For businesses operating internationally, Colombian cross-border payment compliance has become a central business priority in 2025. The regulatory environment, combined with intensified enforcement, means that even minor missteps in compliance can result in significant financial and reputational consequences. In 2023, Latin American banks and fintechs faced over $400 million in compliance-related fines—a reminder of the risks at stake for organizations navigating cross-border transactions (Reuters, 2024).

As digital payments and stablecoin-powered solutions like Mural Pay's global stablecoin-powered payment solutions become more prevalent, understanding the regulatory landscape is essential for exporters, fintechs, SMEs, and financial platforms seeking clarity and confidence in Colombia’s market.

TL;DR

• Multiple regulators—SFC, UIAF, and DIAN—oversee financial, AML, and tax obligations for cross-border transactions.

• Mandatory KYC/AML checks, DIAN-validated e-invoices, and SEP tax rules drive 2025 compliance priorities.

• API-first tools reduce manual reconciliation and speed up audits.

• Open finance participation and stablecoin rails help businesses access faster settlement and clearer audit trails.

The Regulatory Landscape: Who Governs Cross-Border Payments in Colombia?

It’s a question nearly every international business and fintech faces: Who sets the rules and standards for cross-border payments in Colombia, and how has this changed in recent years?

The real answer involves several agencies with distinct roles. The Superintendencia Financiera de Colombia (SFC) supervises the stability and compliance of financial institutions, while the Unidad de Información y Análisis Financiero (UIAF) monitors transactions for anti-money laundering (AML) and terrorism financing risks. The Dirección de Impuestos y Aduanas Nacionales (DIAN) oversees tax and customs regulations, including those linked to international payment flows. Recently, DIAN has placed particular emphasis on digital service providers, requiring strict compliance with SEP tax obligations for non-resident companies engaging Colombian customers.

Colombia improved its FATF (Financial Action Task Force) rating in 2024, reflecting a stronger commitment to international compliance standards (FATF, 2024).

For more on detailed compliance requirements for payment platforms, see KYC, AML, and BSA Requirements for Colombian Payment Platforms.

Key Compliance Requirements: KYC, AML, and E-Invoicing

Ever wonder what separates compliant from risky cross-border payment operations? Three pillars stand out in Colombia today:

• KYC/AML: All entities must implement Colombian KYC/AML compliance procedures, including enhanced due diligence for high-risk clients and ongoing transaction monitoring. These procedures are essential for preventing illicit activities and protecting the integrity of Colombia’s financial system. As of 2023, Colombia continues to advance its FATF compliance, maintaining 'largely compliant' or 'partially compliant' status on many recommendations.

• E-Invoicing Requirements: Since 2023, cross-border transactions must use e-invoices in XML format with a digital signature, validated by DIAN—a standard that sets Colombia apart in Latin America (DIAN, 2024).

• Penalties: Non-compliance can mean up to 40 years in prison and fines of up to 50,000 minimum wages for AML violations.

Technology is increasingly integral, with platforms adopting API-first integrations to streamline compliance.

For a hands-on look at API-driven compliance, see Best Practices for Stablecoin-to-Fiat API Integration in Colombia.

Understanding Foreign Exchange Controls and Taxation (SEP, DIAN, FX)

Colombia’s foreign exchange controls and tax rules for cross-border payments are more strict than ever.

*Non-resident entities with a Significant Economic Presence (SEP) in Colombia—defined as gross revenues over US$297,000 or more than 300,000 Colombian users—must now register and pay local taxes.*

DIAN enforces these requirements, and any cross-border transaction must comply with both FX regulations and tax reporting obligations. These rules apply to digital services, e-commerce, and all major currency conversions, making compliance a central operational concern for international businesses.

In addition, DIAN actively enforces reporting for all significant inbound and outbound foreign currency transactions.

For more on new FX regulations, visit Understanding Colombia’s New FX Regulations: What Exporters & Fintechs Must Know.

The Role of Technology and Open Finance in Compliance

When it comes to modernizing compliance, Colombia’s adoption of open finance and digital infrastructure is setting a new benchmark. As noted in recent regulatory updates, Colombia’s open finance system—implemented by decree in late 2024—promotes interoperability, data sharing, and innovation among financial institutions.

"Transfiya makes transactions among different financial entities easier, contributing to the protection of users as they do not need to move and use cash," explains Gustavo Vega Villamil, President of ACH Colombia (Cloud Google, 2024).

The SFC’s pilot project with Virtual Asset Service Providers (VASPs) further demonstrates Colombia’s commitment to innovative, technology-driven compliance frameworks.

This shift is complemented by the adoption of advanced analytics, digital identity verification, and API-first approaches, making Colombian open finance regulations and digital payment compliance more accessible for businesses.

For a deeper look at API-first compliance, see API-First Payments in Colombia: What Every Fintech Needs to Know.

Stablecoin-Powered Compliance Tools: Key Benefits for 2025

Modern stablecoin compliance solutions give Colombian exporters, fintechs, and marketplaces a practical way to stay aligned with evolving rules. By combining virtual USD accounts, on-chain settlement, and automated reporting, finance teams can reconcile high-volume payouts in minutes rather than days.

