> AML, fraud and gaming rules in Brazil, Mexico, Colombia, Peru, Chile, Argentina and Europe for iGaming, fintechs, banks and retail, with official sources. url: https://www.safefy.com.br/regulation formato: markdown gerado do HTML publicado, sem apresentação versao_html: https://www.safefy.com.br/regulation --- Regulation by country # The AML, fraud and gaming rules of each market we cover. A map of the main laws, regulators and obligations in Brazil, Mexico, Colombia, Peru, Chile, Argentina and Europe, for iGaming, fintechs, digital banks and retail. Every item links to the official source. This page is a map, not legal advice. Each rule was checked against its official source on October 7, 2026; rules change, so confirm with the source before acting. [Brazil](#brasil)[Mexico](#mexico)[Colombia](#colombia)[Peru](#peru)[Chile](#chile)[Argentina](#argentina)[Europe](#europa) ## Brazil Since Provisional Measure (MP) No. 1,394 of September 25, 2026, fixed-odds betting is banned in Brazil and banks must block payments to bet operators; Congress has yet to vote on it. Pix and digital accounts remain under BCB anti-money laundering and fraud rules. - Lei nº 9.613/1998 COAF Obliged sectors, such as banks, payment firms, betting and luxury-goods sellers, must identify clients, keep records and report suspicious transactions to COAF. [Official source](https://www.planalto.gov.br/ccivil_03/leis/l9613.htm) - Medida Provisória nº 1.394/2026 SPA/MF · BCB Bans fixed-odds betting and revokes existing licenses; banks and payment institutions may not process or settle transactions meant for such bets. [Official source](https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2026/mpv/mpv1394.htm) - Lei nº 14.790/2023 BCB · SPA/MF Arts. 21-A and 24-A to 24-C, added by Lei nº 15.358/2026 Financial and payment institutions must block accounts of unlicensed bet operators, share fraud signals, apply enhanced due diligence and report to COAF. [Official source](https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2023/lei/l14790.htm) - Circular BCB nº 3.978/2020 BCB BCB-authorized institutions must run a risk-based AML/CFT policy: internal risk assessment, know-your-customer, monitoring and reports to COAF. [Official source](https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?tipo=Circular&numero=3978) - Resolução BCB nº 1/2020 (Regulamento do Pix) BCB The payee's institution must hold incoming Pix funds for up to 72 hours when fraud is suspected; confirmed fraud is returned through the Special Return Mechanism (MED). [Official source](https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?tipo=Resolu%C3%A7%C3%A3o%20BCB&numero=1) - Lei nº 13.709/2018 (LGPD) ANPD Any personal data processing, including for fraud prevention, needs a legal basis, security measures and respect for data subject rights, overseen by ANPD. [Official source](https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm) ## Mexico Gaming still rests on a 1947 law and SEGOB permits, while the 2025 reform of the anti-money laundering law tightened duties for vulnerable activities such as betting, with beneficial ownership and automated monitoring. - Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI) SHCP (UIF) · SAT Vulnerable activities, such as betting, raffles and jewelry or car sales, must identify clients and beneficial owners and file notices with the SAT above set thresholds. [Official source](https://dof.gob.mx/nota_detalle.php?codigo=5273403&fecha=17/10/2012) - Ley para Regular las Instituciones de Tecnología Financiera (Ley Fintech) CNBV Fintech institutions need CNBV authorization and must document risk-based measures to prevent and detect money laundering and terrorist financing. [Official source](https://dof.gob.mx/nota_detalle.php?codigo=5515623&fecha=09/03/2018) - Disposiciones de carácter general a que se refiere el artículo 115 de la Ley de Instituciones de Crédito SHCP · CNBV Banks must apply a risk-based customer identification policy and report relevant, unusual and internal concerning transactions to the SHCP through the CNBV. [Official source](https://dof.gob.mx/nota_detalle.php?codigo=5087613&fecha=20/04/2009) - Ley Federal de Juegos y Sorteos SEGOB Games of chance and betting are banned unless permitted; any betting or raffle operation needs a SEGOB permit and is subject to its control and inspection. [Official source](http://www.ordenjuridico.gob.mx/Publicaciones/Compilacion/1090.pdf) - Reglamento de la Ley Federal de Juegos y Sorteos SEGOB Sets