Conventional supervisor
SSF authorises or supervises banks, e-money, insurance, securities and pensions
El Salvador · SSF · BCR · CNAD
El Salvador has two connected but separate financial perimeters. The Superintendencia del Sistema Financiero supervises banks, savings and credit companies, electronic-money providers, securities, insurance and pensions within the conventional system, with Banco Central de Reserva issuing financial and payment rules. The Comision Nacional de Activos Digitales regulates digital-asset service providers, issuers and public digital-asset offerings.

Route facts
SSF authorises or supervises banks, e-money, insurance, securities and pensions
BCR issues payment, financial-system and separate Bitcoin-service registration material
CNAD administers the Digital Asset Issuance Law and public registers
Registration is activity-specific and does not replace banking, securities or fiat-payment permission
Public offers and eligible stablecoins use CNAD authorisation or no-objection processes
Sector, activity and risk determine capital, solvency, guarantees and safeguarding
El Salvador status creates no automatic right to serve another jurisdiction
Regulatory position reviewed as of 11 July 2026
Regulatory perimeter
The Digital Asset Issuance Law regulates public digital-asset offerings, issuers, digital-asset service providers and other participants in that market. CNAD's public register separately lists PSADs, issuers, issues, certifiers, structurers and commercialisation platforms. Registration must be matched to the actual service. Exchange, transfer, custody, placing, order, investment- product and issuer-related functions are not interchangeable, and a pre-registration review is not final registration.
Conventional money and financial products remain under their own statutes. SSF lists private and state banks, cooperative banks, savings and credit companies, electronic-money providers, payment-system administrators, exchange houses, securities participants, insurers and pension administrators. BCR maintains separate material for providers of Bitcoin services. The exact relationship between that registry, CNAD status and an applicant's fiat or securities activity must be reconciled at the filing date. Company incorporation, a technology platform or a CNAD status does not authorise deposit taking or general e-money issuance.
Permission map
| Permission family | Regulator and instrument | Activities and exclusions | Eligibility, capital and control |
|---|---|---|---|
| Permission family Banks and deposit taking | Regulator and instrument Authorisation under the Banks Law or other governing statute, with SSF supervision and BCR regulation for the applicable private, state or foreign-bank route | Activities and exclusions Accept deposits, lend and provide approved banking services; digital assets, insurance, securities and pensions can require separate status | Eligibility, capital and control Salvadoran bank or permitted branch, approved shareholders and management, source of funds, governance, local operations and statutory capital, liquidity and deposit-protection arrangements |
| Permission family Cooperative banks and savings and credit companies | Regulator and instrument SSF authorisation and supervision under the cooperative-banking and savings-and-credit framework | Activities and exclusions Member or customer savings, credit and approved payment services within the category; no unrestricted commercial-bank powers | Eligibility, capital and control Eligible local entity, ownership or membership governance, qualified managers, risk and AML systems and category-specific capital and reserves |
| Permission family Electronic money | Regulator and instrument SSF authorisation for a sociedad proveedora de dinero electronico under the Financial Inclusion Law and BCR technical rules | Activities and exclusions Issue and manage electronic money and approved wallet or payment services; balances are not ordinary bank deposits and the status does not add lending | Eligibility, capital and control Salvadoran company, suitable owners and officers, governance, technology, interoperability, safeguarding, AML/CFT and minimum capital under current rules |
| Permission family Payment systems, remittance and foreign exchange | Regulator and instrument SSF or BCR authorisation, registration or supervision for payment-system administrator, transfer provider or exchange house according to the service | Activities and exclusions Operate the approved payment, remittance, clearing or FX function; a technical provider without control of funds has a different perimeter | Eligibility, capital and control Local eligibility, owners and managers, settlement and safeguarding, agents, cyber, AML/CFT, business continuity and financial resources under the controlling instrument |
| Permission family Securities brokerage, advice and custody | Regulator and instrument SSF authorisation or registration for brokerage house, securities intermediary, adviser, custodian or other participant under securities-market legislation | Activities and exclusions Deal, arrange, advise or safeguard securities within the registered role; no bank, insurance or general digital-asset permission by implication | Eligibility, capital and control Salvadoran entity or eligible individual, responsible officers, conflicts and conduct controls, client-asset separation, systems and category-specific capital |
| Permission family Exchanges, depositories and market infrastructure | Regulator and instrument SSF authorisation for securities exchange, central depository, specialised valuation or other infrastructure role under the Securities Market Law | Activities and exclusions Operate the approved market or infrastructure with surveillance, access and settlement rules; a digital-asset platform separately follows CNAD law | Eligibility, capital and control Local operator, suitable controllers and management, resilient technology, market and default controls, governance and financial resources proportionate to the role |
