Brazil Central Bank tightens crypto rules

Brazil's Central Bank Resolution 584 expands Resolution BCB 142/2021 and brings virtual asset service providers, or PSAVs, into the bank's anti-fraud framework. The rule sets a temporary preventive hold of up to 24 hours for certain virtual asset transfers above US$ 10,000 and is scheduled to take effect on January 1, 2027.

Update, August 21, 2026: The Ministry of Finance and the CRSFN clarified that the preventive hold of up to 24 hours can also be triggered for transfers to self-custody wallets or overseas providers when they exceed US$ 10,000, whether per transaction or by the customer's daily total.

What changes under the new resolution?

Resolution BCB 584 requires institutions to apply specific procedures and controls to virtual asset operations, including a temporary preventive hold mechanism before certain transfers are executed. According to the official statement from the Ministry of Finance, the measure is meant to strengthen fraud prevention and improve oversight of higher-risk movements.

The legal text published by regulatory portals confirms that the resolution amends BCB 142/2021 to explicitly include PSAVs in the anti-fraud scheme. The same official publication says the deadline until January 1, 2027 was considered enough time to adapt systems, processes, and governance structures.

Who does it cover, and when does the hold apply?

The preventive hold applies to virtual asset transfers above US$ 10,000, whether by individual transaction or by the total moved by a customer on the same day, when the destination is overseas PSAVs or self-custody wallets.

The text from the Ministry of Finance and the CRSFN on Resolução BCB No. 584 adds that the preventive hold of up to 24 hours can also be triggered for transfers to self-custody wallets or overseas providers when the amount is above US$ 10,000, calculated per transaction or by the customer's daily accumulated total. A technical analysis in English specified that the countdown of up to 24 hours begins when funding assets enter the wallet. That same analysis said the measure only activates if three conditions are met: a higher-risk destination, a material amount above US$ 10,000, and a trigger based on the institution's internal risk management policies.

Specialized coverage also noted that PSAVs fall under the authorization and supervision framework introduced by Resolution 520, while prudential oversight was reinforced by Resolution 580. An independent legal report in Spanish added that the resolution applies both to service companies undergoing adaptation under BCB 520/2025 and to financial institutions, other entities authorized by the Central Bank, and payment institutions in the Brazilian Payments System that provide virtual asset services.

What operational obligations does it impose?

Institutions will have to maintain daily controls over incidents and attempted fraud related to virtual asset services and document the corrective measures they adopt. In addition, the legal analysis by GSGA said the precautionary hold is purely preventive, does not mean the assets are permanently unavailable, and must be communicated to the customer.

The official communication also places the measure within a broader prevention framework aimed at operations that, according to the specialist outlet Cryptoid, seek to curb the rapid movement of illicit funds through stablecoins and reinforce the security of the National Financial System. A technical analysis by Unblockpay added that the scope of the rule aligns with the definition of virtual asset services in Law 14,478/2022, including, among others, fiat-referenced stablecoins.

What deadlines and reactions did the new framework leave?

Although the general effective date does not arrive until January 1, 2027, several sector reports placed October 30, 2026 as a practical cutoff date for Brazil's crypto market. Transfero said that from that day on, institutions authorized by the Central Bank will no longer be able to do business with virtual asset service companies in Brazil that do not have authorization or, at minimum, an application in progress. SpaceMoney also presented that date as the deadline to file authorization requests accompanied by independent compliance certification.

In a similar vein, a report from fincatch.com.br, still not officially confirmed, said October 30, 2026 would matter for submitting authorization requests to the Central Bank, with requirements for independent proof of regulatory compliance. The same outlet also said, again without official confirmation, that PSAVs would need to prove compliance, AML/CFT, and sanctions controls through a formal assurance report before filing, and that certain established financial entities would need an additional technical security certification.

The publication of Resolution BCB 584 also prompted a reaction in the local ecosystem: Cointelegraph Brasil, via TradingView, reported that ABToken launched a crypto self-regulatory framework and prepared specific training programs for the Federal Police in response to the new precautionary hold scheme.