Financial Integrity Monitor
Sign in

Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Brazil BR

Domains covered
8 of 8
Sources
149
Role actions
8
Horizon <90d
4
Jurisdiction profile
FATF status: Largely Compliant Tier: A Risk direction: Increasing Enablement vs enforcement: Mixed

AML Law 9613/1998 with COAF (FIU) at its centre, coordinated via the ENCCLA inter-agency mechanism; joint FATF/GAFILAT MER (Dec 2023) found improved risk understanding and TF criminalisation but weak DNFBP supervision and unpopulated BO data.

MoreNew BCB Resolutions 519-521 (Nov 2025) create a VASP licensing regime effective Feb 2026.

Key deficiencies
  • Lawyers and several DNFBP categories remain effectively unregulated for AML/CFT/CPF purposes
  • Beneficial ownership database (REDESIM) largely unpopulated despite legal framework
  • Fintech sector historically outside Central Bank reporting/AML perimeter, exploited at scale by organised crime (PCC)
  • COAF resourcing and BO/customs-data access limitations constrain financial intelligence depth
  • Money laundering prosecution results, especially for environmental and organised-crime proceeds, lag behind risk profile
Recent developments (18m)
  • FATF/GAFILAT MER Brazil (Dec 2023) placed Brazil under enhanced follow-up; effectiveness gaps remain live in 2025-26 monitoring
  • BCB Resolutions 519, 520, 521 (Nov 2025) operationalised the 2022 Virtual Assets Law; VASP authorisation regime effective 2 Feb 2026
  • US Treasury/OFAC imposed unprecedented Global Magnitsky sanctions on sitting Supreme Court Justice Alexandre de Moraes (Jul 2025) and his wife (Sep 2025), later reversed (Dec 2025)
  • Federal Police Operations Quasar/Tank/Hidden Carbon and Hydra (Aug-Oct 2025) exposed a ~$9.6bn fuel/fintech laundering network tied to the PCC
  • Banco Master SA liquidated (Nov 2025) amid an alleged $2.4bn+ fraud, triggering Supreme Court and Federal Audit Court scrutiny of Central Bank supervision
  • OFAC designated PCC and Comando Vermelho as Transnational Terrorist Groups (SDGT/FTO) and, by mid-2026, extended designations to PCC-linked Brazilian fintech entities
Brief

Lead signal

Lead Signal

Brazil's financial integrity architecture moved on two fronts at once this cycle, and the two movements are structurally linked even though they sit in different regulatory lanes. The Central Bank (Banco Central do Brasil, BCB) reached two binding deadlines in its virtual-asset authorisation regime within the same window: incumbent virtual-asset service providers already operating as of 2 February 2026 were required to file for BCB authorisation by 30 October 2026, and from 6 November 2026 BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are not authorised or mid-authorisation, under Resolucao BCB no 589/2026. Layered onto this, a new reporting trigger from Resolucao BCB no 588/2026 took effect 1 October 2026, requiring specific communication to the financial intelligence unit COAF of transfers involving self-custodied wallets equal to or above the equivalent of US$10,000. Taken together, these measures convert a previously loose perimeter around virtual-asset activity into a hard-edged authorisation and counterparty-screening regime, with the banking sector itself now the enforcement chokepoint.

Read full brief

Lead Signal

Brazil's financial integrity architecture moved on two fronts at once this cycle, and the two movements are structurally linked even though they sit in different regulatory lanes. The Central Bank (Banco Central do Brasil, BCB) reached two binding deadlines in its virtual-asset authorisation regime within the same window: incumbent virtual-asset service providers already operating as of 2 February 2026 were required to file for BCB authorisation by 30 October 2026, and from 6 November 2026 BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are not authorised or mid-authorisation, under Resolucao BCB no 589/2026. Layered onto this, a new reporting trigger from Resolucao BCB no 588/2026 took effect 1 October 2026, requiring specific communication to the financial intelligence unit COAF of transfers involving self-custodied wallets equal to or above the equivalent of US$10,000. Taken together, these measures convert a previously loose perimeter around virtual-asset activity into a hard-edged authorisation and counterparty-screening regime, with the banking sector itself now the enforcement chokepoint.

Alongside this, Brazil's domestic money-laundering enforcement structure was reorganised. A new Federal Police division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), was approved 9 October and published in the Official Gazette 13 October 2026, operating under an elevated money-laundering and asset-recovery coordination structure reporting into the Directorate of Combating Organised Crime. This reorganisation came as, separately, every federal sports-betting authorisation was extinguished on 25 October 2026, which appears to have collapsed the suspicious-activity and customer-due-diligence reporting channel that had been built out under the 2023 betting law for roughly 188 licensed betting brands. The juxtaposition is notable: enforcement capacity for money-laundering typologies tied to betting was being built up at the same moment the regulated channel that fed it information was being dismantled.

Other Developments

Self-custody reporting trigger embeds into existing suspicious-activity architecture. The 1 October 2026 trigger under Resolucao BCB no 588/2026 does not stand alone; it extends the same COAF-facing reporting logic that already governs suspicious-activity communication generally, meaning virtual-asset operators and banks handling flows to or from self-custodied wallets above the threshold now sit inside a reporting obligation with the same institutional destination as conventional anti-money-laundering reporting.

VASP authorisation deadline converts informal operators into a binary population. The 30 October 2026 filing deadline for incumbent virtual-asset service providers functions as a sorting mechanism: providers that filed move toward authorised status and continued eligibility to deal with the banking sector, while those that did not file face exclusion from banking relationships once the 6 November 2026 counterparty cut-off takes hold. The structural effect is to formalise, within a matter of weeks, a population of virtual-asset businesses that had previously operated without a binding authorisation gate.

Betting-sector compliance failures preceded the licence extinction. Reporting prior to the 25 October 2026 extinction of federal betting authorisations had already identified serious failures in suspicious-activity-of-money-laundering reporting attributed to the Finance Ministry's own assessment of the licensed segment, suggesting the reporting channel was already degraded in practice before it was removed as a matter of law. The confidence attached to this specific finding is held at the probable tier, pending location of a primary notice from the financial intelligence unit or the Finance Ministry.

Cross-Monitor Connections

The collapse of the licensed betting-sector reporting channel combined with a nationwide prohibition is the kind of development that routes most directly to monitors tracking conflict finance and commodity-flow integrity elsewhere in the fleet, insofar as displaced wagering volume is assessed to migrate toward unlicensed or offshore channels that fall outside any reporting perimeter at all; it also has an information-operations dimension where offshore betting platforms are used to launder reputational or narrative material alongside funds. On the digital-asset side, the BCB's dual deadlines sit squarely alongside developments tracked for state-capture and compliance-technology risk elsewhere in the fleet, since a banking sector newly required to screen virtual-asset counterparties for authorisation status will need technology capable of making that determination reliably at transaction speed; no compliance-technology vendor or control development specific to Brazil was identified this cycle, however, so that connection remains structural rather than evidenced.

Outlook

The near-term test for Brazil's virtual-asset authorisation regime is whether the population of incumbent providers that filed by 30 October 2026 is processed to authorised status before the 6 November 2026 counterparty cut-off creates a practical bottleneck, since any provider still mid-authorisation when the cut-off takes hold occupies an ambiguous status that the Central Bank will need to clarify in guidance. For the betting sector, the open question is whether displaced wagering activity is captured by the enforcement architecture built around the new Federal Police division, or whether, as the jurisdiction-risk assessment this cycle suggests, the removal of the licensed channel increases exposure by pushing volume toward channels with no reporting obligation at all. Brazil's overall risk direction for this cycle is read as increasing, driven by the combination of a widened enforcement structure confronting a sector that has lost its reporting channel, and by compliance gaps already identified in that sector before the channel was removed.

Earlier periodic briefs (6)
4 Nov 2026 · fim-2026-11-01

Lead Signal

Brazil's financial integrity architecture moved on two fronts at once, and the two movements are structurally linked even though they sit in different regulatory lanes. The Central Bank (Banco Central do Brasil, BCB) reached two binding deadlines in its virtual-asset authorisation regime within the same window: incumbent virtual-asset service providers already operating as of 2 February 2026 were required to file for BCB authorisation by 30 October 2026, and from 6 November 2026 BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are not authorised or mid-authorisation, under Resolucao BCB no 589/2026. Layered onto this, a new reporting trigger from Resolucao BCB no 588/2026 took effect 1 October 2026, requiring specific communication to the financial intelligence unit COAF of transfers involving self-custodied wallets equal to or above the equivalent of US$10,000. Taken together, these measures convert a previously loose perimeter around virtual-asset activity into a hard-edged authorisation and counterparty-screening regime, with the banking sector itself now the enforcement chokepoint.

Alongside this, Brazil's domestic money-laundering enforcement structure was reorganised. A new Federal Police division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), was approved 9 October and published in the Official Gazette 13 October 2026, operating under an elevated money-laundering and asset-recovery coordination structure reporting into the Directorate of Combating Organised Crime. This reorganisation came as, separately, every federal sports-betting authorisation was extinguished on 25 October 2026, which appears to have collapsed the suspicious-activity and customer-due-diligence reporting channel that had been built out under the 2023 betting law for roughly 188 licensed betting brands. The juxtaposition is notable: enforcement capacity for money-laundering typologies tied to betting was being built up at the same moment the regulated channel that fed it information was being dismantled.

Other Developments

Self-custody reporting trigger embeds into existing suspicious-activity architecture. The 1 October 2026 trigger under Resolucao BCB no 588/2026 does not stand alone; it extends the same COAF-facing reporting logic that already governs suspicious-activity communication generally, meaning virtual-asset operators and banks handling flows to or from self-custodied wallets above the threshold now sit inside a reporting obligation with the same institutional destination as conventional anti-money-laundering reporting.

VASP authorisation deadline converts informal operators into a binary population. The 30 October 2026 filing deadline for incumbent virtual-asset service providers functions as a sorting mechanism: providers that filed move toward authorised status and continued eligibility to deal with the banking sector, while those that did not file face exclusion from banking relationships once the 6 November 2026 counterparty cut-off takes hold. The structural effect is to formalise, within a matter of weeks, a population of virtual-asset businesses that had previously operated without a binding authorisation gate.