Immutable transaction hashes create an auditable trail that satisfies SFC reviewers, while instant conversions help businesses hedge COP volatility. For a closer look at batch stablecoin payouts and how they compress operating costs, explore our detailed guide.

Case Studies: Real-World Compliance in Action

Mini Case Study: ACH Colombia’s Transfiya

ACH Colombia launched Transfiya to deliver instant, secure interbank transfers across Colombia. By July 2021, over 3.9 million transfers and 2 million user accounts were created, processing more than 407 billion pesos. This digital leap provided 24/7 accessibility and reduced the need for cash—demonstrating how compliance and technology can drive financial inclusion (Cloud Google, 2024).

This mirrors a wider trend among LATAM fintechs investing in cloud technology to achieve both compliance and real-time transaction capabilities.

Mini Case Study: Bancolombia and TerraPay Partnership

Bancolombia, Colombia’s largest remittance processor, partnered with TerraPay in 2023 to enable cross-border remittances. In 2022 alone, Bancolombia processed USD 5.7 billion of the country’s USD 9.4 billion in inbound remittances. This partnership has expanded channels and improved compliance, benefiting families and the broader economy (TerraPay, 2024).

Mini Case Study: Visa and Mastercard Anti-Competitive Practices Investigation

In 2024, Colombia’s Superintendencia de Industria y Comercio (SIC) investigated Visa and Mastercard for practices hindering domestic payment aggregators. The potential fines, up to 116 billion COP ($29 million) per infringement, highlight the high stakes of compliance and fair competition (Vixio, 2024).

For more on automating compliant payouts, see Automating Bulk Payouts in Colombia With Mural Pay’s API.

Risks, Red Flags, and Best Practices for 2025

Too many companies focus only on the technical steps for compliance, overlooking the broader risks. According to the United Nations Office on Drugs and Crime, 2–5% of global GDP is laundered each year, and regulatory fines for non-compliance continue to rise worldwide (UNODC, 2023).

Beyond direct penalties, compliance lapses can also put relationships with global partners and correspondent banking networks at risk.

Key takeaway: A proactive compliance strategy—KYC, ongoing monitoring, and staff training—can shield your business from both financial and reputational harm.

Making these investments now not only protects against fines but also builds long-term trust with partners and clients.

For actionable best practices, visit The Ultimate Guide to International Payments for Colombian Businesses.

Frequently Asked Questions on Colombian Cross-Border Payment Compliance

Q: Are electronic invoices mandatory for all cross-border transactions?
A: Yes, Colombia requires that e-invoices for cross-border transactions be in XML format, digitally signed, and validated by DIAN for tax compliance (DIAN, 2024).

Q: What are the penalties for AML non-compliance?
A: Money laundering offenses can lead to 10–40 years of imprisonment and fines up to 50,000 minimum monthly wages (Sumsub, 2024).

Q: How do fintechs comply with cross-border regulations in Colombia?
A: Fintechs must implement AML/KYC processes, participate in open finance initiatives, and maintain transparency in transactions. Participation in Colombia’s open finance ecosystem is also encouraged to facilitate smoother onboarding and compliance checks (ConduitPay, 2024).

Q: What is the SEP threshold for non-resident taxation?
A: Non-resident entities with more than US$297,000 in Colombian revenue or 300,000+ users must comply with local tax obligations (EY, 2024).

For further compliance FAQs, explore Colombian Virtual USD Accounts: Compliance, Tax, and Legal FAQs.

The Future of Cross-Border Payment Compliance in Colombia

Colombia’s cross-border payment landscape is changing rapidly. Trends like real-time payments, ISO 20022 adoption, and AI-driven fraud detection are gaining momentum, while regulators continue to enhance oversight and collaboration across borders. SMEs, in particular, face unique challenges in adapting to these new standards, as compliance costs and technology demands can outpace their capacity (LatinFinance, 2025).

Continued collaboration with global regulatory bodies will be essential as Colombia’s payment compliance landscape grows in complexity.

As the regulatory environment matures, businesses that invest early in compliance and technology will be best positioned to thrive.

For practical strategies on managing FX risk, see Managing FX Risk for Colombian Businesses: Practical Strategies.

Ready to move faster? If you’re mapping out a cross-border payment strategy for 2025, reach out to the Mural Pay team for a quick walkthrough of our platform and compliance tooling.

References

• ConduitPay. (2024). Ultimate guide to payments in Colombia. https://conduitpay.com/guides/ultimate-guide-to-payments-in-colombia

• Cloud Google. (2024). ACH Colombia customer success. https://cloud.google.com/customers/ach-colombia

• DIAN. (2024). Colombian tax and e-invoicing regulations. https://www.basware.com/en/compliance-map/colombia

• FATF. (2024). Mutual evaluation report: Colombia. https://www.fatf-gafi.org/en/publications/Mutualevaluations/mer-colombia-2024.html

• Sumsub. (2024). AML regulations in Colombia. https://sumsub.com/blog/aml-regulations-colombia

• TerraPay. (2024). Bancolombia and TerraPay sign contract. https://www.terrapay.com/media/bancolombia-and-terrapay-sign-contract-to-strengthen-cross-border-remittances-across-colombia