Colombian criminal law classifies punishable conduct as offences (delitos) and contraventions (contravenciones), rather than using the common law distinction between felonies and misdemeanours. Criminal liability requires conduct to be:

• typical – the conduct must satisfy the objective and subjective elements of an offence defined by statute;
• unlawful – this requires an unjustified harm or legally relevant danger to the protected legal interest; and
• culpable – this requires personal blameworthiness.

Strict criminal liability based solely on causation or outcome is excluded.

The Criminal Code recognises intentional, negligent and preterintentional conduct. Intent is the ordinary basis of liability, whereas negligence and preterintentional liability apply only where expressly provided by law. Motive is not generally an independent requirement, although a specific purpose may form part of particular offences.

Attempt is punishable where execution has begun through suitable and unequivocal acts but completion is prevented by circumstances beyond the offender’s control. Attempt carries a reduced penalty.

The prosecution bears the burden of proving both the commission of the offence and the accused’s criminal responsibility beyond reasonable doubt. The accused has a presumption of innocence throughout the proceedings and is not required to prove innocence nor provide an alternative explanation for the prosecution’s case.

White-collar cases frequently rely on financial records, expert evidence and circumstantial inferences. Colombian courts may draw reasonable inferences from facts established by admissible evidence, but circumstantial evidence does not lower the standard of proof. The accused’s silence or inability to explain suspicious transactions cannot substitute for proof of guilt, and the evidential burden cannot be reversed.

Lower evidential thresholds may apply to interim procedural decisions, but conviction always requires proof beyond reasonable doubt.

For offences punishable by imprisonment, the limitation period generally corresponds to the maximum custodial sentence prescribed for the offence, subject ordinarily to a minimum of five years and a maximum of 20 years. Specific offences are subject to longer periods or, exceptionally, are not time-barred.

The starting point depends on the nature of the offence:

• for an instantaneous offence, time runs from completion;
• for a continuing or permanent offence, from the last act of execution;
• for an attempted offence, from the last execution act; and
• for an omission, from the point at which the legal duty to act ceases.

Formal charging interrupts the original period and starts a new limitation period under the statutory post-charge rules. Special provisions also apply to certain public official and tax offences.

Colombian criminal jurisdiction is principally territorial, but it extends to conduct carried out partly abroad where a relevant act, omission or result occurs or should occur in Colombia. Specific extraterritorial rules also cover certain offences affecting Colombian public administration, national economic interests, the constitutional order and other protected State interests.

Cross-border investigations are supported by the Criminal Procedure Code and international instruments, including the Inter-American Convention on Mutual Assistance in Criminal Matters, the Vienna and Palermo Conventions and the Inter-American Convention against Corruption. Assistance may include obtaining evidence, testimony and documents, as well as searches, seizures and asset-freezing measures. Colombian authorities also co-operate through INTERPOL, Europol and other police and financial intelligence networks. Colombia has no general blocking statute preventing such assistance, although requests remain subject to constitutional safeguards, treaty requirements and domestic procedure.

Extradition is available for qualifying white-collar offences, subject to requirements including dual criminality and the applicable sentencing threshold. The Supreme Court issues the required judicial opinion before the government makes the final decision.

Colombia does not currently recognise the criminal liability of legal entities under the ordinary Criminal Code. Criminal responsibility is principally personal and applies to natural persons who commit, direct, facilitate or otherwise participate in an offence. Companies may nevertheless face significant administrative, regulatory, civil, procurement and asset-related consequences arising from the same conduct.

Special legislation provides for administrative corporate liability, particularly in cases involving transnational bribery and other corruption-related conduct. Accordingly, an individual may face criminal prosecution while the company is independently investigated and sanctioned under an administrative regime.

Directors and managers are not criminally liable solely because of their position: liability requires personal participation or, in omission cases, a legally recognised duty to prevent the result, the ability to intervene and the required mental element. Colombia has no general corporate failure-to-prevent offence, although targeted failure-to-control and reporting offences exist, particularly in regulated sectors.

