Uruguay -- Sanctions Compliance Regulatory Overview

Uruguay, while still developing a comprehensive regulatory framework specifically for virtual assets, actively implements international anti-money laundering (AML), combating the financing of terrorism (CFT), and sanctions regimes. Virtual Asset Service Providers (VASPs) operating in or with a nexus to Uruguay are increasingly expected to comply with these obligations.

The core of Uruguay's approach lies in applying its existing AML/CFT laws to VASPs, which inherently includes sanctions compliance.

Cryptocurrency Sanctions and Restrictions in Uruguay

I. Regulatory Framework for VASPs in Uruguay

Uruguay's Central Bank (BCU) and the National Secretariat for the Fight against Money Laundering and Terrorism Financing (SENACLAFT) are the primary bodies overseeing these matters.

1. AML/CFT Law 19,574 (2017): This is the primary AML/CFT law in Uruguay, establishing obligations for various reporting entities.
   • Reference: Law 19,574 - Prevención y Combate del Lavado de Activos y el Financiamiento del Terrorismo (Official Spanish Text)
2. Law 19,996 (2021): This law further strengthens the AML/CFT framework and explicitly includes virtual assets (defined broadly as "property") within the scope of illicit activities covered by the AML/CFT regime. It designates VASPs as obligated subjects for AML/CFT purposes.
   • Reference: Law 19,996 - Modificaciones a la Ley N° 19.574, de 20 de diciembre de 2017 (Official Spanish Text)
3. BCU Circular No. 2,427 (2022): The BCU clarified that virtual assets and related activities require supervision, aligning VASPs with existing financial intermediaries in terms of AML/CFT obligations. It explicitly states that entities offering virtual asset services must apply CDD, risk management, and report suspicious transactions to SENACLAFT.
   • Reference: Comunicación No. 2022/247 - Marco de Supervisión de Activos Virtuales (Official Spanish Text)
4. SENACLAFT Guidelines: SENACLAFT, as Uruguay's Financial Intelligence Unit (FIU), issues specific guidelines and recommendations for reporting entities, including those handling virtual assets, regarding their AML/CFT obligations, which encompass targeted financial sanctions.
   • Reference: SENACLAFT Official Website

II. Sanctions Compliance Requirements for VASPs

VASPs in Uruguay are expected to implement robust compliance programs that include screening against relevant sanctions lists.

A. UN Sanctions Compliance (Direct Legal Obligation)

Uruguay, as a member of the United Nations, is legally obligated to implement UN Security Council Resolutions, particularly those related to targeted financial sanctions (TFS) for terrorism financing and proliferation financing.

• Implementation: Uruguay implements UN sanctions through national decrees. These decrees mandate the freezing of assets and prohibition of transactions with individuals and entities designated by the UN Security Council.
  • Key Decrees:
    • Decree 379/014 (2014): Establishes the procedures for the implementation of UN Security Council resolutions related to the freezing of assets associated with terrorism and proliferation.
      • Reference: Decreto 379/014 - Medidas relativas a la prevención del lavado de activos y el financiamiento del terrorismo y la proliferación de armas de destrucción masiva (Official Spanish Text)
    • Decree 208/022 (2022): Updates and strengthens the regulatory framework for TFS, aligning with FATF recommendations and addressing virtual assets. It explicitly requires reporting entities (including VASPs) to check their client lists against the UN sanctions lists immediately upon their publication.
      • Reference: Decreto 208/022 - Marco Regulatorio de Sanciones Financieras Dirigidas (Official Spanish Text)
• Obligations for VASPs:
  • Sanctioned Entity Screening: VASPs must screen all customers (during onboarding and ongoing), beneficial owners, and transactions against the UN Consolidated Sanctions List, which includes:
    • ISIL (Da'esh) & Al-Qaida Sanctions List
    • Taliban Sanctions List
    • DPRK (North Korea) Sanctions List
    • Iran Sanctions List
    • Other country-specific sanctions regimes (e.g., Libya, Mali, Somalia, Yemen, etc.)
  • Asset Freezing: Immediately freeze any virtual assets or funds belonging to or controlled by sanctioned individuals or entities.
  • Reporting: Report any matches or frozen assets to SENACLAFT without delay.

B. OFAC and EU Sanctions Compliance (Extra-territorial & Risk-Based)

While OFAC (U.S. Office of Foreign Assets Control) and EU sanctions are not directly incorporated into Uruguayan national law in the same way UN sanctions are, their extra-territorial reach means that VASPs operating in Uruguay must comply with them if they:

• Deal with U.S. Persons or Entities: This includes U.S. citizens, permanent residents, entities organized under U.S. law, or persons/entities located in the U.S.

• Utilize U.S. Dollar-Denominated Transactions or U.S. Financial Infrastructure: Many crypto exchanges and financial services providers rely on U.S. correspondent banking relationships or process transactions in USD. Non-compliance can lead to de-risking by financial partners or direct OFAC enforcement.

