LatAm Regulatory Coverage
Fintech & Crypto · Argentina · Mexico · Brazil
The specific frameworks I work within across the region's three defining markets.
| Market | Fintech & Payments | Crypto / Virtual Assets | AML / CFT (FIU) | Data Protection |
|---|---|---|---|---|
| Argentina | BCRA — Payment Service Providers (PSP / PSPCP) and payment accounts (Comunicaciones "A"). | CNV — PSAV registry; RG 1058/2025 (registration, minimum net worth, cybersecurity, custody, annual audit); Ley 27.739. | UIF — Ley 25.246 (amended by Ley 27.739); VASPs as obligated subjects. | Ley 25.326 (Personal Data Protection) — AAIP. |
| Mexico | Ley Fintech / LRITF (2018) — ITFs: IFPE (e-money) & IFC (crowdfunding); CNBV + Banxico; SPEI / CoDi. | Virtual assets only with prior Banxico authorization; restrictive perimeter for ITFs and banks. | LFPIORPI ("Ley Antilavado") — UIF under SHCP. | New LFPDPPP (2025) — Secretaría Anticorrupción y Buen Gobierno (replaced INAI). |
| Brazil | Lei 12.865/2013 — payment institutions; Pix and Open Finance (BCB). | Lei 14.478/2022 (BVAL); BCB Resolutions 519/520/521 (Nov 2025) — authorization, prudential rules, Travel Rule; BCB supervision. | Lei 9.613/1998 — COAF; VASPs as obligated entities. | LGPD (Lei 13.709/2018) — ANPD. |
Argentina
- Fintech & Payments
- BCRA — Payment Service Providers (PSP / PSPCP) and payment accounts (Comunicaciones "A").
- Crypto / Virtual Assets
- CNV — PSAV registry; RG 1058/2025 (registration, minimum net worth, cybersecurity, custody, annual audit); Ley 27.739.
- AML / CFT (FIU)
- UIF — Ley 25.246 (amended by Ley 27.739); VASPs as obligated subjects.
- Data Protection
- Ley 25.326 (Personal Data Protection) — AAIP.
Mexico
- Fintech & Payments
- Ley Fintech / LRITF (2018) — ITFs: IFPE (e-money) & IFC (crowdfunding); CNBV + Banxico; SPEI / CoDi.
- Crypto / Virtual Assets
- Virtual assets only with prior Banxico authorization; restrictive perimeter for ITFs and banks.
- AML / CFT (FIU)
- LFPIORPI ("Ley Antilavado") — UIF under SHCP.
- Data Protection
- New LFPDPPP (2025) — Secretaría Anticorrupción y Buen Gobierno (replaced INAI).
Brazil
- Fintech & Payments
- Lei 12.865/2013 — payment institutions; Pix and Open Finance (BCB).
- Crypto / Virtual Assets
- Lei 14.478/2022 (BVAL); BCB Resolutions 519/520/521 (Nov 2025) — authorization, prudential rules, Travel Rule; BCB supervision.
- AML / CFT (FIU)
- Lei 9.613/1998 — COAF; VASPs as obligated entities.
- Data Protection
- LGPD (Lei 13.709/2018) — ANPD.
Regulatory landscape as of 2026; frameworks in Argentina, Mexico, and Brazil continue to evolve.
How I use this
For each engagement I translate the relevant framework into an operational control set, an evidence plan, and a realistic timeline — the same way I delivered Argentina's VASP framework (CNV RG 1058/2025) and ISO 27001 at exchange scale.
Discuss your market
Tell me where you operate and what you need to get licensed, registered, or audit-ready.