Uruguay Payments & Fintech Regulation

UY schema world-payments-v1 trajectory: not yet assessed

Last updated · 14 modules · 88 sourced findings · 146 sources in the cumulative register

Jurisdiction brief

Latest update · 4 November 2026

Lead Signal

Uruguay's central bank has closed the comment period on a draft rule that would require strong customer authentication on card-based, not-present electronic-money payments. The draft, published by Banco Central del Uruguay on 17 September 2026 as a new Article 103.1 of the retail payments regulation, would compel e-money issuers to apply reinforced authentication aligned with prevailing card-scheme standards whenever a card-linked e-money instrument is used in a remote transaction. Food-benefit e-money instruments are carved out of the requirement. The consultation window closed on 5 October 2026 and the measure has not been adopted or brought into force; no effective date has been set beyond an expected window later in the year.

Key regulatory facts for Uruguay
Regulatory DimensionUruguay Standing Position
JurisdictionUruguay (UY)
Regulatory ScopePayments & Fintech Regulation (14 modules, 88 sourced findings)
Licensing, Authorisation & Market AccessUruguay's BCU finalised comprehensive VASP authorisation Resolution SSF No.
Conduct, Safeguarding & PromotionsSafeguarding of IEDE customer funds is legally mandated via segregated trust-style accounts at licensed IIFs (Ley 19.210 art.
Stablecoins & Digital MoneyUruguay treats e-money (dinero electrónico) as a mature, BCU-authorised category under Ley 19.210.
Operational Resilience & Critical InfrastructureBCU is building a graduated cyber-supervision regime for the payments system anchored on AGESIC's national Marco de Ciberseguridad (MCU), starting with mandatory periodic cyber-capability reporting by IEDEs (from 1...
Primary Instruments CitedUruguay Official Instrument (bcu.gub.uy Ley-2019210-pdf), Uruguay Official Instrument (bcu.gub.uy LIBRO-20VII-pdf), Uruguay Official Instrument (gub.uy registro-instituciones-emisoras-), Uruguay Official Instrument (180.com.uy 56994_como-funciona-el-dinero-el), Uruguay Official Instrument (colibri.udelar.edu.uy Florencia-20Piazza_Finanzas-pdf)
Last Confirmed / Updated2026-11-04 (146 sources in cumulative register)

#

Uruguay's BCU finalised comprehensive VASP authorisation Resolution SSF No. 2026-444 under Ley N° 20.345, with existing operators able to apply 1 Sept 2026-31 Mar 2027, and published a 2026-2030 Payments System Roadmap targeting Open Banking, ISO 20022, and eventual stablecoin/CBDC integration.

Open gap — wpm-int-1No new licensing/market-access delta located for UY payment firms this cycle.no under-indexing note recorded
Open gap — wpm-int-2026-11-01-G001No new licensing/market-access delta (W1a) found this cycle.no under-indexing note recorded
Horizon · 2026-09-01 (± a quarter)BCU VASP authorisation application window opensAdopted, not yet in force · Tier 1 source
Horizon · 2026-Q4 (± six months)Ley de Competitividad (Open Finance/sandbox) Chamber of Deputies progressProposed · Tier 3 source
Standing sub-brief · as of 8 July 2026 162 words · last cycle 2026-10-04

Licensing, Authorisation & Market Access

Uruguay's payments licensing architecture rests on a mature dual-track model. Ley N°19.210 and the BCU's Recopilación de Normas del Sistema de Pagos (RNSP) Libro VII establish a non-bank e-money issuer licence — the Institución Emisora de Dinero Electrónico (IEDE) — that coexists with the conventional bank/Institución de Intermediación Financiera (IIF) licensing route. This dual-licence design gives non-bank payment institutions a direct, purpose-built authorisation path rather than requiring a banking licence to issue e-money, while banks retain their own established route into the same payments space. The regime's most recent refinement came via Circular 2.467, issued 29 October 2024, which updated IEDE authorisation requirements within the existing RNSP Libro VII framework rather than replacing it.

Periodic update · new data 2026-09-28

Licensing, Authorisation & Market Access

Banco Central del Uruguay has finalised a comprehensive licensing regime for virtual-asset service providers, completing Resolution SSF No. 2026-444 under the authority of Ley N degrees 20.345 and adding a new Title VII-TER to the Compilation of Securities Market Regulations. This is a non-bank-focused market-access instrument: the authorisation requirement targets legal entities providing virtual-asset services on a regular and professional basis where the underlying assets are deemed by the BCU to be financial instruments, a population that sits outside the traditional bank-licensing perimeter. The transitional design is the key market-access mechanic to track. Existing operators may apply for BCU authorisation during a window running from 1 September 2026 through 31 March 2027, and critically, may continue operating while their application is under review, meaning market presence is not interrupted by the review process itself. New entrants face a materially different standard: authorisation must be secured before any operation may commence, with no equivalent continuity allowance. This bank/non-bank and incumbent/new-entrant asymmetry is the structural spine of the licensing development.

This licensing event sits inside a considerably broader strategic frame. The BCU has published its Payments System Roadmap 2026-2030, a five-pillar document, and its Board approved, on 5 June 2026, draft legislation for a national Open Finance System, described as one of the roadmap's core strategic lines. The VASP authorisation regime and the Open Finance bill are therefore both licensing/market-access developments proceeding under the umbrella of the same multi-year roadmap, even though they concern different market segments, digital assets on one hand and account-data-sharing infrastructure on the other. Both developments point toward a BCU actively expanding and formalising the categories of entity that may participate in Uruguay's payments and digital-asset markets, rather than a BCU narrowing market access.

The evidentiary basis for the VASP authorisation finding is strong at the level of the underlying legal instrument, sourced to Tier-1 primary material for the finalisation and transitional-window mechanics. The Open Finance bill approval, by contrast, is corroborated only at Probable confidence via secondary reporting (Mobile Money LatAm), since the bill text itself was not independently retrieved this cycle; the approval date of 5 June 2026 should be read with that sourcing caveat in mind even as the general direction, that a formal Open Finance framework is advancing through the BCU's own legislative process, is well supported by the roadmap document itself.

Outlook

The operative window through 31 March 2027 will determine how much of Uruguay's existing virtual-asset operator population converts from unauthorised to authorised status, continues in pending-review status, or exits the market rather than complete the authorisation process. In parallel, the Open Finance bill's progress through the remaining legislative steps after Board approval is the item to track for the broader market-access agenda; a Board approval is a necessary but not sufficient step toward a codified Open Finance regime, and the roadmap's own five-year horizon suggests further market-access instruments, beyond these two, should be expected to emerge from the same strategic document over the multi-year period ahead.

