Countries › Colombia › Guide › 10. Capital markets and finance › Fintech in Colombia: crowdfunding platforms and caps, the SFC regulatory sandbox, payment initiation, the Bre-B instant payments rules and electronic deposit companies
Fintech in Colombia: crowdfunding platforms and caps, the SFC regulatory sandbox, payment initiation, the Bre-B instant payments rules and electronic deposit companies
Last verified: 2026-10-27 · Status: Changing
Colombia regulates fintech mostly through Decreto 2555 de 2010: crowdfunding needs an SFC authorized exclusive purpose sociedad anónima (or an exchange or trading system) and is capped at 1,526,155.14 UVT per recipient; the SFC sandbox lets new or existing entities test innovative models under a temporary operating certificate for up to two years; payment initiation may be offered even by unsupervised companies through a low value payment system without touching client funds; and since Decreto 1069 de 2025 banks and other issuers with more than 1.5 million active demand deposit products must offer instant interbank transfers through an instant payment system. The narrow SEDPE licence covers electronic deposits and payments.
USD figures use the TRM of COP 3,157.94 per US dollar valid on 27 October 2026, certified by the Superintendencia Financiera and published on the national open data portal (datos.gov.co). Amounts in UVT use the 2026 UVT of COP 52,374 (DIAN Resolución 000238 de 2025) and amounts in minimum wages use the 2026 monthly minimum wage of COP 1,750,905 (Decreto 1469 de 2025). Conversions are for orientation only.
Key facts
| Maximum crowdfunding per recipient | 1526155.14 UVTDecreto 2555 de 2010 art. 2.41.3.1.2, as of 2026-10-27 · in force |
|---|---|
| Maximum crowdfunding per recipient when only non qualified contributors invest | 499947.37 UVTDecreto 2555 de 2010 art. 2.41.3.1.2, as of 2026-10-27 · in force |
| Non qualified contributor cap (of greater of income or net worth) | 20 %Decreto 2555 de 2010 art. 2.41.4.1.4, as of 2026-10-27 · in force |
| Maximum length of an SFC sandbox test | 2 yearsDecreto 2555 de 2010 art. 2.35.7.1.4, as of 2026-10-27 · in force |
| Active demand deposit products above which instant interbank transfers are mandatory | 1500000 productsDecreto 2555 de 2010 art. 2.17.5.1.2 (Decreto 1069 de 2025), as of 2026-10-27 · in force |
| Payment initiation open to companies not supervised by the SFC | Yes, through a low value payment system, without holding funds textDecreto 2555 de 2010 art. 2.17.4.1.1, as of 2026-10-27 · in force |
The rule
Cost to do it: 2026 caps: COP 79,930,849,302 (US$25.3 million) per recipient, or COP 26,184,243,556 (US$8.3 million) if only retail money is raised.
Example: A start up raising only from retail investors on a platform is capped at about COP 26,184 million in 2026. / That is roughly US$8.3 million; with qualified contributors in the round the cap rises to about US$25.3 million.Decreto 2555 de 2010, as amended by Decreto 1235 de 2020 art. 12, Art. 2.41.3.1.2 and art. 2.41.4.1.4, 2010-07-15 official text · verified 2026-10-27
Example: A foreign e commerce platform can offer pay by bank checkout to Colombian customers as a payment initiator without an SFC licence, connecting through a payment system operator and never holding the money.Decreto 2555 de 2010, Title 4 of Book 17 of Part 2, added by Decreto 1297 de 2022 art. 4, Art. 2.17.4.1.1 and art. 2.17.4.1.2, 2010-07-15 official text · verified 2026-10-27
| Activity | Licence | Key limit |
|---|---|---|
| Crowdfunding platform | SFC authorized exclusive purpose sociedad anónima, or exchange or trading system | COP 79,930,849,302 per recipient in 2026; retail investor cap 20% of income or net worth |
| Payment initiation | None required for unsupervised companies; connect through a payment system operator | Cannot hold or manage client funds |
| Electronic deposits and payments | SEDPE | 2% leverage; funds kept at Banco de la República or demand deposits |
| Testing a regulated activity | Temporary operating certificate in the SFC sandbox | Up to two years, then exit or transition plan |
| Taking repayable money from the public otherwise | Bank or other credit institution licence | Unauthorized mass deposit taking is a crime (Código Penal art. 316) |
Fintech routes in Colombia (Decreto 2555 de 2010; Ley 1735 de 2014)
Worked example
- A US fintech planning a Colombian lending marketplace has three options: (1) obtain SFC authorization as a crowdfunding company and keep each borrower under about US$25.3 million (or US$8.3 million if only retail money); (2) enter the sandbox with a temporary operating certificate for up to two years and a transition plan to a full licence; or (3) partner with a licensed bank. Taking repayable funds from the public without any of these risks the crime of unauthorized deposit taking (Decreto 2555 de 2010 art. 2.41.1.1.3, 2.41.3.1.2 and 2.35.7.1.4).
- A US checkout provider can launch pay by bank in Colombia as a payment initiator without an SFC licence, provided payers authorize each order and the flow runs through a payment system operator without the provider touching the money (art. 2.17.4.1.1).
Step by step
- 1. Map each activity to a licence: crowdfunding, payment initiation, SEDPE, credit institution or sandbox.
- 2. For crowdfunding, incorporate an exclusive purpose sociedad anónima and apply to the SFC; size rounds under the UVT caps.
- 3. For the sandbox, show the innovation is ready to test and fits one of the listed purposes, and prepare exit and transition plans.
- 4. For payment initiation, sign up with a low value payment system operator and design flows where you never hold funds.
- 5. If you will be a large deposit issuer, monitor the 1.5 million active products threshold and Bre-B obligations.
Common traps
- Calling a platform a "sociedad de financiación colaborativa" or running one without SFC authorization (art. 2.41.1.1.3).
- Letting a non qualified contributor invest more than 20 percent of the greater of income or net worth (art. 2.41.4.1.4).
- Holding customer funds in a payment initiation model, which the rules forbid (art. 2.17.4.1.1).
- Assuming sandbox exceptions continue after the test: the certificate lasts at most two years (art. 2.35.7.1.4).
Sources
- Decreto 2555 de 2010, DIAN legal compilation
- Decreto 1069 de 2025 (payment orders and Bre-B), DIAN legal compilation
- Ley 1735 de 2014, DIAN legal compilation
- DIAN Resolución 000238 de 2025 (2026 UVT)
- TRM series, datos.gov.co
Related pages
- finance/banks-and-foreign-bank-branches
- finance/capital-markets-banking-and-credit
- finance/financial-consumer-protection-and-credit-bureaus
- regulation/compliance-essentials
- /country/colombia/
- /calendar/
- Live dashboard
Related: Colombia country profile · live dashboard · central bank and release calendar · our posts on X