• Have a Nexus to the U.S. or EU: This could include servers located in these jurisdictions, U.S./EU investors, employees, or significant business operations.

• Engage in Activities within the U.S. or EU Financial System: Any transaction that touches the U.S. or EU financial system, even indirectly, could fall under their jurisdiction.

• Obligations for VASPs:

  • Proactive Screening: Best practice dictates that VASPs in Uruguay screen against OFAC's Specially Designated Nationals (SDN) and Blocked Persons List, other OFAC sanctions lists (e.g., SSI, CAPTA), and the EU Consolidated List of persons, groups, and entities subject to EU financial sanctions.
  • Prohibited Transactions: Prohibit any direct or indirect transactions involving sanctioned individuals, entities, or jurisdictions as designated by OFAC or the EU.
  • Risk Management: Implement robust risk-based compliance programs that account for the potential impact of OFAC and EU sanctions on their operations and client base.

C. Sanctioned Entity Screening Obligations

VASPs are obligated to:

• Perform Customer Due Diligence (CDD): Identify and verify the identity of their customers and beneficial owners.
• Ongoing Monitoring: Continuously monitor customer transactions and relationships for any suspicious activity or changes in sanctions status.
• Sanctions Screening: Screen all new and existing clients, as well as the counterparties to transactions, against applicable sanctions lists (UN, OFAC, EU as appropriate) using reliable screening software.
• Record Keeping: Maintain records of all CDD, monitoring, and screening activities.

D. Geographic Restrictions

Geographic restrictions for VASPs in Uruguay are primarily driven by the international sanctions regimes described above. This means that engaging in virtual asset transactions with individuals, entities, or in jurisdictions that are subject to comprehensive UN, OFAC, or EU sanctions is prohibited or highly restricted.

Examples of jurisdictions frequently subject to significant restrictions include:

• UN: North Korea (DPRK), Iran (proliferation-related).
• OFAC: Cuba, Iran, North Korea, Syria, Venezuela (certain sectors/entities), parts of Ukraine (Crimea, Donetsk, Luhansk regions).
• EU: Similar to OFAC, with specific focus on North Korea, Iran, Syria, Russia (post-invasion of Ukraine), Belarus.

III. Country-Specific Sanctions Lists for Crypto in Uruguay

Uruguay does not maintain a separate "crypto-specific" sanctions list. Its national framework focuses on implementing the UN sanctions lists and applying the AML/CFT laws to the virtual asset sector.

• SENACLAFT Role: SENACLAFT is responsible for disseminating updated consolidated lists of individuals and entities subject to targeted financial sanctions (primarily derived from UN lists) to reporting entities in Uruguay. While SENACLAFT doesn't create new independent lists distinct from UN ones, it ensures their timely and effective national implementation.

IV. Penalties for Violations

Non-compliance with AML/CFT and sanctions obligations in Uruguay can lead to severe penalties, as outlined in Law 19,574 (2017) and Law 19,996 (2021).

• Administrative Fines:
  • The Central Bank (BCU) or SENACLAFT can impose substantial administrative fines on VASPs for deficiencies in their compliance programs, failure to report suspicious transactions, or failure to implement sanctions screening. Fines can be significant, calculated as a percentage of gross income or a fixed amount.
• Criminal Charges:
  • Individuals and entities involved in facilitating money laundering, terrorist financing, or proliferation financing can face criminal prosecution, leading to imprisonment and confiscation of assets.
  • Sanctions evasion, particularly concerning UN-mandated prohibitions, can be treated as an underlying predicate offense for money laundering or financing of terrorism.
• Reputational Damage:
  • Violations can severely damage a VASP's reputation, leading to loss of customers, banking relationships, and investor confidence.
• De-risking:
  • Financial institutions (both traditional and crypto-native) may terminate services to VASPs perceived as high-risk or non-compliant with international sanctions, making it difficult for them to operate.

V. Practical Implications for VASPs in Uruguay

To ensure compliance, VASPs operating in Uruguay should:

1. Develop a Robust AML/CFT & Sanctions Compliance Program: This includes written policies and procedures, risk assessments, internal controls, and independent audits.
2. Implement Comprehensive CDD: Identify and verify all customers and beneficial owners.
3. Conduct Sanctions Screening: Screen all customers and counterparties against the UN Consolidated Sanctions List, OFAC SDN List, and EU Consolidated List.
4. Monitor Transactions: Continuously monitor transactions for red flags indicative of sanctions evasion, money laundering, or terrorist financing.
5. Train Staff: Provide regular and comprehensive training to all relevant staff on AML/CFT and sanctions compliance requirements.
6. Report Suspicious Activity: File suspicious activity reports (SARs) with SENACLAFT promptly when required.
7. Stay Updated: Monitor updates from the BCU, SENACLAFT, UN, OFAC, and EU regarding sanctions lists and regulatory guidance.

Disclaimer: This information is for general informational purposes only and does not constitute legal advice. VASPs should consult with legal professionals specializing in Uruguayan AML/CFT and sanctions law to ensure full compliance with all applicable regulations.