Sources and findings (12)
  1. T1https://www.bcu.gub.uy/Sistema-de-Pagos/Leyes_y_Decretos/Ley%2019210.pdfretrieved
  2. T1https://www.bcu.gub.uy/Acerca-de-BCU/Normativa/Documents/Recopilacion-de-Normas/Sistema-de-Pagos/LIBRO%20VII.pdfretrieved
  3. T1https://www.gub.uy/tramites/registro-instituciones-emisoras-dinero-electronico-iederetrieved
  4. T3https://www.180.com.uy/articulo/56994_como-funciona-el-dinero-electronicoretrieved
  5. T3https://www.colibri.udelar.edu.uy/jspui/bitstream/20.500.12008/52060/1/Florencia%20Piazza_Finanzas.pdfretrieved
  6. T3https://gpa.uy/informes/economia-y-finanzas/regulacion-de-los-medios-de-pago-electronicos-4778retrieved
  7. T3Ley de Competitividad y Reducción del Costo de Vida — Ley de Competitividad y Reducción del Costo de Vida — Arts. 184-204 create a consent-based Open Finance data- and payment-initiation-sharing system under BCU regulation, prohibiting screen-scraping; arts. 160-163 create BCU-run regulatory sandboxes for innovative financial/payment services.retrieved
  8. T3Banco Central del Uruguay — Banco Central del Uruguay — BCU finalised Resolution SSF No. 2026-444 establishing a comprehensive VASP authorisation regime (Title VII-TER, Compilation of Securities Market Regulations); applications for existing operators open 1 Sept 2026-31 Mar 2027.retrieved
  9. T1Banco Central del Uruguay — Banco Central del Uruguay — BCU published its Payments System Roadmap 2026-2030, structured around five pillars including a commitment to develop an Open Banking regulatory framework.retrieved
  10. T3BCU Directorio — BCU Directorio — BCU's Board approved (5 June 2026) draft legislation for a national Open Finance System (Sistema de Finanzas Abiertas), part of the Payments Roadmap strategic lines.retrieved
  11. T3AEBU (bank-sector union) — AEBU (bank-sector union) — AEBU warned a parliamentary committee that an open-finance interoperability scheme without minimum security standards applicable to all participants risks increasing data-leak and fraud exposure.retrieved
  12. T3Ley de Competitividad y Reducción del Costo de Vida — Ley de Competitividad y Reducción del Costo de Vida — Following unanimous Senate approval on 26 August 2026, the bill moved to the Chamber of Deputies, which began committee hearings with the Minister of Economy and Finance in September 2026; the Minister indicated further amendments would be proposed based on Senate debate.retrieved

#

Safeguarding of IEDE customer funds is legally mandated via segregated trust-style accounts at licensed IIFs (Ley 19.210 art. 5), with fiduciary responsibility on the IEDE and BCU discretion over liquid-asset placement. Conduct/promotions oversight sits with the BCU Superintendencia de Servicios Financieros (SSF), which issues consumer-protection advertencias and enforces mis-promotion cases.

Horizon · 2026-10-01 (± a quarter)BCU strong-authentication (2FA) regime in effectIn force · Tier 3 source
Standing sub-brief · as of 8 July 2026 166 words · last cycle 2026-07-08

Conduct, Safeguarding & Financial Promotions

Client-fund protection for Uruguay's non-bank e-money sector is anchored directly in statute. Ley 19.210 article 5 mandates that licensed IEDEs hold customer funds in segregated "patrimonio de afectación" trust accounts, with the IEDE acting as fiduciary responsibility for those funds. The statute provides for insolvency-remoteness: e-money holders' claims on the segregated trust are carved out from the IEDE's general insolvency estate, giving Uruguay's non-bank e-money customers a safeguarding standard broadly comparable to trust-based segregation regimes seen elsewhere. This mechanism sits at the centre of the bank-PSP vs non-bank-PI/EMI distinction that runs through Uruguay's payments framework: non-bank IEDEs operate under this bespoke trust-based safeguarding rule rather than the prudential capital/liquidity regime applied to banks.

no periodic updates on record for this sub-brief

Sources and findings (6)
  1. T1https://www.bcu.gub.uy/Leyes%20y%20Decretos/Ley19.210.pdfretrieved
  2. T2https://uy.vlex.com/vid/ley-n-19210-ley-644725877retrieved
  3. T1https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdfretrieved
  4. T1https://www.impo.com.uy/inclusionfinanciera/retrieved
  5. T3BCU strong-authentication and complaints-handling regime — BCU strong-authentication and complaints-handling regime — From October 2026, UY payment-instrument issuers must apply strong (two-factor) customer authentication to digital-channel access, card-not-present purchases, digital-wallet affiliation, own-account transfers, non-presential loan requests, and sensitive-data changes; devices habitually used and passkeys are accepted possession factors.retrieved
  6. T3BCU payment-security regime — BCU payment-security regime — Issuers must implement systems to flag unusual transactions, verify transaction geolocation, alert on unrecognised devices, and detect suspicious patterns in rejected transactions; a 60-calendar-day maximum response period applies to definitive complaints requiring intervention by foreign institutions.retrieved

#

Uruguay treats e-money (dinero electrónico) as a mature, BCU-authorised category under Ley 19.210. Separately, Ley N° 20.345 (Sept 2024) created a Proveedores de Servicios de Activos Virtuales (PSAV) perimeter, splitting financial (PSAVF, including stable/exchange virtual assets treated as e-money-equivalent) from non-financial PSAV, with capital/deposit/guarantee thresholds and a 30 June 2026 compliance deadline; stablecoin/RWA-specific rules remain a stated gap pending further BCU proposals.

Open gap — wpm-int-2No stablecoin/digital-money delta located for UY this cycle.no under-indexing note recorded
Open gap — wpm-int-2026-11-01-G002No stablecoin/digital-money delta (W2) found this cycle.no under-indexing note recorded
Horizon · 2026-Q4 (± more than a year)Dedicated stablecoin/RWA-specific rules anticipated beyond current PSAV frameworkConsultation · Tier 3 source
Horizon · 2026-06-30 (± a quarter)PSAV existing-operator compliance deadline (Ley 20.345)In force
Horizon · 2026-Q4 (± more than a year)Dedicated stablecoin/RWA-specific rules anticipated beyond current PSAV frameworkConsultation
Horizon · 2026-06-30 (± a quarter)PSAV Financiero (PSAVF) compliance deadline for existing virtual-asset operators (Ley 20.345)In force · Tier 3 source
Horizon · 2030 (± more than a year)BCU stable virtual asset payment-system integration targetProposed · Tier 1 source
Horizon · 2027-06-30 (± a quarter)PSAV general compliance deadlineAdopted, not yet in force · Tier 1 source
Horizon · 2027-03-31 (± a quarter)PSAV existing-operator registration window closesAdopted, not yet in force · Tier 1 source
Standing sub-brief · as of 8 July 2026 214 words · last cycle 2026-10-11

Stablecoins & Digital Money

Uruguay's stablecoin-adjacent regulatory perimeter reached a significant compliance milestone this cycle. Ley 20.345, enacted in September 2024, creates a BCU-supervised licensing perimeter for Proveedores de Servicios de Activos Virtuales Financieros (PSAVF) — providers of stable or exchange-type virtual assets treated as e-money-equivalent — splitting this category from non-financial virtual-asset providers (PSAV) who fall outside this financial-sector perimeter. Existing operators had until 30 June 2026 to comply, a deadline that has now passed; the licensing regime requires minimum capital of 1,500,000 UI, a 50,000 UI deposit with BCU, and a 2,000,000 UI guarantee for PSAVF authorisation. Separately, BCU's own conceptual framework document treats issuers of stable virtual assets as e-money issuers regulated under existing Sistema de Pagos rules, rather than creating a bespoke stablecoin statute — an approach that folds stablecoin-adjacent activity into Uruguay's existing e-money licensing architecture. Dedicated stablecoin/RWA-specific reserve and redemption rules remain unenacted beyond this framework, an acknowledged regulatory gap.

