Brazil Crypto Regulation 2026: What Changes for BRL Off-Ramps

If you move money between Brazilian reais and crypto, the window for informal rails closes in November 2026. From 6 November, Brazilian banks and payment institutions may not carry out or enable crypto operations with virtual asset providers that the Banco Central do Brasil (BCB) has not authorised. Cross-border crypto transfers are already part of Brazil's foreign exchange market, transfers to and from self-custody wallets of US$10,000 or more are reported to Brazil's financial intelligence unit (COAF), and Binance has told Brazilian users that every international transfer needs a stated purpose from 1 November.

What to do now: list every Brazilian on-ramp, off-ramp, OTC desk and Pix gateway in your flow, get each one's BCB status in writing, and line up an authorised alternative before 6 November. Any provider that can't show it is authorised, or that it filed for authorisation in time, is a counterparty Brazilian banks will stop serving.

This guide covers the rules in force as of October 2026: the three BCB resolutions that built the regime, the September amendments that moved the cut-off, how the FX rules apply to stablecoins and self-custody, what changes for offshore businesses with Brazilian revenue, and how to check a counterparty. It is not legal or tax advice.

The rules behind Brazil's crypto regulation in 2026

Brazil's crypto law (Law 14.478/2022) gave the BCB the job of regulating virtual asset service providers. The BCB used it on 10 November 2025, publishing three resolutions that took effect on 2 February 2026:

• Resolution BCB 519 sets out who may provide virtual asset services. It creates the SPSAV (sociedade prestadora de serviços de ativos virtuais) in three types: intermediary, custodian and broker. Banks and other BCB-authorised institutions can also provide these services.
• Resolution BCB 520 sets out the authorisation process, including the deadline for firms that were already operating.
• Resolution BCB 521 brings crypto into Brazil's foreign exchange and international capital rules.

Two amendments followed on 23 September 2026 (published 25 September):

• Resolution BCB 588 adds automatic COAF reporting for transfers to or from self-custody wallets of US$10,000 or more, and for FX deals settled in US$10,000 or more of physical cash. In force since 1 October 2026.
• Resolution BCB 589 moves the bank and payment institution cut-off from 30 October to 6 November 2026 and tightens who it covers. Its new reporting duties for providers (client balances, custody data, proof of reserves, staking) apply from 1 January 2027.

Key dates for anyone moving BRL to crypto

The 30 October deadline and the 6 November cut-off

These two dates catch most operators, and they apply to different people.

30 October applies to providers. A virtual asset business already operating in Brazil had until 30 October 2026 to file phase 1 of its authorisation request. Phase 1 has to show the structural basics are in place: minimum capital, risk management, cybersecurity, AML/CFT, sanctions screening, accounting under the Brazilian chart of accounts, and audit. A provider that misses the date has to stop the services that need authorisation within 30 days. One that files can keep operating while the BCB reviews it, under the transition rules, but can't add new lines of business.

6 November applies to banks and payment institutions. From that date, financial institutions, payment institutions and other BCB-authorised firms may not carry out or enable crypto operations with providers that are "not authorised to operate in the country" by the BCB, except where the rules expressly allow it. That covers the bank holding an exchange's reais, and the Pix gateway collecting deposits for it.

Resolution 589 also changed the wording that matters. The old text protected providers that were in the process of authorisation. The new text names only providers that are not authorised, so the position of firms that filed and are still waiting depends on how the BCB treats them in transition. As of early October 2026, that list had not been published. Expect banks to read it conservatively: if they can't confirm a provider's status, they will stop serving it.

The BCB has also started saying no. Its first refusal of an SPSAV application, for Higherway Tech Soluções (trading as Higher Global Payments), was decided on 25 August and published in the Diário Oficial da União on 28 September 2026.

How the FX rules apply to stablecoins and self-custody

Resolution 521 treats several crypto activities as foreign exchange operations:

• international payments and transfers made with virtual assets
• transfers of virtual assets to settle international card or electronic payment obligations
• buying, selling or swapping virtual assets referenced in a fiat currency, which in practice means USDT, USDC and other stablecoins
• transfers to or from self-custody wallets, where the provider must identify the wallet owner and document where the assets came from and where they went

The BCB dropped the outright ban on self-custody withdrawals it had consulted on, and replaced it with identification and tracing duties. So you can still withdraw to your own wallet, but the provider has to confirm it's yours, and from 1 October 2026 a transfer of US$10,000 or more is reported to COAF.

There is also a cap. When an SPSAV makes an international crypto payment or transfer and the foreign counterparty isn't authorised to operate in Brazil's FX market, the operation is limited to the equivalent of US$100,000. Binance describes it as a per-transaction limit. Most offshore exchanges and OTC desks are not authorised in Brazil's FX market, so any single transfer to them above US$100,000 won't go through.

Tax is moving too. Since July 2026, Brazilian residents who trade outside Brazilian providers and move more than R$35,000 a month report through the Receita Federal's DeCripto return, and foreign providers serving Brazilians have reporting duties of their own. Whether IOF, Brazil's financial transactions tax, applies to stablecoin FX operations was still under debate in August 2026, with no decree in force. Take advice where you're tax resident.

