Peru PE

Peru sits outside the European Union's AML Package perimeter, and the directly relevant beneficial-ownership development this cycle is domestic: a reported 2025 AML regulatory amendment said to require suspicious-transaction-report filing above USD 10,000 or for high-risk-jurisdiction exposure, a designated compliance officer for entities above PEN 3 million in annual revenue, and an annually-filed beneficial-ownership register with SUNAT. This finding rests on a single tier-4 commercial-advisory source and has not been corroborated against a primary SBS or SUNAT text this cycle; Peru continues to have no fully public UBO registry as of mid-2026. Given the single-source, uncorroborated nature of the finding, this sub-brief carries a limited-signal flag: the honest position is that Peru's beneficial-ownership architecture may be tightening, but the evidence base does not yet support treating this as a confirmed regulatory fact.

Globally, the EU AML Package sets the structural direction that beneficial-ownership and corporate-transparency regimes elsewhere are increasingly measured against, even for non-EU jurisdictions such as Peru. That package now comprises three distinct instruments: the directly applicable AML Regulation (AMLR, Regulation (EU) 2024/1624), the sixth AML Directive (6AMLD), transposed at Member State level, and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and shifts supervision of certain obliged entities from purely national authorities toward a hybrid EU-level regime combining direct and indirect AMLA supervision. This is standing architectural backdrop rather than a Peru-specific development; Peru is a GAFILAT member assessed under GAFISUD/GAFILAT mutual-evaluation processes rather than any EU instrument, and no AMLR/6AMLD/AMLA development with a direct Peru nexus was identified this cycle.

Outlook

The primary item to watch is whether the reported 2025 UBO amendment can be corroborated against a primary SBS or SUNAT publication; corroboration would allow this finding to move from a Low-confidence, single-source data point to an Assessed-tier development. Absent corroboration, Peru's beneficial-ownership architecture should be read as unchanged from its longstanding no-public-registry baseline.

Peru's digital-asset regulatory picture this cycle is defined by the completion of a phased AML obligation rather than by any new market-conduct or licensing framework. Chapter VIII (the Travel Rule) of SBS Resolution 02648-2024 entered into force on 1 August 2026, ending the two-year grace period that had applied since the underlying resolution was issued. Virtual Asset Service Providers domiciled or incorporated in Peru, together with Peru branches of foreign VASPs, must now transmit originator and beneficiary information aligned with FATF Recommendations 15 and 16 to counterparty VASPs. This closes the final phased element of the AML build-out that first brought PSAVs into Peru's AML/CFT perimeter as UIF-Perú reporting entities in 2023-24; VASPs have been subject to registration and compliance-officer obligations since that point, and the Travel Rule was always the last piece scheduled to take effect.

The practical significance of this development is narrower than it may first appear. It tightens the transactional-transparency dimension of Peru's crypto AML regime, but it does not create, and was never intended to create, any licensing, prudential, or market-conduct regime for exchanges or other VASPs. Peru's regulatory posture on that dimension remains what it has been for several cycles: the Framework Law for the Commercialization of Cryptoassets, Bill 1042/2021-CR, which would establish a formal VASP registration regime known as RUPIC, has remained stalled in committee since March 2025 with no enactment timeline confirmed this cycle. The gap between an AML-complete perimeter and an absent market-conduct regime is the defining structural feature of Peru's crypto posture, and it is a gap produced by legislative inertia rather than by industry laggardness: PSAV operators are, by the evidence available, already complying with the AML obligations that do exist.

This bifurcation matters for how operators and counterparties should read Peru's crypto risk profile. A VASP transacting with a Peru-domiciled counterparty now faces a jurisdiction with a functioning, FATF-aligned Travel Rule obligation on the AML dimension, a meaningful data point for correspondent-VASP risk assessment. That same VASP faces essentially no formal licensing or prudential regime to rely on for assessing the counterparty's market-conduct standing, its capital adequacy, or its consumer-facing obligations, because none of those regimes exist in Peru as of this cycle. The absence of enforcement action against Peru VASPs for market-conduct failures is, in this context, unsurprising rather than analytically significant on its own: there is no market-conduct rule to enforce.

The sourcing behind this cycle's D5 assessment is tier-3 (Notabene), a specialised regulatory-technology commentary source rather than a primary SBS or UIF-Perú publication; the underlying fact of the Travel Rule's scheduled entry into force is nonetheless assessed with reasonably high confidence because it follows directly and predictably from the 2024 SBS resolution's own two-year grace-period clock. The stalled-bill finding is comparatively weaker: it is sourced to the same specialised commentary channel and carries a lower confidence rating, reflecting genuine uncertainty about the bill's current committee status as of August 2026 beyond its known return-to-committee posture in March 2025. The affected-firm-type scope for the Travel Rule obligation is confined to crypto-asset operators as classified under the PSAV framework; it does not extend to non-VASP fintech or payments firms, which sit outside this development's direct compliance perimeter.