Periodic update · new data 2026-10-11

Stablecoins & Digital Money

Uruguay's Banco Central del Uruguay finalised a definitive authorisation regime for virtual-asset service providers via Circular N° 2507, published 16 July 2026, which incorporates the framework into the Recopilación de Normas del Mercado de Valores. The regime covers exchange, transfer and custody of virtual assets, and sits within BCU's broader 2026-2030 Payment System Roadmap, which names eventual integration of stable virtual assets into the payment system as a strategic direction rather than a near-term operational commitment.

For custody-service providers specifically, the regime sets prudential thresholds: a minimum net worth of UI 1,000,000, a BCU guarantee of no less than UI 600,000, and a standing deposit at BCU of at least UI 50,000. These figures derive from law-firm commentary on the Circular's provisions rather than from independently retrieved primary text of the Circular itself.

Existing PSAV operators are afforded a registration window running from 1 September 2026 to 31 March 2027, during which they may continue operating while their applications are processed, with general compliance across all Circular N° 2507 provisions due by 30 June 2027. This staged timeline distinguishes the regime's legal finalisation from its practical, on-the-ground implementation, which remains incomplete until mid-2027.

Outlook

The two dates to track are 31 March 2027, when the registration window for existing PSAV operators closes, and 30 June 2027, the general compliance deadline for the full Circular. Whether BCU's roadmap commitment to eventual stable-virtual-asset integration into the payment system advances beyond a strategic goal into concrete rulemaking is a separate question not yet addressed by Circular N° 2507 itself.

1 earlier distinct update(s)
Periodic update · new data 2026-09-28

Stablecoins & Digital Money

Uruguay's stablecoin posture remains at the roadmap-policy stage rather than the codified-regulation stage, but this cycle surfaces the first explicit statement of intent on the subject from the Banco Central del Uruguay. The BCU's Payments System Roadmap 2026-2030 describes an objective to establish conditions for the integration of stable virtual assets into the national payment system, framed under the roadmap's stated principles of stability, security, competition, interoperability and risk management. This is a policy-level commitment rather than a binding instrument: no reserve, redemption, or issuance rule specific to stablecoins has been identified this cycle, and the roadmap language itself should be read as setting direction rather than establishing operative requirements.

The stablecoin objective sits within a roadmap that also commits the BCU to continued central bank digital currency analysis and a comprehensive review of payment-system operating costs and access conditions, suggesting that stable virtual assets are being considered by the BCU as one component of a broader digital-money and payment-modernisation agenda rather than as an isolated initiative. The five-pillar structure of the roadmap appears designed to sequence these initiatives, though the specific sequencing and prioritisation of the stablecoin objective relative to the roadmap's other pillars was not detailed in material available this cycle.

The confidence level attached to this finding is Probable rather than Confirmed, and the underlying evidence is a single Tier-3 secondary report rather than direct retrieval of the roadmap's stablecoin-specific language; the roadmap document itself, sourced at Tier-1, confirms the general shape of the multi-year strategic direction but the stablecoin-specific framing quoted this cycle traces to secondary commentary. This should be read as a genuine but early-stage signal: the BCU has stated an intention rather than proposed or enacted a stablecoin-specific regulatory instrument.

Outlook

With a 2030 target horizon attached to the roadmap's stable-virtual-asset integration objective, near-term development should be expected to take the form of consultation or framework-design activity rather than an operative stablecoin regime landing within the next one to two cycles. The more immediate, higher-confidence VASP authorisation regime finalised this cycle under Resolution SSF No. 2026-444 does not itself constitute a stablecoin-specific instrument, but firms issuing or dealing in stable virtual assets in Uruguay should expect that any future stablecoin-specific framework will likely be built as an extension of, or alongside, the VASP authorisation architecture already in place, given the shared supervisory authority and shared roadmap sponsorship.

Sources and findings (9)
  1. T1https://uy.vlex.com/vid/ley-n-19210-ley-644725877retrieved
  2. T1https://www.bcu.gub.uy/NOVA-BCU/SiteAssets/Marco%20conceptual%20para%20el%20tratamiento%20de%20Activos%20Virtuales%20en%20Uruguay.pdfretrieved
  3. T2https://www.guyer.com.uy/informes-&-noticias/proveedores-de-servicios-de-activos-virtuales-se-aprueba-proyecto-de-ley-en-uruguayretrieved
  4. T3https://ecosistemastartup.com/regulacion-cripto-uruguay-1-5m-ui-minimo-frena-startups/retrieved
  5. T3https://www.criptonoticias.com/comunidad/regulacion-criptomonedas-uruguay-martin-benitez/retrieved
  6. T1Banco Central del Uruguay — Banco Central del Uruguay — Circular N° 2507 (16/07/2026) incorporates the PSAV regime into the Recopilación de Normas del Mercado de Valores.retrieved
  7. T3BCU Payments System Roadmap 2026-2030 — BCU Payments System Roadmap 2026-2030 — The roadmap describes an objective to establish conditions for the integration of stable virtual assets into the payment system, under principles of stability, security, competition, interoperability and risk management.retrieved
  8. T3PSAV custody providers — PSAV custody providers — Minimum net worth UI 1,000,000, BCU guarantee UI 600,000, standing deposit UI 50,000.retrieved
  9. T1Banco Central del Uruguay — Banco Central del Uruguay — Hoja de Ruta del Sistema de Pagos 2026-2030, targeting integration of stable virtual assets into the payment systemretrieved

#

BCU is building a graduated cyber-supervision regime for the payments system anchored on AGESIC's national Marco de Ciberseguridad (MCU), starting with mandatory periodic cyber-capability reporting by IEDEs (from 1 July) and continuity/outsourcing-governance updates via Circular 2486; the 2026-2030 Payments Roadmap makes cybersecurity and operational continuity an explicit strategic pillar alongside ISO 20022 migration.