What Binance's purpose codes mean for your payments

In early October 2026, Binance told Brazilian users that from 1 November every international crypto deposit and withdrawal needs two things: the purpose of the transfer and the type of counterparty (individual, company, bank, exchange, investment fund, non-profit or other). Corporate accounts also have to say whether the counterparty is in the same economic group. The rules, as Binance described them:

• At US$50,000 or less per transfer, the user picks from 10 simplified purposes.
• Above US$50,000, the user must choose one of 96 BCB classifications, and there is no "other".
• Withdrawals can't be submitted without the questionnaire. Incoming deposits from abroad can sit pending, or be returned, until the information arrives.
• Transfers to the user's own self-custody wallet need proof of ownership instead of a purpose, and are still reported.
• Transfers between two Brazilian residents are not affected. API users are covered.

The answers go to the BCB in monthly reports, and Binance warns that the category must match the real reason for the payment. If you invoice Brazilian partners, affiliates or customers and get paid in crypto, expect them to ask you which code fits. Agree it in advance, write it into the contract or invoice, and make sure it describes the deal honestly. A purpose code that doesn't match your invoice is the kind of mismatch that gets transfers held and accounts reviewed.

What changes for offshore businesses with Brazilian revenue

The rules bind Brazilian institutions, but the effects land on anyone whose money crosses the border.

• BRL collections through Pix into a crypto provider. If your pay-in partner converts reais to USDT and that provider isn't authorised or in transition, the Brazilian bank or payment institution behind its Pix keys has to stop serving it from 6 November. Flows like that can stop with little notice.
• Brazilian affiliates, agents and contractors paid in crypto. Their exchange will ask them for a purpose code and your counterparty type. Large single payouts to them from an offshore exchange may sit pending until they answer.
• Moving your own proceeds out of Brazil. Transfers from a Brazilian exchange to an offshore exchange that isn't authorised in Brazil's FX market are capped at US$100,000 per transaction. Treasury flows above that need an FX-authorised route: a Brazilian bank or authorised FX institution doing a conventional FX contract, or a provider whose foreign counterparty is authorised.
• Offshore exchanges and OTC desks with Brazilian clients. Foreign providers serving Brazil without a local authorised entity lose their Brazilian banking rails once the cut-off bites. If your off-ramp quietly used one, plan for it to change.

One thing not to do: split a large payment into transfers under US$100,000, or under the US$50,000 or US$10,000 lines, to avoid the cap or the reporting. That is structuring. Providers' monitoring is built to spot it, and it is the fastest way to have an account closed and a report filed. Large flows should go through a channel that can carry them legally.

Why transfers and accounts get stopped

In the files we see, Brazilian flows break for predictable reasons:

1. Counterparty status unknown. The bank can't confirm the provider is authorised or in transition, so it stops serving it.
2. Purpose doesn't match the paperwork. "Services" on the transfer, but no contract or invoice that says what was delivered.
3. Self-custody wallet not provably yours. No signed message, no ownership proof, or a wallet linked to other people.
4. Patterns that look like structuring. Repeated transfers just under a threshold, or the same payer spread across several accounts.
5. Exposure on the chain. Funds with a history the provider's analytics flags. Since October's US action against the A7 network and its ruble stablecoin, exchanges are also looking harder at USDT with Russian or Kyrgyz exposure.

Most of this is fixable with documents prepared before the transfer, not after the freeze. Our guide to frozen business bank accounts covers what to do if one is already locked.

How to check a Brazilian counterparty before 6 November

Run this for every Brazilian provider in your flow:

• Ask for its legal entity and CNPJ. Brand names don't appear in BCB records; legal names do.
• Ask for its BCB status in writing. Is it an authorised institution (a bank, FX broker or securities distributor providing crypto services), an SPSAV applicant, or neither? Ask for the process number if it filed.
• Check the BCB's public process records yourself. As of late September 2026, the public list showed only a handful of SPSAV applicants. Large exchanges were not on it, which may mean they're using another route, such as an entity the BCB already authorises. Ask them which.
• Ask who its banking and Pix partners are, and whether those partners have confirmed they'll keep serving it after 6 November.
• Ask how it handles transfers above US$100,000 to your foreign account, and through which FX-authorised institution.
• Get its purpose-code process. Which code it expects for your payments, and what documents it wants behind it.

If the answers are vague, treat that as the answer. Move volume to an authorised provider now, while you can still do it on your own timetable.

The setup that holds up

For a business with real Brazilian revenue, the structure that survives this regime is simple and documented:

• An authorised Brazilian provider for BRL↔crypto conversion: an existing BCB-authorised institution or an SPSAV with a filed process, confirmed in writing.
• An FX-authorised route for large transfers abroad, sized to your real treasury flows instead of the US$100,000 cap.
• Contracts and invoices that match the purpose codes you'll use, held where your provider can see them.
• Wallets you can prove you own, with ownership confirmations on file at each provider.
• A second rail ready. If your main provider's status changes, you shouldn't be rebuilding from zero.

The same principles apply once the money leaves Brazil. Our guides to USDT to fiat off-ramps for businesses and OTC desks versus exchanges cover the other end, and the Travel Rule glossary entry explains the data exchange that Binance says reaches Brazil in 2027 for domestic transfers and 2028 for international ones.

If you need to rebuild a Brazil flow before 6 November, our crypto on- and off-ramp service maps your current route, checks each counterparty and introduces authorised providers that fit your volumes.