permit-holder duties, including remote and online betting: player identity and transaction records, audited reports to SEGOB and prize guarantees. [Official source](https://www.ordenjuridico.gob.mx/Documentos/Federal/html/wo88470.html) ## Colombia Colombia treats online gaming as a state monopoly granted by Coljuegos, and each sector answers to its own anti-money laundering system: SARLAFT in finance, SIPLAFT in gaming and SAGRILAFT in companies. - Circular Básica Jurídica (C.E. 029 de 2014), Parte I, Título IV, Capítulo IV (SARLAFT) SFC Supervised financial entities must run SARLAFT: risk-based customer due diligence, transaction monitoring and suspicious transaction reports to the UIAF. [Official source](https://www.superfinanciera.gov.co/publicaciones/10083444/normativanormativa-generalcircular-basica-juridica-ce-parte-i-instrucciones-generales-aplicables-a-las-entidades-vigiladas-10083444/) - Circular Básica Jurídica de Supersociedades, Capítulo X (SAGRILAFT) Supersociedades Companies above income or asset thresholds must adopt SAGRILAFT: ML/TF risk management, due diligence and suspicious transaction reports to the UIAF. [Official source](https://www.supersociedades.gov.co/en/web/nuestra-entidad/cap-10-autocontrol-y-gesti%C3%B3n-del-riesgo-integral) - Resolución Coljuegos N° 20195100044514 de 2019 (SIPLAFT) Coljuegos Gaming concession holders, including online operators, must run SIPLAFT with a compliance officer, due diligence and reports to the UIAF and Coljuegos. [Official source](https://www.coljuegos.gov.co/documentos/200342/normatividad-siplaft/) - Ley 643 de 2001 Coljuegos Art. 38, amended by Ley 1753 de 2015 Games of chance are a state monopoly; online games and sports betting are "novel games" that can only be operated under Coljuegos. [Official source](http://www.secretariasenado.gov.co/senado/basedoc/ley_0643_2001.html) - Ley 526 de 1999 UIAF Creates the UIAF, the financial intelligence unit that receives the suspicious transaction reports obliged sectors must file and analyzes ML/TF. [Official source](http://www.secretariasenado.gov.co/senado/basedoc/ley_0526_1999.html) ## Peru Peru regulates remote gaming and sports betting under MINCETUR authorization since 2024, and since October 2025 operators follow a specific anti-money laundering rule from the SBS. - Ley N° 31557 MINCETUR Amended by Ley N° 31806 Remote gaming and sports betting platforms need MINCETUR authorization and must protect minors, promote responsible gambling and prevent money laundering. [Official source](https://consultasenlinea.mincetur.gob.pe/casinos/archivos/2022LEY31557.pdf) - Resolución SBS N° 03622-2025 SBS (UIF-Perú) · MINCETUR Remote gaming operators must run an AML/CFT system: compliance officer, due diligence, records of bets from US$ 2,500 and suspicious transaction reports. [Official source](http://consultasenlinea.mincetur.gob.pe/caSiNos/Splaft/pdf/RESOLUCIoN_SBS_03622-2025.pdf) - Ley N° 27693 UIF-Perú Creates UIF-Perú and lists the obliged subjects, which must keep a prevention system, record transactions and report suspicious ones to the UIF. [Official source](https://www.smv.gob.pe/uploads/LEY%2027693_Ley%20que%20crea%20la%20UIF_PERU.pdf) - Resolución SBS N° 2660-2015 (Reglamento de Gestión de Riesgos de LA/FT) SBS Banks and other SBS-supervised firms must manage ML/TF risk with a compliance officer, risk-based know-your-customer, monitoring and reporting. [Official source](https://contralaft.gob.pe/Portals/0/Normas/SO%20del%20sector%20financiero/Resolucio%CC%81n%20SBS%20N%C2%BA%202660-2015%20%E2%80%93%20Aprueba%20Reglamento%20de%20Gestio%CC%81n%20de%20Riesgos%20de%20LA.FT.pdf) ## Chile Chile has no licensing regime for online betting yet: the bill to regulate it is still in the Senate. Anti-money laundering and payment fraud duties fall on banks, card issuers and fintechs. - Ley N° 19.913 UAF Banks, card issuers, casinos, car dealers and jewelers, among others, must report suspicious transactions to the UAF, the financial analysis unit. [Official source](https://www.bcn.cl/leychile/navegar?idNorma=219119) - Ley N° 21.521 (Ley Fintec) CMF Tech-based financial services, such as crowdfunding, crypto-asset services and open finance, must register with the CMF and follow AML principles. [Official source](https://www.bcn.cl/leychile/navegar?idNorma=1187323) - Ley N° 20.009 CMF Amended by Ley N° 21.234 Card and electronic payment issuers must monitor for unusual transactions, manage fraud alerts and refund reported fraud within the legal thresholds. [Official