recently refined via Circular 2.467 (29 October 2024). Client-fund protection under this regime is anchored in Ley 19.210 article 5, which mandates that IEDEs hold customer funds in segregated "patrimonio de afectación" trust accounts, with the IEDE acting as fiduciary and e-money holders benefiting from statutory insolvency-remoteness. Operational resilience obligations have also tightened: from 1 July 2026, IEDEs must periodically report cybersecurity-capability information to BCU under a graduated supervision scheme anchored on AGESIC's national Marco de Ciberseguridad. This sits within a broader institutional push under the 2026-2030 Payments Roadmap, which this cycle also saw BCU's Directorio approve a Sistema de Finanzas Abiertas (Open Finance) anteproyecto de ley on 5 June 2026, and BCU send the Ministry of Economy and Finance a regulatory-sandbox anteproyecto (Resolución 145/2026) permitting temporary authorisations of up to 12 months, renewable for a further 12 months, for innovative payments activities. On the corridor side, BCU and Argentina's BCRA signed a new Sistema de Pagos en Moneda Local (SML) Reglamento Operativo on 5 September 2023, enabling local-currency UYU/ARS trade settlement outside USD correspondent chains, complementing the longstanding Uruguay-Brazil SML leg. Card-related conduct remains structurally constrained by Ley N°18.212, whose implicit-rate usury methodology caps total card-related issuer charges, while merchant-acceptance rules under Ley 19.210 prohibit minimum-purchase thresholds for debit/e-money payments and require cash discounts to be passed through to debit-card payment where offered. On the enforcement side, BCU fined Banco Bandes Uruguay 650,000 UI (~US$91,000) in January 2025 for repeated AML/CFT non-compliance, part of a pattern of prior sanctions for the same violation category. Commercially, dLocal — Uruguay's first unicorn and a Nasdaq-listed cross-border payments processor that reached a US$9.5bn valuation — announced in June 2025 plans to acquire African payments provider AZA Finance for a reported US$150 million, reinforcing the country's outsized fintech-export profile. #### Cross-Monitor Connections Uruguay's AML/CFT findings this cycle carry significance beyond WPM's payments-market-access remit. The Unidad de Información y Análisis Financiero (UIAF) received 7,433 suspicious-transaction reports between 2014 and 2024 but these generated only 124 investigations, a conversion rate that points to a structural enforcement-effectiveness gap. Combined with the Banco Bandes sanction and the amendment of Uruguay's primary AML/CFT statute, Ley 19.574, by Ley 20.469 (19 March 2026), these illicit-finance-adjacent findings have been flagged to the Financial Intelligence Monitor (FIM) rather than analysed further here, consistent with WPM's scope boundary treating illicit-finance use of payment instruments as a FIM cross-reference rather than a WPM conclusion. #### Outlook Several forward markers will shape Uruguay's payments-regulatory trajectory over the coming quarters. The regulatory-sandbox anteproyecto and the Open Finance anteproyecto are both expected to advance toward parliamentary consideration in the second half of 2026, following their respective BCU board and ministry submissions this cycle. Post-deadline enforcement posture for existing PSAV operators under Ley 20.345 has not yet been confirmed and will be a marker to watch. Dedicated stablecoin/RWA-specific reserve and redemption rules remain pending beyond the current PSAV framework, with further BCU proposals anticipated later in 2026. Taken together, the cyber-reporting mandate, the Open Finance and sandbox initiatives, and the still-open stablecoin rulemaking gap point to an accelerating institutional payments-modernisation agenda layered onto an already mature bank/non-bank licensing and safeguarding baseline. trust tier: ai_unverified ###### Latest update · 11 October 2026 #### Regulatory Status Uruguay's payments regulatory landscape saw coordinated movement this cycle across three fronts under Banco Central del Uruguay stewardship. First, Circular N° 2507 (16 July 2026) finalised a definitive authorisation regime for virtual-asset service providers, with a registration window to 31 March 2027 and general compliance due 30 June 2027. Second, BCU tightened cybersecurity and operational-resilience requirements for e-money institutions (IEDE), including daily consolidated balance reporting and extended strong-customer-authentication coverage. Third, BCU remitted two draft bills to the Ministry of Economy and Finance: a regulatory sandbox and an Open Finance framework mandating consent-based data-sharing. Separately, Infinia, a digital-asset-infrastructure company, closed a US$13.5 million Series A led by Bain Capital and Variant Fund. #### Outlook Watch the PSAV registration window close (31 March 2027) and general compliance deadline (30 June 2027), and whether the sandbox and Open Finance bills progress from MEF remission into formal parliamentary introduction. ###### Standing brief · as of 8 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Uruguay operates a mature, multi-layered payments regulatory framework anchored in Ley 19.210 and BCU's Recopilación de Normas del Sistema de Pagos, which together establish a dual bank/non-bank (IEDE) licensing architecture with statutory client-fund segregation via "patrimonio de afectación" trust accounts and insolvency-remoteness for e-money holders. This baseline is being actively layered with new obligations: a BCU-supervised licensing perimeter for stable/exchange virtual-asset providers (PSAVF) under Ley 20.345, whose 30 June 2026 compliance deadline for existing operators has now passed; mandatory periodic cyber-capability reporting for IEDEs from 1 July 2026 under a graduated BCU/AGESIC supervisory scheme; and two parallel innovation-policy tracks — a regulatory-sandbox anteproyecto (Resolución 145/2026) and an Open Finance anteproyecto de ley approved by BCU's Directorio on 5 June 2026 — both forming part of the 2026-2030 Payments Roadmap. Card-issuer pricing remains structurally capped under the usury-rate methodology of Ley N°18.212, and merchant-acceptance rules under Ley 19.210 protect card/e-money payment parity with cash. On the corridor side, Uruguay maintains active Mercosur SML local-currency settlement arrangements with both Argentina (updated September 2023) and Brazil, while BCU directly operates the country's central settlement infrastructure, creating a bank/non-bank access asymmetry that recurs across several modules. Enforcement activity includes a January 2025 AML/CFT sanction against Banco Bandes Uruguay and a documented low conversion rate from suspicious-transaction reports to investigations, both flagged cross-monitor to FIM given their illicit-finance dimension. Commercially, Uruguay's profile is anchored by dLocal, a Nasdaq-listed unicorn whose announced acquisition of AZA Finance (reported at $150 million, June 2025) exemplifies the jurisdiction's outsized fintech-export footprint relative to its domestic market size. #### Outlook Uruguay's near-term regulatory trajectory is liberalising and accelerating on the innovation-policy front, with the sandbox and Open Finance anteproyectos both expected to move toward parliamentary consideration in the second half of 2026, while the PSAV compliance deadline's post-enforcement posture and the still-pending dedicated stablecoin/RWA rules remain the principal near-term uncertainties. The jurisdiction's overall risk profile is assessed as moderate, combining a mature bank/non-bank licensing and safeguarding baseline with pockets of accelerating reform across digital-money, resilience, and open-finance policy tracks. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-07-04 Uruguay's BCU finalised comprehensive VASP authorisation Resolution SSF No. 2026-444 under Ley N° 20.345, with existing operators able to apply 1 Sept 2026-31 Mar 2027, and published a 2026-2030 Payments System Roadmap targeting Open Banking, ISO 20022, and eventual stablecoin/CBDC integration. Standing sub-brief · as of 8 July 2026 162 words · last cycle 2026-10-04 #### Licensing, Authorisation & Market Access Uruguay's payments licensing architecture rests on a mature dual-track model. Ley N°19.210 and the BCU's Recopilación de Normas del Sistema de Pagos (RNSP) Libro VII establish a non-bank e-money issuer licence — the Institución Emisora de Dinero Electrónico (IEDE) — that coexists with the conventional bank/Institución de Intermediación Financiera (IIF) licensing route. This dual-licence design gives non-bank payment institutions a direct, purpose-built authorisation path rather than requiring a banking licence to issue e-money, while banks retain their own established route into the same payments space. The regime's most recent refinement came via Circular 2.467, issued 29 October 2024, which updated IEDE authorisation requirements within the existing RNSP Libro VII framework rather than replacing it. #### Outlook No new licensing-perimeter changes are flagged for the coming cycle beyond the Circular 2.467 update already in force; the dual bank/non-bank IEDE architecture stands as Uruguay's settled market-access baseline against which the newer PSAV (W2) and sandbox (W9) initiatives are being layered. Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access Banco Central del Uruguay has finalised a comprehensive licensing regime for virtual-asset service providers, completing Resolution SSF No. 2026-444 under the authority of Ley N degrees 20.345 and adding a new Title VII-TER to the Compilation of Securities Market Regulations. This is a non-bank-focused market-access instrument: the authorisation requirement targets legal entities providing virtual-asset services on a regular and professional basis where the underlying assets are deemed by the BCU to be financial instruments, a population that sits outside the traditional bank-licensing perimeter. The transitional design is the key market-access mechanic to track. Existing operators may apply for BCU authorisation during a window running from 1 September 2026 through 31 March 2027, and critically, may continue operating while their application is under review, meaning market presence is not interrupted by the review process itself. New entrants face a materially different standard: authorisation must be secured before any operation may commence, with no equivalent continuity allowance. This bank/non-bank and incumbent/new-entrant asymmetry is the structural spine of the licensing development. This licensing event sits inside a considerably broader strategic frame. The BCU has published its Payments System Roadmap 2026-2030, a five-pillar document, and its Board approved, on 5 June 2026, draft legislation for a national Open Finance System, described as one of the roadmap's core strategic lines. The VASP authorisation regime and the Open Finance bill are therefore both licensing/market-access developments proceeding under the umbrella of the same multi-year roadmap, even though they concern different market segments, digital assets on one hand and account-data-sharing infrastructure on the other. Both developments point toward a BCU actively expanding and formalising the categories of entity that may participate in Uruguay's payments and digital-asset markets, rather than a BCU narrowing market access. The evidentiary basis for the VASP authorisation finding is strong at the level of the underlying legal instrument, sourced to Tier-1 primary material for the finalisation and transitional-window mechanics. The Open Finance bill approval, by contrast, is corroborated only at Probable confidence via secondary reporting (Mobile Money LatAm), since the bill text itself was not independently retrieved this cycle; the approval date of 5 June 2026 should be read with that sourcing caveat in mind even as the general direction, that a formal Open Finance framework is advancing through the BCU's own legislative process, is well supported by the roadmap document itself. #### Outlook The operative window through 31 March 2027 will determine how much of Uruguay's existing virtual-asset operator population converts from unauthorised to authorised status, continues in pending-review status, or exits the market rather than complete the authorisation process. In parallel, the Open Finance bill's progress through the remaining legislative steps after Board approval is the item to track for the broader market-access agenda; a Board approval is a necessary but not sufficient step toward a codified Open Finance regime, and the roadmap's own five-year horizon suggests further market-access instruments, beyond these two, should be expected to emerge from the same strategic document over the multi-year period ahead. **Sources and findings (6)** 1. T1 [https://www.bcu.gub.uy/Sistema-de-Pagos/Leyes_y_Decretos/Ley%2019210.pdf](https://www.bcu.gub.uy/Sistema-de-Pagos/Leyes_y_Decretos/Ley%2019210.pdf) retrieved 2026-07-04 2. T1 [https://www.bcu.gub.uy/Acerca-de-BCU/Normativa/Documents/Recopilacion-de-Normas/Sistema-de-Pagos/LIBRO%20VII.pdf](https://www.bcu.gub.uy/Acerca-de-BCU/Normativa/Documents/Recopilacion-de-Normas/Sistema-de-Pagos/LIBRO%20VII.pdf) retrieved 2026-07-04 3. T1 [https://www.gub.uy/tramites/registro-instituciones-emisoras-dinero-electronico-iede](https://www.gub.uy/tramites/registro-instituciones-emisoras-dinero-electronico-iede) retrieved 2026-07-04 4. T3 [https://www.180.com.uy/articulo/56994_como-funciona-el-dinero-electronico](https://www.180.com.uy/articulo/56994_como-funciona-el-dinero-electronico) retrieved 2026-07-04 5. T3 [https://www.colibri.udelar.edu.uy/jspui/bitstream/20.500.12008/52060/1/Florencia%20Piazza_Finanzas.pdf](https://www.colibri.udelar.edu.uy/jspui/bitstream/20.500.12008/52060/1/Florencia%20Piazza_Finanzas.pdf) retrieved 2026-07-04 6. T3 [https://gpa.uy/informes/economia-y-finanzas/regulacion-de-los-medios-de-pago-electronicos-4778](https://gpa.uy/informes/economia-y-finanzas/regulacion-de-los-medios-de-pago-electronicos-4778) retrieved 2026-07-04 ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-07-04 Safeguarding of IEDE customer funds is legally mandated via segregated trust-style accounts at licensed IIFs (Ley 19.210 art. 5), with fiduciary responsibility on the IEDE and BCU discretion over liquid-asset placement. Conduct/promotions oversight sits with the BCU Superintendencia de Servicios Financieros (SSF), which issues consumer-protection advertencias and enforces mis-promotion cases. Standing sub-brief · as of 8 July 2026 166 words · last cycle 2026-07-08 #### Conduct, Safeguarding & Financial Promotions Client-fund protection for Uruguay's non-bank e-money sector is anchored directly in statute. Ley 19.210 article 5 mandates that licensed IEDEs hold customer funds in segregated "patrimonio de afectación" trust accounts, with the IEDE acting as fiduciary responsibility for those funds. The statute provides for insolvency-remoteness: e-money holders' claims on the segregated trust are carved out from the IEDE's general insolvency estate, giving Uruguay's non-bank e-money customers a safeguarding standard broadly comparable to trust-based segregation regimes seen elsewhere. This mechanism sits at the centre of the bank-PSP vs non-bank-PI/EMI distinction that runs through Uruguay's payments framework: non-bank IEDEs operate under this bespoke trust-based safeguarding rule rather than the prudential capital/liquidity regime applied to banks. #### Outlook The safeguarding mechanism itself shows no signs of near-term legislative change; the more active conduct-side developments this cycle sit in adjacent modules — notably the mandatory cyber-capability reporting obligation (W3) and the Open Finance and sandbox anteproyectos (W9) — rather than in the core trust-account safeguarding rule. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.bcu.gub.uy/Leyes%20y%20Decretos/Ley19.210.pdf](https://www.bcu.gub.uy/Leyes%20y%20Decretos/Ley19.210.pdf) retrieved 2026-07-04 2. T2 [https://uy.vlex.com/vid/ley-n-19210-ley-644725877](https://uy.vlex.com/vid/ley-n-19210-ley-644725877) retrieved 2026-07-04 3. T1 [https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdf](https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdf) retrieved 2026-07-04 4. T1 [https://www.impo.com.uy/inclusionfinanciera/](https://www.impo.com.uy/inclusionfinanciera/) retrieved 2026-07-04 ### W2 Stablecoins & Digital Money Probable confirmed 2026-07-04 Uruguay treats e-money (dinero electrónico) as a mature, BCU-authorised category under Ley 19.210. Separately, Ley N° 20.345 (Sept 2024) created a Proveedores de Servicios de Activos Virtuales (PSAV) perimeter, splitting financial (PSAVF, including stable/exchange virtual assets treated as e-money-equivalent) from non-financial PSAV, with capital/deposit/guarantee thresholds and a 30 June 2026 compliance deadline; stablecoin/RWA-specific rules remain a stated gap pending further BCU proposals. Horizon · 2026-Q4 (±multi_year) Dedicated stablecoin/RWA-specific rules anticipated beyond current PSAV framework_consultation · TT3_ Horizon · 2026-06-30 (±quarter) PSAV existing-operator compliance deadline (Ley 20.345)_in_force · T_ Horizon · 2026-Q4 (±multi_year) Dedicated stablecoin/RWA-specific rules anticipated beyond current PSAV framework_consultation · T_ Horizon · 2026-06-30 (±quarter) PSAV Financiero (PSAVF) compliance deadline for existing virtual-asset operators (Ley 20.345)_in_force · TT3_ Standing sub-brief · as of 8 July 2026 214 words · last cycle 2026-10-11 #### Stablecoins & Digital Money Uruguay's stablecoin-adjacent regulatory perimeter reached a significant compliance milestone this cycle. Ley 20.345, enacted in September 2024, creates a BCU-supervised licensing perimeter for Proveedores de Servicios de Activos Virtuales Financieros (PSAVF) — providers of stable or exchange-type virtual assets treated as e-money-equivalent — splitting this category from non-financial virtual-asset providers (PSAV) who fall outside this financial-sector perimeter. Existing operators had until 30 June 2026 to comply, a deadline that has now passed; the licensing regime requires minimum capital of 1,500,000 UI, a 50,000 UI deposit with BCU, and a 2,000,000 UI guarantee for PSAVF authorisation. Separately, BCU's own conceptual framework document treats issuers of stable virtual assets as e-money issuers regulated under existing Sistema de Pagos rules, rather than creating a bespoke stablecoin statute — an approach that folds stablecoin-adjacent activity into Uruguay's existing e-money licensing architecture. Dedicated stablecoin/RWA-specific reserve and redemption rules remain unenacted beyond this framework, an acknowledged regulatory gap. #### Outlook Post-deadline enforcement posture for PSAV operators that have not yet achieved compliance is not yet confirmed and is a near-term marker to watch. Dedicated stablecoin/RWA-specific rules are anticipated as a further BCU proposal but remain at a consultation-adjacent stage with no confirmed legislative date, keeping this module on an escalating trajectory into the second half of 2026. Periodic update · new data 2026-10-11 #### Stablecoins & Digital Money Uruguay's Banco Central del Uruguay finalised a definitive authorisation regime for virtual-asset service providers via Circular N° 2507, published 16 July 2026, which incorporates the framework into the Recopilación de Normas del Mercado de Valores. The regime covers exchange, transfer and custody of virtual assets, and sits within BCU's broader 2026-2030 Payment System Roadmap, which names eventual integration of stable virtual assets into the payment system as a strategic direction rather than a near-term operational commitment. For custody-service providers specifically, the regime sets prudential thresholds: a minimum net worth of UI 1,000,000, a BCU guarantee of no less than UI 600,000, and a standing deposit at BCU of at least UI 50,000. These figures derive from law-firm commentary on the Circular's provisions rather than from independently retrieved primary text of the Circular itself. Existing PSAV operators are afforded a registration window running from 1 September 2026 to 31 March 2027, during which they may continue operating while their applications are processed, with general compliance across all Circular N° 2507 provisions due by 30 June 2027. This staged timeline distinguishes the regime's legal finalisation from its practical, on-the-ground implementation, which remains incomplete until mid-2027. #### Outlook The two dates to track are 31 March 2027, when the registration window for existing PSAV operators closes, and 30 June 2027, the general compliance deadline for the full Circular. Whether BCU's roadmap commitment to eventual stable-virtual-asset integration into the payment system advances beyond a strategic goal into concrete rulemaking is a separate question not yet addressed by Circular N° 2507 itself. **1 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Stablecoins & Digital Money Uruguay's stablecoin posture remains at the roadmap-policy stage rather than the codified-regulation stage, but this cycle surfaces the first explicit statement of intent on the subject from the Banco Central del Uruguay. The BCU's Payments System Roadmap 2026-2030 describes an objective to establish conditions for the integration of stable virtual assets into the national payment system, framed under the roadmap's stated principles of stability, security, competition, interoperability and risk management. This is a policy-level commitment rather than a binding instrument: no reserve, redemption, or issuance rule specific to stablecoins has been identified this cycle, and the roadmap language itself should be read as setting direction rather than establishing operative requirements. The stablecoin objective sits within a roadmap that also commits the BCU to continued central bank digital currency analysis and a comprehensive review of payment-system operating costs and access conditions, suggesting that stable virtual assets are being considered by the BCU as one component of a broader digital-money and payment-modernisation agenda rather than as an isolated initiative. The five-pillar structure of the roadmap appears designed to sequence these initiatives, though the specific sequencing and prioritisation of the stablecoin objective relative to the roadmap's other pillars was not detailed in material available this cycle. The confidence level attached to this finding is Probable rather than Confirmed, and the underlying evidence is a single Tier-3 secondary report rather than direct retrieval of the roadmap's stablecoin-specific language; the roadmap document itself, sourced at Tier-1, confirms the general shape of the multi-year strategic direction but the stablecoin-specific framing quoted this cycle traces to secondary commentary. This should be read as a genuine but early-stage signal: the BCU has stated an intention rather than proposed or enacted a stablecoin-specific regulatory instrument. #### Outlook With a 2030 target horizon attached to the roadmap's stable-virtual-asset integration objective, near-term development should be expected to take the form of consultation or framework-design activity rather than an operative stablecoin regime landing within the next one to two cycles. The more immediate, higher-confidence VASP authorisation regime finalised this cycle under Resolution SSF No. 2026-444 does not itself constitute a stablecoin-specific instrument, but firms issuing or