Betting-sector compliance failures preceded the licence extinction. Reporting prior to the 25 October 2026 extinction of federal betting authorisations had already identified serious failures in suspicious-activity-of-money-laundering reporting attributed to the Finance Ministry's own assessment of the licensed segment, suggesting the reporting channel was already degraded in practice before it was removed as a matter of law. The confidence attached to this specific finding is held at the probable tier, pending location of a primary notice from the financial intelligence unit or the Finance Ministry.

Cross-Monitor Connections

The collapse of the licensed betting-sector reporting channel combined with a nationwide prohibition is the kind of development that routes most directly to monitors tracking conflict finance and commodity-flow integrity elsewhere in the fleet, insofar as displaced wagering volume is assessed to migrate toward unlicensed or offshore channels that fall outside any reporting perimeter at all; it also has an information-operations dimension where offshore betting platforms are used to launder reputational or narrative material alongside funds. On the digital-asset side, the BCB's dual deadlines sit squarely alongside developments tracked for state-capture and compliance-technology risk elsewhere in the fleet, since a banking sector newly required to screen virtual-asset counterparties for authorisation status will need technology capable of making that determination reliably at transaction speed; no compliance-technology vendor or control development specific to Brazil was identified, however, so that connection remains structural rather than evidenced.

Outlook

The near-term test for Brazil's virtual-asset authorisation regime is whether the population of incumbent providers that filed by 30 October 2026 is processed to authorised status before the 6 November 2026 counterparty cut-off creates a practical bottleneck, since any provider still mid-authorisation when the cut-off takes hold occupies an ambiguous status that the Central Bank will need to clarify in guidance. For the betting sector, the open question is whether displaced wagering activity is captured by the enforcement architecture built around the new Federal Police division, or whether, as the jurisdiction-risk assessment suggests, the removal of the licensed channel increases exposure by pushing volume toward channels with no reporting obligation at all. Brazil's overall risk direction is read as increasing, driven by the combination of a widened enforcement structure confronting a sector that has lost its reporting channel, and by compliance gaps already identified in that sector before the channel was removed.

3 Nov 2026 · fim-2026-11-03

Lead Signal

Brazil's central bank has moved on two fronts at once, and the combination is the signal worth foregrounding. Resolucao BCB no 588/2026 adds a specific reporting obligation to the Conselho de Controle de Atividades Financeiras (COAF) for transfers involving self-custodied virtual-asset wallets at or above the equivalent of US$10,000, taking effect 1 October 2026. In parallel, Resolucao BCB no 589/2026, published 23 September 2026, bars BCB-authorised financial and payment institutions from transacting with virtual-asset counterparties that are not authorised, or mid-authorisation, in Brazil, with that prohibition commencing 6 November 2026. Read together, these two instruments close the self-custody and unauthorised-counterparty gaps around the perimeter the Central Bank has been building for incumbent virtual-asset service providers, who faced a 30 October 2026 filing deadline to remain in the authorisation pipeline. The self-custody reporting trigger is corroborated across two independent sources; the banking cut-off date is sourced to a single outlet reporting the resolution's text, so the precise statutory pinpoint remains unconfirmed pending primary publication.

The second development concerns the enforcement architecture for anti-money-laundering work generally, not virtual assets specifically. A new Federal Police division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), was approved 9 October and published 13 October 2026. It sits inside a reorganised General Coordination structure for the repression of money laundering and asset recovery, giving money-laundering enforcement a dedicated coordination level it did not previously have. This is a structural change in enforcement capacity, arriving at the same moment the licensed sports-betting sector's own suspicious-activity-reporting channel to COAF appears to have ceased functioning for that segment following the nationwide betting ban.

Other Developments

The licensed-betting SAR channel has effectively collapsed. With every federal betting authorisation extinguished on 25 October 2026, the suspicious-activity and customer-due-diligence channel that previously ran between roughly 188 licensed betting brands and COAF no longer operates for that segment. A legal-commentary source flags this alongside the Willer Tomaz case, cited as an example of a legacy compliance gap involving flows of approximately R$5 billion, though this finding rests on a single tier-three commentary source rather than a primary Fazenda or COAF notice, and is treated as probable rather than confirmed accordingly.

The virtual-asset authorisation calendar is now the operative AML control for that sector. The 30 October incumbent-filing deadline and the 6 November counterparty cut-off operate as sequential gates: firms that did not file lose the ability to be treated as authorised counterparties, and from 6 November authorised institutions cannot deal with them regardless. The exact minimum-capital bands for different virtual-asset activity classes remain unconfirmed, with press reporting citing a range between BRL 10.8 million and BRL 37.2 million pending a definitive Central Bank breakdown.

Cross-Monitor Connections

The betting-sector enforcement reorganisation and the virtual-asset authorisation perimeter are, on the evidence available, parallel rather than connected developments, but both bear on how payment and settlement rails intersect with illicit-finance controls in Brazil, a question that also concerns the operational and consumer-protection read of the same Central Bank resolutions elsewhere in this jurisdiction's coverage. The collapse of a sector-specific reporting channel alongside the creation of dedicated federal enforcement capacity is the kind of architecture shift that typically precedes a reallocation of investigative resources toward payment corridors used by the displaced activity; that reallocation is not yet evidenced and is noted here as a structural watch point rather than an observed fact.

Outlook

The 6 November 2026 counterparty cut-off is the near-term date that will test whether the virtual-asset authorisation regime functions as intended; whether unauthorised operators actually lose banking access on that date, rather than continuing informally, will be the operative question for the following cycle. The capital-band question flagged in the gaps register remains open and should resolve once the Central Bank publishes a definitive breakdown. Separately, whether the enforcement capacity created by DRAME is deployed against payment flows left exposed by the collapse of the licensed-betting SAR channel is a structural question the evidence cannot yet answer, and is offered as orientation rather than prediction.

18 Oct 2026 · fim-2026-10-18

Lead Signal

Brazil's crypto-AML perimeter is tightening through supervisory build-out rather than new legislation this cycle. Banco Central do Brasil rules effective 1 October 2026 require virtual-asset service providers to report to COAF any transfer of US$10,000 or more to or from self-custodied, unhosted wallets, under the BCB's VASP framework established by Resolutions 519 through 521. Banks are barred from servicing unauthorised crypto firms from the same date. The rule change coincides with a dated transitional deadline already running under the VASP regime: incumbent virtual-asset providers must have filed for BCB authorisation by 30 October 2026 to continue operating pending review. The two developments together describe a supervisory architecture reaching further into self-custody flows precisely as the authorisation perimeter around who may lawfully provide virtual-asset services in Brazil closes.

Other Developments

A national fintech AML framework remains at the proposal stage. PL 2901/2026, the Marco Nacional de Fintechs e Plataformas Digitais, would ban anonymous digital accounts, mandate ten-year data retention, impose graduated obligations scaled to firm size and systemic risk, and set fines of up to 20 percent of annual gross revenue for AML infractions. The bill was in early committee stage as of 15 October 2026, and this account rests on a single trade-press source without independently retrieved primary legislative text, so the bill's provisions should be read as reported rather than confirmed in final form.

Brazil's standing mutual evaluation remains the 2023 FATF/GAFILAT report. Brazil is not on the FATF grey or black list, and the 2023 evaluation remains the current governing baseline rather than a this-cycle development. The evaluation found improved international cooperation and risk assessment since 2010 alongside continuing gaps in inter-agency coordination and money-laundering prosecution.

A securities-market tokenisation sandbox has AML-adjacent relevance. Resolução CVM nº 249/2026, dated 14 October 2026, creates a DLT tokenisation pilot sandbox. This is a securities-market structural development rather than a direct AML rule change, and its eventual bearing on AML exposure in tokenised-securities rails is not yet established.

Cross-Monitor Connections

The self-custody wallet reporting extension and the fintech AML bill both speak directly to crypto and payments monitoring: a tightening AML perimeter around unhosted-wallet transfers is architecture that a crypto-focused reading would treat as a VASP compliance-cost and classification question, while a payments-focused reading would treat the same BCB rulemaking as a scheme-level compliance event sitting alongside Brazil's broader 2026 payments reforms. Neither reading displaces the other; they are the same architectural fact seen through different institutional lenses.

Outlook

The near-term calendar is dated and concrete: the VASP incumbent authorisation deadline falls on 30 October 2026, after which unauthorised firms lose access to banking relationships with BCB-regulated institutions. PL 2901/2026 remains in early committee stage with no confirmed enactment timeline. Brazil's risk direction is assessed as stable overall notwithstanding these developments, since no new FATF action and no new sanctions designations attach to this cycle's findings; the crypto-reporting tightening is best read as incremental supervisory build-out within an existing framework rather than a change in Brazil's underlying risk posture.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Brazil's Banco Central do Brasil tightened the crypto AML and licensing perimeter materially this cycle, layering two instruments that together close off the unregulated edges of the virtual-asset sector. Resolucao BCB no 588/2026, in force since 1 October 2026, adds mandatory COAF reporting for virtual-asset transfers of US10,000 or more to or from a self-custodied wallet, alongside new cash-operation and FX cash-operation reporting hypotheses. In parallel, the authorisation deadline under Resolucao BCB no 519/2025 falls on 30 October 2026: incumbent virtual-asset service providers must file for PSAV authorisation by that date, after which BCB-authorised institutions will be barred from intermediating for unauthorised VASPs.

Other Developments

BlindPay raises capital while awaiting authorisation. Brazilian crypto-payments fintech BlindPay raised US3.3 million with participation from US stablecoin issuer Circle, announced 23 September 2026, to expand cross-border stablecoin payment infrastructure between Brazil and the United States. BlindPay has a pending BCB PSAV authorisation application due by the 30 October 2026 deadline, illustrating that commercial activity in the sector continues even as the regulatory perimeter tightens around it.

Brazil's standing AML/CFT position. Brazil's regime remains anchored in Lei no 9.613/1998, with COAF as the financial intelligence unit and BCB, CVM and SUSEP as sectoral supervisors. Brazil is not on the FATF list of jurisdictions under increased monitoring as of the 19 June 2026 plenary statement, and its 2023 FATF/GAFILAT Mutual Evaluation rates the country Compliant on 10 and Largely Compliant on 19 of 40 Recommendations.