Key judgment — Probable · impact The BCU's draft strong-authentication requirement, if adopted, would bring UY e-money card-not-present rules broadly into line with international SCA-style standards, but no in-force date exists yet.claims: none recorded

Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. Open its jurisdiction pages on Dataprotection.gi →

Horizon · 2026-07-01 (± a quarter)IEDE mandatory periodic cyber-capability reporting commencesIn force
Horizon · 2026-07-01 (± a quarter)Mandatory IEDE cybersecurity-capability periodic reporting to BCUIn force · Tier 3 source
Horizon · 2026-Q4 (± six months)BCU draft strong-authentication rule for e-money card-not-present paymentsConsultation · Tier 3 source
Standing sub-brief · as of 8 July 2026 132 words · last cycle 2026-11-04

Operational Resilience & Critical Infrastructure

Uruguay's operational-resilience regime for e-money issuers has moved from general expectation to a codified reporting obligation this cycle. From 1 July 2026, Instituciones Emisoras de Dinero Electrónico (IEDEs) are required to periodically report cybersecurity-capability information to BCU, under a graduated cyber-supervision scheme anchored on AGESIC's national Marco de Ciberseguridad (MCU). This gives BCU a formal, recurring channel of visibility into IEDE cyber-resilience postures, moving the domestic framework toward the kind of graduated, reporting-based oversight seen in more developed operational-resilience regimes internationally, without yet constituting a full DORA-equivalent regime.

Periodic update · new data 2026-11-04

Operational Resilience & Critical Infrastructure

Banco Central del Uruguay published a draft regulatory project on 17 September 2026 that would add a new Article 103.1 to the retail payments regulation, introducing a strong customer authentication requirement for card-based electronic-money payments made in a not-present setting. Under the draft, e-money issuers would be required to apply reinforced authentication consistent with prevailing card-scheme standards to these remote transactions. Instruments tied to food-benefit programmes are expressly excluded from the requirement, reflecting a narrower social-purpose carve-out within the broader e-money regime.

The measure went through a public comment period that closed on 5 October 2026. As of the most recent information available, the draft has not been adopted, is not in force, and carries no confirmed effective date; an adoption window later in the year is anticipated but not yet fixed. The proposal sits alongside Uruguay's existing payment-system supervisory architecture, under which the central bank also continues to authorise individual payment processing activities, such as its recent clearance of a processor to operate in the electronic payment-means space, though that authorisation is a separate, ordinary-course market-access action rather than part of the authentication rulemaking.

Outlook

The principal item to track is whether and when Banco Central del Uruguay finalises Article 103.1. Adoption would require e-money issuers offering card-linked, not-present payment functionality to build out authentication controls matching card-scheme expectations, with lead time depending on whatever transition period accompanies the final rule. Until a definitive text and commencement date are published, issuers operate under the current regime, and the requirement should be treated as a pending rather than binding obligation. The food-benefit exclusion, if preserved into the final rule, will keep a segment of e-money activity outside the new authentication standard, which is worth watching for scope creep or narrowing in the final drafting.

4 earlier distinct update(s)
Periodic update · new data 2026-11-03

Operational Resilience & Critical Infrastructure

Uruguay's central bank has put forward a draft amendment, under Article 103.1 of the retail payment system regulations, that would require e-money issuers to apply strong customer authentication to card-based, not-present e-money payments, in line with prevailing card-scheme standards. The requirement is framed around the not-present transaction leg specifically - the point at which a card-linked e-money instrument is used remotely rather than presented physically - and would exclude food-benefit e-money instruments from its scope.

The draft is part of a wider rulemaking effort by the central bank on the security of electronic payment instruments, and its public comment period closed in early October. No adoption date has been confirmed, and the regulation's legal effective date remains outstanding, as does any associated penalty framework for non-compliance. An expectation of finalisation by the end of 2026 has surfaced, but this is not yet a settled commencement date and should be read as a planning horizon rather than a confirmed deadline.

For e-money issuers operating in the card-not-present space, the direction of the requirement is reasonably clear even without a fixed date: authentication practices for these transactions will need to converge on scheme-aligned strong authentication once the rule takes effect. Issuers that already apply such standards voluntarily, or through card-scheme contractual obligations, are better positioned than those relying solely on generic fraud monitoring.

Outlook

The principal marker to watch is the central bank's move from consultation to adoption. Confirmation of a legal effective date, together with any penalty provisions, would convert this from a probable future obligation into an enforceable one, and would be the trigger point for issuers to finalise technical implementation of strong authentication on affected transactions.

Periodic update · new data 2026-10-25

Operational Resilience & Critical Infrastructure

Uruguay's Banco Central has reinforced client-authentication requirements for electronic payment instruments, with the main amendments taking effect on 1 October 2026 through Circular N° 249, which substitutes article 364.1 of the Recopilación de Normas de Regulación y Control del Sistema Financiero. The rule requires two-factor authentication across a broad set of digital-channel touchpoints: general access to digital channels, transfers and payments, non-presential loan applications, and any change to sensitive client data. This is a meaningfully broader scope than an authentication rule confined to transaction-initiation alone, since it extends the control point to channel access itself.

The obliged population under the measure is wide, spanning banks, financial-intermediation cooperatives, credit administrators, financial-services firms, exchange houses, fund-transfer companies and peer-to-peer lending platforms. This breadth means the operational-resilience uplift touches both traditional deposit-taking institutions and a range of non-bank payment and lending intermediaries operating in Uruguay, without the rule drawing a differentiated compliance path between the two categories based on the evidence available.

Coverage of the measure rests on secondary press commentary rather than the primary BCU circular text itself, which was not directly located. The direction of travel, however, is consistent: Uruguay's payments regulator has been moving from narrower, transaction-triggered security requirements toward a more general digital-channel authentication standard, and the October 2026 effective date marks the most recent step in that trajectory.

Outlook

The principal item to watch is whether the primary circular text becomes available for direct review, which would allow confirmation of the precise scope and any exemptions within the obliged-entity population. More broadly, the trajectory toward broader digital-channel authentication requirements suggests further operational-resilience measures may follow, particularly if incident patterns in the Uruguayan payments market continue to implicate digital-channel access points rather than transaction-specific vectors alone.

Periodic update · new data 2026-10-18

Operational Resilience & Critical Infrastructure

Uruguay's Banco Central has reinforced client-authentication requirements for electronic payment instruments, with the main amendments taking effect on 1 October 2026 through Circular N° 249, which substitutes article 364.1 of the Recopilación de Normas de Regulación y Control del Sistema Financiero. The rule requires two-factor authentication across a broad set of digital-channel touchpoints: general access to digital channels, transfers and payments, non-presential loan applications, and any change to sensitive client data. This is a meaningfully broader scope than an authentication rule confined to transaction-initiation alone, since it extends the control point to channel access itself.

The obliged population under the measure is wide, spanning banks, financial-intermediation cooperatives, credit administrators, financial-services firms, exchange houses, fund-transfer companies and peer-to-peer lending platforms. This breadth means the operational-resilience uplift touches both traditional deposit-taking institutions and a range of non-bank payment and lending intermediaries operating in Uruguay, without the rule drawing a differentiated compliance path between the two categories based on the evidence available this cycle.

Coverage of the measure rests on secondary press commentary rather than the primary BCU circular text itself, which was not directly located this cycle. The direction of travel, however, is consistent: Uruguay's payments regulator has been moving from narrower, transaction-triggered security requirements toward a more general digital-channel authentication standard, and the October 2026 effective date marks the most recent step in that trajectory.

