Latin America (LATAM)

Licensing, Authorisation & Market Access

LATAM has no single bloc-wide payments licence; each member state runs its own non-bank route, and the contrast between the bank-PSP path and the non-bank payment institution route is the analytical spine of market access in the region.

In Brazil, the Banco Central do Brasil licenses non-bank payment institutions under Law 12.865/2013 and BCB Rule #80, as amended by Rules #494/2025 and #495/2025, creating a non-bank PI route distinct from bank-PSP authorisation. This is the foundational market-access path for fintech PSPs and acquirers in the region's largest economy: it determines who can plug into Pix and the settlement infrastructure. Payment institutions need not incorporate as banks and are supervised by the BCB under national payment-system oversight. This non-bank PI/EMI distinction is the central feature of the Brazilian authorisation map and carries through into safeguarding, settlement access and AML supervision.

In Mexico, the CNBV authorises e-money institutions as IFPEs (Instituciones de Fondos de Pago Electrónico) under the 2018 Fintech Law, subject to the prior favourable opinion of an inter-institutional committee that includes SHCP and Banxico. The IFPE is the largest fintech category, with roughly 87-88 active institutions and 89 total ITF authorisations by mid-2025. It is the principal non-bank e-money authorisation in Mexico and the legal basis for the country's dominant wallet and neobank cohort, including Mercado Pago, Klar and Spin. This claim is held at High confidence: multiple law-firm guides support it but no Tier-1 anchor is present.

Outlook

Both the Brazilian PI regime and the Mexican IFPE regime are established standing positions rather than moving targets, and the trajectory is stable. The forward watch items sit in adjacent modules — safeguarding rules, AML supervision and settlement access — rather than in the licensing perimeter itself. Crypto and financial-promotion enforcement across LATAM was not separately searched to quota this cycle and is flagged for periodic follow-up.

Stablecoins & Digital Money

Brazil is now LATAM's most advanced stablecoin and VASP regime, and the divergence with Mexico's restrictive stance is the structural feature of digital money in the region. The BCB established its VASP framework via Resolutions 519, 520 and 521, published 10 November 2025 and effective 2 February 2026, operationalising Law 14.478/2022. Resolution 520 requires full fiat and public-debt backing and prohibits algorithmic stablecoins; Resolution 521 routes stablecoin cross-border flows through the FX regime, with reporting effective 4 May 2026; and Instruction 701/2026 adds technical-certification requirements. The backing and FX-integration rules directly shape stablecoin-based corridor and settlement business models. This framework is held at High confidence on convergent Tier-3 reporting.

A material forward restriction is carried as a caveat: subsequent Resolution 561 (May 2026) would impose a partial ban on stablecoins as eFX backend settlement from October 2026. Because its sources are not yet in this cycle's source register, it is asserted as a forward caveat rather than a standalone confirmed claim, and it is recorded as a tracked gap pending source registration.

By contrast, Banxico restricts virtual-asset use to internal transactions of IFPEs and banks only, under its 30 September 2020 rule, leaving no general stablecoin-issuance regime in force; e-money via the IFPE remains the practical digital-money vehicle in Mexico. Mexico's restrictive stance is the structural contrast to Brazil's open regime, channelling digital-money activity into the IFPE e-money rail. The Travel Rule dimension of Resolution 520 and the FATF supervision gap carry illicit-finance significance that is routed to the Financial Integrity Monitor.

Outlook

The Brazilian framework took effect 2 February 2026, with Resolution 521 cross-border reporting beginning 4 May 2026; both are now in force. The defining forward variable is Resolution 561's partial eFX backend-settlement ban from October 2026, which tempers Brazil's otherwise open posture and is the principal item to track for stablecoin-based corridor and settlement businesses. The Brazil-Mexico divergence will continue to shape where such models can operate across LATAM.

Operational Resilience & Critical Infrastructure

The 2025 Pix-rail breaches define LATAM operational resilience. On 30 June 2025, C&M Software, a BCB-authorised payment-technology provider bridging institutions to central-bank infrastructure, suffered a cyberattack on Pix reserve accounts. Theft estimates range from approximately R$800m (about US$140m) to over R$1bn, reported as a range across AInvest and TechNadu rather than a single figure, and the BCB ordered an emergency suspension affecting more than 300 institutions. The episode exposed payment-technology providers as a systemic single point of failure in the Pix reserve-account chain, applying to both bank and non-bank participants.