| Permission family Investment funds, managers and securitisation | Regulator and instrument SSF authorisation or registration for investment-fund manager, fund, securitisation company and related provider under their specific laws | Activities and exclusions Manage the approved fund, portfolio or securitisation and provide the recorded service; fund status does not permit deposit taking or unrestricted dealing | Eligibility, capital and control Eligible local structure, qualified management, offering and valuation documents, custody, audit, asset segregation and capital or guarantee requirements |
| Permission family Insurance, surety and intermediaries | Regulator and instrument SSF authorisation for insurer or surety company and registration for brokers, agents and other supervised insurance participants | Activities and exclusions Underwrite or intermediate only approved classes and products; intermediary status does not permit assumption of insurance risk | Eligibility, capital and control Salvadoran insurer or permitted branch, approved owners and officers, actuarial and risk functions, technical reserves, solvency capital, reinsurance and current fees |
| Permission family Pension administrators | Regulator and instrument SSF authorisation and supervision for pension-fund administrators and the regulated pension system | Activities and exclusions Administer individual pension accounts and investments within the statutory system; no general banking or investment-business permission | Eligibility, capital and control Eligible local company, suitable controllers and managers, governance, operational systems, capital, reserves, custody and investment-risk controls |
| Permission family Consumer, mortgage and commercial credit | Regulator and instrument Banking, cooperative, savings-and-credit or other financial status where the lender uses regulated funding; own-funds lending follows applicable commerce and consumer law | Activities and exclusions Extend or arrange credit within the legal category; no deposit taking, e-money issuance or securities activity without the relevant permission | Eligibility, capital and control Correct local vehicle, owners and management, contracts, pricing and consumer compliance, credit-risk systems, AML duties and prudential capital where the category requires it |
| Permission family Digital-asset service provider | Regulator and instrument CNAD registration as a PSAD under the Digital Asset Issuance Law and PSAD regulations for the selected statutory services | Activities and exclusions Registered exchange, transfer, custody, placing, order, product-management or issuer-related services only; fiat and securities overlays remain possible | Eligibility, capital and control Salvadoran entity or qualifying foreign business with local structure, owners and management, business plan, AML/CFT, cyber, custody, complaints and financial resources under CNAD rules |
| Permission family Digital-asset issuers and offer participants | Regulator and instrument CNAD registration or authorisation for issuer, public issue, certifier, structurer, commercialiser and stablecoin offer or no-objection process | Activities and exclusions Perform only the approved issue or participant role; an issuer registration does not authorise exchange, custody or payment services | Eligibility, capital and control Eligible issuer or provider, offer and disclosure documents, technical certification, governance, proceeds and custody controls, responsible people and issue-specific resources |
| Permission family Bitcoin service providers | Regulator and instrument BCR Bitcoin-service-provider registry for covered custody, exchange, wallet, processing or other Bitcoin services, subject to current coordination with CNAD law | Activities and exclusions Only the registered Bitcoin services and no broader banking, e-money, securities or digital-asset authority by implication | Eligibility, capital and control Local legal presence or eligible applicant, resident contact, service and technology description, AML/CFT and operational information; confirm any current CNAD overlay before filing |
| Permission family Trust, corporate and fiduciary services | Regulator and instrument No general stand-alone TCSP financial licence was identified; fiduciary, custody or asset-management functions use their substantive banking, securities, fund or professional regime | Activities and exclusions Company formation and registered-office services grant no authority to hold customer money, manage investments or operate a financial institution | Eligibility, capital and control Apply ordinary corporate and professional rules plus AML obligations, and obtain the parent financial status for any reserved trust, custody or management function |
| Permission family Gambling and gaming | Regulator and instrument No open universal SSF, BCR or CNAD online-gaming licence family was identified; gaming uses the competent national or municipal legal route outside financial supervision | Activities and exclusions Only activity approved under the controlling gaming law; digital-asset or payment registration does not authorise gambling | Eligibility, capital and control Verify legal availability, local permit, owner suitability, technical and responsible-gaming controls, AML/CFT, payment flows and financial resources before presenting a route |
Entry file
Each applicant must first use the legal form required by its statute. SSF-regulated entities document shareholders, beneficial owners, source of funds, directors, senior managers, competence, governance and financial soundness. Operational evidence covers risk, internal control, AML/CFT, sanctions, cybersecurity, outsourcing, complaints, accounting, audit and continuity. Securities and fund files add conflicts, offering, valuation, custody and client- asset controls. Insurance and pension files add actuarial, reserve, solvency and beneficiary- protection evidence.