M&A do not ordinarily transfer criminal liability to the successor entity, although administrative, civil, regulatory and asset-related liabilities may follow the target under applicable succession rules. However, special administrative regimes, particularly for transnational bribery, may extend to group companies where the statutory attribution, benefit and consent or tolerance requirements are established.

White-collar offences are sentenced under the general framework of the Colombian Criminal Code. Depending on the offence, sanctions may include imprisonment, fines, disqualification from public office or public functions and other accessory consequences. Courts must expressly justify both the nature and quantum of the sentence imposed.

The court first determines the applicable statutory minimum and maximum, and then applies any relevant aggravating or mitigating provisions. The resulting range is ordinarily divided into sentencing quarters. Within the applicable range, the court considers:

• the seriousness of the conduct;
• actual or potential harm;
• the offender’s role and degree of intent or negligence; and
• the need for punishment.

Restitution, compensation and co-operation may mitigate exposure where the law provides for that effect. Negotiated outcomes are also available through acceptance of charges and plea agreements.

Colombia has no direct equivalent to a US-style deferred prosecution agreement (DPA) or non-prosecution agreement (NPA). The closest mechanism is the principle of opportunity, under which prosecution may be suspended, interrupted or waived on statutory grounds and subject to judicial review.

Victims of white-collar offences may seek full compensation for damage caused by the offence, including direct financial loss, lost profits and, where proved, other legally recoverable damage. Individuals, companies and public entities may qualify as victims where they establish a direct and legally recognised loss.

Within criminal proceedings, the principal mechanism is the integral reparation proceeding, which takes place after a final conviction. The trial judge determines the existence, scope and value of the damage, while the victim bears the burden of identifying and proving the loss claimed.

The proceeding may involve the convicted offender, third parties who are civilly liable and, where appropriate, insurers. Separate civil or administrative proceedings may also be available, depending on the defendant and the nature of the claim.

For mass financial losses, Colombia recognises class actions, generally involving at least 20 persons who suffered individual losses arising from a common cause. Popular actions protect collective rights but are not primarily compensatory.

The Attorney General’s Office is the principal authority responsible for investigating and prosecuting white-collar offences. It directs the judicial police, including the Technical Investigation Corps and specialised National Police units, and has dedicated directorates for corruption, money laundering, financial investigations, tax offences and cybercrime.

Parallel administrative or regulatory proceedings may be conducted by authorities such as:

• the Superintendence of Companies;
• the Financial Superintendence;
• the Financial Information and Analysis Unit (UIAF);
• the Comptroller General; and
• the Inspector General.

The same facts may therefore generate criminal, administrative, disciplinary, fiscal and civil proceedings without necessarily creating a jurisdictional conflict, since each addresses a distinct form of liability.

There is no single specialist criminal court for all white-collar offences; jurisdiction depends on the offence and applicable statutory rules. Enforcement priorities may be influenced by criminal policy priorities and resource allocation, but prosecutorial decisions remain subject to legality, due process and judicial control.

White-collar investigations may be initiated by the Attorney General’s Office ex officio, following a criminal complaint, a private complaint where legally required, a special petition or any other lawful source of information suggesting that an offence may have occurred.

Investigative leads may arise from:

• reports by victims or employees;
• regulatory or tax authorities;
• suspicious transaction reports and UIAF financial intelligence;
• audits;
• administrative proceedings;
• international co-operation;
• publicly available information; or
• evidence obtained in another criminal investigation.

Anonymous reports may also be considered where they contain sufficiently specific and verifiable information.

Once credible information is received, judicial police may undertake urgent measures to preserve evidence, and must report their activities to the competent prosecutor. The Prosecutor then directs the investigation and determines the appropriate investigative strategy. Corporate administrative investigations may proceed separately before the Superintendence of Companies, particularly in transnational bribery matters.

The prosecutor and judicial police have broad statutory powers to:

• obtain documents and information;
• conduct inspections;
• search premises;
• seize physical and digital evidence;
• examine databases and electronic communications;
• question witnesses; and
• use forensic and other specialised investigative techniques.