In response, the BCB and CMN established additional cyber-security requirements, in force 18 December 2025 with full compliance by 1 March 2026. These require annual independent intrusion testing with documented vulnerabilities and action plans, plus a transaction-size limit for non-authorised Pix users announced 5 September 2025. Mandatory intrusion testing and recovery-time documentation raise the operational-resilience compliance floor for every Pix participant and technology provider. A second resilience datapoint — a roughly R$710m incident at Sinqia, an Evertec subsidiary, in August 2025 — is noted as a further driver of the regulatory response.

Outlook

The trajectory is escalating. The 1 March 2026 full-compliance deadline has passed and the resilience floor for technology providers is now materially higher. The structural lesson — that PSTIs sit as a single point of failure in the reserve-account chain — will continue to drive both regulatory tightening and the parallel criminal enforcement tracked in the Legal & Litigation module.

Payment Corridor Dynamics

The US-Mexico corridor — the world's largest remittance corridor — turned negative in 2025 for the first time in over a decade. Mexico received US$61.79bn in 2025, a 4.6% decline against 2024's US$64.75bn per Banxico, amid tighter US immigration enforcement, and the downturn continued into January 2026 at -1.4% year-on-year. Broader LATAM inbound remittances reached roughly US$174.4bn in 2025 per the IDB. The corridor turning negative reshapes MTO volumes and corridor risk; roughly 8-10 MTOs control 70-80% of US-LAC flows. This is held at High confidence on Tier-3 reporting of Banxico data, with the January 2026 continuation carried as a caveat.

A new fiscal layer compounds the pressure: the US IRS applies a 1% excise tax on remittances funded with cash, money orders or cashier's checks, effective 1 January 2026. A cash-funded remittance tax incentivises a shift toward digital and account-funded channels and pressures cash-heavy MTO models on the US-LATAM corridor. This is held at Assessed confidence — only Tier-3 reporting citing the IRS is cited, with no direct Tier-1 IRS document, pending primary verification.

On the cross-border infrastructure side, Colombia's Bre-B interoperable instant-payments ecosystem, launched 6 October 2025, is viewed by cross-border players as a game-changer for payment success rates and real-time settlement, hooking domestic instant rails into cross-border money movement and expanding reach for MTOs and stablecoin bridges. This rests on a single Tier-3 source and is held at Assessed confidence.

Outlook

The corridor trajectory is structurally stressed: a declining US-Mexico flow, a new US cash-remittance excise tax in force from January 2026, and correspondent de-risking pressure together mark an inflection that favours digital and account-funded channels. No single pan-LATAM instant-rail interlink equivalent to SEPA or PAPSS is confirmed in force; domestic rails such as Pix and Bre-B remain national, bridged by stablecoin and MTO connectivity. Primary-source verification on the corridor figures and the excise tax is the principal outstanding gap.

Commercial Intelligence (M&A, Investment & Product)

LATAM fintech funding rebounded in 2025, led by Mexico. In Q3 2025, investment reached US$572m across 40 completed deals, up 82% in funding and 33% in deal count year-on-year — an aggregate datapoint signalling renewed investor confidence in LATAM payments and fintech as a leading indicator of competitive entry.

At the company level, Plata (Mexico) raised a US$160m Series A in March 2025 at a roughly US$1.5bn valuation, then a US$250m Series B around October 2025 that more than doubled its valuation to US$3.1bn — the largest step-up of the cohort and a marker of Mexico as the leading LATAM fintech-capital destination in 2025. Klar (Mexico) raised a US$170m Series C around late June 2025 valuing it at US$800m, and also acquired Bineo, an amount not publicly disclosed, exemplifying the consolidation wave as digital-first players absorb traditional-bank assets. In Colombia, Amazon invested US$25m in the platform Rappi on 15 September 2025, with an option to acquire up to 12%, providing capital to expand Rappi Pay (RappiCuenta, RappiCard) — a signal of big-tech entry into LATAM embedded payments. All four events are dashboard-tier dated entries held at High confidence on quality-journalism sources.