CNAD applications require a service-by-service description, local nexus, owners and managers, technology, wallet or custody architecture, transaction monitoring, customer protection and financial resources. Exact capital cannot be reduced to one El Salvador figure. A bank, e-money provider, broker, fund manager, insurer, pension administrator and PSAD use different statutory methods. The current SSF, BCR or CNAD rule and fee schedule controls. Payment float, securities, pension assets, insurance reserves and digital assets must be protected under their own framework.
Application process
Trace fiat, Bitcoin, other digital assets, securities, credit, insurance and pension flows to every SSF, BCR and CNAD status.
Select the required Salvadoran vehicle or local structure and document beneficial owners, source of funds, directors, officers and group relationships.
Prepare business plan, capital method, governance, AML/CFT, cyber, safeguarding, conduct, audit, recovery and wind-down material.
Use current forms and charges, keep pre-registration and final registration distinct, and answer authority questions without assuming approval.
Fund capital, appoint accepted people, test systems and reporting, and confirm every final licence or registration before customer activity.
Continuing supervision
Regulated firms maintain capital or solvency, audited accounts, returns, AML/CFT and sanctions systems, consumer disclosures, complaints, cybersecurity, incident reporting, custody or safeguarding reconciliations and outsourcing oversight. The exact calendar and responsible authority follow the instrument. A PSAD must remain within its CNAD services, and an electronic- money provider must not add credit, securities or digital-asset custody without the separate basis.
Direct and indirect changes in controllers, significant shareholders, directors and key management follow the prior approval or notification mechanism of SSF, BCR or CNAD. The permission remains with the entity after a share acquisition, together with its conditions and regulatory history. Buyers should reconcile all public registers, customer assets, capital, audits, complaints, cyber events and remediation. Digital-asset and Bitcoin rules remain a moving area, so the CNAD and BCR position must be checked again at transaction signing and closing.
Verify it yourself
SSF supervised-entity lists, laws and current parameters govern conventional banking, e-money, securities, insurance and pensions.
BCR payment, financial-system and Bitcoin-service material controls its regulatory and registration perimeter.
CNAD's Digital Asset Issuance Law, regulations, application documents and public registers govern PSADs and offer participants.
Enacted laws and amendments control where an authority summary, old register or guidance document differs.
FAQ
No. It covers the digital-asset services recorded by CNAD. Deposits, electronic money, fiat payments, securities and insurance remain under their own laws.
No. It is a preliminary review mechanism. The applicant must complete the statutory registration or authorisation before operating the captured service.
They arise from separate frameworks. A Bitcoin model should verify both live perimeters and any SSF payment or financial-product overlay before relying on one status.
It depends on the legal category, service and risk. Use the current SSF, BCR or CNAD rule and calculation for the exact applicant.
The entity retains its status, while incoming controllers and managers complete applicable reviews and inherit the entity's conditions and supervisory history.
Reviewed by the SKY7 advisory team. Last reviewed: 11 July 2026. Regulatory statements are made as of July 2026. CNAD, Bitcoin, stablecoin and payment rules remain moving areas. This page is general information only, not legal, regulatory, tax, investment or financial advice. Verify current laws, registers, services, capital, fees, transitions and control processes with SSF, BCR and CNAD before reliance. No authorisation or regulator timetable is promised.
Tell us what you need
Bring the fiat, Bitcoin and digital-asset flows, products, customers, ownership and local plan. SKY7 will map SSF, BCR and CNAD workstreams.