Costa Rica — Crypto Company Setup Without Mandatory License 2026
Costa Rica regulates crypto businesses through general commercial and AML/CTF law rather than dedicated crypto legislation. No formal VASP license is currently required — companies incorporate as a standard Sociedad Anónima (S.A.) and operate under mandatory AML/CTF obligations under Law 7786. No minimum capital, no local director, 0% tax on foreign income, and 1–2 week incorporation make Costa Rica one of the fastest and most cost-effective jurisdictions to establish a legally structured crypto business. Bill 22.837 — which would introduce mandatory SUGEF registration — passed its first reading in July 2025 but has not yet been enacted.
— Last updated: April 2026 · 12 min read
2026 Compliance Update
- No formal VASP license required as of April 2026. Costa Rica does not have enacted crypto licensing legislation. Crypto businesses operate through standard S.A. incorporation with AML/CTF compliance under Law 7786.
- AML/CTF compliance is mandatory and enforced. SUGEF is actively enforcing AML/CTF obligations. In late 2025, SUGEF shut down an unregistered platform that had processed over $50 million in transactions without KYC procedures. Operating without compliant AML/CTF infrastructure carries real legal and financial risk.
- Bill 22.837 passed first reading in July 2025. The SUGEF registration bill was unanimously approved in first reading. It has not yet completed the legislative process. When enacted, mandatory SUGEF registration will apply to all VASPs operating in Costa Rica.
- OECD CARF data collection begins January 1, 2027. Costa Rica is aligning with the CARF framework — first international exchanges of crypto financial data expected by 2028. Prepare data collection infrastructure now.
What Makes Costa Rica Distinctive for Crypto Company Setup
No Formal VASP License
Costa Rica does not issue a VASP license and does not currently require one. Cryptocurrency exchange, wallet services, custody, token issuance, OTC operations, GameFi, DeFi, and NFT marketplace activities can all be included in a standard S.A.'s corporate objects and operated without government-issued authorization. No regulatory application, no capital adequacy review, no license approval waiting period. One of a diminishing number of jurisdictions globally where this remains the case.
No Minimum Capital
Unlike most formal VASP licensing jurisdictions — Seychelles ($25K–$100K), Mauritius, Cayman, Cyprus — Costa Rica requires no paid-up capital to form a company providing crypto services. For bootstrapped startups and projects at testing stage, this eliminates one of the primary upfront barriers to a legally structured crypto operation.
No Local Director or Residency Requirement
Directors can be of any nationality with no Costa Rica residency requirement. 100% foreign ownership is permitted. The entire company formation process can be completed remotely — no visit to Costa Rica required. Zitadelle AG handles all National Registry filing and compliance setup without requiring the client to be physically present.
0% Tax on Foreign-Source Income
Costa Rica's territorial tax system means income earned from non-Costa Rican clients and operations is not subject to Costa Rican corporate income tax. For internationally-oriented crypto businesses serving clients outside Costa Rica, the effective corporate tax rate on foreign-source revenue is 0%. No capital gains tax on crypto. No VAT on crypto transactions under current law.
Fastest Setup Available With AML Framework
Full company formation is achievable in 1–2 weeks. A complete setup including AML/CTF compliance documentation takes 4–6 weeks. Costs start under USD $4,000 for a basic setup — among the lowest of any jurisdiction that provides meaningful AML/CTF framework recognition from banks and payment processors. This speed and cost profile makes Costa Rica the standard "first entity" choice for crypto startups validating their business before committing to a formal licensing process.
Broad Permitted Activities
The following can all be structured through a Costa Rica company without a formal license: crypto exchanges (spot, OTC, derivatives), custodial and non-custodial wallet services, remittance and cross-border payment services, token issuance (unless tokens qualify as securities), NFT platforms, GameFi and Web3 projects, DeFi protocols, stablecoin operations, crypto casinos and iGaming, and crypto advisory services.
The Legal Framework — What Governs Costa Rica Crypto Businesses
Costa Rica's crypto framework in 2026 is built on general commercial and financial law rather than dedicated crypto legislation. Crypto is not legal tender but is not prohibited — it is a lawful commercial activity under general commercial law. The foundational compliance requirement is Law 7786 (the AML/CTF Law), which subjects virtual asset businesses to the same anti-money laundering obligations as other financial services providers. SUGEF (Superintendencia General de Entidades Financieras) oversees AML/CTF compliance for financial entities; the ICD (Instituto Costarricense sobre Drogas / Financial Intelligence Unit) receives suspicious transaction reports. No single body has been designated as the exclusive crypto regulator — but SUGEF applies general AML standards actively.
