Listen to this article
0:00 / 0:00

Key Takeaways

  • A Panama company can be used for crypto and digital-asset activity, from token issuance and NFT projects to holding, trading, and exchange operations.
  • Territorial tax treatment may leave foreign-sourced crypto gains and token revenue outside Panama's tax base, though economic substance expectations still apply.
  • Reputation, compliance scrutiny, and counterparty due diligence are practical hurdles that can affect banking access and on-ramp or off-ramp arrangements.
  • Whether Panama fits a crypto venture depends on the use-case, with workarounds for its limitations and situations where another jurisdiction suits better.

A Panama crypto company can be incorporated quickly and owned entirely by non-residents, which is why blockchain founders keep examining it as a base for treasury, token issuance, and protocol operations. No statute bans the purchase, sale, custody, or transfer of digital assets, and businesses have run exchanges and OTC desks inside the country's general commercial framework for several years. The catch sits underneath that openness: there is no purpose-built licensing regime yet, so the legal analysis depends heavily on what your project actually does.

The standard vehicle is the Sociedad Anónima (S.A.) under Law 32 of 1927, sometimes paired with a Private Interest Foundation under Law 25 of 1995 as a top holding layer for treasury and intellectual property. Incorporation takes days, carries no minimum capital, and imposes no residency or nationality conditions on shareholders or directors. The most current practitioner reference, the Chambers crypto guide, describes a recognisable pattern: a foundation at the top, corporations acting as token issuers and front-end operators, and a separate development company holding the technology under a services agreement.

Company formation is not regulatory permission. This article explains where the existing rules bite, how the territorial tax regime treats crypto income, where the banking and reputational friction sits, and which crypto models Panama supports honestly. It is written for foreign founders, investors, and their advisers weighing a Panama-incorporated entity against alternatives.

No dedicated crypto-asset or VASP law is in force, and no enacted regulation carries a fixed commencement date. Until that changes, three existing pillars apply case by case: the Banking Law (Decreto Ley 9 of 1998), the Securities Law (Decreto Ley 1 of 1999), and the anti-money-laundering framework under Law 23 of 27 April 2015, administered by the Unidad de Análisis Financiero (UAF).

The Superintendencia de Bancos de Panamá has said plainly that buying, selling, and commercialising Bitcoin or similar instruments fall outside its direct competence, though banks must still keep due-diligence controls in place. The securities regulator, the Superintendencia del Mercado de Valores (SMV), takes a substance-first view: a token is not automatically a security, but if it carries securities-like features, involves a public offering, brokerage, advice, custody, derivatives, or market infrastructure, the securities regime can attach.

Two legislative efforts are in motion. Bill No. 247, introduced in 2025, seeks a dedicated regime for digital assets and VASPs but remains under discussion in the National Assembly. A draft, Anteproyecto Ley N° 314, was presented on 13 January 2026 and introduces broad VASP and CASP definitions covering fiat exchange, transfers on behalf of customers, custodial wallets, and token issuance, with mandatory registration, licensing, and FATF-aligned controls.

No specialised crypto regulator

Crypto firms register and report through existing financial bodies. The SBP and the Ministry of Commerce and Industries oversee Specialized Financial Institutions, including crypto SFI companies; there is no standalone digital-asset authority.

Panama

Company Incorporation in Panama

Set up your company in Panama with Expanship handling registration end to end.

Token issuance is a permitted activity, and the jurisdiction does not impose mandatory white-paper or disclosure rules for ordinary crypto-token launches. DeFi protocols, decentralised exchanges without on-ramping, DAOs, and NFT issuers increasingly choose it as an operating centre, and ICO, IEO, ITO, and INO structures can run without a specific licensing trigger.

Non-custodial DeFi sits in a deliberately light position. Under the principle of legality, activities such as lending, borrowing, swaps, vaults, staking, and liquidity provision may generally be operated or accessed without authorisation from a financial regulator, because nothing in the current rulebook requires it.

That comfort narrows the moment a token starts to look like a financial instrument. If a token represents or references a security, the SMV would weigh the underlying rights and economic substance, not the mere fact of tokenisation, and the outcome stops being predictable. Issuers may use distributed ledger technology to create security tokens representing redeemable securities, but that path is to be defined by future SMV regulation rather than settled today.

