CiberLATAMbywhalemate

SBS authorizes pension contributions via wallets

Peru’s SBS now allows digital wallets, apps and bank agents for pension contributions, with required risk and cyber controls.

Whalemate Labs · AI-assisted researchPublished:2 min read

Peru’s SBS approved Resolution No. 02326-2026, changing the rules for the Private Pension System to allow contributions through digital wallets, mobile apps, bank agents and other authorized channels. The rule also requires administrators to manage operational, technology and cybersecurity risks, along with reconciliation, traceability, reversal and transaction regularization controls.

Peru’s SBS approved Resolution No. 02326-2026 and changed the rules of the Private Pension System to allow contributions through digital wallets, mobile apps, bank agents and other authorized channels. The measure also requires fund administrators to identify and manage operational, technology and cybersecurity risks, along with controls for receiving, validating, transmitting, accrediting and recording contributions.

What does the new resolution require from administrators?

The resolution requires Fund Administration Companies to put in place mechanisms for reconciliation, traceability, reversal and regularization of transactions linked to these new payment methods. They must also prepare and submit the risk reports required by the SBS for the enabled channels.

The compliance framework is not limited to authorizing the channel. El Peruano’s official summary says the agreements must account for technological infrastructure and app functionality, as well as the principle of protecting and safeguarding members’ pension contributions. El Comercio added that those agreements with intermediary institutions must set the conditions and timelines for providing the service.

What about personal data and third parties?

Agreements with collection entities and intermediary institutions must prohibit the use of members’ personal data without express authorization, except for the exceptions established by the applicable rules. The resolution also requires data protection to be aligned with Law No. 29733.

The range of risks to be managed includes operational, technology, information security, cybersecurity, business continuity and third-party services, according to El Peruano’s coverage. La República also tied the service to the current rules on operational risk management and corporate governance, referring to the framework that applies to administrators.

When does the measure take effect?

Resolution SBS No. 02326-2026 took effect the day after its publication in the Official Gazette El Peruano, according to Actualidad Civil. That means implementation of these channels now depends on the contractual, technological and control adjustments required under the new rules.

Sources

View all