Cross-Monitor Connections

The BCB's crypto AML tightening connects directly to the world-payments monitor's coverage of Brazil's stablecoin and cross-border payments architecture, since Resolucao 588/2026's reporting threshold and the PSAV authorisation cliff both regulate activity at the intersection of virtual-asset custody and payment settlement. The commercial funding activity around BlindPay, a crypto-payments fintech operating in a cross-border corridor with a US stablecoin issuer, is similarly a shared data point for any monitor tracking the structural development of Brazil's digital-asset payments infrastructure rather than purely its AML dimension.

Outlook

The 30 October 2026 PSAV authorisation deadline is the determinative near-term event: any VASP that has not filed by then faces exclusion from intermediation by BCB-authorised institutions. Whether BlindPay and similarly-positioned fintechs secure authorisation ahead of that date will be a useful proxy for how smoothly the broader incumbent VASP population navigates the authorisation cliff.

4 Oct 2026 · fim-2026-10-04

Lead Signal

Banco Central do Brasil Resolutions 588 and 589 of 2026 extend Brazil's anti-money-laundering reporting perimeter onto self-custodied virtual-asset transfers. From 1 October 2026, BCB-authorised institutions must make a specific communication to the Conselho de Controle de Atividades Financeiras, COAF, for virtual-asset transfers of US$10,000 or more to or from self-custodied wallets, in either direction. This closes a gap that had previously let value move between a custodial, regulated rail and an unhosted wallet without a reporting trigger attaching to the self-custody leg of the transaction. The expansion arrives alongside, but is not reconciled with, a separate cutover date problem: existing virtual-asset service providers must file Banco Central authorisation requests by 30 October 2026, while a separate, lower-tier report states that authorised institutions may no longer transact with unauthorised virtual-asset providers from 6 November 2026. Both dates are specific and independently sourced, and sourcing available this cycle does not reconcile them, so the finding is recorded as Disputed rather than simply thin.

Other Developments

Betting-sector prohibition converts payment-conduct architecture sector-wide. Medida Provisoria 1.394/2026, signed 25 September 2026, prohibits fixed-odds betting nationwide. The Secretaria de Premios e Apostas's own payment-interdiction portaria, published 15 September 2026 and aimed at expanding procedures to prevent, identify and repress payment transactions linked to irregular fixed-odds betting exploitation, now governs a sector that has itself become unauthorised in its entirety. Banks' existing 24-hour account-freeze obligation for unlicensed operators becomes, in practical effect, a universal obligation across what was until recently a licensed and AML-supervised industry. This is an architecture-level shift: a targeted anti-illegal-market tool now operates as the default posture for an entire formerly-regulated sector, materially raising AML exposure for banks and payment companies with any betting-sector relationships.

Routine COAF administrative enforcement continued at modest scale. COAF published fines in the Diário Oficial da União during September 2026: R$63,800 on 8 September 2026 for declaration and requisition failures, and separate fines against SHC Entretenimento and Hyun Mi Cho Chung for three infractions, published 14 September 2026. This is ordinary periodic AML-control enforcement rather than a new typology, and is noted here for completeness against the more structurally significant developments above.

Brazil's standing FATF effectiveness gap persists unchanged. Brazil's 2023 Mutual Evaluation found the country Compliant for 10 and Largely Compliant for 19 of the 40 FATF Recommendations, but Substantially Effective on only 2 of 11 effectiveness outcomes. Brazil remains off the FATF grey list. This structural gap between technical compliance and effectiveness predates this cycle and is carried forward as context for the new crypto-reporting and betting-conversion developments above, neither of which has yet been tested against that effectiveness gap.

Cross-Monitor Connections

The betting-sector prohibition is tracked in first-party depth by the gambling-regulatory monitor; its AML and payment-conduct consequences, described above, are financial-integrity's downstream read of a licensing event that monitor is tracking as the primary story. Similarly, the crypto-specific regulatory detail behind Resolutions 588 and 589, including the VASP authorisation and classification architecture those resolutions sit within, is tracked in first-party depth by the crypto monitor; financial-integrity's reading here is confined to the AML reporting-perimeter consequence of those same instruments. The payments-conduct dimension of both the crypto reporting expansion and the betting-sector payment-interdiction architecture is tracked by the world-payments monitor from the conduct and scheme-compliance angle, distinct from the AML-reporting angle addressed here.

Outlook

The immediate question to watch is whether Banco Central do Brasil reconciles the 30 October 2026 VASP-authorisation filing deadline with the separately reported 6 November 2026 unauthorised-counterparty cutoff; until it does, institutions planning compliance timelines face a live date conflict rather than a settled compliance calendar. On the betting side, the payment-interdiction architecture's sector-wide reach will itself depend on whether Medida Provisoria 1.394/2026 survives its pending Supremo Tribunal Federal challenge and congressional conversion process; a reversal of the prohibition would, in turn, revert the payment-interdiction posture back toward its prior, narrower, unlicensed-operator-only scope.

28 Sep 2026 · fim-2026-09-28

Lead Signal

Brazil enters this cycle carrying an escalating US unilateral sanctions posture against organised-crime financial infrastructure that has no identified EU or UK parallel. OFAC designated two Brazilian nationals and four companies (three based in São Paulo, one in Lisbon) on 1 July 2026 under Executive Orders 14059 and 13224, for laundering over $30 million in drug proceeds via cryptocurrency on behalf of the Primeiro Comando da Capital (PCC), a criminal organisation the US Department of State has separately designated a Foreign Terrorist Organization. This action follows a related May 2026 round and sits alongside a July 2026 designation targeting a support network for a previously sanctioned Brazilian Supreme Federal Court justice. Taken together, these two rounds of OFAC action against Brazil-domiciled targets, without any corresponding EU Council or UK OFSI listing surfacing this cycle, describe a structural divergence in sanctions architecture rather than an isolated enforcement event.

Other Developments

Operation Exchange tested Brazil's beneficial-ownership screening apparatus directly. On 3 July 2026 the Polícia Federal executed 24 warrants and froze approximately R$10.4 billion (roughly US$2 billion) in cash, assets and cryptocurrency tied to a PCC-linked laundering network built through 73 shell companies. The figures rest on a single tier-3 source and have not been cross-verified against a Polícia Federal primary release, but the operation is notable less for its scale than for what it demonstrates: a laundering network of this size was able to layer through Brazil's CNPJ-based corporate registration system despite the formal registry-suspension mechanism that is meant to deny banking access to non-compliant entities. That gap between the formal mechanism and its practical circumvention is the more durable finding here.

Brazil's AML/CFT regime itself remains structurally stable. COAF operates as Brazil's autonomous financial intelligence unit, administratively linked to the Banco Central do Brasil, and Brazil remained off both the FATF grey list and the FATF blacklist following the 19 June 2026 plenary update, at which Bosnia and Herzegovina and Iraq were added to increased monitoring while Algeria and Namibia were removed. This standing regime is the backdrop against which the OFAC and Operation Exchange developments should be read: Brazil's own institutional AML architecture is not itself flagged as deficient, even as US authorities pursue autonomous, Brazil-specific enforcement action against criminal financial networks operating within it.

Cross-Monitor Connections

The PCC's laundering scheme's dependence on cryptocurrency rails to move drug proceeds concurrent with Brazil's evolving virtual-asset-service-provider licensing framework is a direct crypto-monitor connection: enforcement pressure on the criminal use of crypto rails is rising at the same moment Brazil's regulator is tightening the licensed on-ramp and off-ramp perimeter for virtual-asset services. The beneficial-ownership stress-test exposed by Operation Exchange also connects to broader corporate-transparency questions relevant to a world-payments read of Brazilian financial-system access, where shell-company layering through correspondent and domestic banking channels remains a live structural vulnerability distinct from Brazil's formal registry design.

Outlook

The question to watch is whether OFAC's two consecutive designation rounds against Brazil-domiciled targets in 2026 draw a third round, and whether the EU or UK move to align with the US listings or continue to diverge. A continuing divergence pattern would leave correspondent banks and crypto-exposed institutions with Brazilian counterparties navigating inconsistent sanctions exposure across jurisdictions. On the beneficial-ownership side, whether Brazilian authorities move to tighten CNPJ-registration screening in response to the exposure demonstrated by Operation Exchange, or whether the shell-company vulnerability persists unaddressed, will determine whether this cycle's finding was a one-off stress event or the start of a structural correction.

Domain intelligence (D1–D8)

D1 Sanctions

no_changeno_changestanding position

Sanctions Architecture and Evasion

Brazil's sanctions exposure this cycle is defined by a run of unilateral US Treasury action rather than any multilateral listing. On 1 July 2026, OFAC designated two Brazilian nationals and four companies -- three in São Paulo, one in Lisbon -- under Executive Orders 14059 and 13224, citing over $30 million in drug proceeds laundered via cryptocurrency for the Primeiro Comando da Capital (PCC). The PCC itself carries a separate Foreign Terrorist Organization designation from the US Department of State, a status distinct from and additional to the Treasury sanctions architecture, giving US authorities both a terrorism-finance and a narcotics-finance basis to pursue the network's financial infrastructure. A second, related July 2026 action sanctioned Lex Instituto de Estudos Juridicos LTDA and an individual, Viviane Barci de Moraes, for supporting a Brazilian Supreme Federal Court justice designated by OFAC in July 2025 -- a judicial-support-network designation that is a materially different sanctions theory from the PCC financial-crime designations, targeting obstruction-adjacent conduct rather than drug-trafficking proceeds.

Continue reading

The structurally significant finding is not any single designation but the pattern across them: two separate rounds of OFAC action against Brazil-domiciled targets in a single year, with no identified parallel EU Council or UK OFSI listing for either round. This is a sanctions-regime divergence, not merely an enforcement gap -- it means correspondent banks, payment processors and crypto-exposed institutions holding Brazilian counterparty relationships face a sanctions landscape where US exposure and EU/UK exposure diverge materially for the same underlying entities and networks. An institution screening only against EU or UK lists would find both PCC-linked designees and the judicial-support-network designees clear, while an OFAC screen would flag them -- a live discrepancy rather than a historical curiosity.

