KYC & AML for Fintech in Chile (Ley Fintech & CMF)

Chile's Fintech Regulatory Milestone

January 2023 brought Ley Fintech (Ley 21,521) onto the books and recast how Chile oversees finance. That statute put a formal rulebook around fintech firms, stood up an open banking system, and added new licence classes under the Comision para el Mercado Financiero (CMF). Latin America now treats Chile as one of its more progressive fintech regulatory markets.

Chilean fintechs had sat in a grey zone before the Ley Fintech, often leaning on contracts with licensed institutions. The statute now supplies legal certainty, consumer protections, and explicit duties — including firm KYC and AML rules.

Key Regulatory Authorities

CMF (Comision para el Mercado Financiero)

Chile's integrated financial regulator, the CMF, was formed in 2017 when the former banking and securities supervisors merged. Ley Fintech gives the CMF primary responsibility for:

• Licensing and supervising fintech service providers
• Setting operational and prudential standards
• Enforcing AML/CFT compliance
• Overseeing the open banking framework
• Running a regulatory sandbox for innovative business models

UAF (Unidad de Analisis Financiero)

Chile's financial intelligence unit is the UAF, created under Ley 19.913 (Anti-Money Laundering Law). Suspicious transaction reports from every obligated entity — fintechs included — flow to the UAF, which receives, analyzes, and disseminates them. The unit sits at the centre of Chile's AML system and works with foreign counterparts through the Egmont Group.

Fintech Licensing Categories Under Ley 21,521

Several licensing categories for fintech activity were created by the Ley Fintech:

Payment Service Providers

A CMF licence is required for firms that offer payment initiation, electronic money issuance, or fund transfer services. Full KYC and AML duties apply to these entities from day one.

Crowdfunding Platforms

Debt and equity crowdfunding platforms both fall under regulation. Investor protection, project vetting, and participant identification each carry specific requirements.

Alternative Transaction Systems

Where a platform lets users trade or exchange financial instruments outside traditional exchanges, CMF authorization and compliance duties apply.

Order Routing Systems

Firms that route investment orders to licensed intermediaries must register with the CMF as well, and put suitable customer identification measures in place.

Regulatory Sandbox

Innovative fintech models can trial services in a CMF sandbox under supervised conditions, using temporary, limited authorizations. Baseline KYC still applies to sandbox participants. Operational limits may be loosened or tightened during the test.

KYC and CDD Requirements

Individual Customer Verification

For natural persons, Chilean fintechs must collect and verify:

• RUN/RUT (Rol Unico Nacional / Rol Unico Tributario): the country's unified identification and tax number, used as the main identifier across financial relationships.
• Cedula de Identidad: the national ID card issued by the Servicio de Registro Civil e Identificacion.
• Full legal name, date of birth, and nationality.
• Residential address with supporting documentation.
• Economic activity, employer information, and declared income range.
• Source of funds declaration for account relationships above defined thresholds.
• PEP declaration stating whether the customer holds, or has recently held, a prominent public function.

Legal Entity Verification

Corporate customers require:

• Certificate of incorporation from the Registro de Comercio
• Current articles of incorporation (escritura social) plus any amendments
• RUT registration
• Identification of beneficial owners holding 10% or more of capital or voting rights
• Identification of legal representatives, with supporting powers of attorney
• Most recent financial statements

Tiered KYC for Financial Inclusion

Simplified KYC is allowed under the Ley Fintech for lower-risk, lower-value products. That lets fintechs onboard underserved groups with less paperwork. Simplified accounts carry transaction and balance caps; customers who complete full CDD can move up.

Joinble's AI-powered identity verification supports tiered onboarding flows for Chilean fintechs, automating Cedula de Identidad checks and biometric matching so each customer tier stays smooth. For KYC basics, see our resource on what is KYC.

AML Compliance Under Ley 19.913

Ley 19.913 is the statute that built Chile's AML regime: it created the UAF and set out duties for reporting entities. Fintechs face these core requirements:

Compliance Program Elements

• Risk assessment: Institution-wide assessments must map ML/TF weaknesses across products, services, the customer base, and delivery channels.
• Internal policies and procedures: Board-approved AML policies, backed by detailed operational procedures.
• Compliance officer: A named officer who runs the AML programme and has direct access to senior management and the board.
• Training: Recurring staff training covering AML duties, red flags, and how to report.
• Independent review: Periodic internal or external audits of whether the AML programme works.