Outlook

The principal item to watch is whether the primary circular text becomes available for direct review, which would allow confirmation of the precise scope and any exemptions within the obliged-entity population. More broadly, the trajectory toward broader digital-channel authentication requirements suggests further operational-resilience measures may follow, particularly if incident patterns in the Uruguayan payments market continue to implicate digital-channel access points rather than transaction-specific vectors alone.

Periodic update · new data 2026-10-11

Operational Resilience & Critical Infrastructure

Banco Central del Uruguay has tightened cybersecurity and operational-resilience requirements specifically for Instituciones de Dinero Electrónico (IEDE), Uruguay's e-money institutions. The new requirements include daily consolidated client-balance reporting, giving the regulator a more frequent view of IEDE balance positions than previously required, and an extension of strong-customer-authentication obligations to cover same-user inter-institution transfers and non-face-to-face loan applications, closing gaps in authentication coverage that previously existed around these transaction types.

This tightening applies specifically to the non-bank e-money institution category rather than to banks generally, reflecting a regulatory judgment that IEDE-specific risk, including balance-reporting opacity and authentication gaps in inter-institution and remote-lending flows, warranted a dedicated response rather than a uniform rule applied across all payment-services providers.

Outlook

Whether BCU extends comparable daily-reporting or authentication requirements to other non-bank payment-services categories beyond IEDE, or conversely whether bank-operated e-money-adjacent services face equivalent tightening, is not yet addressed by the sourced material for this cycle.

Sources and findings (8)
  1. T2https://cointelegraph.es/news/uruguay-exige-a-emisoras-de-dinero-electrnico-reportar-sus-capacidades-de-ciberseguridadretrieved
  2. T3https://willinn.io/2025/09/25/bcu-normativa-continuidad-respaldos-2025/retrieved
  3. T1https://www.gub.uy/presidencia/comunicacion/noticias/banco-central-impulsa-eficiencia-seguridad-accesibilidad-del-sistema-pagosretrieved
  4. T3https://openhubnews.com/ln-uruguay-pisa-el-acelerador-fintech-con-innovacion-desde-el-bcu/retrieved
  5. T3BCU Circular N° 249 / art. 364.1 RNRCSF — BCU Circular N° 249 / art. 364.1 RNRCSF — Mandatory two-factor authentication for digital-channel access, transfers/payments, non-presential loan applications, and changes to sensitive client data, effective 1 October 2026retrieved
  6. T3IEDE (e-money institutions) — IEDE (e-money institutions) — Daily consolidated client-balance reporting; extended strong-customer-authentication to same-user inter-institution transfers and non-face-to-face loan applications.retrieved
  7. T3Electronic Money Issuing Institutions (IEDEs) — Electronic Money Issuing Institutions (IEDEs) — IEDEs must periodically report cybersecurity-capability information to BCU as of 1 July 2026retrieved
  8. T1Banco Central del Uruguay — Banco Central del Uruguay — Draft new RNSP Art. 103.1 would require strong customer authentication on card-based not-present e-money payments per prevailing card-scheme standards, excluding food-benefit e-money instruments.retrieved

#

Card-scheme and interchange-adjacent conduct is governed indirectly via the usury/interest-cap law (Ley 18.212) applied to card issuers, and directly via BCU's RNSP card-issuer/acquirer rules and a published tariff register (Aranceles Tarjetas). Acquiring has historically been near-monopolistic (single Mastercard acquirer) with multi-acquiring competition only emerging post-2021.

Standing sub-brief · as of 8 July 2026 89 words · last cycle 2026-07-08

Scheme & Network Compliance

Card-issuer pricing in Uruguay is structurally constrained by consumer-credit law rather than scheme-specific rules. Ley N°18.212, the country's usury-cap statute, subjects card issuer fees and charges to a statutory implicit-rate usury methodology that structurally caps total card-related charges, operating as a scheme-adjacent conduct constraint on issuer pricing rather than a payments-specific regulation.

no periodic updates on record for this sub-brief

Sources and findings (6)
  1. T1https://www.impo.com.uy/bases/leyes/18212-2007retrieved
  2. T1https://usuariofinanciero.bcu.gub.uy/tasas/topes-de-tasas-de-interes-y-usura/retrieved
  3. T3https://www.montevideo.com.uy/Negocios-y-Tendencias/La-nueva-competencia-por-procesar-las-ventas-de-los-comercios-uruguayos-uc817940retrieved
  4. T1https://www.bcu.gub.uy/Sistema-de-Pagos/Documents/Aranceles-Tarjetas/Aranceles%20publico.xlsxretrieved
  5. T1Card issuers (Uruguay) — Card issuers (Uruguay) — Ley 18.212's implicit-rate usury methodology structurally caps card-related interest/fees, enforced via BCU's topes de tasas de interés y usura guidance.retrieved
  6. T3Getnet (Santander/PagoNxt) — Getnet (Santander/PagoNxt) — Getnet's 2021 market entry ended Fiserv's exclusive Mastercard-acquiring position in Uruguay, introducing competitive multi-acquiring.retrieved

#

Uruguay's principal formal cross-border corridor infrastructure is the Mercosur Sistema de Pagos en Moneda Local (SML) with Brazil (since 2010) and Argentina (updated 2023), enabling local-currency trade settlement outside USD correspondent chains. The broader corridor picture is dominated by heavy USD dollarization of deposits/savings and an active BCU de-dollarization push, alongside emerging bilateral-currency ambitions in the 2026-2030 roadmap.

Open gap — wpm-int-3No payment corridor dynamics delta located for UY this cycle; vector awaiting primary source.no under-indexing note recorded
Open gap — wpm-int-2026-11-01-G003No payment corridor dynamics delta (W5) found this cycle; awaiting primary source.no under-indexing note recorded
Standing sub-brief · as of 8 July 2026 120 words · last cycle 2026-07-08

Payment Corridor Dynamics

Uruguay's principal formal payment corridors run through the Mercosur Sistema de Pagos en Moneda Local (SML) network rather than direct USD correspondent chains. BCU and Argentina's central bank, BCRA, signed a new SML Reglamento Operativo on 5 September 2023, updating the bilateral local-currency (UYU/ARS) trade-settlement agreement and enabling settlement outside USD correspondent chains. This complements the earlier Uruguay-Brazil SML leg established in 2010, giving Uruguay two active local-currency corridors alongside its still-dominant USD-denominated cross-border flows.

no periodic updates on record for this sub-brief

Sources and findings (5)
  1. T1https://www.bcu.gub.uy/Comunicaciones/Paginas/Detalle-Noticia.aspx?noticia=249&title=Nuevo-Reglamento-Operativo-del-Sistema-de-Pagos-en-Moneda-Local-(SML)-entre-Uruguay-y-Argentinaretrieved
  2. T2https://www.argentina.gob.ar/justicia/derechofacil/leysimple/mercosur-transacciones-comerciales-sistema-pagos-moneda-localretrieved
  3. T2https://www.busqueda.com.uy/economia/consentimiento-depositos-dolares-sera-simplemente-una-notificacion-dice-presidente-del-bcu-n5408463retrieved
  4. T3https://tynmagazine.com/uruguay-pisa-el-acelerador-fintech-con-innovacion-desde-el-bcu/retrieved
  5. T1Uruguay-Argentina Sistema de Pagos en Moneda Local (SML) — Uruguay-Argentina Sistema de Pagos en Moneda Local (SML) — Trade payments for goods and services (excluding financial operations) may be settled in Uruguayan or Argentine pesos under the September 2023 updated SML Reglamento Operativo, reducing reliance on USD correspondent chains.retrieved

#

Uruguay's payments industry is bank-anchored (BROU, Santander, Itaú, BBVA dominate financial-institution complaint volume) with a historically concentrated card-acquiring segment now opening to competition via Getnet's 2021 entry, alongside a globally significant homegrown fintech, dLocal — Uruguay's first unicorn and a Nasdaq-listed cross-border payments processor.