The PCC designations also carry a digital-asset dimension worth flagging within the sanctions frame specifically: cryptocurrency was the transmission mechanism for the underlying laundering, not merely incidental to it, meaning any institution with crypto-exposed correspondent relationships into Brazil should treat this as a live typology rather than a one-off case. The absence of a corroborating EU or UK designation for the same PCC network, six months on, is itself informative -- either the underlying evidentiary basis has not yet crossed the threshold for a parallel EU/UK listing, or the two blocs have made a deliberate choice not to align, and neither hypothesis can be resolved from this cycle's evidence.

Outlook

The next signal to watch is whether the divergence pattern holds through a third designation round or whether the EU or UK move to align with the two 2026 OFAC actions. Absent alignment, institutions with Brazilian correspondent or crypto-counterparty exposure should expect the US autonomous-listing environment to keep moving ahead of the multilateral one, with fresh PCC-network designations plausible given the scale of the underlying laundering operation already exposed by Operation Exchange.

Judgment: No BR-specific sanctions-architecture signal found this cycle. Uncertain

D2 Beneficial Ownership

no_changeno_changestanding position

Beneficial Ownership and Corporate Transparency

Globally, the EU AML Package sets the structural direction for beneficial-ownership regulation: the AML Regulation (Reg (EU) 2024/1624, directly applicable), the sixth AML Directive transposed per Member State, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority together shift supervision from purely national authorities toward a hybrid EU-level regime with direct and indirect supervisory perimeters. Brazil sits entirely outside that perimeter as a non-EEA jurisdiction, and the EU AML Package is not the primary subject matter for Brazil's own beneficial-ownership exposure this cycle. The directly relevant development in Brazil is domestic: Operation Exchange.

Continue reading

On 3 July 2026, the Policia Federal executed 24 warrants and froze approximately R$10.4 billion -- roughly US$2 billion -- in cash, assets and cryptocurrency tied to a PCC-linked laundering network structured through 73 shell companies. This figure rests on a single tier-3 source and was not cross-verified against a Policia Federal primary release this cycle, so the precise scale should be treated as indicative rather than confirmed. What the operation demonstrates, regardless of the exact figure, is a practical gap between Brazil's formal beneficial-ownership mechanism -- CNPJ taxpayer registration, which under the standing regime can be suspended to deny an entity banking access -- and its ability to catch sophisticated shell-company layering before it reaches the scale exposed here. The formal registry-suspension mechanism is a post-hoc denial tool; it does not appear, on this evidence, to have prevented the network from operating and moving assets at scale in the first instance.

This distinguishes a design gap from an enforcement failure: Brazil's CNPJ-based registry exists and can be used punitively once a network is identified, but 73 shell companies operating long enough to accumulate and layer R$10.4 billion in assets before detection suggests the screening and monitoring layer that should flag anomalous corporate structures earlier in their lifecycle did not do so here. Whether this is a resourcing gap, a data-quality gap in the CNPJ registry itself, or a genuine sophistication advantage on the part of the network cannot be resolved from this cycle's evidence.

Outlook

The question for the next cycle is whether Brazilian authorities respond to the Operation Exchange exposure with a tightening of CNPJ-registration screening or beneficial-ownership verification requirements, or whether the vulnerability is treated as a one-off enforcement success rather than a structural finding requiring a regulatory response. Given the scale of assets involved, continued monitoring of any BCB or COAF policy response is warranted.

Judgment: No BR beneficial-ownership development found this cycle. Uncertain

D3 Enabler Jurisdictions

no_changeno_change
Judgment: No BR-specific enabler-jurisdiction finding this cycle. Uncertain

D4 Conflict Finance

no_changeno_change
Judgment: Not applicable in regime this cycle for BR. Uncertain

D5 Crypto / Digital Assets / Financial Innovation

escalatingmaterial_change

Crypto, Digital Assets, and Financial Innovation

Brazil's virtual-asset regulatory perimeter tightened on two coordinated timelines this cycle, both issued by the Central Bank (Banco Central do Brasil, BCB) under its authority over virtual-asset service providers. Incumbent virtual-asset service providers that were already operating in Brazil as of 2 February 2026 were required to file for BCB authorisation by 30 October 2026. That deadline is paired with a second measure, Resolucao BCB no 589/2026, under which, from 6 November 2026, BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are neither authorised nor mid-authorisation. Read together, the two measures convert the authorisation filing from an administrative formality into the precondition for continued access to the regulated banking system: a virtual-asset provider that missed the filing window risks being treated, within days, as an unauthorised counterparty that no BCB-regulated institution can lawfully continue to serve.

Continue reading

A third measure reached into the same reporting architecture from a different angle. Resolucao BCB no 588/2026 took effect 1 October 2026, introducing a specific reporting obligation to the financial intelligence unit, COAF, for transfers of virtual assets to or from self-custodied wallets equal to or above the equivalent of US$10,000. This closes a gap that self-custody arrangements have historically presented to reporting regimes built around custodial intermediaries: a transfer that does not pass through a second regulated custodian still generates a reporting duty once it crosses the threshold, placing the obligation on the authorised institution or virtual-asset operator on the Brazilian side of the transfer. The research this cycle relied on secondary legal-explainer and trade-press sources for the text of both the 588 and 589 resolutions rather than the primary Central Bank instrument text directly, which is noted as an evidentiary gap even though the underlying facts are corroborated across more than one outlet.

The practical sequencing matters for firms operating in or into the Brazilian market. The filing deadline, the self-custody reporting trigger, and the counterparty cut-off land within a five-week span, meaning a virtual-asset business with Brazilian counterparties has had to resolve its authorisation status, its self-custody reporting exposure, and its banking relationships against the same calendar. For a bank or payment institution on the Brazilian side of these relationships, the obligation is now to verify authorisation status of virtual-asset counterparties as a continuous condition, not a one-time onboarding check, since a counterparty that was authorised yesterday is a live compliance question again after 6 November 2026 if its status has not been confirmed as maintained.

Outlook

The most immediate open question is how the Central Bank treats virtual-asset providers that filed before the 30 October 2026 deadline but whose authorisation has not been granted by the 6 November 2026 counterparty cut-off. Absent clarifying guidance, authorised institutions face a binary choice between treating mid-authorisation filers as compliant counterparties, which carries regulatory risk if the Central Bank later disagrees, or suspending those relationships pre-emptively, which carries commercial and market-disruption cost. The self-custody reporting trigger is likely to generate an early volume of reports to COAF as authorised institutions adjust transaction-monitoring thresholds to the US$10,000 benchmark; whether that volume is proportionate to actual illicit-finance risk, or simply reflects the mechanical capture of a bright-line threshold, will only become clear once a reporting pattern builds up over subsequent reporting periods.

Judgment: BCB's VASP authorisation regime reaches two binding deadlines (30 Oct filing; 6 Nov banking cut-off) and a new COAF self-custody reporting trigger took effect 1 October 2026. Probable
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation

Brazil completed a comprehensive virtual-asset authorisation and AML architecture this cycle. Resoluções BCB 519, 520 and 521, published 10 November 2025, jointly regulate the operation of Sociedades Prestadoras de Serviços de Ativos Virtuais (SPSAVs), establishing authorisation processes, operational and governance requirements, and the integration of virtual-asset cross-border FX activity, including stablecoin transactions and self-hosted-wallet operations, into Brazil's existing exchange-control regime. The rules take effect 2 February 2026, with a 270-day grandfather window running to 30 October 2026; after that date, BCB-supervised institutions will be barred from dealing with unauthorised VASP counterparties for intermediation, custody, FX, or payment-account and transaction services. This is properly read as architecture rather than incident: Brazil is not responding to a single crypto-enabled illicit-finance event but building the durable supervisory perimeter within which future typology exposure will be assessed. Sourcing this cycle rests on corroboration across ANBIMA, BDO, Notabene and a direct text mirror of Resolução 519, rather than a bcb.gov.br-hosted primary URL, and confidence is accordingly assessed as probable rather than confirmed.

A second structural element, Resolução BCB 520 Article 89, establishes a phased Crypto Travel Rule implementation running from 2026 to 2028, aligning Brazil's VASP sector with FATF Recommendation 16 equivalence over a multi-year rollout rather than a single compliance date. This phasing itself carries typology significance: a multi-year Travel Rule build-out creates a window during which layering techniques exploiting incomplete originator/beneficiary information capture remain viable, even as the underlying legal obligation is already in force in principle. A related development, an August 2026 rule reported by The Digital Banker, requires up to a 24-hour hold on virtual-asset transfers above USD 10,000 to overseas VASPs or self-custody wallets, functioning as a friction-based control against rapid cross-border layering pending fuller Travel Rule maturity.

The combination of a new authorisation gate, a phased Travel Rule, and a transfer-hold friction control represents a coherent three-part architecture rather than three unrelated rules, and its coherence is itself worth registering: enabler-jurisdiction and evasion typologies that previously found Brazil's virtual-asset sector permissive by omission now face a closing window, concentrated at the 30 October 2026 grandfather deadline. Enablement as signal cuts the other way here: the absence, until this cycle, of any comprehensive Brazilian VASP-AML perimeter was itself analytically significant, and its closure changes the calculus for any illicit-finance architecture that had been routing through unauthorised Brazilian VASPs during the earlier permissive period.

Outlook

The grandfather deadline of 30 October 2026 is the single most consequential date on the D5 horizon: it is the point at which the architecture built this cycle converts from a registration requirement into an enforceable exclusion of unauthorised counterparties from BCB-supervised dealing. Track whether a bcb.gov.br primary text becomes available to firm up confidence above probable, and whether the phased 2026-2028 Travel Rule timeline holds or slips, which would extend the layering-exposure window this brief flags above.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

VASP authorisation regime (Lei 14.478/2022; BCB Resoluções 519-521, as amended by 588/589) reaches incumbent filing deadline 30 Oct 2026 and authorised-institution banking cut-off 6 Nov 2026; self-custody wallet reporting (US$10,000 threshold) live from 1 Oct 2026.

Periodic updates (5)
3 Nov 2026 · fim-2026-11-03

Crypto / Digital Assets / Financial Innovation

The Central Bank's virtual-asset authorisation architecture reached two operative milestones. Resolucao BCB no 588/2026 introduces a specific COAF reporting obligation for transfers involving self-custodied wallets equal to or above the equivalent of US$10,000, in force from 1 October 2026. This closes a gap that typologies of this kind usually exploit: a self-custody transfer threshold set at a level comparable to standard travel-rule thresholds elsewhere narrows the space in which large value can move between a custodial and a self-custodied address without generating a reporting event. This finding is corroborated by two independent press sources describing the same resolution and effective date, supporting a reading.

