Colombia AML/CFT and customer due diligence (SARLAFT)
The SFC states that entities it regulates must design, adopt and implement SARLAFT to identify, measure, control and monitor money laundering and terrorist financing risks. An SFC circular issued in 2025 further requires case-specific assessment based on a risk profile and risk-based customer due diligence, enhanced measures and transaction monitoring. It also requires refusals of service to be based on objective and reasonable grounds, and prohibits treating a criminal record or investigation alone as the sole automatic reason for rejection. These are regulatory requirements, not a guarantee that Bancolombia will approve an individual customer.
Source:Superintendencia Financiera de Colombia — SARLAFT, cliente, definición, alcance ↗;Superintendencia Financiera de Colombia — Circular Externa 0010 de 2025 ↗
Corporate Control, Ultimate Beneficial Owners, and Source of Funds
Colombia's RUT system includes the beneficial ownership registry (RUB) mechanism; the SFC's SARLAFT requirements call for supervised institutions to manage LA/FT risks related to customer relationships. Corporate applicants should prepare evidence of their ownership/control chain, beneficial owners' identities, and lawful source of funds for bank due diligence. The specific beneficial ownership thresholds, forms, types of evidence, or authentication requirements for foreign documents at Bancolombia could not be verified from the corporate account product pages accessible for this review. This preparation checklist is not a published Bancolombia policy.
Source:Superintendencia Financiera de Colombia — SARLAFT, cliente, definición, alcance ↗;DIAN — Conozca el RUT ↗
Tax Residency Self-Certification, CRS, and FATCA
DIAN explains that Colombia participates in CRS automatic exchange of information and describes CRS reportable jurisdictions as the relevant jurisdictions other than the United States; therefore, the United States must not be described as having joined CRS. DIAN separately lists the FATCA framework between Colombia and the United States. Applicants should truthfully disclose all tax residences and applicable tax numbers; financial accounts may be subject to due diligence/information reporting under local rules. The specific self-certification required by Bancolombia, applicable exceptions, and reporting scope must be determined from the bank's official documents.
Source:DIAN — Intercambio Internacional de Información ↗;DIAN — Concepto 010520 int 1024 de 2025, intercambio automático de información ↗
Sanctions and high-risk screening
Colombian banks are subject to the SFC's risk-based AML/CFT and customer due diligence supervisory framework and may request additional information under applicable laws and their own risk policies. No publicly available Bancolombia list of sanctions screened, country coverage, list-hit handling rules, or policy of automatic refusal based solely on a particular foreign sanctions list was found. Its specific policies on OFAC, EU, or other lists therefore cannot be inferred.
Source:Superintendencia Financiera de Colombia — SARLAFT, cliente, definición, alcance ↗;Superintendencia Financiera de Colombia — Circular Externa 0010 de 2025 ↗
Deposit protection (public product disclosures)
The savings account product page for Colombians overseas says it is covered by Fogafín deposit insurance, but this review did not verify the account category’s eligibility conditions, coverage limit, or exclusions. Do not treat the product-page summary as a substitute for confirming the insurance terms.
Source:Bancolombia — Cuenta plan Cero para Colombianos en el Exterior ↗