Evidence must be lawfully obtained and preserved in accordance with chain-of-custody requirements.

Companies may be required to produce relevant corporate, accounting, transactional and electronic records. Searches of corporate premises require legally sufficient grounds linking the premises, evidence or persons concerned to the suspected offence, and remain subject to judicial control. Privileged lawyer-client communications receive specific protection.

Employees, directors and third parties may be interviewed or questioned, although individuals suspected of criminal involvement retain the privilege against self-incrimination.

Digital assets may be traced, secured or seized under the general rules governing digital evidence, criminal proceeds, confiscation and asset preservation. There is no separate comprehensive crypto-asset seizure regime

Colombian enforcement authorities increasingly use data analytics, artificial intelligence, machine learning, digital forensics and financial network analysis in complex investigations. The General Prosecutor’s current institutional strategy expressly contemplates big data and AI tools to identify criminal patterns, associate cases and trace financial flows, while the UIAF uses advanced analytics and machine learning techniques for financial intelligence.

There is no single comprehensive statute governing all uses of AI in criminal investigations. Technology-assisted investigations remain subject to existing rules on due process, privacy, data protection, digital evidence, admissibility and chain of custody. Human officials remain responsible for prosecutorial and judicial decisions.

Authorities may receive evidence developed through AI-assisted corporate investigations. The value of such evidence will depend on:

• lawful data collection;
• the preservation of original material;
• transparent methodology;
• human validation; and
• the ability of the parties to test the underlying evidence.

Colombian law does not impose a universal duty on every company to conduct an internal investigation whenever potential misconduct is identified. Their necessity depends on the company’s sector, regulatory status and applicable compliance obligations. Nevertheless, internal investigations are increasingly important in assessing potential criminal exposure, preserving evidence, identifying control failures and determining whether disclosure or remediation is required.

For companies subject to transparency and business ethics requirements, effective internal audit, investigation and remediation mechanisms may be relevant to administrative liability and sanction mitigation, particularly in corruption and transnational bribery matters. There is no general obligation to disclose every internal investigation or report, although specific reporting duties and lawful production orders must be observed.

Internal investigations must comply with data protection, privacy and labour law requirements, including necessity, proportionality and employee due process where disciplinary consequences may follow. Lawyer-client communications and legal advice may be protected by professional secrecy, although underlying business records and investigative materials are not privileged merely because counsel collected or received them.

White-collar prosecutions are conducted by the Attorney General’s Office. Formal criminal proceedings generally progress from imputation, which requires a reasonable inference of authorship or participation, to the filing of an indictment, which requires evidence supporting a probability that the offence occurred and that the accused participated in it. Conviction ultimately requires proof beyond reasonable doubt.

Because Colombia does not generally recognise the criminal liability of legal entities, criminal charges are ordinarily brought against natural persons. Companies may face separate administrative proceedings, including under the transnational bribery and corporate corruption regimes.

Colombia does not have a direct equivalent to a US-style DPA or NPA for companies. The closest criminal mechanism is the principle of opportunity, under which the prosecutor may suspend, interrupt or waive prosecution on expressly defined statutory grounds and subject to mandatory judicial review. Depending on the applicable ground, conditions may include:

• victim compensation;
• guarantees for reparation;
• co-operation with investigators;
• assistance in preventing further offences or dismantling criminal organisations; and
• other restorative or behavioural commitments.

Colombia also permits agreements and acceptance of charges, but these ordinarily result in a conviction and reduced sentence rather than deferred prosecution.

For companies, the more relevant analogue is the administrative collaboration regime applicable to transnational bribery and certain corruption matters. Timely voluntary disclosure, useful evidence, remediation and effective compliance measures may support full or partial reductions in administrative sanctions, although compliance improvements are not an automatic condition for every criminal resolution.

Colombia does not have a single category of “corporate crime”. Relevant offences are spread across the Criminal Code and impose liability on the natural persons involved rather than on the company itself.