Separately, Resolucao BCB no 589/2026, published 23 September 2026, prohibits BCB-authorised financial and payment institutions from dealing with virtual-asset counterparties that are not authorised, or mid-authorisation, in Brazil, with that prohibition taking effect 6 November 2026. Incumbent virtual-asset service providers faced a 30 October 2026 deadline to file for authorisation in order to remain inside the regulatory perimeter ahead of that cut-off. Together the two dates function as a sequential gate: miss the filing deadline and a firm loses standing as an authorised counterparty; after the cut-off date, authorised institutions cannot deal with it regardless of the firm's own intentions. This is an architecture finding rather than an incident finding — it describes a structural narrowing of the space in which unauthorised or under-authorised virtual-asset activity can access the regulated banking system, not a single enforcement action against a named operator.

The exact minimum-capital bands attached to different virtual-asset activity classes remain unconfirmed. Press reporting cites a range between BRL 10.8 million and BRL 37.2 million, but no definitive Central Bank breakdown has yet been located, and this is recorded as an open gap rather than a settled figure. The provision reference for the self-custody reporting obligation is similarly unconfirmed beyond the secondary source describing it, pending sight of the primary resolution text.

Outlook

The 6 November 2026 cut-off is the date against which the practical effect of this authorisation architecture will be tested: whether unauthorised virtual-asset counterparties genuinely lose banking access on that date, or whether informal workarounds persist, is the open question for the following cycle. Confirmation of the minimum-capital bands, once the Central Bank publishes a definitive breakdown, would close one of the two gaps currently flagged against this finding set. This is offered as orientation on where the architecture is heading, not as a prediction of how firms will respond.

18 Oct 2026 · fim-2026-10-18

Crypto, Digital Assets, and Financial Innovation

Brazil's digital-asset AML architecture tightened this cycle through supervisory rulemaking rather than statute. Banco Central do Brasil rules effective 1 October 2026 extend reporting obligations under the VASP framework established by Resolutions 519 through 521: virtual-asset service providers must now report to COAF any transfer of US$10,000 or more to or from self-custodied, unhosted wallets. From the same date, banks are barred from servicing crypto firms that have not obtained BCB authorisation. This supervisory build-out sits directly alongside a dated transitional deadline already in motion: incumbent providers offering virtual-asset services before the regime's cutoff date must have filed an authorisation request with the BCB by 30 October 2026 in order to continue operating pending review. Firms that miss that deadline face loss of banking access as an enforcement consequence of the reporting and authorisation architecture working in tandem, rather than through a separate penalty mechanism.

A second, lower-materiality development touches the same digital-asset space from the securities-market side. Resolução CVM nº 249/2026, dated 14 October 2026, creates a DLT tokenisation pilot sandbox. This is best read as a securities-market structural development with AML-adjacent relevance for tokenised-securities rails rather than a direct extension of the AML reporting perimeter; the evidentiary basis for this claim is thin, drawing on a cross-referenced register row rather than a dedicated primary source, and the confidence on this particular point is correspondingly lower than for the self-custody reporting rule.

Read together, these developments describe an enforcement architecture built on supervisory rulemaking under an existing statutory VASP framework, closing exposure at the edges, self-custody transfers and incumbent authorisation, rather than through a wholesale new AML statute targeting the sector.

Outlook

The near-term calendar is dated and concrete. The VASP incumbent authorisation deadline of 30 October 2026 is the immediate event to watch: firms that have not filed by that date lose access to banking relationships with BCB-regulated institutions. The self-custody wallet reporting rule, already in force since 1 October 2026, will generate its first reporting cycles under COAF in the weeks following. No further legislative change specific to crypto AML exposure is confirmed as pending beyond the broader PL 2901/2026 fintech framework bill, which remains at early committee stage and covers payment companies and crypto-asset operators without being crypto-specific.

11 Oct 2026 · fim-2026-10-11

Crypto / Digital Assets / Financial Innovation

Brazil's crypto-AML and licensing perimeter tightened materially this cycle through two interacting Banco Central do Brasil instruments. Resolucao BCB no 588/2026, effective 1 October 2026, amends Circular 3.978/2020 to add mandatory COAF reporting for cash operations of R50,000 or more, FX cash operations of US10,000 or more, and virtual-asset transfers of US10,000 or more to or from a self-custodied wallet. This closes a visible reporting gap around self-custody, which had previously sat outside the mandatory communication hypotheses that applied to custodial virtual-asset activity. The instrument's primary text was retrieved via a legal-database mirror presenting operative article language, corroborated by two independent commentary sources, supporting a Confirmed-tier reading of the reporting threshold itself.

Layered against this reporting expansion is the authorisation deadline under Resolucao BCB no 519/2025: incumbent virtual-asset service providers that were already providing intermediation or custody services as of 2 February 2026 must file for PSAV authorisation within 270 days, placing the deadline at 30 October 2026. After that date, BCB-authorised institutions will be barred from intermediating for any virtual-asset service provider that is neither authorised nor in the authorisation process. This finding rests on convergent secondary legal commentary rather than a direct fetch of the primary resolution text this cycle, and is accordingly held at Probable confidence rather than Confirmed.

The combined effect of the two instruments is to close off the unregulated edges of Brazil's virtual-asset sector from two directions simultaneously: a reporting net that now explicitly reaches self-custodied wallet transfers, and a licensing cliff that will exclude unauthorised intermediaries from the regulated banking system's cooperation entirely. Brazil's broader AML/CFT architecture, anchored in Lei no 9.613/1998 with COAF as the financial intelligence unit, provides the institutional backdrop into which this expanded reporting population now feeds; Brazil's 2023 FATF/GAFILAT Mutual Evaluation rates the country Compliant on 10 and Largely Compliant on 19 of the 40 FATF Recommendations, and Brazil remains off the FATF list of jurisdictions under increased monitoring as of the 19 June 2026 plenary statement.

Commercial activity within this tightening perimeter continues: Brazilian crypto-payments fintech BlindPay raised US3.3 million with participation from US stablecoin issuer Circle, announced 23 September 2026, specifically to expand cross-border stablecoin payment infrastructure between Brazil and the United States, while its own PSAV authorisation application remains pending ahead of the 30 October 2026 deadline. This is a single T3-sourced commercial development with no corroborating company filing retrieved this cycle, and is accordingly read as illustrative of continuing commercial activity rather than as a finding about the authorisation process itself.

Outlook

The 30 October 2026 PSAV authorisation deadline is the determinative near-term event for Brazil's crypto sector. Firms including BlindPay that have filed but not yet received authorisation will face a live test of whether the BCB processes applications in time to avoid an intermediation gap. No Brazilian FIU statement on displacement risk toward the illegal or unregulated market was located this cycle; this is recorded as a gap in available evidence rather than as an assertion that no such risk exists.

4 Oct 2026 · fim-2026-10-04

Crypto / Digital Assets / Financial Innovation

Brazil's crypto AML perimeter expanded materially this cycle through two linked Banco Central do Brasil instruments. Resolução BCB nº 588/2026 requires BCB-authorised institutions to make a specific communication to COAF for virtual-asset transfers of US$10,000 or more to or from self-custodied wallets, in either direction, effective 1 October 2026. This closes a structural gap in the prior reporting regime: a self-custody leg of a transaction previously sat outside the reporting trigger that applied to custodial, exchange-to-exchange flows, and the new rule brings unhosted-wallet movement onto the same reporting footing as custodial transfers above the threshold.

Alongside the reporting expansion, Resoluções BCB nº 519-521/2025 require existing virtual-asset service providers to file authorisation requests with the central bank by 30 October 2026, 270 days after those resolutions took effect. Separately sourced reporting states that authorised institutions may no longer transact with unauthorised virtual-asset providers from 6 November 2026, under Resolução BCB nº 589/2026. These two dates are not reconciled in sourcing available this cycle: both are specific, both come from sources of comparable standing, and neither corrects the other. This is treated as a Disputed finding rather than a simple gap, because the disagreement is itself informative: it signals either an unresolved drafting inconsistency between the resolutions or a staggered implementation that commentary has not yet correctly sequenced. Institutions relying on either date alone for compliance planning face a live risk of acting on the wrong one.

The practical effect of the two instruments together is to convert Brazil's crypto AML architecture from a licensing-only regime into one that also reaches into self-custody activity and counterparty screening against unauthorised providers. For a VASP operating in Brazil, this means the compliance programme must now extend past know-your-customer and transaction-monitoring on custodial flows and into monitoring the destination and origin of self-custody transfers crossing the US$10,000 threshold, while simultaneously tracking which counterparties hold or lack BCB authorisation ahead of whichever cutover date proves correct.

Outlook

The immediate open question is whether Banco Central do Brasil issues a clarifying instrument reconciling the 30 October and 6 November 2026 dates before either passes. Institutions that have already begun authorisation filings under the 519-521/2025 transition window should treat both dates as live until clarified, rather than assuming the later date supersedes the earlier one. A failure to reconcile before the earlier date passes would leave firms operating under genuine regulatory ambiguity as to when counterparty-screening obligations actually bite.

28 Sep 2026 · fim-2026-09-28

Crypto / Digital Assets / Financial Innovation

Brazil's digital-asset exposure this cycle is anchored to the same PCC network at the centre of the OFAC sanctions action: cryptocurrency was the transmission mechanism through which the network moved over $30 million in drug proceeds, and OFAC's 1 July 2026 designations of two Brazilian nationals and four companies under Executive Orders 14059 and 13224 name that crypto-laundering conduct specifically as the sanctionable activity. This places Brazil's crypto-asset ecosystem in the frame not as a regulatory-innovation story this cycle but as a criminal-typology story -- organised crime routing drug proceeds through crypto rails into or through Brazilian financial infrastructure.

