Colombia AML/KYC and ongoing due diligence
The SFC’s SARLAFT regulatory interpretation requires regulated financial institutions to know their customers and implement anti-money laundering/counter-terrorist financing risk management. The SFC’s interpretation on customer information updates specifically mentions identifying beneficial owners and politically exposed persons, and states that institutions must conduct due diligence. The interpretation was published in 2017 and cites the rules in force at the time; current operational details should be checked against the SFC’s current consolidated Circular Básica Jurídica. Banco de Bogotá’s own public account information requires personal and financial information, and a specific foreign salary account also requires relevant identity and tax declarations. Whether the bank conducts additional due diligence on a particular applicant is for the bank to assess.
Source:Superintendencia Financiera de Colombia — SARLAFT, conocimiento del cliente, beneficiario real y PEP ↗;DIAN — Intercambio Internacional de Información ↗;Banco de Bogotá — Cuenta de Nómina ↗
Ultimate beneficial owners, PEPs, and source of funds
The SFC’s formal interpretation expressly discusses the identification of beneficial owners and PEPs by regulated entities and requires due diligence to continue to apply when customer information is updated. For its specific Venezuelan salary account, Banco de Bogotá publicly requires applicants using a PPT or Venezuelan passport to declare and substantiate the source of funds. This special rule should not be treated as a specific checklist for other customers. The company application’s beneficial ownership structure and document requirements are not fully disclosed in the readable product list; provide truthful, verifiable information as required by the bank’s actual review.
Source:Superintendencia Financiera de Colombia — SARLAFT, conocimiento del cliente, beneficiario real y PEP ↗;Banco de Bogotá — Cuenta de Nómina ↗;Banco de Bogotá — Formato apertura productos ↗
Colombian tax residency self-certification, CRS, and FATCA
In a statement published on 2026-07-01, Banco de Bogotá said it implements DIAN FATCA Rule No. 227/2025 and CRS Rule No. 078/2020, conducting due diligence and identification checks on new and existing accounts and reporting to the competent authorities. Its payroll-account materials also include a FAT_FOR_001 tax-residency self-certification. DIAN’s page states that 2026-year reporting continues to use CRS 2.0, that CRS 3.0 starts on 2027-01-01, and explicitly that the CRS reportable jurisdictions do not include the United States. The United States should not be described as a CRS participating jurisdiction; relevant U.S. tax information exchange falls under FATCA.
Source:Banco de Bogotá — Cuenta de Nómina ↗;Banco de Bogotá — FATCA – CRS Certification ↗;DIAN — Intercambio Internacional de Información ↗
Sanctions list and risk assessment
The SFC’s regulatory interpretation states that United Nations Security Council lists are binding on Colombia under international law. OFAC lists do not thereby automatically become binding domestic law in Colombia, but may create commercial and cross-border business risks; regulated entities should assess these under their own risk frameworks. This describes Colombia’s regulatory baseline and does not establish what screening or rejection policy Banco de Bogotá applies to a particular applicant. Applicants should accurately disclose their identity, control relationships and source of funds, and should not conceal information or evade checks.
Source:Superintendencia Financiera de Colombia — SARLAFT y listas restrictivas vinculantes y no vinculantes ↗;Superintendencia Financiera de Colombia — SARLAFT, conocimiento del cliente, beneficiario real y PEP ↗
Personal Information and Privacy
The bank’s published personal data protection page states that it processes customers’ personal information in accordance with Colombia’s Law No. 1581/2012 and Law No. 1266/2008, and sets out principles such as notice of purposes, access/correction, security and confidentiality, as well as customers’ rights. Applicants can review the bank’s policies and consent form before submitting materials to understand the scope of data processing and sharing.
Source:Banco de Bogotá — Protección de Datos Personales ↗
Deposit protection
Fogafín’s official list of insured institutions expressly includes Banco de Bogotá S.A. and states that savings products of insured banks are automatically covered by deposit insurance. This concerns deposit insurance in Colombia; it does not establish coverage for every product or foreign branch, nor does it support an inference about an unverified compensation limit.
Source:Fogafín — Entidades inscritas ↗