dealing in stable virtual assets in Uruguay should expect that any future stablecoin-specific framework will likely be built as an extension of, or alongside, the VASP authorisation architecture already in place, given the shared supervisory authority and shared roadmap sponsorship. **Sources and findings (5)** 1. T1 [https://uy.vlex.com/vid/ley-n-19210-ley-644725877](https://uy.vlex.com/vid/ley-n-19210-ley-644725877) retrieved 2026-07-04 2. T1 [https://www.bcu.gub.uy/NOVA-BCU/SiteAssets/Marco%20conceptual%20para%20el%20tratamiento%20de%20Activos%20Virtuales%20en%20Uruguay.pdf](https://www.bcu.gub.uy/NOVA-BCU/SiteAssets/Marco%20conceptual%20para%20el%20tratamiento%20de%20Activos%20Virtuales%20en%20Uruguay.pdf) retrieved 2026-07-04 3. T2 [https://www.guyer.com.uy/informes-&-noticias/proveedores-de-servicios-de-activos-virtuales-se-aprueba-proyecto-de-ley-en-uruguay](https://www.guyer.com.uy/informes-&-noticias/proveedores-de-servicios-de-activos-virtuales-se-aprueba-proyecto-de-ley-en-uruguay) retrieved 2026-07-04 4. T3 [https://ecosistemastartup.com/regulacion-cripto-uruguay-1-5m-ui-minimo-frena-startups/](https://ecosistemastartup.com/regulacion-cripto-uruguay-1-5m-ui-minimo-frena-startups/) retrieved 2026-07-04 5. T3 [https://www.criptonoticias.com/comunidad/regulacion-criptomonedas-uruguay-martin-benitez/](https://www.criptonoticias.com/comunidad/regulacion-criptomonedas-uruguay-martin-benitez/) retrieved 2026-07-04 ### W3 Operational Resilience & Critical Infrastructure Probable confirmed 2026-07-04 BCU is building a graduated cyber-supervision regime for the payments system anchored on AGESIC's national Marco de Ciberseguridad (MCU), starting with mandatory periodic cyber-capability reporting by IEDEs (from 1 July) and continuity/outsourcing-governance updates via Circular 2486; the 2026-2030 Payments Roadmap makes cybersecurity and operational continuity an explicit strategic pillar alongside ISO 20022 migration. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/uruguay/) Horizon · 2026-07-01 (±quarter) IEDE mandatory periodic cyber-capability reporting commences_in_force · T_ Horizon · 2026-07-01 (±quarter) Mandatory IEDE cybersecurity-capability periodic reporting to BCU_in_force · TT3_ Standing sub-brief · as of 8 July 2026 132 words · last cycle 2026-10-18 #### Operational Resilience & Critical Infrastructure Uruguay's operational-resilience regime for e-money issuers has moved from general expectation to a codified reporting obligation this cycle. From 1 July 2026, Instituciones Emisoras de Dinero Electrónico (IEDEs) are required to periodically report cybersecurity-capability information to BCU, under a graduated cyber-supervision scheme anchored on AGESIC's national Marco de Ciberseguridad (MCU). This gives BCU a formal, recurring channel of visibility into IEDE cyber-resilience postures, moving the domestic framework toward the kind of graduated, reporting-based oversight seen in more developed operational-resilience regimes internationally, without yet constituting a full DORA-equivalent regime. #### Outlook With the reporting obligation only just in force, the near-term marker to watch is the cadence and substance of BCU's first reporting cycle under this scheme, and whether further Circular-level detail follows to specify reporting templates or thresholds. Periodic update · new data 2026-10-18 #### Operational Resilience & Critical Infrastructure Uruguay's Banco Central has reinforced client-authentication requirements for electronic payment instruments, with the main amendments taking effect on 1 October 2026 through Circular N° 249, which substitutes article 364.1 of the Recopilación de Normas de Regulación y Control del Sistema Financiero. The rule requires two-factor authentication across a broad set of digital-channel touchpoints: general access to digital channels, transfers and payments, non-presential loan applications, and any change to sensitive client data. This is a meaningfully broader scope than an authentication rule confined to transaction-initiation alone, since it extends the control point to channel access itself. The obliged population under the measure is wide, spanning banks, financial-intermediation cooperatives, credit administrators, financial-services firms, exchange houses, fund-transfer companies and peer-to-peer lending platforms. This breadth means the operational-resilience uplift touches both traditional deposit-taking institutions and a range of non-bank payment and lending intermediaries operating in Uruguay, without the rule drawing a differentiated compliance path between the two categories based on the evidence available this cycle. Coverage of the measure rests on secondary press commentary rather than the primary BCU circular text itself, which was not directly located this cycle. The direction of travel, however, is consistent: Uruguay's payments regulator has been moving from narrower, transaction-triggered security requirements toward a more general digital-channel authentication standard, and the October 2026 effective date marks the most recent step in that trajectory. #### Outlook The principal item to watch is whether the primary circular text becomes available for direct review, which would allow confirmation of the precise scope and any exemptions within the obliged-entity population. More broadly, the trajectory toward broader digital-channel authentication requirements suggests further operational-resilience measures may follow, particularly if incident patterns in the Uruguayan payments market continue to implicate digital-channel access points rather than transaction-specific vectors alone. **1 earlier distinct update(s)** Periodic update · new data 2026-10-11 #### Operational Resilience & Critical Infrastructure Banco Central del Uruguay has tightened cybersecurity and operational-resilience requirements specifically for Instituciones de Dinero Electrónico (IEDE), Uruguay's e-money institutions. The new requirements include daily consolidated client-balance reporting, giving the regulator a more frequent view of IEDE balance positions than previously required, and an extension of strong-customer-authentication obligations to cover same-user inter-institution transfers and non-face-to-face loan applications, closing gaps in authentication coverage that previously existed around these transaction types. This tightening applies specifically to the non-bank e-money institution category rather than to banks generally, reflecting a regulatory judgment that IEDE-specific risk, including balance-reporting opacity and authentication gaps in inter-institution and remote-lending flows, warranted a dedicated response rather than a uniform rule applied across all payment-services providers. #### Outlook Whether BCU extends comparable daily-reporting or authentication requirements to other non-bank payment-services categories beyond IEDE, or conversely whether bank-operated e-money-adjacent services face equivalent tightening, is not yet addressed by the sourced material for this cycle. **Sources and findings (4)** 1. T2 [https://cointelegraph.es/news/uruguay-exige-a-emisoras-de-dinero-electrnico-reportar-sus-capacidades-de-ciberseguridad](https://cointelegraph.es/news/uruguay-exige-a-emisoras-de-dinero-electrnico-reportar-sus-capacidades-de-ciberseguridad) retrieved 2026-07-04 2. T3 [https://willinn.io/2025/09/25/bcu-normativa-continuidad-respaldos-2025/](https://willinn.io/2025/09/25/bcu-normativa-continuidad-respaldos-2025/) retrieved 2026-07-04 3. T1 [https://www.gub.uy/presidencia/comunicacion/noticias/banco-central-impulsa-eficiencia-seguridad-accesibilidad-del-sistema-pagos](https://www.gub.uy/presidencia/comunicacion/noticias/banco-central-impulsa-eficiencia-seguridad-accesibilidad-del-sistema-pagos) retrieved 2026-07-04 4. T3 [https://openhubnews.com/ln-uruguay-pisa-el-acelerador-fintech-con-innovacion-desde-el-bcu/](https://openhubnews.com/ln-uruguay-pisa-el-acelerador-fintech-con-innovacion-desde-el-bcu/) retrieved 2026-07-04 ### W4 Scheme & Network Compliance Probable confirmed 2026-07-04 Card-scheme and interchange-adjacent conduct is governed indirectly via the usury/interest-cap law (Ley 18.212) applied to card issuers, and directly via BCU's RNSP card-issuer/acquirer rules and a published tariff register (Aranceles Tarjetas). Acquiring has historically been near-monopolistic (single Mastercard acquirer) with multi-acquiring competition only emerging post-2021. Standing sub-brief · as of 8 July 2026 89 words · last cycle 2026-07-08 #### Scheme & Network Compliance Card-issuer pricing in Uruguay is structurally constrained by consumer-credit law rather than scheme-specific rules. Ley N°18.212, the country's usury-cap statute, subjects card issuer fees and charges to a statutory implicit-rate usury methodology that structurally caps total card-related charges, operating as a scheme-adjacent conduct constraint on issuer pricing rather than a payments-specific regulation. #### Outlook No new scheme or network-compliance developments were captured this cycle; the usury-cap methodology remains the settled structural constraint on card-issuer pricing, with multi-acquirer competition dynamics tracked separately under industry-structure and merchant-acquiring modules. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.impo.com.uy/bases/leyes/18212-2007](https://www.impo.com.uy/bases/leyes/18212-2007) retrieved 2026-07-04 2. T1 [https://usuariofinanciero.bcu.gub.uy/tasas/topes-de-tasas-de-interes-y-usura/](https://usuariofinanciero.bcu.gub.uy/tasas/topes-de-tasas-de-interes-y-usura/) retrieved 2026-07-04 3. T3 [https://www.montevideo.com.uy/Negocios-y-Tendencias/La-nueva-competencia-por-procesar-las-ventas-de-los-comercios-uruguayos-uc817940](https://www.montevideo.com.uy/Negocios-y-Tendencias/La-nueva-competencia-por-procesar-las-ventas-de-los-comercios-uruguayos-uc817940) retrieved 2026-07-04 4. T1 [https://www.bcu.gub.uy/Sistema-de-Pagos/Documents/Aranceles-Tarjetas/Aranceles%20publico.xlsx](https://www.bcu.gub.uy/Sistema-de-Pagos/Documents/Aranceles-Tarjetas/Aranceles%20publico.xlsx) retrieved 2026-07-04 ### W5 Payment Corridor Dynamics Probable confirmed 2026-07-04 Uruguay's principal formal cross-border corridor infrastructure is the Mercosur Sistema de Pagos en Moneda Local (SML) with Brazil (since 2010) and Argentina (updated 2023), enabling local-currency trade settlement outside USD correspondent chains. The broader corridor picture is dominated by heavy USD dollarization of deposits/savings and an active BCU de-dollarization push, alongside emerging bilateral-currency ambitions in the 2026-2030 roadmap. Standing sub-brief · as of 8 July 2026 120 words · last cycle 2026-07-08 #### Payment Corridor Dynamics Uruguay's principal formal payment corridors run through the Mercosur Sistema de Pagos en Moneda Local (SML) network rather than direct USD correspondent chains. BCU and Argentina's central bank, BCRA, signed a new SML Reglamento Operativo on 5 September 2023, updating the bilateral local-currency (UYU/ARS) trade-settlement agreement and enabling settlement outside USD correspondent chains. This complements the earlier Uruguay-Brazil SML leg established in 2010, giving Uruguay two active local-currency corridors alongside its still-dominant USD-denominated cross-border flows. #### Outlook The SML corridors remain stable and administratively current; no near-term expansion or renegotiation is flagged this cycle. The more active corridor-adjacent development is BCU's broader de-dollarization disclosure initiative, tracked under correspondent-banking (W12), rather than a change to the SML agreements themselves. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.bcu.gub.uy/Comunicaciones/Paginas/Detalle-Noticia.aspx?noticia=249&title=Nuevo-Reglamento-Operativo-del-Sistema-de-Pagos-en-Moneda-Local-(SML)-entre-Uruguay-y-Argentina](https://www.bcu.gub.uy/Comunicaciones/Paginas/Detalle-Noticia.aspx?noticia=249&title=Nuevo-Reglamento-Operativo-del-Sistema-de-Pagos-en-Moneda-Local-(SML)-entre-Uruguay-y-Argentina) retrieved 2026-07-04 2. T2 [https://www.argentina.gob.ar/justicia/derechofacil/leysimple/mercosur-transacciones-comerciales-sistema-pagos-moneda-local](https://www.argentina.gob.ar/justicia/derechofacil/leysimple/mercosur-transacciones-comerciales-sistema-pagos-moneda-local) retrieved 2026-07-04 3. T2 [https://www.busqueda.com.uy/economia/consentimiento-depositos-dolares-sera-simplemente-una-notificacion-dice-presidente-del-bcu-n5408463](https://www.busqueda.com.uy/economia/consentimiento-depositos-dolares-sera-simplemente-una-notificacion-dice-presidente-del-bcu-n5408463) retrieved 2026-07-04 4. T3 [https://tynmagazine.com/uruguay-pisa-el-acelerador-fintech-con-innovacion-desde-el-bcu/](https://tynmagazine.com/uruguay-pisa-el-acelerador-fintech-con-innovacion-desde-el-bcu/) retrieved 2026-07-04 ### W6 Industry Structure & Commercial Probable confirmed 2026-07-04 Uruguay's payments industry is bank-anchored (BROU, Santander, Itaú, BBVA dominate financial-institution complaint volume) with a historically concentrated card-acquiring segment now opening to competition via Getnet's 2021 entry, alongside a globally significant homegrown fintech, dLocal — Uruguay's first unicorn and a Nasdaq-listed cross-border payments processor. Standing sub-brief · as of 8 July 2026 114 words · last cycle 2026-07-08 #### Industry Structure & Commercial Dynamics Uruguay's payments industry structure is defined by a striking asymmetry between a concentrated domestic banking sector and one globally significant non-bank export champion. dLocal, Uruguay's first unicorn, is a Nasdaq-listed cross-border payments processor that reached a US$9.5bn valuation, making it by far the country's most globally significant private payments company. Its commercial activity — including M&A and expansion moves — is tracked in discrete form under Commercial Intelligence (W13) rather than restated here. #### Outlook dLocal's continued scale and cross-border ambitions make it the structural bellwether for Uruguay's non-bank payments-export sector; sustained growth or a material setback at dLocal would be the clearest industry-structure signal to watch in coming cycles. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdf](https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdf) retrieved 2026-07-04 2. T3 [https://en.wikipedia.org/wiki/DLocal](https://en.wikipedia.org/wiki/DLocal) retrieved 2026-07-04 3. T3 [https://www.paymentmedia.com/news-5463-santander-uruguay-compra-fintech-de-pagos-y-pisa-el-acelerador-con-getnet.html](https://www.paymentmedia.com/news-5463-santander-uruguay-compra-fintech-de-pagos-y-pisa-el-acelerador-con-getnet.html) retrieved 2026-07-04 4. T3 [https://www.ambito.com/uruguay/las-fintech-respaldan-la-ley-competitividad-su-impulso-las-finanzas-abiertas-y-al-sandbox-regulatorio-n6288219](https://www.ambito.com/uruguay/las-fintech-respaldan-la-ley-competitividad-su-impulso-las-finanzas-abiertas-y-al-sandbox-regulatorio-n6288219) retrieved 2026-07-04 ### W7 Legal & Litigation Probable confirmed 2026-07-04 Enforcement activity centres on BCU/SSF administrative sanctions against regulated entities, most notably a January 2025 AML fine against Banco Bandes Uruguay, set against a broader structural critique that Uruguay's AML enforcement pipeline converts few Suspicious Transaction Reports into prosecutions. Standing sub-brief · as of 8 July 2026 173 words · last cycle 2026-07-08 #### Legal & Litigation Uruguay's payments-adjacent enforcement record this cycle centres on a bank-sector AML/CFT sanction and a structural effectiveness gap in financial-crime enforcement more broadly. BCU fined Banco Bandes Uruguay 650,000 UI (approximately US$91,000) in January 2025 for repeated AML/CFT non-compliance, with the sanctioning notice citing a prior history of sanctions against the bank for the same violation category. Separately, dated context indicates that Uruguay's Unidad de Información y Análisis Financiero (UIAF) received 7,433 suspicious-transaction reports between 2014 and 2024, of which only 124 generated investigations — a conversion rate that has been assessed as pointing to a structural gap between reporting volume and enforcement outcomes. This latter data point is administrative/statistical context rather than a discrete legal action, and is carried here as a dated dashboard entry. #### Outlook The Banco Bandes case underscores BCU's willingness to impose administrative sanctions on banks for AML/CFT failures, while the low STR-to-investigation conversion rate flags a broader enforcement-capacity question for Uruguay's financial-crime supervisory chain; both threads are also flagged cross-monitor to FIM given their illicit-finance dimension. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T2 [https://www.elobservador.com.uy/economia-y-empresas/incumplimiento-severo-bcu-multo-mas-us-90-mil-al-bandes-violaciones-la-normativa-prevencion-lavado-activos-n5980236](https://www.elobservador.com.uy/economia-y-empresas/incumplimiento-severo-bcu-multo-mas-us-90-mil-al-bandes-violaciones-la-normativa-prevencion-lavado-activos-n5980236) retrieved 2026-07-04 2. T1 [https://www.bcu.gub.uy/Servicios-Financieros-SSF/Paginas/SancionesDeLaSSF.aspx](https://www.bcu.gub.uy/Servicios-Financieros-SSF/Paginas/SancionesDeLaSSF.aspx) retrieved 2026-07-04 3. T3 [https://prensamercosur.org/2026/02/04/uruguay-mantiene-baja-tasa-de-judicializacion-de-los-reportes-de-operaciones-sospechosas-id184806/](https://prensamercosur.org/2026/02/04/uruguay-mantiene-baja-tasa-de-judicializacion-de-los-reportes-de-operaciones-sospechosas-id184806/) retrieved 2026-07-04 ### W8 Merchant Acquiring & Risk Probable confirmed 2026-07-04 Merchant acceptance rules are set at the Ley 19.210 level (no obligation to accept electronic payment, no minimum-purchase thresholds, no cash-discount steering), while the acquiring market itself is transitioning from a Fiserv/Mastercard-exclusive structure to multi-acquirer competition led by Santander's Getnet. Standing sub-brief · as of 8 July 2026 104 words · last cycle 2026-07-08 #### Merchant Acquiring & Risk Merchant-facing payment-acceptance conduct in Uruguay is governed by rules under Ley 19.210. Merchants are not obligated to accept electronic payment, but where they do, they may not impose minimum-purchase thresholds for debit-card or e-money payments, nor offer cash discounts that are not equally passed through to debit-card payment. This gives Uruguay's merchant-acquiring environment a baseline conduct rule protecting card/e-money payment parity with cash at the point of sale. #### Outlook No new merchant-acceptance rule changes were captured this cycle; ongoing multi-acquirer competition in POS infrastructure is a commercial/structural dynamic tracked separately rather than a change to the underlying acceptance-conduct rule itself. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T3 [https://memory.com.uy/blog/obligaciones-fiscales/ley-de-inclusion-financiera/](https://memory.com.uy/blog/obligaciones-fiscales/ley-de-inclusion-financiera/) retrieved 2026-07-04 2. T3 [https://www.elobservador.com.uy/nota/getnet-desembarca-en-uruguay-para-facilitarle-la-operativa-a-los-comercios-2021925508](https://www.elobservador.com.uy/nota/getnet-desembarca-en-uruguay-para-facilitarle-la-operativa-a-los-comercios-2021925508) retrieved 2026-07-04 3. T3 [https://www.montevideo.com.uy/Negocios-y-Tendencias/La-nueva-competencia-por-procesar-las-ventas-de-los-comercios-uruguayos-uc817940](https://www.montevideo.com.uy/Negocios-y-Tendencias/La-nueva-competencia-por-procesar-las-ventas-de-los-comercios-uruguayos-uc817940) retrieved 2026-07-04 4. T3 [https://www.oca.com.uy/download/TasasVigentes.pdf](https://www.oca.com.uy/download/TasasVigentes.pdf) retrieved 2026-07-04 ### W9 Product Innovation & Market Development Probable confirmed 2026-07-04 Uruguay ran an early, technically successful e-Peso CBDC pilot (2017-2018) that remains dormant at legislative level but is referenced in current BCU strategy; the live innovation agenda now centres on an Open Finance anteproyecto de ley (June 2026), a regulatory sandbox bill (Resolución 145/2026), and an ISO 20022/instant-payments modernisation roadmap for 2026-2030. Horizon · 2026-Q4 (±half_year) Regulatory sandbox anteproyecto (Resolución 145/2026) advances toward Parliament_proposed · T_ Horizon · 2026-Q4 (±half_year) Open Finance anteproyecto proceeds toward parliamentary approval_proposed · T_ Horizon · 2030 (±multi_year) Payments Roadmap 2026-2030 implementation horizon (ISO 20022, Open Finance, instant payments)_proposed · TT3_ Standing sub-brief · as of 8 July 2026 175 words · last cycle 2026-10-11 #### Product Innovation & Market Development Uruguay's payments-innovation policy track advanced markedly this cycle, with two parallel BCU initiatives moving forward under the 2026-2030 Payments Roadmap. On 5 June 2026, BCU's Directorio approved a Sistema de Finanzas Abiertas (Open Finance) anteproyecto de ley, formally placing open-finance legislation on the roadmap's active track pending parliamentary process. Separately, BCU sent the Ministry of Economy and Finance a regulatory-sandbox anteproyecto, formalised as Resolución N°145/2026, which would allow temporary authorisations of up to 12 months, renewable for a further 12 months, for innovative payments activities — giving prospective entrants a defined, time-limited route to test new payments models under BCU oversight ahead of full licensing. #### Outlook Both the Open Finance and sandbox anteproyectos are expected to advance toward parliamentary consideration in the second half of 2026; their progression through Uruguay's legislative process is the principal marker to watch for this module in the coming cycles. Separately, Uruguay's e-Peso CBDC pilot (2017-2018) remains a strategic reference only, with no active legislative track — a standing gap rather than a near-term development. Periodic update · new data 2026-10-11 #### Product Innovation & Market Development Banco Central del Uruguay, via Resolución N° 145/2026, remitted two draft bills to the Ministry of Economy and Finance this cycle: a regulatory sandbox bill intended to support financial and payments innovation, and an Open Finance (Sistema de Finanzas Abiertas) bill that would mandate interoperable, consent-based data-sharing across financial-services providers. Both bills were sent to MEF rather than directly to Parliament, reflecting their current pre-legislative stage. The Open Finance proposal is structurally significant because it would introduce a consent-based data-portability mandate into Uruguay's financial-services landscape, a product-access regulatory theme distinct from any single product launch. The regulatory sandbox, by contrast, is a framework mechanism intended to lower the barrier for testing new financial and payments products under supervised conditions, rather than itself constituting a product-access mandate. Both proposals form part of BCU's coordinated payments-modernisation agenda for the 2026-2030 period, which also encompasses the virtual-asset authorisation regime and the e-money institution resilience tightening tracked elsewhere this cycle. #### Outlook The key open question is whether either bill advances from remission to the Ministry of Economy and Finance into formal parliamentary introduction. Until that step occurs, both the sandbox and the Open Finance framework remain proposals rather than binding law. **1 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Product Innovation & Market Development The Banco Central del Uruguay's