Peru's BCRP sets rules for digital payments
The BCRP approved a digital payment acceptance rulebook with new requirements on risk, fraud, security
Peru’s central bank approved rules for companies that process merchants’ digital payments. The regulation sets obligations on security, transaction handling and information access for participants, and will take effect on January 1, 2027, with a transition period.
Update October 5, 2026: The BCRP approved the Payment Acceptance Service Regulation through Circular No. 0026-2026-BCRP. The rule now also adds provisions on risk and fraud management, information security, complaint handling and the responsibilities of participants.
The Central Reserve Bank of Peru approved a regulation for companies that process merchants’ digital payments. The rule sets obligations on security, transaction processing and the information available to participants. It will take effect on January 1, 2027, with a transition period.
Who does the regulation apply to?
The Payment Acceptance Service Regulation applies to payment service providers and payment infrastructures, including administrators and direct and indirect participants. According to the official gazette El Peruano, it also covers transactions made through POS terminals, QR codes, payment buttons, web integrations and mobile apps.
What obligations does it impose?
The regulation requires that funds received and managed by payment acquirers until settlement be kept in a collection account separate from their own funds. It also sets a daily reconciliation between that account and the settlement obligations owed to merchants.
Transaction data covered by the rule must be kept for five years under security measures. Forbes Peru and Gestión also noted that the regulation adds obligations tied to transaction security and to the information that must be available to participants.
What does the BCRP's new circular add?
Circular No. 0026-2026-BCRP adds rules on risk and fraud management, information security tied to operations, complaint handling and participant responsibilities. With that text, the Central Reserve Bank of Peru approved the Payment Acceptance Service Regulation.
What is the BCRP trying to standardize?
The rule sets common minimum standards for payment acquiring and fund collection services, regardless of the infrastructure used. The goal is to strengthen security, efficiency, interoperability and trust in Peru's national payments system.
Forbes Peru reported that the BCRP may grant, upon a justified request supported by a work plan, a transition period of up to 90 calendar days. That transition framework goes along with the planned effective date in 2027.
Sources
- El Peruano te informa: consulta aquí las principales normas legales para hoy sábado 3 de octubre del 2026elperuano.pe· Diario Oficial El Peruano
- Resolución SBS 02271: Nuevo Reporte Incidentes Operacionalespiranirisk.com· Pirani Risk
- BCRP emite reglamento para empresas que procesan pagos digitales de comerciosgestion.pe· Gestión
- BCRP aprueba reglamento para empresas que procesan pagos digitales de comerciosforbes.pe· Forbes Perú
- Negocios obtendrán mayor transparencia sobre tarifas y comisiones de empresas de pagos digitalesinfobae.com· Infobae Perú
- Circular N.° 0026-2026-BCRP — Reglamento del Servicio de Aceptación de Pagosbcrp.gob.pe· Banco Central de Reserva del Perú
- BCR aprueba reglamento del servicio de aceptación de pagos para fortalecer pagos digitalesandina.pe· Agencia Peruana de Noticias Andina
- BCRP: fijan nuevas reglas en pagos digitales para proteger el dinero de los comercios desde 2027larepublica.pe· La República
- Circular N° 0026-2026-BCRPactualidadcivil.pe· Actualidad Civil