A separate licensing line already exists for redeemable digital value. Anyone who habitually issues redeemable digital value to third parties is a financial obligated subject under the 2015 AML law and must obtain a redeemable-digital-value entity licence from the Ministry of Commerce and Industries.

Even where no licence is required, a credible issuer keeps the basics in order:

  • A properly maintained Panamanian entity with current corporate books
  • Board approvals and documented token terms and conditions
  • A technical disclosure or white paper, with wallet and smart-contract controls
  • Sanctions and AML procedures, accounting records, and beneficial-ownership filings

Holding, trading, and custodying digital assets through a local entity is workable, and many structures use it to hold treasury, own and license IP, contract with development companies, and interact with users, exchanges, and banks. The tax logic is the real draw, and it is governed by Panama's territorial regime rather than any crypto-specific code.

Only income earned inside the country is subject to the 25% corporate rate. Profits from global token trading and issuance to non-Panamanian users are generally treated as foreign-sourced and fall outside the charge, provided the activity is conducted entirely outside national territory.

Territorial boundary is not codified for crypto

The offshore classification rests on general territorial-tax principles, not a digital-asset statute. Serving Panamanian users or running servers locally can pull income into the 25% domestic charge, and the treatment of VAT on crypto transactions remains unresolved.

Panama

Ongoing Compliance in Panama

Keep your Panama entity compliant with filings, returns, and statutory obligations.

Matching buyers and sellers locally changes the picture entirely. An operator running exchange services must register as a Specialized Financial Institution, incorporate with crypto trading listed as its activity, and file with the Ministry of Commerce and Industries before oversight passes to the banking regulator. For the first three years the crypto SFI liaises with the ministry; formal supervision then shifts to the SBP.

Capital expectations are lighter than in some markets, but they are real. Applicants are typically asked for evidence of adequate operating funds through a bank statement of start-up capital, an AML and KYC policy, and possibly a technical audit of systems. There is no requirement for Panamanian directors or offices, so a fully foreign-owned and foreign-directed entity is permitted.

The licensing trigger turns on the service provided to customers, not on the use of blockchain. Not every crypto-adjacent business needs an exchange licence, but the distinction must be drawn before the company goes live.

What the jurisdiction lacks is a purpose-built VASP authorisation framework of the kind the EU has under MiCA or the UAE under VARA. That gap creates reputational drag when onboarding institutional counterparties, and it means no EU passporting: a Panama entity is not a substitute for a CASP authorisation if you need access to EU markets.

Fiat on-ramp and off-ramp services attract the heaviest scrutiny of any crypto activity, from regulators and banks alike. Handling customer fiat can pull a firm within SBP oversight under the Banking Law, and offering securities-like tokens can trigger the securities regime under the Securities Law.

One structural advantage is genuine: the country is a USD-denominated economy, with the U.S. dollar circulating as legal tender alongside the Balboa, which suits USD stablecoin settlement. The friction lies in the banking relationship rather than the currency.

Banks expect a documentation package far beyond standard account opening. A workable VASP bank-readiness pack usually includes:

  • Certificate of incorporation and articles carrying a VASP objects clause
  • Board resolutions authorising the account, plus a good-standing certificate
  • Notarised UBO disclosure and source-of-wealth evidence for each beneficial owner
  • A full AML and CTF programme: CDD procedures, transaction-monitoring rules, STR workflow, and sanctions-screening methodology
  • Payment-flow diagrams separating fiat from crypto flows and naming every intermediary

Local banks, including Banco General, BAC, and Global Bank, hold elevated de-risking postures toward crypto firms and frequently decline accounts. The common workaround is to pair the entity with EU-licensed EMIs or crypto-native providers, though those issuers run their own scrutiny on a Panama-incorporated counterparty.

Panama

Panama Incorporation Pricing

See transparent pricing to incorporate and maintain a company in Panama.

Foreign-sourced crypto profits sit outside the corporate charge, while only locally sourced income meets the 25% rate. Global token trading, staking, and issuance to non-Panamanian users are generally exempt, and individuals converting crypto abroad remain untaxed; a capital gains charge of up to 7% applies only where a conversion is local income.