Standing sub-brief · as of 8 July 2026 114 words · last cycle 2026-07-08

Industry Structure & Commercial Dynamics

Uruguay's payments industry structure is defined by a striking asymmetry between a concentrated domestic banking sector and one globally significant non-bank export champion. dLocal, Uruguay's first unicorn, is a Nasdaq-listed cross-border payments processor that reached a US$9.5bn valuation, making it by far the country's most globally significant private payments company. Its commercial activity — including M&A and expansion moves — is tracked in discrete form under Commercial Intelligence (W13) rather than restated here.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T1https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdfretrieved
  2. T3https://en.wikipedia.org/wiki/DLocalretrieved
  3. T3https://www.paymentmedia.com/news-5463-santander-uruguay-compra-fintech-de-pagos-y-pisa-el-acelerador-con-getnet.htmlretrieved
  4. T3https://www.ambito.com/uruguay/las-fintech-respaldan-la-ley-competitividad-su-impulso-las-finanzas-abiertas-y-al-sandbox-regulatorio-n6288219retrieved

Enforcement activity centres on BCU/SSF administrative sanctions against regulated entities, most notably a January 2025 AML fine against Banco Bandes Uruguay, set against a broader structural critique that Uruguay's AML enforcement pipeline converts few Suspicious Transaction Reports into prosecutions.

Standing sub-brief · as of 8 July 2026 173 words · last cycle 2026-07-08

Legal & Litigation

Uruguay's payments-adjacent enforcement record this cycle centres on a bank-sector AML/CFT sanction and a structural effectiveness gap in financial-crime enforcement more broadly. BCU fined Banco Bandes Uruguay 650,000 UI (approximately US$91,000) in January 2025 for repeated AML/CFT non-compliance, with the sanctioning notice citing a prior history of sanctions against the bank for the same violation category. Separately, dated context indicates that Uruguay's Unidad de Información y Análisis Financiero (UIAF) received 7,433 suspicious-transaction reports between 2014 and 2024, of which only 124 generated investigations — a conversion rate that has been assessed as pointing to a structural gap between reporting volume and enforcement outcomes. This latter data point is administrative/statistical context rather than a discrete legal action, and is carried here as a dated dashboard entry.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T2https://www.elobservador.com.uy/economia-y-empresas/incumplimiento-severo-bcu-multo-mas-us-90-mil-al-bandes-violaciones-la-normativa-prevencion-lavado-activos-n5980236retrieved
  2. T1https://www.bcu.gub.uy/Servicios-Financieros-SSF/Paginas/SancionesDeLaSSF.aspxretrieved
  3. T3https://prensamercosur.org/2026/02/04/uruguay-mantiene-baja-tasa-de-judicializacion-de-los-reportes-de-operaciones-sospechosas-id184806/retrieved

#

Merchant acceptance rules are set at the Ley 19.210 level (no obligation to accept electronic payment, no minimum-purchase thresholds, no cash-discount steering), while the acquiring market itself is transitioning from a Fiserv/Mastercard-exclusive structure to multi-acquirer competition led by Santander's Getnet.

Standing sub-brief · as of 8 July 2026 104 words · last cycle 2026-07-08

Merchant Acquiring & Risk

Merchant-facing payment-acceptance conduct in Uruguay is governed by rules under Ley 19.210. Merchants are not obligated to accept electronic payment, but where they do, they may not impose minimum-purchase thresholds for debit-card or e-money payments, nor offer cash discounts that are not equally passed through to debit-card payment. This gives Uruguay's merchant-acquiring environment a baseline conduct rule protecting card/e-money payment parity with cash at the point of sale.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T3https://memory.com.uy/blog/obligaciones-fiscales/ley-de-inclusion-financiera/retrieved
  2. T3https://www.elobservador.com.uy/nota/getnet-desembarca-en-uruguay-para-facilitarle-la-operativa-a-los-comercios-2021925508retrieved
  3. T3https://www.montevideo.com.uy/Negocios-y-Tendencias/La-nueva-competencia-por-procesar-las-ventas-de-los-comercios-uruguayos-uc817940retrieved
  4. T3https://www.oca.com.uy/download/TasasVigentes.pdfretrieved

#

Uruguay ran an early, technically successful e-Peso CBDC pilot (2017-2018) that remains dormant at legislative level but is referenced in current BCU strategy; the live innovation agenda now centres on an Open Finance anteproyecto de ley (June 2026), a regulatory sandbox bill (Resolución 145/2026), and an ISO 20022/instant-payments modernisation roadmap for 2026-2030.

Horizon · 2026-Q4 (± six months)Regulatory sandbox anteproyecto (Resolución 145/2026) advances toward ParliamentProposed
Horizon · 2026-Q4 (± six months)Open Finance anteproyecto proceeds toward parliamentary approvalProposed
Horizon · 2030 (± more than a year)Payments Roadmap 2026-2030 implementation horizon (ISO 20022, Open Finance, instant payments)Proposed · Tier 3 source
Standing sub-brief · as of 8 July 2026 175 words · last cycle 2026-10-11

Product Innovation & Market Development

Uruguay's payments-innovation policy track advanced markedly this cycle, with two parallel BCU initiatives moving forward under the 2026-2030 Payments Roadmap. On 5 June 2026, BCU's Directorio approved a Sistema de Finanzas Abiertas (Open Finance) anteproyecto de ley, formally placing open-finance legislation on the roadmap's active track pending parliamentary process. Separately, BCU sent the Ministry of Economy and Finance a regulatory-sandbox anteproyecto, formalised as Resolución N°145/2026, which would allow temporary authorisations of up to 12 months, renewable for a further 12 months, for innovative payments activities — giving prospective entrants a defined, time-limited route to test new payments models under BCU oversight ahead of full licensing.

Periodic update · new data 2026-10-11

Product Innovation & Market Development

Banco Central del Uruguay, via Resolución N° 145/2026, remitted two draft bills to the Ministry of Economy and Finance this cycle: a regulatory sandbox bill intended to support financial and payments innovation, and an Open Finance (Sistema de Finanzas Abiertas) bill that would mandate interoperable, consent-based data-sharing across financial-services providers. Both bills were sent to MEF rather than directly to Parliament, reflecting their current pre-legislative stage.