Key corporate offences include:

• private corruption, where an unjustified benefit is offered, given, requested or received to favour a person to the detriment of a company, punishable by four to eight years’ imprisonment and a fine; and
• disloyal administration, where a director, administrator, employee or other qualifying person abuses corporate powers for personal or third-party benefit and causes economically assessable loss, carrying the same basic penalty.

General fraud also applies where deception causes another person to act under an error, producing unlawful gain and corresponding loss; the ordinary penalty is 32 to 144 months’ imprisonment plus a fine. Fraudulent concealment of assets to prejudice creditors and offences involving unauthorised financial activities may also arise in corporate settings.

Colombian law criminalises both sides of public sector bribery. A public official commits bribery by accepting or receiving an improper benefit or promise in connection with official functions; the precise offence and penalty depend on whether the benefit relates to an unlawful omission or act, or to the proper performance of official duties. The person offering or giving the benefit may be prosecuted separately, with penalties including 48 to 108 months’ imprisonment, fines and disqualification from public functions.

Influence peddling is also criminalised for both public officials and private persons where improper influence over a public official is exercised to obtain a benefit.

Colombia additionally criminalises transnational bribery of foreign public officials in connection with international business, and private sector bribery between commercial actors. Companies may face separate administrative sanctions for transnational bribery even though ordinary criminal liability remains personal.

Colombia combines criminal anti-bribery rules with a preventative corporate compliance regime. Laws 1474 of 2011, 1778 of 2016 and 2195 of 2022 require qualifying legal entities to implement Transparency and Business Ethics Programmes. These programmes must be risk-based and include corruption prevention measures and internal audit mechanisms. In practice, an effective programme should address:

• governance;
• corruption risk assessment;
• third-party due diligence;
• gifts and hospitality;
• conflicts of interest;
• internal controls;
• training;
• reporting channels; and
• remediation.

Failure to implement or comply with an applicable programme obligation is not a standalone criminal offence but may result in administrative sanctions, and may adversely affect the assessment of corporate liability. Reporting obligations depend on the regulated sector and the person involved; public officials, statutory auditors and regulated entities may have specific duties to report suspected criminal or suspicious conduct.

Colombia criminalises the misuse of privileged information where a director, employee, adviser or other qualifying person improperly uses non-public information obtained through their position to obtain a benefit. The offence carries one to three years’ imprisonment and a fine.

Fraudulent manipulation of securities applies where transactions create an artificial appearance of liquidity, or where fraudulent manoeuvres are used to alter the price of registered securities. It is punishable by 32 to 108 months’ imprisonment and a fine of up to 50,000 monthly statutory minimum wages.

Criminal banking offences also include unauthorised mass and habitual collection of funds from the public, and improper use of funds collected by supervised financial institutions. These criminal provisions operate alongside the Financial Superintendence’s administrative and regulatory enforcement powers.

The principal tax offences are:

• failure by a withholding or collecting agent to remit taxes;
• omission or undervaluation of assets or the inclusion of fictitious liabilities; and
• tax fraud or evasion.

The latter offences require more than an incorrect tax position: the prosecution must establish the relevant omission or false item, an intention to evade tax, the statutory monetary threshold and, where required, an official assessment by the tax authority. This distinguishes criminal tax fraud from legitimate disputes concerning interpretation or valuation. Colombia has no general criminal “failure to prevent tax evasion” offence.

Penalties vary by offence and amount. Failure to remit collected taxes may attract 48 to 108 months’ imprisonment; omission of assets or fictitious liabilities carries the same basic range, while tax fraud under Article 434B begins at 36 to 60 months, subject to increases for larger amounts. Payment may have significant effects on prosecution or sentence in specified circumstances.

Colombian commercial law requires merchants to maintain accounting books, supporting records and financial information accurately and, generally, to retain them for at least ten years. A breach of the bookkeeping requirements may result in substantial administrative fines but is not automatically criminal.

Criminal liability generally requires additional conduct. Falsification of a private document applies where a document capable of serving as evidence is falsified and used, and is punishable by 16 to 108 months’ imprisonment. Destroying, suppressing or concealing such a private document carries the same imprisonment range. False public documents are subject to separate, generally more severe offences.

