Colombia Payments Operator Guide: SFC Foreign Ownership, SEDPE Capital, and FX Repatriation

Most foreign-ownership questions in payments regulation get answered by absence: a rulebook that never mentions a cap, leaving an operator to infer that silence means permission. Colombia doesn't leave that inference to make. Decreto 1068 de 2015 states, in its own words, that foreign-capital investors may hold shares in any SFC-supervised entity "en cualquier proporción" — in any proportion. That's not the regulatory equivalent of a shrug. It's an affirmative grant, and the distinction matters operationally: a regulator has to actively override specific statutory language to walk back an affirmative grant, where a supervisor facing mere silence has much more room to impose a limit through guidance or discretion without ever amending a rule. Pakistan's payment rulebooks — covered in a companion operator guide — simply never mention a foreign-ownership percentage; Colombia's decree goes further and says there isn't one.

This piece sits alongside the Colombia market guide, which covers Bre-B, PSE, and the wallet and card landscape. Here the focus is what a foreign operator actually needs before entering: what the ownership rule really permits and where its real gate sits, what a SEDPE licence costs and how it's funded, a second entry route into card acquiring that doesn't require a banking-style licence at all, and — the section every market overview compresses into a single reassuring line — the documented mechanics of getting money back out.

Foreign ownership: stated, not silent

Decreto 1068's Article 2.17.2.3.1.1 ("Participación extranjera") is the operative text: foreign-capital investors may participate in the capital of entities supervised by the Superintendencia Financiera de Colombia (SFC), subscribing or acquiring shares, mandatorily convertible bonds, or cooperative-type contributions, in any proportion. SEDPEs — Sociedades Especializadas en Depósitos y Pagos Electrónicos, the licence category most non-bank payment operators use — fall squarely within SFC supervision: Ley 1735 de 2014's own Article 1 states, verbatim, that SEDPEs "estarán sujetas a la inspección, vigilancia y control de la Superintendencia Financiera de Colombia," and that same article names EOSF Article 88 — the 10%-or-more fit-and-proper gate discussed next — among the EOSF provisions it makes directly applicable to SEDPEs. Decreto 1068's Article 2.17.2.3.1.1 extends the same any-proportion treatment to foreign banks and insurers funding a Colombian branch's assigned capital.

That openness sits next to a gate that applies regardless of who's buying. Article 88 of the Estatuto Orgánico del Sistema Financiero (EOSF) requires prior SFC approval — the article still names the pre-2005 "Superintendencia Bancaria," whose supervisory functions the SFC now performs — before any transaction, by a national or foreign investor, acquires 10% or more of a supervised entity's subscribed shares, or pushes an existing stake past that line. The supervisor's review is a suitability, responsibility, and character check on the people behind the transaction, plus a public-interest test on the transfer itself; a share transfer completed without that approval is ineffective by operation of law, with no court declaration required to unwind it. Nothing in Article 88 singles out foreign buyers for a different or higher bar — the 10% threshold, and the fit-and-proper review behind it, apply identically either way.

Decreto 1068's own closing paragraph on this point is worth reading precisely, because it locates where the real control sits: registration of foreign capital investment in the financial sector can only happen once the SFC's authorisations for the entity's incorporation or organisation, and/or its share acquisition, have already been obtained. The gate is entry-stage — clear the SFC's approval to set up or buy into the entity, then register the investment — not a recurring ceiling that caps how much of the company a foreign investor can hold once inside. An operator planning a Colombian SEDPE or PSP with foreign capital should read the ownership question as two separate tests, not one: is the entity SFC-supervised (which unlocks the "any proportion" language), and does the specific transaction cross the 10% line (which triggers Article 88's fit-and-proper review) — nationality answers neither question.

The comparison to Pakistan is worth sitting with for a moment longer, because the two postures produce different practical confidence levels for the same investment memo. A foreign sponsor reading Pakistan's PSO/PSP rules has to infer permission from an absence — the rules never say a cap doesn't exist, they simply never impose one, which is defensible but leaves room for a future circular to fill the gap without contradicting anything already on the books. A foreign sponsor reading Colombia's Decreto 1068 is relying on a sentence that would have to be affirmatively repealed or amended to change. Both markets currently land in the same place — no cap, in practice — but only one of them would require the regulator to unwrite something to get to a different answer. That's the operational value of the distinction this piece opened with: it isn't just a linguistic curiosity, it's a different level of durability for the same investment decision.

SEDPE capital: a real number, honestly incomplete

Ley 1735 de 2014's Article 3 sets SEDPE minimum incorporation capital at COP $5,846,000,000, with a built-in escalator: the figure adjusts automatically each year by the same percentage change as DANE's consumer price index, rounded up to the nearest million pesos, with the first adjustment applied in January 2015 against 2014's inflation. A decade-plus of compounded CPI adjustment means the actual 2026 requirement is materially above that 2014 base — but the SFC's own pages that would carry the current indexed figure were unreachable this session, and no independently retrievable source stated a current number. The defensible position is to state the mechanism precisely — the 2014 base, the annual DANE-CPI indexation, the rounding rule — and tell the reader to get the live figure from the SFC directly rather than trust a computed estimate nobody else can check.

