Brazil is continuing to tighten regulations on crypto assets. According to Central Bank of Brazil’s Resolution No. 584, starting January 1, 2027, virtual asset service providers must hold certain large-value crypto transfers for up to 24 hours before deciding whether to release them.
Focus primarily on cross-border and self-custody transfers.
This measure primarily targets two types of destinations: overseas crypto service providers and user self-custody wallets. The threshold is triggered by a single transaction exceeding $10,000, or cumulative transfers by the same customer exceeding $10,000 within a single day. If internal risk controls identify suspicious activity, transactions below this amount may also be subject to additional review.
The Central Bank of Brazil stated that the new regulations aim to address the rapid movement of funds from financial fraud through virtual assets. Regulators noted that tools such as stablecoins have been increasingly used in recent years for cross-border fund transfers, with some funds directly flowing to offshore platforms or into wallet addresses controlled by users themselves.
The platform must notify customers and maintain records.
Under the new mechanism, the 24-hour period is not universally enforced as a mandatory hold. If a service provider has completed risk verification and meets the regulatory conditions, the relevant transfer can be released earlier. Thus, this functions more as an anti-fraud buffer period rather than a general freeze.
In addition to delayed release, virtual asset service providers must fulfill new operational obligations, including notifying customers when transfers are suspended and maintaining records related to fraud incidents.
- Incident of fraud that has occurred
- Records of fraudulent attempts
- Corrective measures taken by the institution
Multiple cryptocurrency regulations will take effect simultaneously starting in 2027.
This means Brazil is extending its anti-fraud controls, originally used in payment services, to virtual asset services. For regulators, this also provides platforms with more time to review high-risk transactions.
This transfer rule is not being implemented in isolation. In July of this year, Brazil's central bank incorporated virtual asset service providers into its prudential regulatory framework and requires relevant institutions to comply with capital, risk management, and disclosure requirements starting January 1, 2027.
In addition, these institutions must be fully incorporated into the stricter Category 4 regulatory group by June 30, 2028, without distinction based on size. As these measures are progressively implemented, Brazil’s regulatory focus is shifting from basic access requirements to ongoing oversight of how platforms manage assets, transfers, and financial risks.
Additional information: The International Monetary Fund’s Financial System Stability Assessment released in July noted that crypto activity in Brazil has grown significantly since 2017, particularly with rapid expansion in the use of USD-pegged stablecoins, and the growth rate of cross-border crypto capital flows has outpaced traditional capital flows and nominal GDP.