Brazil Crypto Firms Face a 30 October Licence Deadline

Fintech · Brazil

Updated 1 time · Latest: 19 September 2026

The era of voluntary compliance in Brazilian crypto is ending. A 2022 framework law, central bank licensing resolutions from late 2025, and a new digital reporting form have combined into a rulebook that exchanges and investors can no longer ignore. What matters now is who must file, when, and what happens to those that miss the October 2026 transition deadline.

The stakes are large. Brazil moves roughly US$318.8 billion in crypto volume per year, Latin America’s largest market, with stablecoins near 90% of flows, according to Chainalysis data cited by compliance advisers.

Some have already answered it by leaving. Bitnuvem closed in April, NovaDAX in June, Digitra in August with about 200,000 customers to wind down, and Coinext on 3 September.

Coinext’s chief executive said the firm looked for alternatives and none of them proved viable under the new requirements. The filing itself demands an audit report confirming that anti-money-laundering controls not only exist but work.

A second deadline arrived first. Resolution 561, published on 30 April, has barred payment firms from settling cross-border remittances in crypto since 1 October, including in dollar-pegged stablecoins.

That closes a route several remittance companies had built their pricing on. Retail buying and holding through an authorised provider is untouched.

The 2022 legal anchor: Law 14.478

Law No. 14.478, signed on 21 December 2022 by then-President Jair Bolsonaro, created Brazil’s first comprehensive regime for virtual assets and virtual asset service providers.

The law became effective on 20 June 2023 after the prescribed vacatio legis period.

It defines a virtual asset as a digital representation of value that can be transferred electronically and used for payment or investment.

That definition covers payment tokens, investment tokens, and utility-style tokens traded in Brazilian markets.

A virtual asset service provider, or VASP, is any legal entity acting for third parties in exchange between crypto and fiat, exchange between virtual assets, transfers, custody, or participation in offers and sales of virtual assets.

From framework to enforcement: Decree 11.563

Law 14.478 was never self-executing. It required infra-legal rules for licensing, capital, and conduct.

Article 5 of the law left the assignment of regulatory power to an executive act.

Decree No. 11.563 of 13 June 2023 formally granted the Banco Central do Brasil, the country’s central bank, authority to regulate, authorise, and supervise VASPs.

This dual-track architecture separated the virtual asset services law from Law 14.754/2023, which governs tax treatment of foreign-held crypto as financial investments abroad.

For market participants, the central bank became the single gatekeeper for operating legally in Brazil.

Central bank licensing: Resolutions 519, 520, and 521

On 10 November 2025, the Central Bank of Brazil issued Resolutions 519, 520, and 521, creating the long-awaited regulatory framework for virtual asset services.

These three resolutions completed the structure envisioned by Law 14.478/2022.

The licensing regime has been in force since 2 February 2026.

Resolution 520 establishes the authorisation requirement for VASPs classified as intermediaries, custodians, or virtual-asset brokers.

A licensed VASP operates as a Sociedade Prestadora de Serviços de Ativos Virtuais, commonly shortened to SPSAV.

Capital costs and the 2026 transition window

The central bank requires minimum capital depending on the business model, ranging from about R$10.8 million to R$37.2 million.

At current exchange rates, that represents roughly US$2.2 million to US$7.6 million.

Existing domestic and foreign operators must file authorisation requests by 30 October 2026, which is 270 days after Resolutions 519, 520 and 521 took effect on 2 February 2026. Firms that filed on time may keep operating while their review runs.

Firms that miss the window must cease virtual asset operations in Brazil. From 30 October, licensed banks and payment institutions are prohibited from transacting with unauthorised providers.

Applicants must demonstrate internal controls, cybersecurity measures, and broader regulatory compliance to the central bank. The review has two phases: Phase 1 checks minimum capital and controller reputation, and Phase 2 tests operational and technological viability, including custody segregation.

What exchanges and custodians must do now

Exchanges, custodians, and brokers already operating in Brazil should treat the October 2026 deadline as the last practical date for full documentation.

Foreign platforms serving Brazilian residents must either establish a licensed local presence or notify the central bank if they already hold a Brazilian financial institution licence.