Outlook

The trajectory is escalating. Mexico's position as the region's leading fintech-capital destination, combined with strategic consolidation (Klar-Bineo) and big-tech entry (Amazon-Rappi), points to continued competitive-entry pressure into the LATAM payments market. Discrete deals remain distinct from the structural competitive dynamics tracked in the Industry Structure module.

Conduct, Safeguarding & Financial Promotions

The safeguarding question in Brazil turns on how customer balances are held and protected, and it carries the non-bank PI/EMI distinction directly. The BCB permits payment institutions to hold customer balances in prepaid payment accounts, with PI settlement accounts funded at the BCB and costless standing facilities. However, full statutory asset-segregation recognition for virtual-asset operations remains pending a specific bill in Congress — a noted insolvency and safeguarding plumbing gap. Customer-fund protection and that pending asset-segregation bill are the key insolvency-risk variable for PI and VASP operators holding client balances in Brazil. The settlement-plumbing detail is anchored to Tier-1 World Bank material; the pending bill rests on a Tier-3 law-firm source.

On the conduct side, the BCB introduced device-registration controls via Normative Nº 491, obliging institutions to tighten first-time and unregistered-device fraud controls on Pix. These conduct controls raise the fraud-prevention compliance baseline for all Pix participants, banks and non-banks alike. This claim rests on a single Tier-3 vendor source and is held at High confidence.

Outlook

The live W1b watch item is the congressional asset-segregation bill, whose passage would close the recognised insolvency gap for virtual-asset operations. Device-registration and broader conduct controls are an escalating fraud-prevention vector tied to the wider operational-resilience response. Crypto and financial-promotion enforcement in LATAM was not separately searched to quota this cycle and is flagged as a thin, under-indexed vector for periodic follow-up.

Scheme & Network Compliance

Brazil's interchange regime, combined with Pix's near-zero cost, is the core driver of merchant-fee compression and the card-to-instant-rail migration shaping LATAM acquirer economics. The BCB caps debit interchange at a 0.5% weighted-average and 0.8% maximum (October 2018), simplified to a single 0.5% cap in April 2023, and brought prepaid into scope at 0.7% with harmonised settlement. Pix sits outside interchange regulation — peer-to-peer transfers are free, with low person-to-business and business-to-business fees — giving an average Pix cost of around 0.33% against debit at roughly 1.13% and credit at roughly 2.34%. The cost-comparison figures are anchored to BIS Bulletin No 52 (Tier-1), with the interchange detail drawn from Tier-3 sources.

Outlook

The interchange regime itself is stable, but the cost gap between regulated card interchange and the near-zero Pix rail continues to drive structural migration toward instant payments and to compress acquirer margins. Member-state breadth is limited this cycle: Argentina and Chile interchange-cap detail was not separately searched to quota, leaving the W4 spread concentrated on Brazil and flagged for periodic follow-up to reduce big-market over-indexing within the bloc.

Industry Structure & Commercial Dynamics

The structural competitive dynamics of LATAM acquiring and the maturing of the Mexican non-bank market are the W6 spine this cycle, distinct from the discrete deals carried in W13. In Brazil, Itaú Unibanco escalated the acquiring price war by cutting its receivables-advance rate to zero for Rede clients paid via an Itaú account — an unprecedented escalation against Stone and PagSeguro. Brazil's acquiring market is led by Cielo (historically around 42%), Rede and Getnet, alongside challengers. Receivables-advance pricing is the core acquirer revenue battleground, and Itaú zeroing the rate compresses challenger economics and signals structural consolidation pressure.

In Mexico, Mercado Pago leads fintech profitability, reporting US$602m in fintech-division profit in Q3 2025, up 55.6% year-on-year. Mexico now hosts more than 1,100 fintechs, second in LATAM, alongside Nubank, Spin by Oxxo (24,000+ stores), BBVA México and Hey Banco. This cohort's profitability signals the maturing of the IFPE-led non-bank market into sustainable scale.

