Asobancaria SAFE Congress 2026

Attendees, exhibitors & solutions

Who this event is for

Industry trends

Key trends shaping this market and its wider industry.

Hotel tiers

A range of accommodation options near the venue and across key areas.

Local transport

Get around the city with these convenient transport options.

Frequently asked

Glossary

1

SARLAFT

Colombia's mandatory money-laundering and terrorist-financing risk management system that supervised financial entities must operate, with oversight from the Superintendencia Financiera de Colombia. It drives much of the compliance content banks bring to SAFE 2026.

2

UIAF

Unidad de Información y Análisis Financiero, Colombia's financial intelligence unit. It receives, analyses and cross-checks suspicious transaction reports filed by banks, insurers and other obligated entities.

3

ROS (Reporte de Operación Sospechosa)

The suspicious transaction report a Colombian bank files with the UIAF when a transaction, counterparty or client behaviour falls outside the expected profile. Reporting quality and false-positive rates are recurring themes for compliance teams.

4

KYC (Know Your Customer)

The identification and verification of a client before onboarding, covering identity documents, beneficial ownership and the purpose of the relationship. In Colombia it sits inside the broader SARLAFT obligation rather than as a standalone rule.

5

Debida diligencia (CDD / EDD)

Customer due diligence, and its enhanced form for higher-risk clients: establishing source of funds and source of wealth, mapping beneficial owners and refreshing client data on a risk-based cycle.

6

PEP (Persona Expuesta Políticamente)

A politically exposed person, or a close associate or family member, whose position creates higher corruption and laundering risk. Colombian banks apply enhanced monitoring to PEP relationships.

7

Fraude por ingenieria social

Social engineering fraud through phishing, vishing and smishing, in which the customer or an employee is manipulated into releasing credentials or authorising a transfer. It is one of the fastest-growing loss categories for retail banks.

8

APP fraud (authorised push payment fraud)

A scam in which the customer personally authorises the payment to a fraudster, typically after impersonation of a bank, retailer or marketplace. Because no unauthorised access occurs, detection depends on behavioural analytics rather than card controls.

9

ISO 20022

The global messaging standard for payments that replaces free-text fields with structured remittance and party data. Richer data improves screening and reconciliation, but also changes how fraud and sanctions filters must be tuned.

10

Open finance

Regulated, consent-based sharing of customer financial data with third parties through APIs. Colombia has been phasing in an open-finance framework, which shifts data security, consent management and fraud liability onto the participating institutions.

11

Tokenisation

Replacing a card number or account identifier with a surrogate token that is useless if intercepted. It is central to mobile wallet security and to reducing exposure in e-commerce checkout flows.

12

PCI DSS

The Payment Card Industry Data Security Standard, the card schemes' baseline for storing, processing and transmitting cardholder data. Colombian acquirers and payment processors are audited against it.

13

Bre-B

Banco de la República's instant payment system, built to move money between accounts and wallets in seconds using identifiers or keys instead of full account numbers. Faster settlement raises the stakes on fraud screening, reversibility rules and customer dispute handling.

14

Resiliencia operativa

Operational resilience: the ability of a bank to keep critical payment, credit and channel services running through cyber incidents, third-party outages or natural events, with tested recovery plans.