Back to Costa Rica

Costa Rica

CR · CRI · Americas

7 regulators · 5 laws & regulations · 5 obligations · 3 enforcement actions

Regulation 2026

Acuerdo SUGEF 5-26 Reglamento sobre aspectos mínimos de control para prevenir y mitigar estafas informáticas en perjuicio de los usuarios financieros (SUGEF Accord 5-26, Regulation on minimum controls to prevent and mitigate online scams against financial users)

Issued by Superintendencia General de Entidades Financieras

Effective: 11 Sep 2026

Plain-English summary

Sets minimum anti-scam controls for SUGEF-supervised entities: a board-approved mitigation strategy, cyberhygiene education, claims handling, behavioural monitoring, two-factor authentication and transaction notifications within one minute. Takes effect on publication in La Gaceta (published 11 September 2026).

Who it applies to

Banking

Topics

Conduct & Consumer Protection Cybersecurity & IT Risk Fraud Risk

Obligations arising from this law or regulation

Obligation Timing Regulator Source Detail
Anti-fraud controls against online scams Notifications within one minute of each transaction (Art. 15) SUGEF official

Official source

Latest news