The SUGEF enforcement action in late 2025 — shutting down an unregistered platform that had processed over $50 million in transactions without KYC procedures and imposing fines on the operator — is the clearest signal yet that Costa Rica's AML/CTF obligations are not theoretical. The era of using Costa Rica as a genuinely zero-compliance offshore structure is over. AML/CTF compliance is required, monitored, and enforced. The advantage Costa Rica offers in 2026 is the absence of a mandatory licensing regime — not the absence of compliance obligations.
The BCCR (Banco Central de Costa Rica) monitors the country's financial stability and has stated publicly that digital assets are not official currency, but does not prohibit their use for private transactions. Some Costa Rican banks have begun offering Bitcoin ETF-linked services, signaling growing institutional acceptance. CARF data collection is expected to begin January 1, 2027, aligning Costa Rica with international tax transparency standards — but this does not affect the operating framework for 2026.
Bill 22.837 — What's Coming and How to Prepare
Legislative status (April 2026): Bill 22.837 passed its first Legislative Assembly reading in July 2025 with unanimous support. It has not completed the legislative process — the bill may be returned for modifications before final approval. When enacted, mandatory SUGEF registration for all VASPs operating in Costa Rica will apply, with a grace period for existing operators.
Key provisions of Bill 22.837 if enacted:
- Mandatory SUGEF registration for all VASPs operating in Costa Rica — a compliance checkpoint, not a license to operate
- Public VASP registry maintained by SUGEF — registered entities publicly listed
- Risk-based supervision — SUGEF may require compliance officers and ongoing audits based on entity size and transaction volume
- Prohibited business with unregistered VASPs — banks and financial institutions barred from servicing unregistered VASPs once enacted
- Fines for non-compliance — ranging from 2 to 100 base salaries based on severity of breach
- CARF alignment — the bill aligns Costa Rica with the OECD Crypto-Asset Reporting Framework
- Grace period for existing operators — businesses already operating will receive transition time
The prudent 2026 approach: Build SUGEF-ready AML/CTF compliance infrastructure now. When Bill 22.837 is enacted, mandatory SUGEF registration should be a straightforward compliance step — not a disruptive operational overhaul. Businesses that have already implemented proper AML/CTF frameworks will be well-positioned for the registration process.
Mandatory AML/CTF Compliance — What Costa Rica Actually Requires
AML/CTF compliance under Law 7786 is mandatory and enforced. These requirements apply regardless of whether a formal VASP license exists:
- SUGEF-aligned AML/CTF policies — written policies designed and implemented to SUGEF and FATF standards
- KYC/CDD for all clients — identity verification, beneficial ownership identification for corporate clients
- Enhanced Due Diligence (EDD) for PEPs and high-risk clients — source of funds verification required
- Suspicious Transaction Reports (STRs) — reported promptly to the ICD (Financial Intelligence Unit)
- Transaction monitoring — systems to detect and flag suspicious transaction patterns in real time
- Beneficial ownership transparency — UBO declaration required for all entities with 25%+ ownership or control
- FATF Travel Rule — mandatory for qualifying cross-border virtual asset transfers: originator and beneficiary information must accompany qualifying transfers
- Record-keeping — customer and transaction records maintained for minimum 5 years
- Compliance Officer appointment — a dedicated compliance officer (internal or outsourced) responsible for AML/CTF oversight and SUGEF engagement
Corporate Structure and Setup Requirements
Recommended structure: Sociedad Anónima (S.A.) — most common vehicle for crypto businesses. Strong international recognition and governance flexibility. For smaller, simpler operations, the Sociedad de Responsabilidad Limitada (S.R.L.) is also viable.
| Requirement | Detail |
|---|---|
| Corporate structure | S.A. (Sociedad Anónima) or S.R.L. |
| Minimum directors | 1 — any nationality, no residency requirement |
| Minimum shareholders | 1 — 100% foreign ownership permitted |
| Registered legal address | Required — virtual office acceptable under current law |
| Physical office | Not required by regulation |
| Min. share capital | None |
| Compliance Officer | Required — internal or external appointment |
| Language | Spanish (Zitadelle AG provides English translations) |
Critical note on corporate objects:Articles of Incorporation must explicitly authorize virtual asset services — exchanges, custody, wallet operations, and related activities must be stated in the corporate objects. Generic language ("any lawful business") does not satisfy banking partners or future SUGEF registration requirements. Zitadelle AG drafts crypto-specific objects aligned with SUGEF's expectations.
