Preview of legislation and requirement mapping for Colombia
Requirement
Source type
Authority
Supporting provision
Review pending
An institution within the SFC chapter's scope must maintain a SARLAFT proportionate to its activities, operations, risk and size, with documented policies, procedures, controls and accountable governance.
guidance
Superintendencia Financiera de Colombia
Circular Basica Juridica C.E. 006/25, Part I, Title IV, Chapter IV, sections 2, 3 and 4.1-4.2
Review pending
Use documented methodologies to assess inherent and residual ML/TF risk across relevant risk factors, then apply controls proportionate to the institution's activity, operations, risk and size.
guidance
Superintendencia Financiera de Colombia
Circular Basica Juridica C.E. 006/25, Part I, Title IV, Chapter IV, sections 3.1-3.4 and 4.2.2.1.1-4.2.2.1.2
Review pending
Identify the prospective individual and verify the identity document issued by the competent authority before establishing the relationship.
guidance
Superintendencia Financiera de Colombia
Circular Basica Juridica C.E. 006/25, Part I, Title IV, Chapter IV, sections 4.2.2.2.1 and 4.2.2.2.1.1.1.1
Review pending
Before onboarding, obtain enough information to understand why the customer wants the relationship and how the selected products or services are expected to be used.
guidance
Superintendencia Financiera de Colombia
Circular Basica Juridica C.E. 006/25, Part I, Title IV, Chapter IV, section 4.2.2.2.1.1.2.1
Review pending
Collect basic, socioeconomic, financial and transactional information proportionate to risk, including economic activity, income and outgoings characteristics and sources, domicile and the relevant entity-management details.
guidance
Superintendencia Financiera de Colombia
Circular Basica Juridica C.E. 006/25, Part I, Title IV, Chapter IV, sections 4.2.2.2.1.1.3.1-4.2.2.2.1.1.3.6
Previous checked narrative
Baseline reading under review
For an individual entering a relationship with an SFC-supervised institution, complete the customer information and identity checks before onboarding. Identify the person, verify the competent-authority identity document and use an effective reliable and independent verification source. Separately record the purpose and intended nature of the relationship, economic activity, domicile and the characteristics, amounts and sources of income and outgoings needed for the risk assessment. The chapter specifies information and effective verification, not one universal passport-and-utility-bill package for every product or customer. Supporting requirements
guidance / Review pending
Confirm the SFC perimeter and operate a governed SARLAFT
What this requires
An institution within the SFC chapter's scope must maintain a SARLAFT proportionate to its activities, operations, risk and size, with documented policies, procedures, controls and accountable governance.
RegCanary explanation
Start with the regulated entity and activity, not the product label shown in this handbook. The chapter applies to entities supervised by the SFC subject to its stated exceptions and special regimes. In-scope institutions must identify, measure, control and monitor ML/TF risk and keep the system's policies and procedures effective. Selecting retail banking, payments or wealth here does not by itself establish that a particular entity is within the SFC perimeter.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
The SFC page identifies Circular Basica Juridica C.E. 006/25 Part I Title IV Chapter IV as the current SARLAFT framework for the financial system, separately identifies the issuer chapter, EOSF articles 102 to 107 and Decree 830/2021, and links targeted-financial-sanctions material. It is used to establish publication and framework identity, not as a substitute for the inspected chapter provisions.
Status basis
The latest source check found no change.
Recent document checks
: unchanged, document 81dd12004850
: unchanged, document 81dd12004850
: unchanged, document 81dd12004850
: unchanged, document 81dd12004850
: unchanged, document 81dd12004850
Conditions
The institution must be within the SFC chapter's legal and supervisory scope.
Activity-specific chapters and exceptions must be checked before relying on this baseline.
Exceptions
This mapping does not extend SFC SARLAFT automatically to every Colombian fintech or virtual-asset provider.
Evidence diagnostics
Record ID
co-sfc-sarlaft-governance
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
requirements
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
guidance / Review pending
Identify, measure, control and monitor ML/TF risk
What this requires
Use documented methodologies to assess inherent and residual ML/TF risk across relevant risk factors, then apply controls proportionate to the institution's activity, operations, risk and size.
RegCanary explanation
The SARLAFT framework is risk-based. The institution should evidence how it identifies risk factors, measures inherent exposure, applies controls and monitors residual risk.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Status basis
The source could not be extracted successfully.