The treaty network is narrow, covering a small set of countries including Mexico, the UAE, Luxembourg, the Netherlands, Singapore, Spain, and the UK. For a pure crypto operation earning already-exempt foreign-source income, this barely matters, but it limits withholding-tax relief on any Panamanian-source payments.

A material change arrives for groups. Law No. 526 of 28 May 2026 adds economic-substance rules to the Tax Code for entities that form part of a multinational group and earn foreign-source passive income, including dividends, interest, royalties, and capital gains. It bites from fiscal year 2027.

Foreign-source passive income under Law 526
Situation Tax treatment from FY 2027
Outside an MNE group (e.g. natural-person sole shareholder) Territorial exemption preserved; no substance test
MNE group, substance requirements met (qualified entity) Favourable treatment retained
MNE group, substance requirements not met 15% flat tax on net foreign-source passive income

For blockchain structures, the reach extends to holding, treasury, IP, licensing, token-rights, and foundation or SPV arrangements where the entity receives passive foreign income without adequate local substance. A single-shareholder structure with a natural-person UBO and no related foreign entity falls outside the group definition entirely, and keeps the full exemption.

For unregulated crypto projects, no crypto-specific substance, local-personnel, or prudential-capital rules apply. The baseline duties are corporate and compliance-related: a resident agent, the annual franchise tax, corporate books, accounting records, beneficial-ownership filings, board approvals, and source-of-funds documentation.

Law 526 raises the bar only for one category. Where an entity belongs to a multinational group and earns foreign-source passive income, it must show, for each income-generating asset, adequate and compensated qualified personnel directing those assets and adequate physical facilities in the country. The new chapter spans Articles 707-A through 707-Ñ of the Tax Code; the detailed analysis from Baker McKenzie sets out how the qualified-entity test works in practice.

Outsourcing is allowed, but only to providers located inside the country with their own staff and premises; extra-territorial outsourcing earns no credit. Article 707-K lets the Ministry of Economy and Finance disregard arrangements that lack a valid commercial reason, so late, artificial substance will not hold.

Regulated firms get a carve-out. Entities supervised by the SBP, SMV, or the Insurance Superintendency are excluded for income tied to their licensed activity, provided licences are current and they maintain effective administration locally. Everyone else who fails the test faces a flat 15% charge with no gradations. Local commentators have called the reform "territoriality 2.0," and its stated aim is removal from the EU's list of non-cooperative jurisdictions ahead of the review scheduled for October 2026.

Reputation is the quiet cost of this structure. The jurisdiction remains on the EU's list of non-cooperative jurisdictions for tax purposes as of the date of this research, which is a real flag in counterparty due diligence and one reason Law 526 was enacted. Its FATF standing should be checked against the current published list, since enhanced-monitoring status directly affects correspondent banking and payment-processor onboarding.

The regulatory gap cuts both ways for users. Without crypto-specific oversight, investors do not enjoy the protections of traditional financial markets, and recourse after an exchange failure or fraudulent issuance is thin. For an operator, that absence of clarity is a structural risk, not a feature, when courting institutional partners.

Because the country sits outside the EU, MiCA does not apply by default and the entity cannot passport into member states as a CASP. Operators who build documented compliance, transparent ownership, and a complete bank-readiness pack now will move faster once a final VASP law enters force.

The sharpest constraint is banking. Local institutions routinely decline crypto-entity accounts, and the realistic workaround is an EU-licensed EMI or a crypto-native banking provider running alongside the entity, each applying its own AML review.

Several other limits deserve a clear eye:

  • No EU passporting: a Panamanian licence authorises activity only within local law.
  • Moving goalposts: the government could introduce stricter controls at any time, so freedom today is not certainty tomorrow.
  • VAT gap: there is no guidance on how value-added tax applies to digital-asset transactions.
  • Token-securities grey area: the SMV looks at underlying rights, so a security-like token is unpredictable territory, especially for U.S. or EU users.
  • Law 526 substance trap: an MNE-group entity used as a passive holding layer without genuine local staff and premises faces the 15% charge from FY 2027.

The Law 526 trap has two honest exits. Operate the entity through a natural-person sole shareholder so it stays outside the group definition, or build real local staff and premises before fiscal year 2027. Artificial last-minute substance is explicitly disregarded under Article 707-K.

