Brazil BR

Brazil's crypto AML perimeter expanded materially this cycle through two linked Banco Central do Brasil instruments. Resolução BCB nº 588/2026 requires BCB-authorised institutions to make a specific communication to COAF for virtual-asset transfers of US$10,000 or more to or from self-custodied wallets, in either direction, effective 1 October 2026. This closes a structural gap in the prior reporting regime: a self-custody leg of a transaction previously sat outside the reporting trigger that applied to custodial, exchange-to-exchange flows, and the new rule brings unhosted-wallet movement onto the same reporting footing as custodial transfers above the threshold.

Alongside the reporting expansion, Resoluções BCB nº 519-521/2025 require existing virtual-asset service providers to file authorisation requests with the central bank by 30 October 2026, 270 days after those resolutions took effect. Separately sourced reporting states that authorised institutions may no longer transact with unauthorised virtual-asset providers from 6 November 2026, under Resolução BCB nº 589/2026. These two dates are not reconciled in sourcing available this cycle: both are specific, both come from sources of comparable standing, and neither corrects the other. This is treated as a Disputed finding rather than a simple gap, because the disagreement is itself informative: it signals either an unresolved drafting inconsistency between the resolutions or a staggered implementation that commentary has not yet correctly sequenced. Institutions relying on either date alone for compliance planning face a live risk of acting on the wrong one.

The practical effect of the two instruments together is to convert Brazil's crypto AML architecture from a licensing-only regime into one that also reaches into self-custody activity and counterparty screening against unauthorised providers. For a VASP operating in Brazil, this means the compliance programme must now extend past know-your-customer and transaction-monitoring on custodial flows and into monitoring the destination and origin of self-custody transfers crossing the US$10,000 threshold, while simultaneously tracking which counterparties hold or lack BCB authorisation ahead of whichever cutover date proves correct.

Outlook

The immediate open question is whether Banco Central do Brasil issues a clarifying instrument reconciling the 30 October and 6 November 2026 dates before either passes. Institutions that have already begun authorisation filings under the 519-521/2025 transition window should treat both dates as live until clarified, rather than assuming the later date supersedes the earlier one. A failure to reconcile before the earlier date passes would leave firms operating under genuine regulatory ambiguity as to when counterparty-screening obligations actually bite.

Brazil's betting sector converted overnight this cycle from a licensed, AML-supervised industry into a prohibited one. Medida Provisoria 1.394/2026, signed 25 September 2026, prohibits fixed-odds betting nationwide. The Secretaria de Premios e Apostas's own payment-interdiction portaria, published on its gov.br page on 15 September 2026, had already expanded the procedures aimed at preventing, identifying and repressing payment transactions linked to irregular fixed-odds betting exploitation; that instrument predates the betting prohibition by ten days and was framed around the unlicensed-operator segment specifically. With the entire sector now unauthorised by statute, that payment-interdiction architecture applies in practice across what was, until three weeks ago, a licensed and AML-supervised industry, with banks' existing 24-hour account-freeze obligation for unlicensed operators becoming, in effect, a sector-wide default.

This is the kind of structural shift that the architecture-over-incident framing is built to surface: a regulatory-conduct change for an entire industry carries more analytical weight than any single enforcement action, even though it is formally executed through an enforcement-adjacent instrument, the SPA portaria, rather than through legislation directly addressed to payments. Banks and payment companies with betting-sector exposure face materially raised AML exposure as a direct consequence, independent of whatever penalty schedule eventually attaches to the betting prohibition itself, which was not located in primary text this cycle.

Alongside this structural event, COAF continued routine administrative enforcement at modest scale: fines of R$63,800 published 8 September 2026 for declaration and requisition failures, and separate fines against SHC Entretenimento and Hyun Mi Cho Chung for three infractions published 14 September 2026. These are ordinary periodic AML-control actions and carry no indication of a new typology; they are noted for completeness against the betting-sector conversion, which is this cycle's dominant AML/CTF development.

Brazil's standing FATF position is unchanged: the country remains off the grey list, with its 2023 Mutual Evaluation showing Compliant or Largely Compliant ratings on 29 of 40 Recommendations but Substantially Effective on only 2 of 11 effectiveness outcomes. That structural effectiveness gap predates this cycle and provides useful context for assessing how quickly Brazil's AML architecture can absorb an abrupt sector-wide conversion of the kind the betting prohibition represents: a jurisdiction with known effectiveness weaknesses converting an entire licensed sector into an enforcement target overnight is a combination worth monitoring for implementation strain.

Outlook

Whether the sector-wide payment-interdiction posture persists depends on the same three processes determining the betting prohibition's own survival: the pending Supremo Tribunal Federal challenge, the Medida Provisoria's congressional conversion process, and reported uncertainty over the Secretaria de Premios e Apostas's own institutional future. A reversal of the underlying prohibition would likely revert the payment-interdiction posture toward its prior, narrower scope targeting unlicensed operators specifically rather than the whole sector.