False accounting may also constitute tax fraud, fraud or another substantive offence where the corresponding statutory elements are established.

Colombia combines administrative competition enforcement with a specific criminal offence for collusion in public procurement. Article 410A of the Criminal Code applies where participants in a tender or comparable procurement procedure reach an agreement intended to unlawfully alter that procedure. The offence carries six to 12 years’ imprisonment, a fine of 200 to 1,000 monthly statutory minimum wages and an eight-year prohibition on contracting with the State.

The broader administrative competition regime prohibits agreements involving price fixing, market allocation, output restrictions, bid rigging and comparable anti-competitive conduct. The Superintendence of Industry and Commerce may sanction legal entities directly, including through significant financial penalties.

Administrative leniency can also affect criminal exposure: a successful applicant obtaining full exemption from the Superintendence of Industry and Commerce in a public procurement cartel may qualify for reductions in the criminal sentence, fine and contracting prohibition.

Consumer misconduct may give rise to both criminal and administrative liability. The Criminal Code prohibits alteration of the quality, quantity, weight or measurement of products to the detriment of consumers, punishable by 16 to 54 months’ imprisonment and a fine. It also sanctions mass offerings of products or services that do not correspond to advertised characteristics. General fraud may apply where deceptive commercial conduct induces consumers into error, produces an unlawful benefit and causes economic loss.

Separately, the Consumer Statute prohibits misleading advertising, unsafe products and failures to provide legally required information. The Superintendence of Industry and Commerce may impose fines, order the withdrawal or destruction of products, suspend commercial activities and, in serious or repeated cases, close establishments or online sales channels.

Colombia has a dedicated cybercrime framework protecting the confidentiality, integrity and availability of computer systems and data. Colombia is also a party to the Budapest Convention on Cybercrime. Principal offences include:

• unauthorised system access;
• system obstruction;
• computer damage;
• malicious software;
• unlawful use of personal data; and
• phishing.

Most offences are sanctioned with imprisonment of 48 to 96 months and substantial fines.

The unauthorised transfer of assets applies where computer manipulation or a similar device is used for financial gain to obtain an unauthorised transfer causing loss; it carries 48 to 120 months’ imprisonment and a fine.

Corporate information is also protected through offences concerning industrial or commercial secrets. The unauthorised acquisition, use or disclosure of protected confidential information may result in criminal liability, with higher penalties where the offender obtains an economic benefit.

Colombia combines domestic customs and foreign exchange enforcement with the implementation of binding international obligations, particularly United Nations targeted financial sanctions relating to terrorism, terrorist financing and proliferation financing. Colombian law does not automatically treat every unilateral foreign sanctions regime as domestic criminal law.

The primary customs crimes include:

• contraband, involving goods introduced, removed or concealed from customs control above statutory thresholds; and
• customs fraud, involving false, manipulated or concealed information intended to evade customs duties.

Contraband may attract four to 12 years’ imprisonment, depending on value, while customs fraud carries eight to 12 years plus substantial fines.

Other foreign exchange and trade breaches may be administrative. Sanctions-related conduct may additionally trigger money laundering, terrorist financing or asset freezing rules where the relevant elements are established.

Colombian law criminalises the provision of assistance after the commission of an offence where a person, knowing that an offence has been committed and without any prior agreement with the offenders, helps the offenders evade the authorities or obstructs the investigation. The ordinary penalty is 16 to 72 months’ imprisonment, with higher penalties for certain serious offences.

A separate offence applies where a person conceals, alters or destroys material evidence with the purpose of preventing its use in a criminal investigation or at trial. This offence is punishable by four to 12 years’ imprisonment and a fine. Where the assistance was agreed before or during the commission of the underlying offence, liability may instead arise as participation in that offence.

Colombian criminal law recognises liability for co-perpetrators, instigators and accomplices. Co-perpetration requires a common agreement and a division of criminal work involving a material contribution to execution. An instigator is a person who deliberately causes another to commit the offence. Both are generally subject to the penalty prescribed for the substantive offence.