The Open Finance proposal is structurally significant because it would introduce a consent-based data-portability mandate into Uruguay's financial-services landscape, a product-access regulatory theme distinct from any single product launch. The regulatory sandbox, by contrast, is a framework mechanism intended to lower the barrier for testing new financial and payments products under supervised conditions, rather than itself constituting a product-access mandate.

Both proposals form part of BCU's coordinated payments-modernisation agenda for the 2026-2030 period, which also encompasses the virtual-asset authorisation regime and the e-money institution resilience tightening tracked elsewhere this cycle.

Outlook

The key open question is whether either bill advances from remission to the Ministry of Economy and Finance into formal parliamentary introduction. Until that step occurs, both the sandbox and the Open Finance framework remain proposals rather than binding law.

1 earlier distinct update(s)
Periodic update · new data 2026-09-28

Product Innovation & Market Development

The Banco Central del Uruguay's Payments System Roadmap 2026-2030 sets out a multi-pronged product-innovation agenda, and this cycle's material confirms three distinct strands within it. The roadmap includes continued analysis of a central bank digital currency, without committing to a launch decision or timeline; it targets a comprehensive review of payment-system operating costs and access conditions, aimed at the broader question of who can participate in and at what cost within Uruguay's payment infrastructure; and it sits alongside the Board-approved (5 June 2026) draft Open Finance System legislation, which is a distinct but roadmap-linked product-development strand centred on account-data access and open banking-style interoperability.

These three strands, CBDC exploration, cost/access-conditions review, and Open Finance legislation, are presented within the roadmap as complementary components of a single multi-year modernisation programme rather than as independent initiatives. The roadmap's confirmed inclusion of ISO 20022 adoption and instant/interoperable payment-rail ambitions further situates this cycle's product-innovation findings within a broader technical-modernisation agenda that extends beyond any single instrument. None of these strands has yet produced a codified regulatory instrument this cycle; each remains at the stage of a stated strategic objective within the roadmap document, which is itself sourced at Tier-1 confidence as the primary strategic-policy artifact, even though the individual implementing instruments for each strand remain to be developed.

The practical significance of this cluster of findings is that Uruguay's central bank is pursuing a coordinated, rather than piecemeal, approach to payments-market modernisation: CBDC analysis, cost and access-conditions review, and open-finance legislative development are being sequenced under one roadmap rather than emerging as disconnected initiatives from different parts of the institution. This coordination is itself a market-development signal, distinct from any one of the individual product strands.

Outlook

Given the roadmap's 2026-2030 horizon, the CBDC-analysis and cost/access-conditions review strands should be expected to generate incremental milestones, such as consultation papers or interim findings, rather than a completed regulatory product within the next few cycles. The Open Finance bill, having cleared Board approval on 5 June 2026, is comparatively further advanced and is the strand most likely to produce a concrete legislative or regulatory instrument first among the three, subject to its remaining passage through whatever further approval steps are required beyond Board sign-off.

Sources and findings (8)
  1. T1https://www.bcu.gub.uy/Sistema-de-Pagos/Documents/Vigilancia/Libros/CBDC%20march2022.pdfretrieved
  2. T3https://noticias.mobilemoneylatam.com/finanzas-abiertas-uruguay-avanza/retrieved
  3. T2https://www.ambito.com/uruguay/el-banco-central-del-avanza-el-sandbox-regulatorio-de-que-se-trata-este-impulso-al-sistema-financiero-n6277632retrieved
  4. T3https://ccea.com.uy/items/finanzas-informe-tecnico-moneda-digital-en-uruguay/retrieved
  5. T1BCU Payments System Roadmap 2026-2030 — BCU Payments System Roadmap 2026-2030 — The roadmap includes continued analysis of a central bank digital currency and a comprehensive review of operating costs and system-access conditions.retrieved
  6. T1BCU — BCU — Open Finance (Sistema de Finanzas Abiertas) bill and regulatory-sandbox bill (Resolución N°145/2026) sent to Ministry of Economy and Finance.
  7. T1BCU Directorio Resolución (05/06/2026) - Sistema de Finanzas Abiertas anteproyecto — BCU Directorio Resolución (05/06/2026) - Sistema de Finanzas Abiertas anteproyecto — BCU resolved to submit a draft bill for an Open Finance System to the Ministry of Economy and Finance
  8. T1Banco Central del Uruguay — Banco Central del Uruguay — Resolución de Directorio P_2_2026 defines Open Finance / payment-initiation conceptsretrieved

#

Consumer protection runs on a two-track complaint model: mandatory 15-day institution-level resolution, escalating to BCU's SSF (for supervised-entity infractions) or UDECO/MEF (for general consumer disputes) under an interinstitutional cooperation convenio. Unauthorised-instrument liability rules place risk on the user until notification, absent a system security failure.

Standing sub-brief · as of 8 July 2026 116 words · last cycle 2026-07-08

Consumer Protection & APP Fraud

Uruguay's liability framework for unauthorised e-money and card transactions places the burden on the user rather than the issuer up to the point of notification. Under the standing rule administered via the Ministry of Economy and Finance's consumer-protection function, users bear liability for unauthorised transactions until they notify the issuing institution, unless the loss is attributable to a system security failure on the issuer's side. This gives Uruguay a user-liability-until-notification model rather than a stronger issuer-liability or reimbursement-guarantee standard for authorised-push-payment-style fraud.

no periodic updates on record for this sub-brief

Sources and findings (5)
  1. T1https://usuariofinanciero.bcu.gub.uy/reclamos-y-denuncias/retrieved
  2. T1https://www.gub.uy/ministerio-economia-finanzas/defensa-del-consumidorretrieved
  3. T1https://www.bcu.gub.uy/Acerca-de-BCU/RD_Solicitudes_Informacion/Documentaci%C3%B3n-Agregada/JoseFlores337.pdfretrieved
  4. T1https://www.gub.uy/ministerio-economia-finanzas/comunicacion/noticias/mef-bcu-acuerdan-establecer-procedimiento-para-atender-usuarios-del-sistemaretrieved
  5. T1IEDE/card instrument users (Uruguay) — IEDE/card instrument users (Uruguay) — Users bear liability for unauthorised electronic-instrument operations until notification to the issuer, unless attributable to a system security failure.retrieved

#

Sentinel.gi payments-context position not yet integrated into this collection pass; the publicly-documented regulatory backdrop is carried here as context only. Uruguay's AML/CFT regime rests on Ley 19.574 (recently amended by Ley 20.469, March 2026), with BCU/UIAF supervising financial obligated parties (including IEDEs, now subject to new UIAF transaction-reporting thresholds) and SENACLAFT supervising non-financial obligated parties under a 2025-2030 National AML/CFT/CFP Strategy.