Payments System Roadmap 2026-2030 sets out a multi-pronged product-innovation agenda, and this cycle's material confirms three distinct strands within it. The roadmap includes continued analysis of a central bank digital currency, without committing to a launch decision or timeline; it targets a comprehensive review of payment-system operating costs and access conditions, aimed at the broader question of who can participate in and at what cost within Uruguay's payment infrastructure; and it sits alongside the Board-approved (5 June 2026) draft Open Finance System legislation, which is a distinct but roadmap-linked product-development strand centred on account-data access and open banking-style interoperability. These three strands, CBDC exploration, cost/access-conditions review, and Open Finance legislation, are presented within the roadmap as complementary components of a single multi-year modernisation programme rather than as independent initiatives. The roadmap's confirmed inclusion of ISO 20022 adoption and instant/interoperable payment-rail ambitions further situates this cycle's product-innovation findings within a broader technical-modernisation agenda that extends beyond any single instrument. None of these strands has yet produced a codified regulatory instrument this cycle; each remains at the stage of a stated strategic objective within the roadmap document, which is itself sourced at Tier-1 confidence as the primary strategic-policy artifact, even though the individual implementing instruments for each strand remain to be developed. The practical significance of this cluster of findings is that Uruguay's central bank is pursuing a coordinated, rather than piecemeal, approach to payments-market modernisation: CBDC analysis, cost and access-conditions review, and open-finance legislative development are being sequenced under one roadmap rather than emerging as disconnected initiatives from different parts of the institution. This coordination is itself a market-development signal, distinct from any one of the individual product strands. #### Outlook Given the roadmap's 2026-2030 horizon, the CBDC-analysis and cost/access-conditions review strands should be expected to generate incremental milestones, such as consultation papers or interim findings, rather than a completed regulatory product within the next few cycles. The Open Finance bill, having cleared Board approval on 5 June 2026, is comparatively further advanced and is the strand most likely to produce a concrete legislative or regulatory instrument first among the three, subject to its remaining passage through whatever further approval steps are required beyond Board sign-off. **Sources and findings (4)** 1. T1 [https://www.bcu.gub.uy/Sistema-de-Pagos/Documents/Vigilancia/Libros/CBDC%20march2022.pdf](https://www.bcu.gub.uy/Sistema-de-Pagos/Documents/Vigilancia/Libros/CBDC%20march2022.pdf) retrieved 2026-07-04 2. T3 [https://noticias.mobilemoneylatam.com/finanzas-abiertas-uruguay-avanza/](https://noticias.mobilemoneylatam.com/finanzas-abiertas-uruguay-avanza/) retrieved 2026-07-04 3. T2 [https://www.ambito.com/uruguay/el-banco-central-del-avanza-el-sandbox-regulatorio-de-que-se-trata-este-impulso-al-sistema-financiero-n6277632](https://www.ambito.com/uruguay/el-banco-central-del-avanza-el-sandbox-regulatorio-de-que-se-trata-este-impulso-al-sistema-financiero-n6277632) retrieved 2026-07-04 4. T3 [https://ccea.com.uy/items/finanzas-informe-tecnico-moneda-digital-en-uruguay/](https://ccea.com.uy/items/finanzas-informe-tecnico-moneda-digital-en-uruguay/) retrieved 2026-07-04 ### W10 Consumer Protection & APP Fraud Confirmed confirmed 2026-07-04 Consumer protection runs on a two-track complaint model: mandatory 15-day institution-level resolution, escalating to BCU's SSF (for supervised-entity infractions) or UDECO/MEF (for general consumer disputes) under an interinstitutional cooperation convenio. Unauthorised-instrument liability rules place risk on the user until notification, absent a system security failure. Standing sub-brief · as of 8 July 2026 116 words · last cycle 2026-07-08 #### Consumer Protection & APP Fraud Uruguay's liability framework for unauthorised e-money and card transactions places the burden on the user rather than the issuer up to the point of notification. Under the standing rule administered via the Ministry of Economy and Finance's consumer-protection function, users bear liability for unauthorised transactions until they notify the issuing institution, unless the loss is attributable to a system security failure on the issuer's side. This gives Uruguay a user-liability-until-notification model rather than a stronger issuer-liability or reimbursement-guarantee standard for authorised-push-payment-style fraud. #### Outlook This liability allocation rule has not changed this cycle and remains single-sourced against a T1 anchor without independent corroboration; the two-track complaint-escalation path remains the standing consumer-recourse mechanism. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://usuariofinanciero.bcu.gub.uy/reclamos-y-denuncias/](https://usuariofinanciero.bcu.gub.uy/reclamos-y-denuncias/) retrieved 2026-07-04 2. T1 [https://www.gub.uy/ministerio-economia-finanzas/defensa-del-consumidor](https://www.gub.uy/ministerio-economia-finanzas/defensa-del-consumidor) retrieved 2026-07-04 3. T1 [https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdf](https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdf) retrieved 2026-07-04 4. T1 [https://www.gub.uy/ministerio-economia-finanzas/comunicacion/noticias/mef-bcu-acuerdan-establecer-procedimiento-para-atender-usuarios-del-sistema](https://www.gub.uy/ministerio-economia-finanzas/comunicacion/noticias/mef-bcu-acuerdan-establecer-procedimiento-para-atender-usuarios-del-sistema) retrieved 2026-07-04 ### W11 AML/CFT & Financial Crime [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/uruguay/#sec-dom-D7) Probable confirmed 2026-07-04 Sentinel.gi payments-context position not yet integrated into this collection pass; the publicly-documented regulatory backdrop is carried here as context only. Uruguay's AML/CFT regime rests on Ley 19.574 (recently amended by Ley 20.469, March 2026), with BCU/UIAF supervising financial obligated parties (including IEDEs, now subject to new UIAF transaction-reporting thresholds) and SENACLAFT supervising non-financial obligated parties under a 2025-2030 National AML/CFT/CFP Strategy. Standing sub-brief · as of 8 July 2026 133 words · last cycle 2026-07-08 #### AML/CFT & Financial Crime This module is sourced from the Sentinel.gi illicit-finance feed rather than original WPM analysis; payments-market context is carried here for continuity, with substantive AML/CFT analysis remaining Sentinel's domain. Per the Sentinel-fed record, BCU requires IEDEs to report to the Unidad de Información y Análisis Financiero (UIAF) operations exceeding US$10,000, and local transfers/remittances exceeding US$1,000. Separately, Uruguay's primary AML/CFT statute, Ley 19.574, was amended by Ley 20.469 on 19 March 2026, and remains the country's live primary AML/CFT instrument. Readers seeking substantive illicit-finance analysis of these obligations should consult the Sentinel.gi feed directly. #### Outlook The Sentinel-fed backdrop indicates continued incremental tightening of IEDE reporting thresholds and statutory AML/CFT amendments; WPM will continue to carry this context dated and unanalysed pending fuller Sentinel dataset integration, flagged as a standing coverage gap. no periodic updates on record for this sub-brief ** Sources and findings (9)** 1. T1 [https://uy.vlex.com/vid/ley-no-19574-actualizase-846457833](https://uy.vlex.com/vid/ley-no-19574-actualizase-846457833) retrieved 2026-07-04 2. T? FIM (sentinel.gi) per-JID baseline profile — Uruguay — Uruguay's AML/CFT regime rests on Laws 17,835, 18,494 and 19,355, with a bearer-share identification registry under Law 18,930 (2012) run by the Banco Central. The UIAF (FIU) and SENACLAFT supervise financial institutions and DNFBPs respectively. Uruguay is not FATF grey-/black-listed and was excluded from intensified GAFILAT follow-up in 2013, but its 2019/2020 MER flagged uneven DNFBP supervision maturity and it still lacks a finalized virtual-asset licensing regime. 3. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: sourcing-thinness 4. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: national listing 5. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-003) — Enforcement: Specialized Organized Crime Sentencing Court, Asunción, Paraguay — Erico Galeano Segovia, Paraguayan senator; network linked to Uruguayan trafficker Sebastián Marset 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: enforcement-absence 7. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-002) — Enforcement: U.S. Department of Justice (Eastern District of Virginia) — Sebastián Marset and the 'Primer Cartel Uruguayo' organization 8. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: regulatory-failure 9. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: capacity-deficit ### W12 Correspondent Banking, Settlement & Access Probable confirmed 2026-07-04 Uruguay remains a heavily dollarized banking system with deep USD correspondent-banking integration; BCU operates the domestic RTGS/securities settlement infrastructure directly and is currently pushing a de-dollarization disclosure initiative, while private-banking USD flows increasingly triangulate through onshore US institutions rather than staying resident in Uruguay. Standing sub-brief · as of 8 July 2026 159 words · last cycle 2026-07-08 #### Correspondent Banking, Settlement & Access Uruguay's settlement layer is structurally centralised: BCU directly administers and operates the country's payment-settlement and securities clearing/settlement/custody systems, covering all financial-system-agent transactions that settle in central-bank money. This direct operational control gives BCU a uniquely comprehensive vantage point over settlement-layer access, but it also means that access to the settlement core runs through BCU-defined participation criteria rather than a decentralised network of correspondent relationships. This asymmetry — bank participants typically holding direct settlement access, non-bank payment institutions more often depending on indirect access via sponsoring banks — is the module's analytical spine, recurring across licensing (W1a/W1b), scheme (W4), and product-innovation (W9) modules. BCU is separately pursuing a de-dollarization disclosure initiative amid persistent heavy USD correspondent-banking dependence in the private-banking sector. #### Outlook The bank/non-bank settlement-access asymmetry is structural and shows no near-term sign of narrowing; BCU's de-dollarization disclosure initiative is the marker to watch for any shift in the USD-dependency profile of Uruguay's correspondent-banking relationships. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.bcu.gub.uy/Sistema-de-Pagos/Paginas/Sistema-de-Pagos.aspx](https://www.bcu.gub.uy/Sistema-de-Pagos/Paginas/Sistema-de-Pagos.aspx) retrieved 2026-07-04 2. T2 [https://www.ambito.com/uruguay/el-banco-central-del-avanza-la-desdolarizacion-un-nuevo-proyecto-los-bancos-n6284572](https://www.ambito.com/uruguay/el-banco-central-del-avanza-la-desdolarizacion-un-nuevo-proyecto-los-bancos-n6284572) retrieved 2026-07-04 3. T3 [https://www.cronista.com/finanzas-mercados/caen-depositos-argentinos-en-uruguay-los-dolares-vuelven-o-se-van-a-eeuu/](https://www.cronista.com/finanzas-mercados/caen-depositos-argentinos-en-uruguay-los-dolares-vuelven-o-se-van-a-eeuu/) retrieved 2026-07-04 4. T3 [https://www.ambito.com/uruguay/como-funcionara-el-intercambio-informacion-financiera-y-estados-unidos-n6063889](https://www.ambito.com/uruguay/como-funcionara-el-intercambio-informacion-financiera-y-estados-unidos-n6063889) retrieved 2026-07-04 ### W13 Commercial Intelligence (M&A, Investment & Product) limited signal Probable confirmed 2026-07-04 Trailing-12-month (2025-07 to 2026-07) commercial activity is dominated by BCU's own regulatory-product pipeline (sandbox bill, Open Finance bill, PSAV consultation) and dLocal's continued cross-border expansion, including an announced African-market acquisition and an Asia push. Standing sub-brief · as of 8 July 2026 177 words · last cycle 2026-10-11 #### Commercial Intelligence Uruguay's trailing-twelve-month commercial-event record is dominated by one large private-sector M&A move and two BCU-originated regulatory-product launches. dLocal announced in June 2025 plans to acquire AZA Finance, an African payments provider, for a reported deal value of $150 million — a reported figure not independently confirmed by a primary regulatory source, reflecting African-market expansion rationale. On the regulatory-product side, BCU's board approved Resolución N°145/2026 in May 2026, creating a regulatory-sandbox bill sent to the Ministry of Economy and Finance; separately, BCU's Directorio approved the Sistema de Finanzas Abiertas (Open Finance) anteproyecto de ley on 5 June 2026, as part of the 2026-2030 Payments Roadmap. Both BCU items are discrete product-release events distinct from the thematic regulatory-access analysis carried under W9; the sandbox product-launch amount is not publicly disclosed. #### Outlook The dLocal-AZA Finance transaction's completion status and final terms are the primary marker to watch on the M&A side; on the regulatory-product side, both the sandbox and Open Finance initiatives move next into legislative/parliamentary process, which will determine whether these product-release events convert into operative regimes. Periodic update · new data 2026-10-11 #### Commercial Intelligence & Fintech Infinia, a company connecting traditional banking rails to digital-asset infrastructure, closed an oversubscribed Series A funding round of US$13.5 million, led by Bain Capital and Variant Fund, announced between 9 and 16 July 2026. The round's amount is publicly disclosed at US$13.5 million; no further valuation or use-of-proceeds detail beyond the headline round size has been located. This discrete commercial event occurred contemporaneously with BCU's finalisation of the PSAV authorisation regime under Circular N° 2507, also dated July 2026, though the two developments are reported independently with no sourced claim connecting them causally. #### Outlook No further disclosed terms of the Infinia round beyond the amount, lead investors and round stage have been located this cycle. **Sources and findings (4)** 1. T3 [https://en.wikipedia.org/wiki/DLocal](https://en.wikipedia.org/wiki/DLocal) retrieved 2026-07-04 2. T3 [https://en.wikipedia.org/wiki/DLocal](https://en.wikipedia.org/wiki/DLocal) retrieved 2026-07-04 3. T2 [https://www.ambito.com/uruguay/el-banco-central-del-avanza-el-sandbox-regulatorio-de-que-se-trata-este-impulso-al-sistema-financiero-n6277632](https://www.ambito.com/uruguay/el-banco-central-del-avanza-el-sandbox-regulatorio-de-que-se-trata-este-impulso-al-sistema-financiero-n6277632) retrieved 2026-07-04 4. T3 [https://noticias.mobilemoneylatam.com/finanzas-abiertas-uruguay-avanza/](https://noticias.mobilemoneylatam.com/finanzas-abiertas-uruguay-avanza/) retrieved 2026-07-04 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Uruguay| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{"legal_accessibility": {"per_product": {"account_to_account": "regulated", "cards": "regulated", "prepaid_emoney": "licensed-emi", "stablecoin": "emerging-regime"}}}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 1 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 63 finding(s), 143 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).