The Three-Pillar Compliance Model
What the market describes as a Costa Rica crypto license is, in practice, the successful completion of three mandatory steps. Each pillar is a legal requirement, not an optional enhancement.
- Pillar 1: Legal Entity Formation. Incorporate an S.A. (Sociedad Anonima) or S.R.L. (Sociedad de Responsabilidad Limitada) with the company’s activity clauses explicitly covering virtual asset services. Generic commercial activity clauses are insufficient for SUGEF enrollment. The legal representative must be able to obtain a Costa Rican Firma Digital (digital signature) for government portal filings. Note: the Firma Digital requires the legal representative to be a Costa Rican national or permanent resident. Foreign founders typically appoint a local representative for this role;
- Pillar 2: SUGEF VASP Enrollment. Register on the SUGEF Article 15 quater (Ley 10961) platform as an AML-supervised entity. This enrollment creates ongoing reporting obligations, including the appointment of an Compliance Officer, the designated individual responsible for all submissions on the SUGEF platform;
- Pillar 3: BCCR RTBF Registry Filing. Complete the annual filing of the Registro de Transparencia y Beneficiarios Finales (RTBF) through the Central Bank’s centraldirecto.fi.cr portal. The RTBF captures beneficial ownership data and is a mandatory annual obligation for all Costa Rican legal entities. The filing deadline is 30 April each year.