Capital sizing doesn't stop at incorporation. Decreto 1491 de 2015 (folded into the consolidated Decreto 2555 de 2010) sets a minimum leverage ratio for SEDPEs of 2%: technical equity divided by the average daily closing balance of electronic deposits over the trailing 30 days, checked continuously rather than only on reporting dates. That ratio ties required capital directly to how much e-money float the SEDPE is actually carrying at any given time — a business plan that models capital as a one-time incorporation cost, fixed at launch, will be right on day one and wrong as soon as deposit balances grow.

Custody of the underlying funds is equally specific. The same decree requires SEDPEs to keep the money they collect either in deposits at Banco de la República, on terms its Board authorises, or in demand deposits at supervised credit establishments — commercial banks under SFC supervision, not the SEDPE's own general accounts, and not an offshore custodian. Combined, the capital, leverage, and custody rules describe a structure built to keep customer e-money segregated and liquid at all times, verified at each day's operational close rather than sampled periodically.

Sequencing matters here as much as the numbers themselves. A foreign sponsor setting up a brand-new Colombian SEDPE clears the SFC's incorporation authorisation first — the same gate Decreto 1068 describes for any de novo SFC-supervised entity — with the Ley 1735 capital figure and the Decreto 1491 leverage-and-custody rules forming part of what that application has to demonstrate before the SFC will grant it. A foreign sponsor instead buying into an SEDPE that already holds its licence follows a different sequence: the entity's authorisation already exists, so the operative test becomes Article 88's 10%-or-more fit-and-proper review at the point of acquisition, not a fresh incorporation review. Confusing the two — treating an acquisition of an existing SEDPE as though it needed a new incorporation authorisation, or vice versa — is the kind of structuring mistake that costs months rather than the SFC's stated review windows.

A second entry route: acquiring without a banking licence

Colombia's card-acquiring rules widened meaningfully in 2020, and the change is directly relevant to a foreign operator weighing how deep a licence it actually needs. Before Decreto 1692 de 2020, acquiring activity (adquirencia) was effectively closed to anything outside SFC supervision. The decree opened it: acquiring may now be carried out by credit establishments, SEDPEs, and — the new category — companies not supervised by the SFC at all. The decree's own drafting record makes the intent explicit rather than leaving it to inference: it states that, before the decree, non-supervised entities could not lawfully carry out acquiring at all, and that the reform's purpose is to promote the activity by letting new, non-supervised actors offer it alongside the traditional supervised schemes with disruptive business models the old structure excluded.

An unsupervised acquirer doesn't get a free pass, though — it clears a different, narrower test. The SFC maintains a Registro de Adquirentes No Vigilados specifically to evaluate solvency before an applicant is accepted as a participant in the first low-value payment system it wants to serve. Article 2.17.3.1.2 sets four registration conditions, and it's worth stating all four rather than the one figure that tends to circulate on its own: the applicant must (1) be a sociedad anónima; (2) hold paid-in subscribed capital of at least 1,700 times Colombia's legal monthly minimum wage (SMMLV — a figure the government resets annually and which has itself been the subject of legal dispute in 2026, so it's worth confirming the current multiplier's peso value directly rather than assuming last year's); (3) maintain a mechanism to keep settlement funds segregated; and — the requirement that changes the shape of the obligation entirely — (4) from the first year of operation and every year after, demonstrate paid-in subscribed capital of at least 2% of the value of the payment orders and fund transfers it settled over the trailing twelve months. The first three are a one-time bar an operator clears at incorporation. The fourth is not: it's a recurring, volume-scaling floor rather than a static one, measured against trailing twelve-month settlement throughput rather than fixed at the entry figure — so an acquirer that sizes its capital against 1,700 SMMLV alone and never revisits the number can be fully compliant on day one and under-capitalised within a year or two of real growth, once 2% of its settled volume overtakes that static floor. The SFC has up to two months from a complete application to approve or deny the initial registration. One provision does real work for an operator negotiating with a payment-system administrator directly: the administrator cannot impose its own additional capital, solvency, or fund-segregation requirements on an unsupervised acquirer beyond what the decree itself sets — the registry, not a bilateral negotiation, is the ceiling.

None of this eligibility language turns on where the acquirer's owners are from. The distinguishing test throughout is capital-and-registration, applied identically to a Colombian-owned and a foreign-owned applicant. For an operator deciding between a full SEDPE build and a lighter acquiring registration, the practical difference is custody: a SEDPE can hold customer e-money as float, while an unsupervised acquirer under this regime is registering into the acquiring function specifically, not into deposit-taking — a materially smaller regulatory perimeter for a business plan that only needs to route and settle card transactions.

FX and repatriation: register once, then channel

Colombia's foreign-exchange regime for FDI is a register-once-then-channel system, not a case-by-case permission process — and the mechanics are more specific, and more workable, than a generic "repatriation is possible" summary suggests. Banco de la República's Resolución Externa 1 de 2018 (the FX-regime compendium, current to a 30 March 2023 update) requires inbound capital destined for a foreign investment to move through a licensed FX-market intermediary or a compensation account, with registration handled under the central bank's own general rules (Article 54). Where a specific investment needs prior authorisation from some other authority, that authorisation's number, date, and conditions must be stated as part of the filing — the FX registration doesn't substitute for whatever sector-specific approval (the SFC's, for a payments entity) is separately required.