This crypto-laundering finding lands at a moment when Brazil's own virtual-asset-service-provider licensing framework is mid-transition, a fact noted here as structural context rather than a first-party crypto-regulatory finding, which belongs to the crypto monitor's own domain. The concurrence matters for a financial-integrity read specifically because it means institutions relying on Brazil's VASP licensing perimeter as a de facto AML control point should not treat licensing-in-progress as equivalent to laundering-risk-mitigated: the PCC's crypto-laundering activity was identified and sanctioned by OFAC independent of, and prior to, full resolution of Brazil's own VASP authorisation architecture.

Operation Exchange's asset freeze also included cryptocurrency alongside cash and other assets among the roughly R$10.4 billion frozen across 24 warrants on 3 July 2026, indicating that the same 73-shell-company network used crypto as one of several asset classes for laundering and storage, not solely as a transmission channel for cross-border proceeds. This multi-asset-class pattern -- crypto alongside conventional cash and other assets within a single laundering network -- is a more realistic composite typology than a crypto-only or cash-only framing, and institutions building typology-detection logic for Brazilian counterparties should account for that blended pattern rather than treating crypto exposure as a separable risk category.

Outlook

Watch for whether OFAC's designation basis references any additional Brazilian or Brazil-linked virtual-asset-service providers as facilitators, which would sharpen the crypto-specific typology considerably. Watch also for any COAF or BCB statement responding directly to the crypto dimension of the PCC laundering scheme, which would indicate a domestic regulatory response distinct from the US sanctions action.

D6 Compliance Technology & Active Defence

no_changeno_change
Judgment: No new RegTech/compliance-technology signal for BR this cycle; carried forward from standing position. Uncertain

D7 AML/CTF Regime

escalatingmaterial_change

AML/CTF Regime

Brazil's domestic anti-money-laundering enforcement architecture was restructured this cycle at the same moment that one of its principal regulated reporting channels was removed. On the enforcement side, the Federal Police created a new division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), approved 9 October and published in the Official Gazette on 13 October 2026. The new division operates under an elevated coordination structure for combating money laundering and asset recovery, reporting into the Directorate of Combating Organised Crime, giving money-laundering enforcement tied to illegal betting and match-fixing its own dedicated general coordination structure rather than leaving it distributed across general organised-crime casework.

Continue reading

That institutional build-out coincided with the collapse of the reporting perimeter it might otherwise have drawn on. Every federal sports-betting authorisation was extinguished on 25 October 2026, which, on the evidence available this cycle, dismantled the suspicious-activity and customer-due-diligence reporting channel that had been established under the 2023 betting law for a licensed segment of roughly 188 betting brands. That channel had fed suspicious-activity reports from the licensed sector to COAF; its removal means that a population of operators that had been inside the regulated reporting net is now, by definition, outside it, with no equivalent legal channel yet reported as having replaced it for the activity that previously ran through licensed brands.

The timing has a further complication. Reporting prior to the licence extinction had already pointed to serious failures in suspicious-activity-of-money-laundering reporting attributed to a Finance Ministry assessment of the licensed segment, meaning the channel being dismantled was already functioning imperfectly before it was removed as a matter of law. This finding is held at the probable rather than confirmed tier of confidence, since no primary notice from COAF or the Finance Ministry itself was located this cycle to support it directly; it rests on a single secondary legal-commentary source. The combined picture, however, is read by the jurisdiction-risk assessment this cycle as one of increasing risk: a newly built enforcement structure is now confronting a sector whose regulated reporting channel has been removed, with the betting volume it formerly served presumed to be displaced toward unlicensed or offshore channels that fall outside any reporting duty at all.

This sits within the three-pillar balance that anti-money-laundering, counter-terrorist-financing, and counter-proliferation-financing findings warrant: the developments identified this cycle are squarely anti-money-laundering in character, concerning reporting-channel architecture and enforcement coordination, with no counter-terrorist-financing or counter-proliferation-financing signal identified for Brazil this cycle.

Outlook

The structural question for Brazil's AML regime going forward is whether the new Federal Police coordination structure is matched by an alternative reporting mechanism for betting-related financial flows now that the licensed channel is gone, or whether enforcement capacity is being built to interdict a flow of activity that has lost its principal source of advance suspicious-activity intelligence. If displaced betting volume migrates to unlicensed or offshore platforms as the jurisdiction-risk assessment anticipates, the practical effect may be a widening gap between enforcement capability and reporting visibility, even as the institutional architecture on the enforcement side strengthens. Confirmation of the compliance-failure finding attributed to the Finance Ministry, through a primary notice rather than secondary commentary, would materially change how that specific claim should be weighted in future assessments of the pre-existing reporting channel's reliability.

Judgment: The total prohibition of licensed betting collapsed the SAR-reporting channel between ~188 licensed betting brands and COAF; a new Federal Police division (DRAME) and financial-flow interdiction regime for illegal-betting flows were created. Probable
Cumulative analysis

AML/CTF Regime

Brazil's standing AML/CTF baseline is unchanged this cycle: the 2023 FATF mutual evaluation rated the country Compliant on ten and Largely Compliant on nineteen of forty Recommendations, with Substantially Effective ratings on two of eleven Immediate Outcomes, and Brazil remains off the FATF grey list. No plenary update to this rating was located this cycle, and it is carried forward as standing descriptive context against which this cycle's new development should be read.

That new development is the construction of a financial-sector choke-point specifically targeting unauthorised betting operators, assessed as an architectural rather than incidental shift. Lei 15.328/2026, the so-called Anti-Faction Law, empowers immediate freezing of funds in accounts linked to unauthorised betting operations, explicitly framed as an organised-crime countermeasure rather than a conventional AML instrument; this framing itself is analytically notable, since it routes betting-sector financial crime enforcement through an anti-organised-crime statute rather than through the standard AML/CFT reporting chain. Alongside it, Decreto 13.033/2026 and Ministério da Fazenda Portaria 1.766/2026 impose joint tax liability, grounded in Complementary Law 224/2025 Article 6, on banks, payment institutions and payment arrangers that continue processing transactions for unauthorised betting operators after formal notification. Three independent tier-3 outlets corroborate the instrument numbers and dates for both measures, though no planalto.gov.br-hosted primary text was reached for either this cycle, and both findings are assessed at probable rather than confirmed confidence.

Together these two instruments deputise the regulated financial sector as the primary enforcement mechanism against a betting-sector illicit-finance typology that would otherwise sit largely outside conventional AML/CFT reporting channels, given the sector's cash- and app-intensive character. This is a structural correction with three-pillar relevance: it is fundamentally a CTF-adjacent and AML-architecture development, using account-freezing and tax-liability levers rather than traditional STR/CTR-based detection, and it should not be under-weighted simply because it does not generate conventional suspicious-activity-report volume. Implementing detail from the Banco Central on the Anti-Faction Law's execution mechanics, originally due by 25 May 2026, has not been independently confirmed against a primary source this cycle, which leaves a live gap in understanding how the freezing power will actually be operationalised.

Outlook

The principal item to track is whether Banco Central implementing norms on Lei 15.328/2026 execution mechanics surface and can be independently confirmed, which would move both the freezing-power and joint-tax-liability findings from probable toward confirmed confidence. The unresolved beneficial-ownership gap noted in the standing tracker record, under which declaratory BO information remains treated as tax-secret pending a court order for law-enforcement or COAF access, continues to sit as a structural constraint on how effectively either new instrument can be operationalised against complex ownership structures.

domain_sub_briefs · D7 · Cumulative analysis
Standing baseline position

New Federal Police division DRAME created 13 Oct 2026 under elevated CGLA/DICOR coordination; licensed-gambling SAR/CDD channel built under Lei 14.790/2023 ceased operating following extinction of all federal betting authorisations 25 Oct 2026.

Periodic updates (3)
3 Nov 2026 · fim-2026-11-03

AML/CTF Regime

Two structural shifts in Brazil's anti-money-laundering enforcement architecture emerged, moving in opposite directions. On the capacity side, the Federal Police created a new division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), approved 9 October and published 13 October 2026. It operates under a reorganised General Coordination for Repression of Money Laundering and Asset Recovery, which gives money-laundering enforcement its own dedicated coordination structure where previously it did not have one. This is an architecture-level finding: it is a change in the state's enforcement capacity and reporting lines, not a single case outcome, and it is corroborated to a confirmed tier against an English-language trade source describing the decree's publication.

On the control side, the picture moves the other way. Following the extinction of every federal sports-betting authorisation on 25 October 2026, the suspicious-activity-reporting and customer-due-diligence channel that previously connected roughly 188 licensed betting brands to COAF appears to have ceased functioning for that segment. A legal-commentary source links this to the Willer Tomaz case as an illustration of a legacy compliance failure involving flows of approximately R$5 billion. This finding rests on a single tier-three commentary source rather than a primary Fazenda or COAF notice, so it is carried at a probable rather than confirmed level of confidence, and the underlying instrument — the Lei no 14.790/2023 SAR regime for licensed betting — is treated as now defunct for the licensed segment rather than formally repealed on the evidence available.

The juxtaposition is analytically significant under an architecture-over-incident reading: enforcement coordination capacity is expanding at the same moment a sector-specific reporting channel has gone dark. Absence of a functioning reporting channel is itself a finding worth surfacing, not merely a gap to be noted and set aside, because it describes where visibility into transaction-level risk has been lost even as institutional capacity to act on such risk has grown elsewhere.

Outlook

Whether the enforcement capacity created by DRAME is directed at payment flows left unmonitored by the collapse of the licensed-betting reporting channel is the open structural question carried forward; the evidence available does not yet answer it, and this is noted as a watch point rather than a forecast. Confirmation of the SAR-channel collapse from a primary regulatory notice, rather than commentary alone, would resolve the confidence gap currently attached to that finding.

18 Oct 2026 · fim-2026-10-18

AML/CTF Regime

Brazil's standing AML/CTF regime remains anchored in the 2023 FATF/GAFILAT mutual evaluation, which is the current governing assessment and not a this-cycle development. That evaluation found improved international cooperation and risk assessment relative to Brazil's 2010 evaluation, while flagging continuing gaps in inter-agency coordination and in the prosecution of money-laundering offences. Brazil is not on the FATF grey or black list.