No reliable public data confirms that major payment processors such as Stripe, Adyen, or PayPal accept Panama-incorporated crypto merchants; acceptance follows each processor's own risk policy and the country's list status, not any local-law permission. The deeper question is never whether a company can be formed. It is whether that company can support your actual crypto model under AML, tax, banking, and regulatory scrutiny.

The fit is reasonable for protocol-based models that take no custody of user funds: non-custodial DeFi, DEXs without on-ramping, DAOs, and NFT issuers operating without regulator authorisation. It also suits token issuance for DeFi, DAO, and governance use-cases, and ICO or IEO-type projects, as long as the token does not cross into security territory.

It works well as a holding or launchpad layer too. Founders wanting a fast, low-cost, fully foreign-owned, USD-base entity to hold treasury or IP while a regulated jurisdiction handles customer-facing activity find it serviceable, as do single-shareholder structures with a natural-person UBO that stay outside Law 526.

The fit weakens, or demands real caution, in clearer cases:

  • Operators needing a purpose-built VASP regime equivalent to MiCA or VARA, which has not been enacted here
  • Any exchange, OTC desk, or custodial wallet provider that needs clean fiat on/off-ramp banking
  • Businesses requiring EU market access, since no CASP passporting exists
  • MNE-group structures using the entity as a passive layer without genuine substance from FY 2027
  • Any token at realistic risk of being treated as a security by the SMV or under users' home-country law

For non-custodial protocols, token projects that steer clear of security characterisation, and holding or treasury vehicles owned by a single natural person, a Panama crypto company is a fast and low-cost option that the territorial regime treats kindly. For anything custodial, fiat-facing, or institutional, the missing VASP framework, the EU list status, and persistent banking de-risking make it a constrained choice that often belongs alongside a regulated entity rather than instead of one.

Weigh one thing next: where your customers and counterparties sit, and whether their banks and regulators will accept a Panama-incorporated entity at all. That answer, more than any local rule, decides whether the structure is usable.

Expanship helps foreign founders set up and run a Panama company for crypto and digital-asset activity, from choosing between an S.A. and a foundation-led structure to mapping which activities risk a licensing or securities trigger before the entity goes live. The same team supports the wider needs of a foreign-owned business operating locally.

  • Company incorporation, including the right S.A. or foundation structure for your crypto model
  • Registered agent and registered office services
  • Economic-substance assessment and tax registration support, including Law 526 exposure for group structures
  • Ongoing compliance management, beneficial-ownership filings, and corporate-book maintenance
  • Accounting and bookkeeping aligned to the territorial-tax position
  • Banking introductions, including EMI and crypto-native rails where local accounts are declined

To discuss your structure and the documentation banks will expect, contact Expanship Panama.

It depends on the activity, not on the use of blockchain. Non-custodial DeFi, DAOs, and many token issuances operate without authorisation, but running an exchange requires registration as a Specialized Financial Institution, and habitually issuing redeemable digital value requires a licence from the Ministry of Commerce and Industries.

Under the territorial regime, only income earned inside the country is taxed, at a 25% corporate rate. Profits from global token trading, staking, or issuance to non-Panamanian users are generally treated as foreign-sourced and exempt, provided the activity is conducted entirely outside national territory.

Law No. 526 of 28 May 2026 adds economic-substance rules for entities in a multinational group that earn foreign-source passive income, effective from fiscal year 2027. If your structure qualifies as an MNE group and lacks genuine local staff and premises, the passive income can face a 15% flat charge, but a single natural-person shareholder with no related foreign entity falls outside the law entirely.

Not with most local banks, which hold elevated de-risking postures and frequently decline crypto-entity accounts. Operators commonly pair the entity with EU-licensed EMIs or crypto-native providers, and all of them require a detailed bank-readiness pack covering UBO disclosure, source of wealth, AML procedures, and payment-flow diagrams.

No. The country sits outside the EU, so MiCA does not apply by default and a Panama-incorporated entity cannot passport into member states as a CASP. EU market access has to be treated as a separate structuring question, typically through a separately authorised entity.

Yes, and it is a genuine grey area. The SMV assesses the underlying rights and economic substance rather than the fact of tokenisation, so a token with securities-like features can fall under the securities regime, and users' home-country laws, particularly in the U.S. and EU, may reach the same conclusion independently.