Recent document checks
: changed, document 42249618a10f
: changed, document a7513ad010de
: changed, document 97d8d425b1d8
: changed, document 714aa41bd57e
: changed, document 80a75db85bdf
Conditions
Apply the institution's own documented methodology to its activities, operations, risk and size.
Exceptions
The cited provisions do not prescribe a universal customer risk score.
Evidence diagnostics
Record ID
co-enterprise-risk-methodology
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
risk
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
guidance / Review pending
Identify an individual customer before onboarding
What this requires
Identify the prospective individual and verify the identity document issued by the competent authority before establishing the relationship.
RegCanary explanation
The institution must have policies and procedures to identify and verify a prospective natural person. The current chapter requires verification of the competent-authority identity document and effective identity verification using reliable and independent sources. It permits suitable digital and non-face-to-face methods; it does not prescribe one universal document pack for every product or risk level.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Status basis
The source could not be extracted successfully.
Recent document checks
: changed, document 42249618a10f
: changed, document a7513ad010de
: changed, document 97d8d425b1d8
: changed, document 714aa41bd57e
: changed, document 80a75db85bdf
Conditions
Apply ordinary CDD unless a specifically listed simplified procedure is available and its conditions are met.
Exceptions
No universal list of supporting documents is asserted; the evidence must be sufficient for the selected product, channel and risk.
Evidence diagnostics
Record ID
co-individual-identification
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
cdd
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
guidance / Review pending
CDD: understand the purpose and intended nature of the relationship
What this requires
Before onboarding, obtain enough information to understand why the customer wants the relationship and how the selected products or services are expected to be used.
RegCanary explanation
Record a specific, usable account of the relationship's purpose and intended nature. This should support the customer risk assessment and a later comparison between expected and actual activity; a generic label such as 'banking' is unlikely to explain the intended relationship on its own.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Status basis
The source could not be extracted successfully.
Recent document checks
: changed, document 42249618a10f
: changed, document a7513ad010de
: changed, document 97d8d425b1d8
: changed, document 714aa41bd57e
: changed, document 80a75db85bdf
Conditions
The depth of enquiry should reflect the product, customer and assessed risk.
Evidence diagnostics
Record ID
co-purpose-and-nature
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
cdd
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
No exceptions are recorded. This does not establish that none apply.
guidance / Review pending
CDD: collect risk-based customer and financial profile information
What this requires
Collect basic, socioeconomic, financial and transactional information proportionate to risk, including economic activity, income and outgoings characteristics and sources, domicile and the relevant entity-management details.
RegCanary explanation
The current chapter specifies a minimum information baseline while allowing the institution to design its own forms. For an existing customer, the record must also support understanding of transaction and operation characteristics and amounts. The rule requires sufficient information, not a universal set of photocopied documents for every customer.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Status basis
The source could not be extracted successfully.
Recent document checks
: changed, document 42249618a10f
: changed, document a7513ad010de
: changed, document 97d8d425b1d8
: changed, document 714aa41bd57e
: changed, document 80a75db85bdf
Conditions
Additional information depends on the institution's documented risk analysis.
Exceptions
The institution may design its forms; the chapter does not create a single universal document package.
Evidence diagnostics
Record ID
co-minimum-customer-information
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
cdd
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
guidance / Review pending
Verify identity using reliable and independent sources
What this requires
Complete effective identity verification using reliable, independent sources before establishing the customer relationship.
RegCanary explanation
The chapter permits methods including digital-signature certificates, biometric techniques, strong authentication, public or external databases and other effective technology. The institution must select and evidence a method that is reliable for the customer and channel. A third-party or technology result does not remove the institution's responsibility for effective verification.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Status basis
The source could not be extracted successfully.
Recent document checks
: changed, document 42249618a10f
: changed, document a7513ad010de
: changed, document 97d8d425b1d8
: changed, document 714aa41bd57e
: changed, document 80a75db85bdf
Conditions
Verification method and evidence should be proportionate to the customer, product, channel and risk.
Exceptions
The permitted methods are examples, not a guarantee that any single method is sufficient in every case.
Evidence diagnostics
Record ID
co-independent-verification
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
verification
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
guidance / Review pending
Do not onboard when required CDD and identity verification cannot be completed
What this requires
Do not establish the contractual or legal relationship until the necessary customer information has been collected and identity has been verified; report an attempted onboarding where the chapter requires it.
