Business AML consulting · Guatemala

Guatemala's New AML Law: the first decision is understanding what applies to your company.

Decree 15-2026 takes effect on September 17, 2026. Before buying generic manuals or adopting standard controls, a company should determine whether its actual activities make it an Obligated Person and how the new Law may affect its business relationships.

rony@ronyestrada.com

A new law does not create identical obligations for every business.

Decree 15-2026 reorganizes Guatemala's framework for preventing money laundering and terrorist financing, strengthens the risk-based approach and brings additional activities into the preventive system.

Coverage does not depend only on a trade name, professional title or legal form. The analysis must consider the activity actually performed, how it is delivered, which transactions are carried out and whether the person acts on their own behalf or for third parties.

An incorrect conclusion can lead to either of two costly outcomes: failing to meet applicable obligations or imposing a structure that the Law does not require.

The correct starting point is an applicability and gap assessment based on the company's actual operations.

Not being an Obligated Person does not place a company outside the Law's impact.

Selling to an Obligated Person does not automatically turn a supplier into an Obligated Person. The relationship may nevertheless create practical requirements affecting contracts, payments, financing and commercial continuity.

01

When the company is a customer

Banks and other Obligated Persons must identify their customer, verify who acts on its behalf, identify beneficial owners, understand the relationship and assign a risk level. If they cannot complete the review, they may have to decline or terminate the relationship.

02

When the company is a supplier

An Obligated Person may require corporate information, beneficial-ownership details, declarations, compliance clauses and evidence concerning particular transactions as a commercial condition. These requests do not by themselves change the supplier's legal category, but they may determine whether it keeps the customer or closes the transaction.

Is your company prepared to provide the information that its banks, customers, investors and counterparties may begin to require?

Five questions every company should answer now.

  1. 01

    Does the company's actual activity fall within a category of Obligated Person?

  2. 02

    Does it adequately identify its customers, counterparties and beneficial owners?

  3. 03

    Does it have documented criteria for classifying risk and detecting warning signs?

  4. 04

    Do its policies, files and assigned responsibilities reflect how the business really operates?

  5. 05

    Can it explain to an authority, bank, auditor or business partner why it accepted a relationship or transaction?

Controls that work inside the business, not documents that remain unused.

A professional assessment helps define a scope proportionate to the risk and the activity. The engagement may include:

01

Applicability and gaps

Determining whether the company is an Obligated Person and assessing its existing controls.

02

Risk and due diligence

Risk matrices, customer and third-party due diligence, beneficial ownership and Politically Exposed Persons.

03

Policies and procedures

Designing or updating manuals, forms, responsibilities, controls and escalation mechanisms.

04

Implementation

Training, work plans, decision records and periodic review.

Economic analysis, business experience and risk management.

Ronaldo Estrada Rivera is an economist, MBA and FIBA-certified AMLCA professional. His work combines economic analysis, business experience, due diligence and risk management to help organizations understand what applies to them and translate it into a viable implementation path.

EconomistMBAAMLCABusiness experienceBilingual EN/ES

Has your company determined what it must do under Decree 15-2026?

Complete this short form to describe your need and request a proposal. You do not need an email application or have to leave this page.

Tell me briefly what your company needs.

Do not submit documents or confidential information. This form is used to understand the general matter and prepare a proposal; it does not include document review or a free diagnosis.

Read the broader analysis on compliance and due diligence

Official sources

Information updated on September 12, 2026. This content is informational and does not determine whether a specific person or company qualifies as an Obligated Person. The advertised consulting concerns corporate AML compliance and risk management. Any legal or notarial service that may become necessary must be defined and engaged under a separate scope.