Costa Rica Tax Framework for Crypto Companies
| Tax Category | Rate |
|---|---|
| Corporate income tax on foreign-source income | 0% |
| Corporate income tax on Costa Rica-source income | Tiered domestic rates |
| Capital gains tax on crypto | 0% (for individual holders; companies pay standard rates on business profits) |
| VAT on crypto transactions | Not applicable under current law |
| CARF reporting obligations | Data collection from January 1, 2027 |
The 0% rate applies only to genuinely foreign-source income. Income from activities within Costa Rica or from Costa Rican clients is subject to domestic corporate income tax at tiered rates. For crypto businesses serving exclusively international clients, the foreign income tax position is 0%. CARF data collection begins January 2027 — prepare reporting infrastructure now.
Banking Reality — What to Expect
Costa Rica's banks apply enhanced due diligence to crypto-related businesses. Traditional banking accounts are difficult to open without demonstrating strong AML/CTF frameworks, a clear and credible business model, and documented compliance infrastructure. Once Bill 22.837 is enacted, only SUGEF-registered VASPs will be eligible to access banking and financial services in Costa Rica — making early voluntary alignment with SUGEF AML/CTF standards increasingly important for banking access.
In practice, most Costa Rica crypto companies in 2026 use offshore fintech partners, Electronic Money Institutions (EMIs), and stablecoin-based settlement for operational cash management. Zitadelle AG advises on fintech and banking partners with established track records of onboarding Costa Rica crypto companies. The combination of a strong AML/CTF framework, explicit corporate objects, a legal opinion, and a clean UBO structure materially improves banking access compared to under-documented Costa Rica structures.
Why Operators Are Still Choosing Costa Rica in 2026
The global VASP licensing market has consolidated significantly. The Seychelles VASP Act 2024 made licensing mandatory from September 2024. El Salvador's CNAD requires formal DASP authorization. Mauritius requires FSC VASP licensing. Even SVG no longer provides a viable forex or crypto corporate structure. As the landscape has narrowed, Costa Rica has attracted increased interest from operators who need a legally structured entity with explicit crypto objects, AML/CTF compliance recognition from banks and payment processors, and minimal upfront cost — without the capital requirements and processing timelines of formal VASP licensing.
Costa Rica is particularly popular for GameFi, DeFi, and Web3 projects. The ability to structure a crypto gaming platform combining Costa Rica's crypto framework with its enabling regulation for online gaming makes it uniquely attractive for crypto casino and GameFi operators. Several DeFi protocols and NFT marketplace operators have used Costa Rica S.A. structures precisely because the combination of no license requirement, territorial taxation, and 100% foreign ownership creates an operationally clean structure with minimal bureaucratic overhead.
The dominant use case in 2026 is the "bridge structure" — a Costa Rica S.A. serving as the primary operating entity while a formal VASP license application is in progress in Seychelles, Mauritius, or another licensed jurisdiction. This allows operators to launch, acquire clients, and generate revenue history while the 7–9 month formal licensing process runs in parallel. Zitadelle AG designs these multi-stage structures regularly and coordinates both the Costa Rica formation and the parallel licensing application as a single engagement.
Setting Up a Crypto Company in Costa Rica — Step by Step
Regulatory Scoping
Zitadelle AG assesses your business model against Costa Rica's AML/CTF framework, advises on corporate structure (S.A. vs S.R.L.), and identifies the correct virtual asset activities to include in corporate objects.
Name Reservation and Articles of Incorporation Drafting
Corporate name reservation and draft Articles of Incorporation with virtual asset service objects explicitly included — exchanges, custody, wallet, remittance, token issuance, and any other relevant activities.
National Registry Incorporation (1–2 weeks)
File notarized incorporation documents with the Registro Nacional (National Registry) of Costa Rica.
Tax Registration
Obtain corporate tax registration with Hacienda (Ministry of Finance) and any other required government registrations.
AML/CTF Compliance Documentation
Draft and implement the full AML/CTF compliance framework: AML/CTF policy aligned with Law 7786 and SUGEF/FATF standards, KYC/KYB procedures, transaction monitoring framework, STR reporting procedures, FATF Travel Rule implementation, UBO disclosure procedures, and 5-year record-keeping procedures.
Compliance Officer Appointment
Appoint a dedicated compliance officer — internal or outsourced to a professional AML compliance service — responsible for AML/CTF oversight and SUGEF engagement.
SUGEF Alignment (Recommended)
Voluntarily align with SUGEF registration requirements ahead of Bill 22.837 enactment. This positions the company for seamless mandatory registration when the bill takes effect and demonstrates good-faith regulatory engagement.