RegCanary explanation
A failed check is not a reason to invent or waive evidence. Stop the onboarding decision, record what could not be completed and assess the attempted relationship under the suspicious-operation process. Where the institution reasonably suspects misuse and believes further CDD would alert the prospective customer, it may abstain from the CDD procedure and must submit a ROS. The source does not create a universal automatic-closure rule for every existing relationship.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Status basis
The source could not be extracted successfully.
Recent document checks
: changed, document 42249618a10f
: changed, document a7513ad010de
: changed, document 97d8d425b1d8
: changed, document 714aa41bd57e
: changed, document 80a75db85bdf
Conditions
Keep onboarding and suspicious-operation decisions distinct and documented.
Exceptions
The chapter permits abstaining from further CDD in the specified suspicion and tipping-off-risk circumstances, coupled with a ROS.
No general existing-customer termination rule is inferred from the onboarding restriction.
Evidence diagnostics
Record ID
co-cdd-cannot-complete
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
requirements
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
guidance / Review pending
Apply intensified measures to higher-risk customers
What this requires
Where a customer is assessed as higher risk, obtain and verify additional information proportionate to the risk and apply more intensive review and monitoring.
RegCanary explanation
For individuals, the chapter identifies additional enquiries into source of assets and funds, patrimony and relevant relationships, supported where appropriate by an interview or visit and public-database review. For entities, it also identifies ownership, administrators, customers and suppliers, financial statements and source of resources. These are risk-based measures, not a universal checklist to impose on every customer.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Status basis
The source could not be extracted successfully.
Recent document checks
: changed, document 42249618a10f
: changed, document a7513ad010de
: changed, document 97d8d425b1d8
: changed, document 714aa41bd57e
: changed, document 80a75db85bdf
Conditions
Measures must be effective and proportionate to the identified risk.
Exceptions
The listed enquiries are not a mandatory universal package for lower-risk customers.
Evidence diagnostics
Record ID
co-high-risk-edd
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
risk
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
guidance / Review pending
Detect PEP relationships and apply the required enhanced controls
What this requires
Detect whether the customer, beneficial owner or specified connected person is a PEP and apply senior approval, source-of-resources enquiries and intensified ongoing monitoring where required.
RegCanary explanation
The chapter covers the PEP, specified family members, close associates and cases where a beneficial owner is a PEP. For the PEP themselves it requires senior-management approval to establish or continue the relationship, measures to establish source of resources and more demanding onboarding and ongoing monitoring. Connected persons are risk-profiled and receive intensified measures when assessed as higher risk; they are not automatically treated identically in every case.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
The SFC page identifies Circular Basica Juridica C.E. 006/25 Part I Title IV Chapter IV as the current SARLAFT framework for the financial system, separately identifies the issuer chapter, EOSF articles 102 to 107 and Decree 830/2021, and links targeted-financial-sanctions material. It is used to establish publication and framework identity, not as a substitute for the inspected chapter provisions.
Status basis
The latest source check found no change.
Recent document checks
: unchanged, document 81dd12004850
: unchanged, document 81dd12004850
: unchanged, document 81dd12004850
: unchanged, document 81dd12004850
: unchanged, document 81dd12004850
Source changed
Presidencia de la Republica de Colombia
Source diagnostics
Lifecycle
Source changed
Language
es
Retrieved
14 Sept 2026
Extraction
captured
Latest automated check
12 Oct 2026
Check outcome
unchanged
Evidence review
requires-revalidation
Type
legislation
Version
Decree dated 26 July 2021; official compilation inspected 14 September 2026
Official Funcion Publica compilation used for the national PEP definition and connected-person framework. The SFC chapter supplies the applicable financial-sector controls.
Status basis
A source change or revalidation is awaiting review.
Recent document checks
: unchanged, document 9564536dcf00
: unchanged, document 9564536dcf00
: unchanged, document 9564536dcf00
: unchanged, document 9564536dcf00
: unchanged, document 9564536dcf00
Conditions
Determine the person's actual status and relationship; do not rely only on a screening label.
Exceptions
Connected persons receive risk-based treatment; the chapter does not say every connected person is automatically subject to every PEP measure.
