Peru's Crypto Travel Rule Goes Live August 1 Under SBS Chapter VIII
On August 1, 2026, Chapter VIII of SBS Resolution 02648-2024 takes effect, binding Peruvian VASPs to the FATF Travel Rule and full AML/CFT registration with the UIF-Perú.
What Changed
On August 1, 2026, Chapter VIII of Resolution SBS No. 02648-2024 enters into force, two years after the norm's publication on July 30, 2024. Issued by Peru's Superintendencia de Banca, Seguros y AFP (SBS), the chapter imposes the FATF Travel Rule on Proveedores de Servicios de Activos Virtuales (PSAV), requiring originating and beneficiary providers to collect, retain, and transmit identifying information on the parties to a virtual-asset transfer. The broader resolution obliges every PSAV to register, stand up an AML/CFT prevention system (SPLAFT), designate a compliance officer notified to the UIF-Perú, and report suspicious transactions. Covered activities mirror FATF Recommendation 15.
Who It Affects
Firms that exchange fiat for crypto, swap one crypto for another, transfer virtual assets on behalf of customers, provide custody, or offer services tied to the issuance or sale of virtual assets to Peruvian users. Both Peru-based and cross-border providers serving the market are captured. With the two-year grace period expiring, the SBS now expects working Travel Rule messaging, not intent, and providers without counterparty data exchange in place are immediately non-compliant.
What to Do
Confirm PSAV registration and your SPLAFT are operational before August 1, and verify your compliance officer designation is on file with the UIF-Perú. Deploy Travel Rule messaging that transmits verified originator and beneficiary identity data to counterparty VASPs, and reconcile that data against your onboarding KYC. Retain records to support suspicious-transaction reporting. Sanctions screening layered onto verified customer identity is the practical core of a Travel Rule program.
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds.
Learn More