Legal Opinion (Recommended)
Obtain a local Costa Rican attorney legal opinion confirming the legality of your specific virtual currency activities under current law. Required by many banking partners and institutional counterparties.
Banking and Payment Account Setup
Zitadelle AG advises on fintech and banking partners with established Costa Rica crypto onboarding capabilities, including offshore EMI and fintech payment account options.
Ongoing Compliance
Annual corporate renewals, AML program maintenance, SUGEF monitoring for Bill 22.837 enactment, and CARF preparation for 2027 reporting obligations.
Timeline and Cost
| Stage | Duration | Cost (USD) |
|---|---|---|
| Simple setup (incorporation + basic documents) | 1–2 weeks | $3,500–$5,500 |
| Full setup (incorporation + AML framework + legal opinion) | 4–6 weeks | $6,000–$9,000 |
| Annual maintenance (registry + address) | — | $800–$1,500/year |
Costa Rica vs Competing Crypto Jurisdictions 2026
| Feature | Costa Rica | Panama VASP | Seychelles VASP | El Salvador DASP | Mauritius VASP |
|---|---|---|---|---|---|
| Formal license required | No | No | Yes (FSA) | Yes (CNAD) | Yes (FSC) |
| AML compliance mandatory | Yes (SUGEF) | Yes (UAF) | Yes | Yes | Yes |
| Min. capital | None | None | USD $25K–$100K | USD $2,000 | Low |
| Setup cost | $3.5K–$9K | $5.5K–$11.5K | $30K–$50K+ | $20K–$40K | $20K–$40K+ |
| Timeline | 1–6 weeks | 2–4 weeks | 7–8 months | 3–6 months | 6–9 months |
| Foreign income tax | 0% | 0% | 1.5% (substance) | 0% | ~3% |
| Pending legislation | Bill 22.837 | Bill 247 + 326 | Established | Established | Established |
| Enforcement action | Yes (2025) | Moderate | Active since 2025 | Active | Active |
| Best for | Startups, GameFi, bridge structures | LatAm ops, OTC | Credible offshore | LatAm + licensed | Africa/Asia ops |
How Zitadelle AG Assists with Costa Rica Crypto Company Formation
- Corporate formation — S.A. or S.R.L. drafting with virtual asset service objects; National Registry filing management; registered legal address
- Crypto-specific Articles of Incorporation — corporate objects explicitly authorizing virtual currency exchange, custody, wallet, and related services — SUGEF-compliant language
- Full AML/CTF compliance framework — AML/CTF policy aligned with Law 7786 and FATF standards, KYC/KYB procedures, transaction monitoring framework, STR reporting procedures, Travel Rule implementation, UBO disclosure, record-keeping procedures
- Compliance Officer sourcing — internal appointment or outsourced AML compliance service for SUGEF engagement
- SUGEF alignment support — voluntary pre-registration alignment ahead of Bill 22.837 enactment
- Legal opinion — local Costa Rican attorney opinion confirming legality of your specific activities; essential for banking and institutional partnerships
- Banking and payment account advisory — fintech and EMI introductions for Costa Rica crypto companies with established onboarding track records
- CARF readiness — assessment of future CARF reporting obligations based on your business model and client geography
- Bridge structure design — for operators scaling toward Seychelles, Mauritius, or Cayman VASP licensing: multi-stage group structures accommodating the Costa Rica entity and the licensed operating entity
Disclaimer:Informational only. Costa Rica's crypto regulatory framework is evolving. Bill 22.837 status and CARF timelines are subject to legislative change. Verify current requirements with qualified Costa Rican legal counsel before proceeding. Last updated: April 2026.
Frequently Asked Questions
Yes. Crypto activity is lawful in Costa Rica under general commercial law. No formal VASP license is required as of April 2026. Companies must comply with mandatory AML/CTF obligations under Law 7786, including SUGEF-aligned policies, KYC/CDD, suspicious transaction reporting to the ICD, and FATF Travel Rule implementation.
Need Costa Rica Crypto Company Setup?
Contact Zitadelle AG for Costa Rica S.A. incorporation with SUGEF-aligned AML/CTF compliance.
Related Licenses
Quick Facts
Get a Free Quote
Transparent pricing and timeline for your application.
Disclaimer: This page is for informational purposes only and does not constitute legal or regulatory advice. Requirements, timelines, and fees are subject to change. Always consult directly with the relevant regulatory authority or a qualified professional for the most current information. Zitadelle Advisory Group LTD is not a law firm and does not provide legal representation.