Against that stable baseline, PL 2901/2026, the Marco Nacional de Fintechs e Plataformas Digitais, proposes to close a documented enabler gap: the absence of a dedicated statutory AML framework for fintechs and digital financial platforms, as distinct from existing BCB and COAF resolutions that currently govern the sector. As reported, the bill would ban anonymous digital accounts, mandate ten-year data retention, impose obligations graduated by firm size and systemic risk, and set fines of up to 20 percent of annual gross revenue for AML infractions. The bill was in early committee stage as of 15 October 2026. This account rests on a single trade-press source without independently retrieved primary legislative text, so both the bill's precise provisions and its prospects for enactment should be treated as reported rather than confirmed.

If enacted, PL 2901/2026 would represent a structural addition to Brazil's AML architecture, a dedicated statutory framework where none currently exists for the fintech and digital-platform sector, rather than an incremental adjustment to an existing regime. That distinction matters under an architecture-over-incident reading: the bill's significance, if it proceeds, lies in creating a framework rather than in any single enforcement action it might later generate.

Outlook

PL 2901/2026's progress through committee is the item to watch; no enactment timeline is confirmed, and the bill remains at an early stage as of 15 October 2026. Brazil's FATF/GAFILAT standing, last assessed in 2023, is not due for a scheduled reassessment within the current cycle window on the evidence available. The overall AML/CTF risk direction for Brazil is assessed as stable, with the fintech bill representing a prospective rather than current change to the regime's architecture.

4 Oct 2026 · fim-2026-10-04

AML/CTF Regime

Brazil's betting sector converted overnight this cycle from a licensed, AML-supervised industry into a prohibited one. Medida Provisoria 1.394/2026, signed 25 September 2026, prohibits fixed-odds betting nationwide. The Secretaria de Premios e Apostas's own payment-interdiction portaria, published on its gov.br page on 15 September 2026, had already expanded the procedures aimed at preventing, identifying and repressing payment transactions linked to irregular fixed-odds betting exploitation; that instrument predates the betting prohibition by ten days and was framed around the unlicensed-operator segment specifically. With the entire sector now unauthorised by statute, that payment-interdiction architecture applies in practice across what was, until three weeks ago, a licensed and AML-supervised industry, with banks' existing 24-hour account-freeze obligation for unlicensed operators becoming, in effect, a sector-wide default.

This is the kind of structural shift that the architecture-over-incident framing is built to surface: a regulatory-conduct change for an entire industry carries more analytical weight than any single enforcement action, even though it is formally executed through an enforcement-adjacent instrument, the SPA portaria, rather than through legislation directly addressed to payments. Banks and payment companies with betting-sector exposure face materially raised AML exposure as a direct consequence, independent of whatever penalty schedule eventually attaches to the betting prohibition itself, which was not located in primary text this cycle.

Alongside this structural event, COAF continued routine administrative enforcement at modest scale: fines of R$63,800 published 8 September 2026 for declaration and requisition failures, and separate fines against SHC Entretenimento and Hyun Mi Cho Chung for three infractions published 14 September 2026. These are ordinary periodic AML-control actions and carry no indication of a new typology; they are noted for completeness against the betting-sector conversion, which is this cycle's dominant AML/CTF development.

Brazil's standing FATF position is unchanged: the country remains off the grey list, with its 2023 Mutual Evaluation showing Compliant or Largely Compliant ratings on 29 of 40 Recommendations but Substantially Effective on only 2 of 11 effectiveness outcomes. That structural effectiveness gap predates this cycle and provides useful context for assessing how quickly Brazil's AML architecture can absorb an abrupt sector-wide conversion of the kind the betting prohibition represents: a jurisdiction with known effectiveness weaknesses converting an entire licensed sector into an enforcement target overnight is a combination worth monitoring for implementation strain.

Outlook

Whether the sector-wide payment-interdiction posture persists depends on the same three processes determining the betting prohibition's own survival: the pending Supremo Tribunal Federal challenge, the Medida Provisoria's congressional conversion process, and reported uncertainty over the Secretaria de Premios e Apostas's own institutional future. A reversal of the underlying prohibition would likely revert the payment-interdiction posture toward its prior, narrower scope targeting unlicensed operators specifically rather than the whole sector.

D8 Commercial Activity

no_changeno_changestanding position

Commercial Activity

Brazilian crypto-payments fintech BlindPay raised US3.3 million (reported as R16.9 million) in a funding round with participation from US stablecoin issuer Circle, announced 23 September 2026. The stated purpose was to expand cross-border stablecoin payment infrastructure between Brazil and the United States. BlindPay has a pending application for BCB PSAV authorisation, due by the 30 October 2026 deadline under Resolucao BCB no 519/2025, meaning the company is raising capital and building out cross-border infrastructure while still navigating the same authorisation cliff that applies to the rest of Brazil's incumbent virtual-asset service provider population.

Continue reading

This commercial event sits inside, rather than apart from, the tightening regulatory perimeter described under crypto and digital assets this cycle: Resolucao BCB no 588/2026 expanded mandatory COAF reporting for self-custodied virtual-asset transfers of US10,000 or more effective 1 October 2026, and the PSAV authorisation deadline of 30 October 2026 under Resolucao BCB no 519/2025 will determine which incumbent providers, BlindPay potentially among them, retain the ability to be intermediated by BCB-authorised institutions going forward. Circle's participation as investor is notable given Circle's own position as a major stablecoin issuer with a direct commercial interest in the cross-border stablecoin payment corridor BlindPay is building.

The finding rests on a single T3-quality journalism source; no corroborating company filing or regulatory disclosure was retrieved this cycle, so the funding figures and stated use of proceeds should be read as reported rather than independently verified.

Outlook

Whether BlindPay secures its PSAV authorisation ahead of the 30 October 2026 deadline is the immediate marker to watch, both for BlindPay specifically and as a proxy for how incumbent virtual-asset firms more broadly are navigating Brazil's authorisation cliff while continuing to raise capital and build cross-border infrastructure.

Judgment: No commercial transaction among integrity-infrastructure firms identified this cycle for BR. Uncertain
Regulatory horizon
In Force Pending6 Nov 2026 · ±quarter

BCB-authorised-institution banking cut-off for unauthorised virtual-asset counterparties

From 6 November 2026, BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are neither authorised nor mid-authorisation.
Source
Proposed2026-Q4 · ±half_year

Central Bank supervisory and deposit-insurance reform following Banco Master collapse

Ongoing Supreme Court and Federal Audit Court scrutiny, plus Congressional attempts to alter deposit-guarantee limits and central bank director tenure, may reshape BCB supervisory independence and disclosure rules.
Source
In Force Pending2026-Q4 · ±quarter

VASP authorisation / unauthorised-counterparty cutover

BCB-authorised banks and payment institutions become barred from transacting with unauthorised virtual-asset providers once the disputed cutover date arrives.
source not collected
In Force Pending2026-Q4 · ±quarter

BCB VASP incumbent authorisation deadline

From 30 Oct 2026, unauthorised VASPs lose access to banking/FX relationships with BCB-regulated institutions.
Banco Central do Brasil Source
4 dated · 2 pending date · baseline fim-2026-07-09
Role action cards
MLRO

Self-custody wallet reporting to COAF and the collapse of the betting SAR channel both land in the same window.

A specific reporting trigger for self-custodied virtual-asset transfers above US$10,000 took effect 1 October 2026, widening the population of reportable events. Separately, the suspicious-activity channel that previously ran from licensed betting brands to COAF no longer exists following the 25 October 2026 extinction of federal betting authorisations, removing a prior source of typology intelligence for betting-linked flows.

2 evidence refs
Compliance

Virtual-asset counterparty authorisation status becomes a continuous screening requirement from 6 November 2026.

BCB-authorised institutions must now verify that virtual-asset counterparties are authorised or mid-authorisation on an ongoing basis, not only at onboarding, since the authorisation status of a counterparty can change against a fixed regulatory calendar.

2 evidence refs
Legal

Extinction of all federal betting authorisations creates an abrupt change in licensed-sector legal status.

Clients that held federal betting authorisations as of 24 October 2026 no longer hold them as of 25 October 2026, with reported compliance failures in suspicious-activity reporting attributed to the Finance Ministry assessment of that segment preceding the extinction, at the probable rather than confirmed level of confidence.

1 evidence refs
Board

Brazil's jurisdiction risk direction is assessed as increasing this cycle.

The combination of a dismantled licensed-betting reporting channel and a tightened virtual-asset authorisation perimeter is read as raising overall illicit-flow risk exposure for Brazil, driven by anticipated displacement of betting volume to unlicensed channels.

1 evidence refs
CTO

Virtual-asset counterparty screening and self-custody wallet detection both require live regulatory-status data.

Systems that monitor virtual-asset transactions now need to flag self-custodied wallet transfers at the US$10,000 equivalent threshold and separately confirm counterparty authorisation status against the Central Bank's authorisation list on a continuous basis to support the 6 November 2026 cut-off.

2 evidence refs
Risk

Displacement risk from the betting-sector prohibition is an emerging cross-channel exposure.

The jurisdiction-risk assessment identifies increasing risk driven by potential migration of betting volume to unlicensed or offshore channels outside the reporting perimeter, compounded by compliance gaps already reported in the outgoing licensed segment.

2 evidence refs
Operations

Transaction-monitoring thresholds need adjustment for the new self-custody reporting trigger.

Operational screening for virtual-asset transfers must now capture the US$10,000-equivalent self-custody threshold effective 1 October 2026, and counterparty-authorisation checks must be embedded into workflow ahead of the 6 November 2026 cut-off.

2 evidence refs
Audit

The evidentiary basis for the betting-sector compliance-failure finding rests on a single secondary source.

No primary notice from COAF or the Finance Ministry was located to support the reported compliance failures in the licensed betting segment; the finding is held at the probable rather than confirmed tier, which audit should note as a gap pending a primary-source update.