Evidence diagnostics
Record ID
co-pep-controls
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
risk
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
guidance / Review pending
Check Colombia-binding international lists before onboarding and throughout the relationship
What this requires
Check the prospective customer and relevant related parties against international lists binding on Colombia before onboarding, and maintain effective ongoing checks during the relationship.
RegCanary explanation
For a legal person or unincorporated structure, the screening population includes beneficial owners; for a legal person it also includes shareholders and associates. The chapter separately covers employees, suppliers and administrators. The control must be tied to lists that are legally binding on Colombia, not an unexplained commercial data set, and possible matches require controlled review before a conclusion is recorded.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Articles 1 and 2 amend EOSF articles 102 and 105 for immediate suspicious-operation reporting and confidentiality. Article 20 addresses international lists binding on Colombia.
Status basis
A source change or revalidation is awaiting review.
Recent document checks
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
Conditions
Use the current lists that are binding on Colombia and maintain match-resolution evidence.
Exceptions
A name similarity is not by itself a confirmed designation.
Evidence diagnostics
Record ID
co-list-screening
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
verification
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
reporting / Review pending
Report suspicious operations immediately to UIAF
What this requires
When an operation is determined to be suspicious, submit the ROS immediately to UIAF through the prescribed channel and preserve the required confidentiality.
RegCanary explanation
The reporting threshold does not require certainty that a criminal offence occurred or proof of the origin of the funds. The institution must report in the form and technical conditions established by UIAF and must not disclose the report to the person involved. The ROS is a regulatory report, not a customer risk score or a substitute for an internal investigation record.
Circular Basica Juridica C.E. 006/25, Part I, Title IV, Chapter IV, sections 4.2.2.2.4 and 4.2.7.2.1; Law 1121/2006 articles 1-2, amending EOSF articles 102 and 105
Source check failed
Superintendencia Financiera de Colombia
Source diagnostics
Lifecycle
Source check failed
Language
es
Retrieved
14 Sept 2026
Extraction
captured
Latest automated check
12 Oct 2026
Check outcome
changed
Evidence review
requires-revalidation
Type
guidance
Version
Current SFC compilation downloaded 14 September 2026; chapter PDF identifies the download version as 14-sept-26
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Official UIAF sector page listing the current financial-sector reporting instruments and technical annexes. The page does not by itself prove that every listed reporting format applies to every SFC-supervised institution.
Articles 1 and 2 amend EOSF articles 102 and 105 for immediate suspicious-operation reporting and confidentiality. Article 20 addresses international lists binding on Colombia.
Status basis
A source change or revalidation is awaiting review.
Recent document checks
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
Conditions
Follow the current UIAF technical format and channel applicable to the reporting institution.
Exceptions
No criminal-law certainty is required before making the regulatory report.
Evidence diagnostics
Record ID
co-uiaf-ros
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
monitoring
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
reporting / Review pending
Assess and report suspicious attempted or rejected onboarding
What this requires
Treat an attempted or rejected commercial onboarding as reportable where the SARLAFT chapter's suspicious-operation criteria are met, and submit it under the UIAF ROS process.
RegCanary explanation
A customer withdrawing from the process or the institution refusing onboarding is not automatically suspicious. Record the facts, analyse the attempt and report when the operation meets the suspicious-operation basis in the chapter. Keep the report confidential and do not tell the prospective customer that a ROS was made.
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
Official UIAF sector page listing the current financial-sector reporting instruments and technical annexes. The page does not by itself prove that every listed reporting format applies to every SFC-supervised institution.
Articles 1 and 2 amend EOSF articles 102 and 105 for immediate suspicious-operation reporting and confidentiality. Article 20 addresses international lists binding on Colombia.
Status basis
A source change or revalidation is awaiting review.
Recent document checks
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
Conditions
Apply the suspicious-operation assessment; rejection alone does not establish suspicion.
Evidence diagnostics
Record ID
co-attempted-onboarding-report
Lifecycle
Needs review
Scenario applicability
Not recorded
Topic
monitoring
Baseline review status
source checked
Review status
needs review
Effective from
Not recorded
Effective to
Not recorded
Status basis
The requirement is marked as needing review.
No exceptions are recorded. This does not establish that none apply.
