Argentina BCRA updates payment provider rules

The BCRA published Communication A 8488/2026 and updated the consolidated rules for Payment Service Providers, replacing pages to reflect provisions issued under Communication A 8472. The measure was made official in Argentina’s Official Gazette on Oct. 7, 2026.

What did the BCRA do with the consolidated rules?

The Central Bank updated the consolidated text applicable to Payment Service Providers and ordered page replacements to incorporate what was defined in Communication A 8472. The official notice does not add further details in the available material about operational changes, technical scope, or implementation deadlines.

What is known about regional controls and requirements?

In parallel, another news report attributed to the BCRA an advance notice of stricter requirements for entities that connect other companies to the financial system, including banks and payment service providers. However, the available result does not specify which rule is being prepared, what its scope would be, or when it would take effect.

What requirements did the CNBV mention for financial infrastructure?

A manager cited by El Economista Mexico said CNBV requirements for financial entities include certifications for data centers, environmental controls, physical and digital protection mechanisms, and documentary evidence of access, intrusion attempts, and technology infrastructure activity logs. That reference appeared in a story about the spread of cloud-based deployments among financial firms that prefer to launch products with that model.

What judicial precedent did Mexico have on sanctions for entities?

According to the available coverage, Mexico’s Supreme Court confirmed CONDUSEF’s authority to sanction financial entities for failures tied to the Registry of Collection Agencies and monthly complaint reports. The cited ruling also sets a maximum period of 180 calendar days for the authority to issue and notify its decision after the hearing period expires.

The material reviewed does not link that Mexican ruling to new cybersecurity-related sanctions or to any additional compliance deadline for the operational requirements mentioned.