Outlook

The trajectory is escalating. Receivables-advance pricing in Brazil is a live consolidation pressure that will continue to reshape acquirer economics, while Mexico's scale-profitable wallet and neobank cohort underpins the region's commercial-intelligence momentum. Specific funding rounds and deals are routed to the W13 module.

Legal & Litigation

The enforcement fallout from the C&M Software Pix breach is the leading W7 development. The Brazilian Federal Police and BCB opened a formal investigation into the breach, covering criminal conspiracy, fraud-related theft, unauthorised intrusion and money laundering; an IT operator was arrested for selling access credentials that enabled roughly R$800m (about US$140m) in theft from six institutions. The criminal and enforcement fallout sets precedent on insider-credential liability and PSTI accountability in instant-rail breaches. This is held at Assessed confidence. The money-laundering dimension is routed to the Financial Integrity Monitor; WPM carries only the enforcement and legal-precedent surface.

A second, earlier-stage thread is an emerging trade dispute. The US (via USTR and Meta-WhatsApp) has raised competition complaints over Brazil's digital-payment infrastructure, with Meta alleging that WhatsApp business-to-consumer payments were temporarily blocked to protect Pix from competition; the complaints are proceeding within USTR and WTO frameworks. A US-Brazil dispute over Pix's market position could affect digital-payment-infrastructure access conditions for foreign players. This rests on a single Tier-3 think-tank source and is asserted only as Possible.

Outlook

The enforcement trajectory is escalating: the insider-credential arrest and the broader C&M investigation will set the precedent baseline for PSTI accountability in instant-rail breaches. The Pix trade dispute is early-stage and low-confidence, but a US-Brazil escalation over Pix's competitive position is a watch item for foreign-player access conditions.

Merchant Acquiring & Risk

The Brazilian acquiring market has a distinct chargeback and receivables structure that drives its risk and revenue profile. Card chargeback liability sits merchant-side, while Pix and Boleto push rails carry effectively zero chargeback exposure, anchored to the payer's CPF or CNPJ identifier. The BCB's 2021 receivables-registration regime, operated through CERC and B3, opened the receivables-advance market beyond the incumbent set of Rede, Stone, Cielo, SafraPay and PagSeguro. Push-rail zero-chargeback economics and the opened receivables-registration market are the structural drivers of Brazilian merchant-acquiring risk and revenue. This is held at Assessed confidence on a mix of Tier-3 and Tier-4 sources.

Outlook

The structure is stable. The interplay between zero-chargeback push rails and the opened receivables-registration market continues to define where acquiring risk and revenue concentrate, and connects directly to the receivables-advance price war tracked in the Industry Structure module.

Product Innovation & Market Development

Central-bank instant rails are the leading product-innovation surface in LATAM, with Brazil's Pix and Colombia's Bre-B at the front. Pix, operated by the BCB, is the primary payment method, reaching roughly 90% of the population with up to about 290 million transactions per day. It is extending to Pix Automático (recurring payments, early 2026) and to PISP/Open Finance participation, with BCB-regulated payment-initiation by authorised institutions that do not hold the user's account. Pix's reach and its extension to recurring and payment-initiation functions define the addressable A2A product surface and the competitive ceiling for cards in Brazil. The PISP and Pix Automático detail is anchored to Tier-1 BCB material, with adoption metrics from Tier-3 reporting.

Colombia's Bre-B, operated by the Banco de la República, became fully operational on 6 October 2025 after a controlled run from 23 September to 5 October 2025 that verified interoperability across five instant systems and 227 participating institutions. It interconnects the Transfiya and Entrecuentas networks via public digital infrastructure under CIPI public-private governance. By early 2026 it had reached roughly 35m registered users, 103m aliases, around 607m transactions and US$25bn in value across 170-plus participants — post-launch adoption metrics carried as a caveat against the Tier-1 BanRep launch anchor. Bre-B replicates the Pix model and signals a second large LATAM A2A market opening.

Outlook

The trajectory is escalating across both markets. Pix Automático's first-quarter 2026 launch and the deepening of PISP participation extend Brazil's A2A surface, while Bre-B's rapid adoption opens Colombia as a second major instant-rail market. Post-launch Bre-B adoption metrics rely on a non-primary source relative to the run date and are flagged for refresh.