Circular Basica Juridica (C.E. 006/25), Parte I, Titulo IV, Capitulo IV
Source check failed
Superintendencia Financiera de Colombia
Source diagnostics
Lifecycle
Source check failed
Language
es
Retrieved
14 Sept 2026
Extraction
captured
Latest automated check
12 Oct 2026
Check outcome
changed
Evidence review
requires-revalidation
Type
guidance
Version
Current SFC compilation downloaded 14 September 2026; chapter PDF identifies the download version as 14-sept-26
The retained original is the current Spanish Part I, Title IV, Chapter IV PDF generated by the official SFC visualiser and inspected directly. The public link remains the stable SFC catalogue page. Automated checks fetch the exact chapter through the visualiser's public client API and compare a full-document identity that excludes only the generated download date. The chapter mixes binding supervisory instructions, scope conditions and implementation detail; the handbook does not treat every item as applicable to every Colombian business.
The SFC page identifies Circular Basica Juridica C.E. 006/25 Part I Title IV Chapter IV as the current SARLAFT framework for the financial system, separately identifies the issuer chapter, EOSF articles 102 to 107 and Decree 830/2021, and links targeted-financial-sanctions material. It is used to establish publication and framework identity, not as a substitute for the inspected chapter provisions.
Official UIAF sector page listing the current financial-sector reporting instruments and technical annexes. The page does not by itself prove that every listed reporting format applies to every SFC-supervised institution.
Status basis
The latest source check found no change.
Recent document checks
: unchanged, document 63b2d06fcf3f
: unchanged, document 63b2d06fcf3f
: unchanged, document 63b2d06fcf3f
: unchanged, document 63b2d06fcf3f
: unchanged, document 63b2d06fcf3f
Mapped requirements
Resolucion 010 de 2025: additional information requests to SFC-supervised institutions
Official three-page scanned PDF downloaded and OCR-assisted for inspection. Articles 1 to 6 were checked against page images. OCR was used only to aid reading; the original images remain the authoritative evidence.
Status basis
The source could not be extracted successfully.
Recent document checks
: unchanged, document 0b9c82d19d4a
: unchanged, document 0b9c82d19d4a
: unchanged, document 0b9c82d19d4a
: unchanged, document 0b9c82d19d4a
: unchanged, document 0b9c82d19d4a
Mapped requirements
No mapped requirement is available in this selected reading view.
Official UIAF page listing Resolution 314/2021, its amendment and the reporting annexes for virtual-asset service providers. This reporting perimeter is not presented as an SFC licence or a complete crypto AML regime.
Status basis
The latest source check found no change.
Recent document checks
: unchanged, document f1ad68a739e7
: unchanged, document f1ad68a739e7
: unchanged, document f1ad68a739e7
: unchanged, document f1ad68a739e7
: unchanged, document f1ad68a739e7
Mapped requirements
No mapped requirement is available in this selected reading view.
Resolucion 314 de 2021: reporting by virtual-asset service providers
Source check failed
Unidad de Informacion y Analisis Financiero
Source diagnostics
Lifecycle
Source check failed
Language
es
Retrieved
14 Sept 2026
Extraction
captured
Latest automated check
12 Oct 2026
Check outcome
unchanged
Evidence review
unvalidated
Type
reporting
Version
Resolution dated 15 December 2021, read with Resolution 84/2022
Official seven-page scanned PDF downloaded and OCR-assisted for inspection. Articles 1 to 12 were checked against the page images. The report-start date in article 7 was amended by Resolution 84/2022.
Status basis
The source could not be extracted successfully.
Recent document checks
: unchanged, document 2f66af57d562
: unchanged, document 2f66af57d562
: unchanged, document 2f66af57d562
: unchanged, document 2f66af57d562
: unchanged, document 2f66af57d562
Mapped requirements
No mapped requirement is available in this selected reading view.
Resolucion 84 de 2022: amended start date for Resolution 314 reports
Official two-page scanned PDF downloaded and OCR-assisted for inspection. Article 1 moved the reporting start date under Resolution 314/2021 to 1 July 2022; the amendment does not create a general CDD regime for virtual-asset providers.
Status basis
The source could not be extracted successfully.
Recent document checks
: unchanged, document de0d27b8255c
: unchanged, document de0d27b8255c
: unchanged, document de0d27b8255c
: unchanged, document de0d27b8255c
: unchanged, document de0d27b8255c
Mapped requirements
No mapped requirement is available in this selected reading view.