Under Resolution 521, stablecoin transfers count as foreign-exchange operations. They face a cap of US$100,000 per transaction against unauthorised counterparties and monthly reporting to the central bank, which has applied since 4 May 2026.

The separation of customer assets from company assets is a core requirement under the 2022 law.

That rule was designed to prevent misappropriation of client funds in the style of the FTX collapse.

Anti-money laundering and know-your-customer obligations also align with standards set by the Financial Action Task Force.

Taxation of crypto gains for residents

Crypto disposals by Brazilian residents are taxed under the general capital gains rules.

Progressive rates start at 15 percent for gains up to R$5 million and rise to 22.5 percent for gains above R$30 million.

Intermediate bands apply at 17.5 percent for gains between R$5 million and R$10 million, and 20 percent for gains between R$10 million and R$30 million.

A monthly exemption shields disposals not exceeding R$35,000, approximately US$7,000, from capital gains tax.

Capital gain equals the sale price minus the acquisition cost, with the positive difference being the taxable amount.

Reporting obligations and the DeCripto form

Brazil replaced older reporting channels with DeCripto, a new digital system for cryptoasset reporting, effective 1 July 2026.

DeCripto aligns Brazilian reporting with the Crypto-Asset Reporting Framework used for international information exchange.

Exchanges and custodians must report customer transactions through the new system under central bank and tax authority oversight.

Individuals must declare crypto holdings in the annual Declaração de Imposto de Renda da Pessoa Física, even when no taxable gain occurred.

Crypto assets appear under Group 08, Criptoativos, in the annual individual income tax return.

Domestic versus foreign crypto holdings

Brazilian tax law draws an important line between domestic and foreign crypto exposure.

Crypto held in Brazil or in self-custody is taxed under the ordinary capital gain framework with the monthly R$35,000 threshold.

Crypto held through a foreign institution as a financial investment may fall under the 15 percent annual foreign-investment regime created by Law 14.754/2023.

That distinction affects both the rate and the reporting form for high-net-worth individuals and frequent traders.

Investors should document where assets are held to avoid double taxation or misclassification.

The Drex project and institutional context

The Drex project is the central bank’s digital currency initiative, commonly described as a tokenised form of the Brazilian real.

Drex is being developed as a settlement asset that could interact with regulated tokenised deposits and treasury bonds.

Although not a retail-focused crypto asset in the same class as Bitcoin, Drex signals the central bank’s commitment to digital asset infrastructure.

The project sits alongside VASP licensing as a parallel track where regulated institutions test programmable payments.

For foreign investors, Drex represents a future on-ramp into Brazilian digital markets, not a speculative token market itself.

Enforcement posture and consumer protection

Before the licensing regime, enforcement against unlicensed crypto activity in Brazil was limited by the absence of operative rules.

The central bank’s new powers under Decree 11.563 and Resolutions 519, 520, and 521 give it authority to order non-compliant firms to cease operations.

Customer asset segregation requirements provide a direct legal basis for enforcement against comingling or misuse.

Disclosure of risks related to volatility, custody, and operational failures is mandatory for regulated providers.

Law 14.478 also imposes AML/KYC obligations, meaning exchanges face sanctions for failing to identify and report suspicious activity.

More: Brazil news, every day from The Rio Times.

What residents and foreigners may legally do

Residents may buy, sell, hold, and transfer virtual assets, including through self-custody, provided they report holdings and pay applicable capital gains tax.

Residents may use stablecoins or other crypto assets for payments when the counterparty accepts them, but the assets remain subject to tax and reporting rules.

Foreigners may access licensed Brazilian platforms but should expect local know-your-customer checks aligned with central bank standards.

Foreign exchanges may serve Brazilian customers only after completing the transition process or partnering with a licensed local entity.

After 30 October 2026, operating without central bank authorisation becomes a clear regulatory violation with enforcement consequences.

This article was produced by The Rio Times’ automated newsroom system. How we use AI · Report an error · Editorial responsibility: Matthias Camenzind, Editor-in-Chief