An accomplice intentionally provides a secondary contribution to another person’s criminal conduct, either before or during the offence or, where previously agreed, afterwards. The applicable sentence is reduced by one-sixth to one-half. Mere employment, association, presence or knowledge is insufficient without a legally relevant contribution.

A separate offence of criminal conspiracy may arise where several persons agree to commit a plurality of offences; it should not be confused with ordinary joint participation in a single offence.

Money laundering under Article 323 of the Criminal Code covers dealings with assets directly or indirectly derived from specified predicate activities, including:

• drug trafficking;
• corruption and other offences against public administration;
• financial system offences;
• contraband;
• customs fraud;
• extortion; and
• criminal conspiracy.

Qualifying conduct includes acquiring, investing, transporting, administering or concealing the assets, or giving them an appearance of legality. The offence is autonomous and carries ten to 30 years’ imprisonment and a fine of 1,000 to 50,000 monthly statutory minimum wages.

Colombia also imposes preventative AML obligations. Financial institutions are generally subject to SARLAFT, while qualifying companies in the real economy may be subject to SAGRILAFT. These regimes require risk assessment, customer and beneficial owner due diligence, monitoring, record-keeping and suspicious transaction reporting to the UIAF.

Criminal money laundering offences are prosecuted by the Attorney General’s Office, while the UIAF receives and analyses reports and the Financial Superintendence and Superintendence of Companies supervise the preventative regimes within their respective sectors. Deliberate omission of legally required financial controls or UIAF reports may constitute separate offences carrying 38 to 128 months’ imprisonment and fines of 133.33 to 15,000 monthly statutory minimum wages.

Colombia has no standalone “ESG offence”; relevant misconduct is addressed through environmental, human rights, labour and governance offences. Environmental crimes were significantly expanded by Law 2111 of 2021 and include unlawful exploitation of natural resources, deforestation, serious environmental damage and pollution. For example, serious damage to natural resources or ecocide may carry 60 to 135 months’ imprisonment, while environmental pollution may attract 69 to 140 months and substantial fines. Mining and hydrocarbon pollution is separately punishable.

The social dimension includes offences such as human trafficking, forced labour and slavery-like practices, while governance misconduct may constitute corruption, disloyal administration, falsification or money laundering.

There is no universal criminal obligation requiring every company to police its entire supply chain. However, due diligence and monitoring duties may arise from environmental permits, sector regulation, AML/compliance systems, contracting arrangements and specific risk control obligations.

Colombia does not currently have a comprehensive criminal regime specifically governing AI, algorithmic trading or automated decision-making. The general approach is technology-neutral: existing offences apply according to the conduct carried out through the technology.

AI-enabled fraud may therefore constitute computer fraud or unauthorised transfer of assets where an automated system is used to obtain financial benefit through computer manipulation and causes an unauthorised transfer and loss. That offence carries 48 to 120 months’ imprisonment and a fine. AI may also be relevant to cybercrime, unlawful processing of personal data, forgery, insider dealing and market manipulation

Law 2502 of 2025 introduced an additional express AI-related aggravation for identity impersonation, covering conduct such as AI-generated voice or image impersonation.

Neither AI systems nor algorithms incur criminal liability themselves; responsibility must be attributed to the natural persons involved under ordinary criminal law principles.

Colombia has no standalone catalogue of crypto-asset offences; existing criminal, financial, tax and AML rules apply according to the economic substance of the activity. Crypto-assets are not legal tender, foreign currency or, as a general category, securities; for tax purposes, they may be treated as intangible assets.

Relevant offences include money laundering, fraud, unauthorised transfer of assets, and unauthorised mass and habitual collection of public funds. The latter is particularly relevant to investment or token schemes that collect funds from the public without the required authorisation, and carries 120 to 240 months’ imprisonment plus a fine.

There is no general Financial Superintendence licence applicable to every exchange or wallet provider merely because it deals in crypto-assets. However, depending on its activities and regulatory status, a provider may be subject to UIAF reporting, AML controls, tax reporting or SAGRILAFT obligations. Failure to comply may generate administrative consequences and, where the constituent elements of a criminal offence are independently established, criminal liability.