Transaction Monitoring

Systems must watch customer activity for suspicious patterns, among them:

• Transactions that do not match the customer's profile or declared activity
• Structuring or smurfing designed to dodge reporting thresholds
• Rapid movement of funds across multiple accounts
• Transactions involving high-risk jurisdictions
• Odd patterns in crowdfunding investments or payment volumes

UAF Reporting

Where there are reasonable grounds to suspect money laundering or terrorism financing, suspicious transaction reports (Reportes de Operaciones Sospechosas, or ROS) go to the UAF. Filing runs through the UAF's electronic platform. The tipping-off prohibition applies.

Cash transactions above 450 UF (Unidades de Fomento) must also be reported, as must attempted transactions that were declined because of suspicion.

Open Banking and Data Sharing

The open banking framework (Sistema de Finanzas Abiertas) is among the Ley Fintech's more distinctive pieces. With customer consent, financial institutions and authorised third parties must share data. For KYC that means:

• Portable KYC data: Verified identity information may travel across institutions, cutting repeat verification.
• Enhanced risk assessment: Wider financial data supports more accurate customer risk profiles.
• Consent management: Consent mechanisms have to meet Chile's data protection rules.
• API security: Open banking APIs must satisfy CMF security standards and protect customer data in transit and at rest.

Implementation is phased. Secondary regulations from the CMF are defining technical standards, data categories, and participant duties.

Digital Identity and Verification Technology

Chile has put money into digital identity infrastructure that fintech compliance can use:

• ClaveUnica: the government's single sign-on digital identity system, usable for identity confirmation during financial onboarding.
• Registro Civil digital services: online checks of identity documents against the national database.
• Biometric verification: increasingly accepted for remote onboarding, with facial recognition matching customers to official ID photos.

Joinble's platform connects to Chilean identity infrastructure and supplies automated document verification, biometric matching, and compliance screening aligned with CMF and UAF standards.

Penalties for Non-Compliance

Enforcement powers at the CMF and UAF are substantial:

• Administrative fines levied by the CMF for regulatory breaches
• UAF penalties for failing to report suspicious transactions
• Licence revocation after serious or repeated compliance failures
• Criminal prosecution under Ley 19.913 for facilitating money laundering
• Personal liability for compliance officers and directors

Frequently Asked Questions

What is the Ley Fintech and when did it take effect in Chile?

Ley 21,521 — the Ley Fintech — was enacted in January 2023. It sets a full regulatory framework for Chilean fintech companies: licensing categories, open banking, a regulatory sandbox, and KYC/AML duties under CMF supervision.

What are the main fintech licensing categories under Chilean law?

Payment service providers, crowdfunding platforms, alternative transaction systems, and order routing systems are the categories the Ley Fintech creates. Each has its own licensing and compliance duties, overseen by the CMF.

What documents are required for KYC at Chilean fintechs?

Individuals primarily need a RUN/RUT number, Cedula de Identidad, proof of address, an economic activity declaration, source of funds, and a PEP declaration. Legal entities supply incorporation documents, beneficial ownership information, and financial statements.

How does Chile's open banking framework affect KYC?

The open banking system (Sistema de Finanzas Abiertas) lets institutions share data with customer consent and may support portable KYC data. Duplicate verification can fall while risk assessment improves through access to a wider set of financial information.

What is the role of the UAF in fintech compliance?

Chile's financial intelligence unit is the UAF (Unidad de Analisis Financiero). Fintechs file suspicious transaction reports (ROS) with the UAF, report large cash transactions, and keep compliance programmes aligned with Ley 19.913.

Does Chile offer a regulatory sandbox for fintechs?

Yes. Under the Ley Fintech the CMF runs a regulatory sandbox so innovative models can test services under supervised conditions with temporary authorizations. Baseline KYC still applies inside the sandbox.