Indecopi Fines Interbank for Issuing Unauthorized Credit Card in Tacna’s Second Administrative Instance

Peru’s financial watchdog Indecopi has slapped Interbank, the country’s largest card issuer by transaction volume, with a second-instance administrative penalty for issuing a credit card without explicit authorization—a violation that exposes both the bank and consumers to systemic fraud risks. The ruling, handed down by Indecopi’s Tacna regional office, underscores the growing regulatory scrutiny of unauthorized credit card issuance, a practice that inflates chargeback volumes and erodes lender profitability by up to 15% in high-risk portfolios. The decision forces Interbank to reassess its onboarding compliance frameworks, while competitors scramble to harden their KYC protocols ahead of Peru’s upcoming financial inclusion reforms.

Where the Regulatory Hammer Landed: Interbank’s Compliance Blind Spot

The penalty stems from Interbank’s failure to secure written or digital consent before issuing a credit card to a Tacna-based customer—a gap that violates Peru’s Consumer Protection Law (Decree 1044). While the exact fine amount remains undisclosed in primary sources, Indecopi’s 2025 enforcement data shows penalties for unfair commercial practices averaging S/ 1.2 million ($320,000) for financial institutions, with repeat offenders facing operational suspensions. For Interbank—where credit card revenue contributes 38% of net interest income (Q4 2025 earnings call)—this ruling isn’t just a reputational hit; it’s a liquidity drag in a quarter where Peru’s central bank has tightened reserve requirements by 200 basis points.

“This isn’t just about one rogue card—it’s about Interbank’s systemic failure to align its digital onboarding with Indecopi’s evolving expectations. The bank’s 2025 chargeback ratio of 0.42% (vs. Industry avg. 0.35%) suggests deeper compliance gaps.”

The Fiscal Ripple: How Unauthorized Cards Warp Bank Economics

The table above reveals Interbank’s structural disadvantage: while peers like BCP and Scotiabank Peru maintain tighter chargeback ratios through AI-driven fraud detection, Interbank’s legacy systems struggle with real-time consent verification. The Indecopi ruling forces a pivot toward RegTech platforms that automate dynamic consent tracking—a $470M market in Latam by 2027, per Statista’s FinTech Outlook.

Three Ways This Trend Reshapes Peru’s Banking Landscape

• 1. The KYC Arms Race: Indecopi’s crackdown will accelerate adoption of biometric authentication and behavioral biometrics to preempt unauthorized issuances. Banks with outdated static OTP systems face 50% higher compliance costs by 2028, per EY Peru’s regulatory forecast.
• 2. Chargeback Arbitrage Collapse: The ruling eliminates the gray area where banks issued cards under “implied consent” (e.g., pre-approved limits). This forces lenders to invest in predictive analytics to offset losses, with ROI payback periods shrinking from 36 to 18 months due to Indecopi’s enhanced audit powers.
• 3. Cross-Border Contagion: Multinational issuers like Mastercard and Visa—which process 68% of Peru’s card transactions—will push local banks to adopt global compliance standards (e.g., UK’s PSD2). Interbank’s penalty sets a precedent for jurisdictional arbitrage in Latam’s fragmented regulatory patchwork.

The Boardroom Fallout: Who’s Next in Indecopi’s Crosshairs?

Interbank’s penalty isn’t an isolated incident. In January 2019, Indecopi fined Tacna’s municipal government for unfair competition—a case that now serves as a template for consumer protection overreach. The question isn’t if other banks will face scrutiny, but when. With Peru’s digital banking penetration surging 42% YoY (BCRP data), the window for compliance gaps narrows. For C-suite executives, the priority shifts to:

• Audit-Proof Consent Mechanisms: Implementing GDPR-aligned consent management to survive Indecopi’s randomized audits.
• Fraud Velocity Mitigation: Deploying real-time transaction monitoring to reduce false positives by 40% (current industry avg. Is 28%).
• Regulatory Sandbox Testing: Partnering with financial advisory firms to stress-test new issuance policies against Indecopi’s emerging enforcement criteria.

“Peru’s regulators are sending a clear message: the days of ‘issue first, verify later’ are over. Banks that don’t act now will face fines and reputational damage in a market where trust is the only real currency.”

The Market’s Next Move: How to Future-Proof Your Compliance Stack

The Indecopi ruling isn’t just a Peru-specific issue—it’s a Latam trend as central banks tighten grip on financial inclusion risks. For institutions exposed to unauthorized card issuance, the path forward lies in three strategic pivots:

1. Adopt AI-Driven Consent Tracking: Platforms like Trulioo or Jumio can reduce consent-related disputes by 60% through dynamic e-signature validation.
2. Integrate Behavioral Biometrics: Solutions from Feedzai or Sift identify anomalous user behavior before fraud occurs, cutting chargebacks by up to 50%.
3. Leverage Regulatory Tech Consultants: Firms specializing in Indecopi-specific compliance, such as Deloitte’s Latam Regulatory Practice, can map jurisdictional risks across Peru’s 25 regional offices.

The clock is ticking. Interbank’s penalty isn’t just a fine—it’s a wake-up call for an industry where 3 in 10 card applications still lack verifiable consent. For banks, the choice is clear: Innovate now or pay later. And in Peru’s hyper-competitive financial sector, the latter is a luxury no institution can afford.