Globally, this pattern — an AML-first regulatory build-out preceding, and in some cases substituting for, a market-conduct and licensing framework — is common across jurisdictions still working through FATF-driven VASP AML obligations ahead of a fuller token-classification or licensing regime. Peru's position within that broader pattern is unremarkable: it has completed the AML dimension on schedule while its licensing bill remains dormant, a sequencing several GAFILAT-region peers have followed.

Outlook

The single variable most likely to change Peru's D5 posture is the fate of Bill 1042/2021-CR. If the bill advances out of committee, it would introduce Peru's first formal VASP licensing and registration regime (RUPIC), materially changing the risk profile for exchanges and other digital-asset businesses operating in or into Peru. Absent that movement, the Travel Rule's entry into force is likely to stand as the last structural AML milestone in this sector for some cycles. A secondary item to watch is whether UIF-Perú publishes any implementation guidance or enforcement statistics specific to the newly-completed Travel Rule obligation; none has surfaced in the evidence base for this cycle, and its absence should be read as an open monitoring gap rather than as evidence of non-compliance.

Peru's AML/CFT obligated-entity perimeter expanded this cycle to include remote-gambling and remote-betting operators. SBS approved a dedicated AML/CFT compliance framework for online-gambling operators, designating them obligated subjects required to report suspicious transactions to UIF-Perú, with a 120-day implementation window running from approval. Licensing competence for the sector remains with MINCETUR; this is a compliance-framework extension layered onto an existing licensing regime rather than a change to who may operate in the sector. The practical effect is that Peru's AML/CFT architecture now reaches a licensed non-financial, non-DNFBP sector for the first time in this cycle's evidence base.

This extension sits within a broader, stable AML/CFT standing. Peru is not on the February or June 2026 FATF grey list and remains a GAFILAT member assessed under GAFISUD/GAFILAT mutual-evaluation processes rather than any EU or FATF-plenary-direct listing mechanism. The absence of grey-listing pressure is itself a meaningful data point: it indicates that Peru's existing AML/CFT framework — including the pre-existing PSAV crypto AML obligations and the traditional financial-institution and DNFBP reporting lines to UIF-Perú — continues to be assessed as broadly adequate at the regional and FATF level, even as the obligated-entity perimeter continues to broaden sector by sector.

The sectoral broadening pattern itself deserves architecture-over-incident framing. Rather than treating the gambling-sector onboarding as an isolated enforcement or compliance event, it should be read alongside the crypto PSAV framework (in force since 2023-24, with its Travel Rule component completing on 1 August 2026) as evidence of a consistent regulatory strategy: UIF-Perú and SBS appear to be systematically extending obligated-subject status to higher-risk, less-traditionally-regulated sectors as they identify money-laundering exposure. This is a structural observation about Peru's regulatory architecture, not a prediction about future sectoral extensions, and it should be weighted as Assessed-tier confidence given that it rests on an observed pattern across two sectors rather than a stated regulatory strategy document.

Three-pillar balance is worth noting explicitly here: the evidence base for this cycle is entirely AML-focused, with no CTF- or CPF-specific finding surfacing for Peru. This may reflect a genuine absence of CTF/CPF-specific developments in Peru this cycle, or it may reflect the structural under-weighting toward AML that this monitor's register principle warns against; the evidence available does not allow a confident distinction between these two explanations, and the gap is logged rather than resolved. The obligated-subject designation for remote-gambling operators arrives with FATF alignment implicit in its framing, though the evidence base for this cycle does not cite specific FATF Recommendation numbers for the gambling-sector instrument in the way the crypto Travel Rule obligation explicitly invokes Recommendations 15 and 16 — a gap worth flagging rather than treating as a substantive difference in rigor between the two extensions.

The reported, as-yet-uncorroborated 2025 UBO and STR-threshold amendment tracked separately under this cycle's beneficial-ownership assessment would, if corroborated, sit naturally alongside the gambling-sector and crypto obligated-entity extensions as a third strand of the same broader AML-tightening architecture; until corroboration exists, it should not be treated as confirmed evidence of that pattern. No enforcement action, fine, or sanction specific to a Peru AML/CFT obligated entity was identified in the evidence base this cycle, for any sector. Absence of enforcement action in a newly-obligated sector such as remote gambling, immediately following a 120-day implementation grace period, is expected rather than analytically significant on its own.

Outlook

The 120-day implementation window for gambling-sector AML/CFT compliance means the practical test of this development will not be assessable until roughly the fourth quarter of 2026 at the earliest. That implementation checkpoint is the primary item to watch for D7 next cycle. A secondary item is Peru's ongoing GAFILAT mutual-evaluation cycle: any published mutual-evaluation report or follow-up assessment would materially upgrade confidence in the current baseline beyond its current Assessed tier. Watch also for any UIF-Perú annual report or typology bulletin referencing gambling-sector or crypto-sector suspicious-activity reporting volumes.