Once registered, Article 55 opens the return channel. Its first numeral lets net proven profits ("utilidades netas comprobadas") generated periodically by the registered investment be converted and remitted through the same regulated FX market — with no requirement in the text for BanRep to sign off on each individual dividend, and no quantitative cap stated anywhere in the article. Its second numeral extends the identical channel to proceeds from selling the investment, liquidating a portfolio or the company itself, or reducing capital, subject to Colombia's Commercial Code requirements for whichever of those operations applies. Decreto 1068 adds one more mechanical detail worth getting right at entry rather than at exit: its registration-procedure article sets a filing deadline, but that deadline applies specifically to registering changes — in titleholder, in the investment's destination, or in the receiving company — and to cancellations. It does not apply to the initial investment itself, which simply follows Article 54's channelling-and-registration path from day one.

The operational lesson mirrors what shows up in most FDI-gated markets: the FX-intermediary relationship and the BanRep registration need to be set up when capital first enters Colombia, not reconstructed under time pressure when the first dividend or an exit becomes due.

It's worth being precise about what Colombia's mechanism is not, because the region includes a genuine counter-example. Argentina's FX regime still links official and parallel exchange-rate access through a 90-day rule and restricts which fiscal years' profits are even eligible for repatriation — real, current quantitative constraints on top of the registration step. Colombia's Resolución Externa 1 de 2018, on its own text, doesn't carry an equivalent: registration and channelling are the requirements, and neither Article 54 nor Article 55 imposes a waiting period, an eligible-vintage restriction on profits, or a value ceiling. That doesn't mean repatriation is frictionless — the documentation and channel requirements are real — but it's a materially lighter FX posture than a neighbour working through active capital controls, and conflating the two when scoping a multi-country LatAm entry is a common and avoidable planning error.

The tax layer sits on top, separately

The FX mechanism above governs whether money can move; it says nothing about how much of it survives the move. Estatuto Tributario Article 245, as amended by Ley 2277 de 2022's Article 4, sets a 20% income tax rate on dividends or profit shares paid to foreign companies or other entities without a principal domicile in Colombia, to non-resident individuals, and to the estates of non-resident decedents. That withholding sits at the tax layer, entirely separate from the FX channelling-and-registration mechanism in Resolución Externa 1 de 2018 — a dividend can clear the FX registration cleanly and still be taxed at 20% before it ever reaches the FX market. This piece did not check whether a specific bilateral tax treaty reduces that rate for a given investor's home jurisdiction, and DIAN's administrative rulings on the provision weren't reviewed either — an operator should treat 20% as the statutory starting point and confirm the actual applicable rate with a Colombian tax adviser before modelling net repatriation proceeds.

It's a useful check on the rest of this piece's argument, too. The absence of a foreign-ownership cap and the absence of a repatriation ceiling both come from statutes that say so affirmatively — but a 20% haircut at the tax layer is not inconsistent with either of those findings, and a reader who only takes away "Colombia doesn't cap foreign ownership or repatriation" without also carrying the tax figure would be modelling gross proceeds, not net ones. The three layers — ownership, FX, and tax — are governed by three different instruments (a Hacienda decree, a central-bank resolution, and the tax code respectively), and each has to be checked on its own terms rather than assumed to move together.

What this means for operators

Colombia rewards reading its ownership rule as written rather than as commonly summarised. The "no cap" claim is true, but it's true because a specific decree article says so affirmatively — not because the rulebook is quiet on the question, which is the more common (and weaker) pattern elsewhere in the region and beyond. That distinction should change how confidently an operator treats the answer: an affirmative grant is a harder thing for a future SFC circular to quietly narrow than an unaddressed gap would be. The real gate a foreign investor clears isn't a nationality test at all — it's the SFC's entity-level authorisation to incorporate or acquire shares, and, above 10%, the same fit-and-proper review a Colombian buyer would face.

Capital planning has to account for a number the SFC didn't make retrievable this session: the current CPI-indexed SEDPE minimum, a decade past its 2014 base. Get that figure directly rather than estimating it. Acquiring has a second, lighter path that doesn't require SEDPE-level custody infrastructure at all — useful for an operator whose Colombian business plan is routing and settling card transactions rather than holding e-money float. And repatriation, read correctly, is a documented banking-and-registration process with named thresholds, not a policy sentence to take on faith — followed, separately, by a real withholding-tax bill that a treaty might reduce and that a Colombian tax adviser, not this piece, should confirm.

None of this is unique to Colombia in form — every market covered in this operator-guide series turns out to reward the same discipline: read the actual article number, not the market's reputation for being "open" or "restrictive," and separate the questions a rulebook actually answers from the ones a reader is tempted to assume it does. What makes Colombia worth a standalone entry in that series is that its foreign-ownership answer sits at the more unusual end of the spectrum — a regulator that chose to say so, rather than one that simply never got around to saying no.