Consumer Protection & APP Fraud

Brazil's MED refund channel is LATAM's flagship instant-rail consumer-redress regime. Created in 2021, the Mecanismo Especial de Devolução operates as follows: on trigger, funds are blocked at the recipient institution, both banks have around seven days to review, refunds occur within roughly 11 days, and claims can be raised up to 80 days after the transfer. Resolution 589 mandated self-service in-app MED by October 2025, and Resolution 493 added in-app appeals. MED 2.0, arriving around February 2026, traces funds across up to five account layers. Notably, only around 9% of 2023 requests were refunded, chiefly due to insufficient funds — the structural limitation that operators and regulators must address. This is held at Confirmed confidence on convergent specialist reporting from VIXIO, QED, Demarest and CommerceGate.

Outlook

The trajectory is escalating. The October 2025 self-service mandate and the MED 2.0 five-layer tracing capability around February 2026 materially expand the redress toolkit, but the persistently low refund-success rate remains the defining structural limitation of instant-rail consumer redress in Brazil.

AML/CFT & Financial Crime

This module is sourced from the Sentinel feed; WPM carries only the payments-relevant supervisory surface and does not re-analyse illicit finance, which is routed to the Financial Integrity Monitor. Per the Sentinel feed citing Brazil's 2023 FATF/GAFILAT mutual evaluation, the BCB was found to be the key supervisor for the most material institutions, whose risk-based activities significantly improved money-laundering and terrorist-financing detection, while other supervisors had not yet ensured sufficient implementation. Resolution 520/2025 extends AML/CFT and Travel Rule obligations to VASPs. The bank-versus-non-bank supervision gap flagged by FATF is the AML risk variable for non-bank PSPs and VASPs operating in Brazil, and the Travel Rule extension is a direct compliance obligation. Further detail is available via the Sentinel feed.

For Mexico, the Sentinel feed reports that the country made progress addressing most technical-compliance deficiencies from its 2016 mutual evaluation and was re-rated on two recommendations, with SHCP leading AML/CFT regulation. Mexico's follow-up status conditions correspondent-banking risk perception on the US-Mexico corridor. Both items rest on FATF Tier-1 material via the Sentinel feed.

Outlook

The trajectory is stable. The Brazilian bank-versus-non-bank supervision gap and the Travel Rule extension to VASPs are the standing AML-relevant variables for non-bank operators, while Mexico's technical-compliance follow-up conditions correspondent-banking risk perception. The illicit-finance significance of both threads is routed to the Financial Integrity Monitor.

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank access asymmetry. BIS data show roughly a 30% decline in active correspondent activity in Latin America over the prior decade, with smaller and Caribbean jurisdictions worst hit. The February 2025 US FTO/SDGT designation of eight transnational criminal organisations operating across Mexico and LATAM raises civil and criminal exposure for US banks holding Latin American correspondent accounts, risking renewed de-risking. De-risking and the cartel designations directly constrain settlement and access for LATAM banks and lengthen payment chains — the structural backdrop for non-bank PSP corridor demand. This is anchored to BIS, FSB and World Bank Tier-1 material on the de-risking trend, with Covington Tier-3 on the FTO/SDGT exposure. The illicit-finance use dimension of the designations is routed to the Financial Integrity Monitor.

Against that bank-side contraction sits a non-bank advantage in Brazil. The BCB provides settlement liquidity supporting PI access via STR working hours and a dedicated Pix window (18:30-19:00) using reserve-requirement balances, plus a Selic-linked repo facility. Direct PI access to central-bank settlement liquidity is a structural advantage for Brazilian non-bank PSPs over peers reliant on bank-sponsored access. This is held at Confirmed confidence on a Tier-1 World Bank case study.

Outlook

The trajectory is escalating on the correspondent-contraction side: the decade-long decline plus the February 2025 cartel designations risk renewed de-risking that lengthens payment chains and sustains demand for non-bank corridor alternatives. Brazil's direct PI settlement access remains a structural counterweight, illustrating the bank versus non-bank asymmetry at the heart of the module.