Evaluacion Nacional del Riesgo de LA/FT/FP 2022-2023
Source check failed
Unidad de Informacion y Analisis Financiero
Source diagnostics
Lifecycle
Source check failed
Language
es
Retrieved
14 Sept 2026
Extraction
captured
Latest automated check
12 Oct 2026
Check outcome
unchanged
Evidence review
unvalidated
Type
risk assessment
Version
Public 2022-2023 national risk assessment published in 2023
Official 163-page public assessment. It is a country and sector risk input, not a prescribed customer rating, automatic refusal rule or substitute for the institution's own SARLAFT assessment.
Status basis
The source could not be extracted successfully.
Recent document checks
: unchanged, document 1ebf6ee418a2
: unchanged, document 1ebf6ee418a2
: unchanged, document 1ebf6ee418a2
: unchanged, document 1ebf6ee418a2
: unchanged, document 1ebf6ee418a2
Mapped requirements
No mapped requirement is available in this selected reading view.
Decreto 830 de 2021: politically exposed persons
Source changed
Presidencia de la Republica de Colombia
Source diagnostics
Lifecycle
Source changed
Language
es
Retrieved
14 Sept 2026
Extraction
captured
Latest automated check
12 Oct 2026
Check outcome
unchanged
Evidence review
requires-revalidation
Type
legislation
Version
Decree dated 26 July 2021; official compilation inspected 14 September 2026
Official Funcion Publica compilation used for the national PEP definition and connected-person framework. The SFC chapter supplies the applicable financial-sector controls.
Status basis
A source change or revalidation is awaiting review.
Article 16 inserted Tax Statute article 631-5 and is retained as the primary legislative source for the beneficial-owner definition used by the SFC chapter.
Status basis
A source change or revalidation is awaiting review.
Recent document checks
: unchanged, document 297d413f6bc4
: unchanged, document 297d413f6bc4
: unchanged, document 297d413f6bc4
: unchanged, document 297d413f6bc4
: unchanged, document 297d413f6bc4
Mapped requirements
No mapped requirement is available in this selected reading view.
Article 12 is retained as the primary legislative source for the general due-diligence and beneficial-owner duty, subject to the entity's applicable sector regime.
Status basis
A source change or revalidation is awaiting review.
Recent document checks
: unchanged, document 095e5a422a7a
: unchanged, document 095e5a422a7a
: unchanged, document 095e5a422a7a
: unchanged, document 095e5a422a7a
: unchanged, document 095e5a422a7a
Mapped requirements
No mapped requirement is available in this selected reading view.
Ley 1121 de 2006: suspicious-operation reporting, confidentiality and binding lists
Articles 1 and 2 amend EOSF articles 102 and 105 for immediate suspicious-operation reporting and confidentiality. Article 20 addresses international lists binding on Colombia.
Status basis
A source change or revalidation is awaiting review.
Recent document checks
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
: unchanged, document 55931a066b28
Mapped requirements
Ley 795 de 2003: financial-sector record retention
Article 28 is retained for the alternative ten-year commercial-record route referenced by the SFC chapter.
Status basis
A source change or revalidation is awaiting review.
Recent document checks
: unchanged, document 668059ce6570
: unchanged, document 668059ce6570
: changed, document 668059ce6570
: changed, document ea3d7471ab2e
: unchanged, document f6513e1d10ac
Mapped requirements
No mapped requirement is available in this selected reading view.
Country authority or guidance body
Superintendencia Financiera de Colombia
Colombia
Role and responsibilities
Financial-sector supervisor and publisher of the Circular Basica Juridica and SARLAFT instructions for entities within its supervisory perimeter.
Related sources in this handbook
Country authority or guidance body
Unidad de Informacion y Analisis Financiero
Colombia
Role and responsibilities
Colombia's financial intelligence unit. It receives and analyses suspicious-operation and prescribed sector reports through its reporting systems.
Related sources in this handbook
Country authority or guidance body
Ministerio de Hacienda y Credito Publico
Colombia
Role and responsibilities
National ministry to which UIAF is attached and the policy authority for the financial system; the exact supervisory perimeter still depends on the relevant institution and activity.
Related sources in this handbook
No source in this selected handbook view is directly labelled with this authority.