Standing sub-brief · as of 8 July 2026 133 words · last cycle 2026-07-08

AML/CFT & Financial Crime

This module is sourced from the Sentinel.gi illicit-finance feed rather than original WPM analysis; payments-market context is carried here for continuity, with substantive AML/CFT analysis remaining Sentinel's domain. Per the Sentinel-fed record, BCU requires IEDEs to report to the Unidad de Información y Análisis Financiero (UIAF) operations exceeding US$10,000, and local transfers/remittances exceeding US$1,000. Separately, Uruguay's primary AML/CFT statute, Ley 19.574, was amended by Ley 20.469 on 19 March 2026, and remains the country's live primary AML/CFT instrument. Readers seeking substantive illicit-finance analysis of these obligations should consult the Sentinel.gi feed directly.

no periodic updates on record for this sub-brief

Sources and findings (9)
  1. T1https://uy.vlex.com/vid/ley-no-19574-actualizase-846457833retrieved
  2. T?FIM (sentinel.gi) per-JID baseline profile — Uruguay — Uruguay's AML/CFT regime rests on Laws 17,835, 18,494 and 19,355, with a bearer-share identification registry under Law 18,930 (2012) run by the Banco Central. The UIAF (FIU) and SENACLAFT supervise financial institutions and DNFBPs respectively. Uruguay is not FATF grey-/black-listed and was excluded from intensified GAFILAT follow-up in 2013, but its 2019/2020 MER flagged uneven DNFBP supervision maturity and it still lacks a finalized virtual-asset licensing regime.
  3. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: sourcing-thinness
  4. T1FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: national listing
  5. T2FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-003) — Enforcement: Specialized Organized Crime Sentencing Court, Asunción, Paraguay — Erico Galeano Segovia, Paraguayan senator; network linked to Uruguayan trafficker Sebastián Marset
  6. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: enforcement-absence
  7. T2FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-002) — Enforcement: U.S. Department of Justice (Eastern District of Virginia) — Sebastián Marset and the 'Primer Cartel Uruguayo' organization
  8. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: regulatory-failure
  9. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: capacity-deficit

#

Uruguay remains a heavily dollarized banking system with deep USD correspondent-banking integration; BCU operates the domestic RTGS/securities settlement infrastructure directly and is currently pushing a de-dollarization disclosure initiative, while private-banking USD flows increasingly triangulate through onshore US institutions rather than staying resident in Uruguay.

Open gap — wpm-int-4No correspondent banking/settlement delta located for UY this cycle.Flagged per bias-correction protocol for completeness; not a genuine coverage gap for UY.
Open gap — wpm-int-2026-11-01-G004No correspondent banking/settlement delta (W12) found this cycle.no under-indexing note recorded
Standing sub-brief · as of 8 July 2026 159 words · last cycle 2026-07-08

Correspondent Banking, Settlement & Access

Uruguay's settlement layer is structurally centralised: BCU directly administers and operates the country's payment-settlement and securities clearing/settlement/custody systems, covering all financial-system-agent transactions that settle in central-bank money. This direct operational control gives BCU a uniquely comprehensive vantage point over settlement-layer access, but it also means that access to the settlement core runs through BCU-defined participation criteria rather than a decentralised network of correspondent relationships. This asymmetry — bank participants typically holding direct settlement access, non-bank payment institutions more often depending on indirect access via sponsoring banks — is the module's analytical spine, recurring across licensing (W1a/W1b), scheme (W4), and product-innovation (W9) modules. BCU is separately pursuing a de-dollarization disclosure initiative amid persistent heavy USD correspondent-banking dependence in the private-banking sector.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T1https://www.bcu.gub.uy/Sistema-de-Pagos/Paginas/Sistema-de-Pagos.aspxretrieved
  2. T2https://www.ambito.com/uruguay/el-banco-central-del-avanza-la-desdolarizacion-un-nuevo-proyecto-los-bancos-n6284572retrieved
  3. T3https://www.cronista.com/finanzas-mercados/caen-depositos-argentinos-en-uruguay-los-dolares-vuelven-o-se-van-a-eeuu/retrieved
  4. T3https://www.ambito.com/uruguay/como-funcionara-el-intercambio-informacion-financiera-y-estados-unidos-n6063889retrieved

#

Trailing-12-month (2025-07 to 2026-07) commercial activity is dominated by BCU's own regulatory-product pipeline (sandbox bill, Open Finance bill, PSAV consultation) and dLocal's continued cross-border expansion, including an announced African-market acquisition and an Asia push.

Standing sub-brief · as of 8 July 2026 177 words · last cycle 2026-10-11

Commercial Intelligence

Uruguay's trailing-twelve-month commercial-event record is dominated by one large private-sector M&A move and two BCU-originated regulatory-product launches. dLocal announced in June 2025 plans to acquire AZA Finance, an African payments provider, for a reported deal value of $150 million — a reported figure not independently confirmed by a primary regulatory source, reflecting African-market expansion rationale. On the regulatory-product side, BCU's board approved Resolución N°145/2026 in May 2026, creating a regulatory-sandbox bill sent to the Ministry of Economy and Finance; separately, BCU's Directorio approved the Sistema de Finanzas Abiertas (Open Finance) anteproyecto de ley on 5 June 2026, as part of the 2026-2030 Payments Roadmap. Both BCU items are discrete product-release events distinct from the thematic regulatory-access analysis carried under W9; the sandbox product-launch amount is not publicly disclosed.

Periodic update · new data 2026-10-11

Commercial Intelligence & Fintech

Infinia, a company connecting traditional banking rails to digital-asset infrastructure, closed an oversubscribed Series A funding round of US$13.5 million, led by Bain Capital and Variant Fund, announced between 9 and 16 July 2026. The round's amount is publicly disclosed at US$13.5 million; no further valuation or use-of-proceeds detail beyond the headline round size has been located.

This discrete commercial event occurred contemporaneously with BCU's finalisation of the PSAV authorisation regime under Circular N° 2507, also dated July 2026, though the two developments are reported independently with no sourced claim connecting them causally.

Outlook

No further disclosed terms of the Infinia round beyond the amount, lead investors and round stage have been located this cycle.

Sources and findings (5)
  1. T3https://en.wikipedia.org/wiki/DLocalretrieved
  2. T3https://en.wikipedia.org/wiki/DLocalretrieved
  3. T2https://www.ambito.com/uruguay/el-banco-central-del-avanza-el-sandbox-regulatorio-de-que-se-trata-este-impulso-al-sistema-financiero-n6277632retrieved
  4. T3https://noticias.mobilemoneylatam.com/finanzas-abiertas-uruguay-avanza/retrieved
  5. T3Infinia — Infinia — US$13.5M Series A led by Bain Capital and Variant Fund, announced 9-16 July 2026.retrieved
No modules match.

Filters combine as OR inside a group and AND across groups.

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light. Not shown on this page.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-11-04. A year-precision row is never promoted into a tighter band.

Orphan deltas: 1 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 88 finding(s), 146 source(s) in the cumulative register.

Think something on this page is wrong? Report an error.