source](https://www.bcn.cl/leychile/navegar?idNorma=236736) - Proyecto de ley que regula el desarrollo de plataformas de apuestas en línea (Boletín N° 14.838-03) Congreso Nacional Bill to regulate online betting platforms. As of October 7, 2026, it is in its second constitutional stage, in the Senate, with amendments open until October 16, 2026. Not yet law. [Official source](https://tramitacion.senado.cl/appsenado/templates/tramitacion/index.php?boletin_ini=14838-03) ## Argentina Argentina has no national online gaming law: each jurisdiction licenses it, as LOTBA does in Buenos Aires City and IPLyC in Buenos Aires Province, while the UIF sets anti-money laundering duties nationwide. - Ley N° 25.246 UIF Obliged subjects, such as banks, payment and virtual asset providers and gambling operators, must know their clients and report suspicious transactions to the UIF. [Official source](https://servicios.infoleg.gob.ar/infolegInternet/anexos/60000-64999/62977/texact.htm) - Resolución UIF N° 194/2023 UIF Gambling operators, in person and online, must run a risk-based AML/CFT system, apply due diligence from online sign-up and report suspicious transactions. [Official source](https://servicios.infoleg.gob.ar/infolegInternet/anexos/390000-394999/390692/norma.htm) - Ley N° 538 (CABA) LOTBA With Resolución de Directorio N° 321/LOTBA/2018 In Buenos Aires City, LOTBA authorizes and controls betting; online gaming and sports betting require its authorization. [Official source](https://boletinoficial.buenosaires.gob.ar/normativaba/norma/9885) - Ley N° 15.079 IPLyC Title VIII, with Decreto N° 181/2019 (Buenos Aires Province) In Buenos Aires Province, online gaming requires an IPLyC license; the Instituto regulates and controls the activity. [Official source](https://normas.gba.gob.ar/ar-b/ley/2018/15079/2404) ## Europe The EU is moving to a single anti-money laundering rulebook that applies from July 2027, overseen by a new authority (AMLA), while gambling licensing stays national, as in Malta and Great Britain. - Regulation (EU) 2024/1624 (AMLR) EU From July 10, 2027, obliged entities, including banks, payment firms, gambling providers and high-value goods traders, follow single EU due diligence rules. [Official source](https://eur-lex.europa.eu/eli/reg/2024/1624/oj/eng) - Directive (EU) 2024/1640 (AMLD6) EU Member States must set up national supervision, FIUs and beneficial ownership registers, and sanction obliged entities, mostly by July 10, 2027. [Official source](https://eur-lex.europa.eu/eli/dir/2024/1640/oj/eng) - Regulation (EU) 2024/1620 (AMLA) AMLA Creates AMLA, which coordinates national supervisors and will directly supervise selected cross-border financial entities with high ML/TF risk. [Official source](https://eur-lex.europa.eu/eli/reg/2024/1620/oj/eng) - Directive (EU) 2015/2366 (PSD2) EU · EBA With Delegated Regulation (EU) 2018/389 (SCA) Payment service providers must apply strong customer authentication for online account access and electronic payments, dynamically linked to amount and payee. [Official source](https://eur-lex.europa.eu/eli/dir/2015/2366/oj/eng) - Gaming Act (Cap. 583) MGA Gaming services that require authorization can only be offered with an MGA license; the Act also protects minors and vulnerable players. [Official source](https://legislation.mt/eli/cap/583/eng) - Gambling Act 2005 UKGC Operators serving Great Britain need a Gambling Commission license and must keep gambling free of crime, with ML/TF risk assessments and reports to the NCA. [Official source](https://www.legislation.gov.uk/ukpga/2005/19/contents) In English, Portuguese or Spanish ## Operating in more than one of these markets? Thirty minutes with our team about your operation, your market and the risks you are watching. No commitment. Option 1 ### Pick a time now. Straight into our calendar, with instant confirmation. - 30 minutes, no commitment - Video call with someone who knows the subject - Instant confirmation by email [See available times](https://calendly.com/eduardo-safefy/safefy-meetings) [Open in a new tab](https://calendly.com/eduardo-safefy/safefy-meetings) ### Prefer email? Write to us and a specialist will reply. [atendimento@safefy.com.br](mailto:atendimento@safefy.com.br) We speak English, Portuguese and Spanish. Option 2 ### Prefer that we reach out? Leave your details and we will get back to you. Received. Thank you! Our team will get back to you. To speed things up, write to [atendimento@safefy.com.br](mailto:atendimento@safefy.com.br).