The principal defences arise from the general rules of criminal liability and include:

• failure to prove an element of the offence;
• absence of the required mental element;
• mistake of fact or law;
• lack of personal participation, lawful authority or duty;
• coercion;
• necessity; and
• challenges to unlawfully obtained or inadmissible evidence.

Corporate position alone does not establish individual criminal liability; the prosecution must prove the accused’s personal conduct, participation and required state of mind.

An effective compliance programme is not a complete defence to criminal liability. It may, however, support arguments that the conduct was unauthorised, concealed from management or inconsistent with effective controls, and may be relevant to the assessment or mitigation of separate administrative corporate liability, particularly in corruption and anti-money laundering matters.

Colombia has no general de minimis safe harbour for white-collar offences. Low-value or limited financial harm does not, by itself, exclude criminal liability. However, the principle of material harm may exclude conduct that does not meaningfully harm or endanger the protected legal interest, and some offences contain statutory value thresholds or reduced penalties for lower-value conduct.

Certain less serious offences may also be subject to complaint requirements, abbreviated procedures or the principle of opportunity, including where statutory sentencing limits and full compensation requirements are met. These are procedural or offence-specific mechanisms rather than general exemptions.

Colombian criminal procedure permits both unilateral acceptance of charges and negotiated plea agreements. Subject to statutory limits, a defendant may:

• accept responsibility for the charged offence or a related lesser offence;
• obtain the removal of an aggravating circumstance or charge; or
• agree on the legal and sentencing consequences of the conduct.

Any agreement must be voluntary, supported by the evidence and approved by the court.

Where the offence produced a financial gain, negotiated pleas generally require the defendant to return at least 50% of that gain and secure payment of the balance.

Self-disclosure, co-operation, reparation and assistance in identifying other participants may reduce exposure through sentencing mitigation, the principle of opportunity or specialised leniency regimes. Separate administrative leniency mechanisms also exist for transnational bribery and competition matters, but they do not automatically extinguish individual criminal liability.

Colombia does not have a single comprehensive whistle-blower statute applicable to all private sector and public sector reporting. Protection is instead fragmented across criminal procedure, sector-specific compliance regimes, confidentiality rules, employment protections and witness protection mechanisms.

Anonymous reporting is available through the Attorney General’s Office and certain regulatory channels. Where a reporter becomes a witness or participant in criminal proceedings and faces a genuine risk, identity and physical protection may be available. Colombia does not provide a universal financial reward or automatic immunity for reporting white-collar misconduct.

Companies subject to anti-corruption or sector-specific compliance requirements are increasingly expected to maintain:

• confidential or anonymous reporting channels;
• anti-retaliation safeguards;
• independent investigation procedures;
• controlled access to the reporter’s identity; and
• evidence preservation protocols.

A reporter involved in the underlying misconduct may separately seek statutory co-operation or leniency benefits.

Cross-border white-collar matters require early co-ordination of jurisdiction, parallel proceedings, evidence, privilege, data protection, extradition and asset restraint risks. Colombia participates in mutual legal assistance, treaty-based co-operation, joint investigations, international police channels and financial intelligence networks, meaning that evidence or statements provided in one jurisdiction may become available to authorities elsewhere.

Foreign evidence may be used in Colombian proceedings, subject to rules governing authenticity, chain of custody, admissibility and the applicable co-operation mechanism. Defence teams must also address legal privileges and restrictions on transferring personal or corporate data across borders.

Foreign bribery enforcement will remain under international scrutiny. Following Colombia’s Phase 4 evaluation, the OECD Working Group on Bribery required an action plan on five high-priority recommendations by December 2026, with full follow-up in December 2027, focusing on detection, enforcement, inter-agency co-ordination and whistle-blower protection.

Corporate anti-money laundering and anti-corruption compliance will also remain significant. Separately, the government is preparing legislation on submission to justice for organised criminal groups which, depending on its final scope, may affect investigations into corruption, money laundering, asset recovery and illicit finance.