1 evidence refs
Scenario sketches

Betting-volume displacement into unlicensed offshore channels

An illustrative pathway worth tracking: volume previously placed through the now-extinguished licensed betting brands could migrate toward offshore or unlicensed platforms that sit entirely outside the COAF reporting perimeter, with settlement routed through informal payment intermediaries or virtual-asset rails rather than the regulated banking system. If this pathway were to materialise, the new Federal Police coordination structure would be confronting a flow of activity with materially reduced visibility compared to the licensed channel it replaced.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_change
T2 · EU AML Package / AMLAno_change
T3 · FATF Grey Listno_change
T4 · Beneficial-Ownership Register Statusno_change
T5 · Crypto & Digital-Asset IntegrityescalatingVASP filing deadline and banking cut-off reached inside this cycle's window; COAF self-custody reporting trigger live from 1 October 2026.
T6 · Sanctions Regime Divergenceno_change
Registers

Enforcement actions

  • 30 Jul 2025
  • 22 Sep 2025
  • 14 Oct 2025
  • 28 Aug 2025
  • 18 Nov 2025
  • 1 Jul 2026
  • 30 Jul 2025
  • 22 Sep 2025
  • 14 Oct 2025
  • 28 Aug 2025
  • 18 Nov 2025
  • 1 Jul 2026
  • 3 Jul 2026
  • 14 Sep 2026
  • 8 Sep 2026
  • OFAC imposed Global Magnitsky sanctions on sitting Brazilian Supreme Court Justice Alexandre de Moraes, over his oversight of prosecutions against former President Jair Bolsonaro, blocking his US assets and those of a linked holding company. 30 Jul 2025
  • OFAC extended Global Magnitsky sanctions to Viviane Barci de Moraes, wife of Justice Alexandre de Moraes and owner of a São Paulo law firm, escalating pressure days after Bolsonaro's coup-plot conviction. 22 Sep 2025
  • Operation Hydra targeted fintechs allegedly used by the PCC to launder illicit proceeds; a police officer who owned one of the fintechs was arrested, following whistleblower testimony from a businessman later murdered at Guarulhos airport. 14 Oct 2025
  • Operations Quasar, Tank and Hidden Carbon exposed illicit transactions totalling at least 52 billion reais ($9.6bn) across Brazil's fuel supply chain and fintech industry, with PCC members implicated. 28 Aug 2025
  • The Central Bank moved to liquidate Banco Master SA after fraud allegations tied to opaque assets and fabricated credit instruments; CEO Daniel Vorcaro was arrested attempting to board a private jet to Dubai. 18 Nov 2025
  • OFAC updated its counter-terrorism/counter-narcotics designations to include Brazilian fintech and construction entities linked to an individual (de Oliveira Shimada) laundering PCC drug proceeds via crypto back into Brazil. 1 Jul 2026

Sanctions changes

  • 30 Jul 2025
  • 12 Dec 2025
  • 1 Jul 2026
  • 4 Dec 2025
  • 30 Jul 2025
  • 12 Dec 2025
  • 1 Jul 2026
  • 4 Dec 2025
  • 1 Jul 2026
  • 1 Jan 2026
  • OFAC listed sitting Brazilian Supreme Court Justice Alexandre de Moraes under Global Magnitsky sanctions, an unprecedented unilateral US action against a senior judicial officer of a major G20 economy over his handling of the Bolsonaro coup-plot prosecution. 30 Jul 2025
  • OFAC removed Alexandre de Moraes, his wife Viviane Barci de Moraes, and the linked LEX law firm from the Global Magnitsky sanctions list as US-Brazil relations began to normalise. 12 Dec 2025
  • OFAC progressively expanded Transnational Terrorist Group (SDGT/FTO) designations covering PCC and Comando Vermelho to include Brazilian fintech and corporate front entities used to launder cross-border drug proceeds via cryptocurrency. 1 Jul 2026
  • The European Commission's December 2025 update to its AML/CFT high-risk third-country list added Bolivia and the British Virgin Islands and delisted six African/other jurisdictions, while Brazil remained absent from the list, consistent with its FATF-clean status. 4 Dec 2025

Regulatory horizon (register)

  • Central Bank supervisory and deposit-insurance reform following Banco Master collapse
  • VASP authorisation / unauthorised-counterparty cutover
  • PL 2901/2026 - Marco Nacional de Fintechs e Plataformas Digitais (MNFPD)
  • BCB VASP incumbent authorisation deadline
  • VASP incumbent authorisation filing deadline
  • BCB-authorised-institution banking cut-off for unauthorised virtual-asset counterparties
  • SPSAV VASP authorisation deadline for existing crypto firms
  • CVM ruling on crypto-asset securities classification
  • FATF/GAFILAT enhanced follow-up report on Brazil's MER action plan
  • Central Bank supervisory/deposit-insurance reform following Banco Master collapse

Active schemes

  • [CRITICAL] PCC fintech/fuel-sector laundering infrastructure
  • [CRITICAL] PCC/Comando Vermelho crypto-enabled cross-border laundering
  • [HIGH] Illegal Amazon gold laundering via shell companies
  • [HIGH] Crypto-to-fiat laundering pipeline via Brazilian VASPs
  • [CRITICAL] Banco Master opaque-asset structuring and fabricated credit
Sources
  1. The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) Regulations 2023
  2. https://www.fatf-gafi.org/en/publications/Mutualevaluations/Brazil-mer-2023.html
  3. https://g3newswire.com/brazilian-finance-ministry-regulates-joint-tax-liability-for-institutions-that-enable-unauthorised-betting/
  4. https://hipther.com/gaming-and-entertainment-latin-america/2026/05/14/111710/brazils-betting-evolution-regulation-politics-and-compliance/
  5. https://www.mattosfilho.com.br/unico/normas-regulamentacao-ativos-virtuais/
  6. https://thedigitalbanker.com/brazils-pix-goes-global-while-crypto-faces-tighter-controls/
  7. Lei Complementar nº 224, de 26 de dezembro de 2025
  8. Resolução BCB nº 519, de 10 de novembro de 2025
  9. Resolução BCB nº 521, de 10 de novembro de 2025
  10. https://home.treasury.gov/news/press-releases/sb0257
  11. https://www.kslaw.com/insights/articles/treasury-sanctions-brazilian-criminal-network
  12. https://www.zyphe.com/resources/news/pcc-money-laundering-sanctions-ofac-crypto-july-2026
  13. https://www.fatf-gafi.org/en/countries/detail/Brazil.html
  14. https://www.bcb.gov.br/en/financialstability/moneylaundering
  15. https://www.unodc.org/documents/treaties/UNCAC/WorkingGroups/workinggroup2/2022-November-7-11/Brazil_Responses_to_Questionnaire_on_BOT_Regimes_EN.pdf
  16. Ric.com.br
  17. TFTC
  18. Rio Times Online
  19. Symplexia Labs
  20. Atlas Público
  21. Secretaria de Prêmios e Apostas (gov.br)
  22. KnowYourCountry
  23. https://www.bocater.com.br/boletim-bocater/banco-central-reforca-regras-de-pld-ft-para-ativos-virtuais/
  24. https://ric.com.br/cotidiano/criptomoedas-coaf-e-novas-regras-o-que-muda-a-partir-de-1o-de-outubro-de-2026/
  25. https://legismap.com.br/leis-e-normas/resolucao-bcb-n-588-de-23-09-2026
  26. http://fcm.law/en/autorizacao-psav-banco-central/blockchain-web3/
  27. https://www.mercgroup.com.br/insights/regulacao-psav-ativos-virtuais-bcb-519-520-521-autorizacao-capital-pld-controles-auditoria
  28. https://www.knowyourcountry.com/country-reports/brazil/
  29. https://exame.com/future-of-money/fintech-brasileira-capta-r-169-milhoes-em-rodada-de-investimento-com-aporte-da-circle/
  30. https://www.congressonacional.leg.br/materias/medidas-provisorias/-/mpv/175871
  31. https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709compilado.htm
  32. https://www.letsmoney.com.br/fintech/marco-fintechs-projeto-lei-lavagem-dinheiro/
  33. https://www.brasilemfolhas.com.br/2026/10/projeto-cria-marco-regulatorio-para-fintechs-e-mira-lavagem-de-dinheiro/
  34. https://agenciabrasil.ebc.com.br/economia/noticia/2026-09/bc-amplia-controle-sobre-criptomoedas-e-mira-carteiras-proprias
  35. RIC.com.br
  36. amplojuridico.com.br
  37. yogonet.com
  38. capitalaberto.com.br
  39. December 2023 Anti-money laundering and counter-terrorist financing measures
  40. Brazil's measures to combat money laundering and terrorist financing
  41. Mutual Evaluation Report of Brazil
  42. Brazil
  43. Outcomes FATF Plenary, 25-27 October 2023
  44. Mutual Evaluations
  45. FATF
  46. Consolidated assessment ratings
  47. Consolidated Processes and Procedures for Mutual Evaluations and Follow-Up: “Universal Procedures”
  48. Publications
  49. Sanctions Programs and Country Information | Office of Foreign Assets Control
  50. Archive of Changes to OFAC's Sanctions Lists | Office of Foreign Assets Control
  51. Global Magnitsky Designations Removals | Office of Foreign Assets Control
  52. Recent Actions | Office of Foreign Assets Control
  53. Global Magnitsky Designation | Office of Foreign Assets Control
  54. Five steps to effective cryptocurrency sanctions compliance in 2026
  55. Crypto Sanctions: 2026 Crypto Crime Report
  56. Sanctions List Updates
  57. Inside Iran’s Growing $7.8 Billion Crypto Ecosystem
  58. 2026 Crypto Crime Report: Scams
  59. US Sanctions Brazil Supreme Court Justice Moraes Over Bolsonaro Case - Bloomberg
  60. Magnitsky Act: Why US Sanctioned Brazilian Supreme Court Justice’s Wife - Bloomberg
  61. US Sanctions Brazilian Justice Moraes’ Wife Under Magnitsky Act - Bloomberg
  62. EUA sancionam Alexandre de Moraes por caso Bolsonaro - Bloomberg
  63. Global Magnitsky Designations | Office of Foreign Assets Control
  64. US Lifts Sanctions on Brazil Supreme Court Judge Alexandre de Moraes - Bloomberg
  65. EE.UU. sanciona al juez Moraes que investiga a Bolsonaro por intento de golpe - Bloomberg
  66. Banco do Brasil Mulls Options If US Escalates Magnitsky Sanctions - Bloomberg
  67. Brazil's Crypto Crime Challenge: How Global Money Laundering Networks Target Latin America's Largest Market
  68. FINANCIAL ACTION TASK FORCE ON MONEY LAUNDERING IN SOUTH AMERICA
  69. Fintechs, Banks Targeted in Brazil Crackdown on Money Laundering - Bloomberg
  70. "Black and grey" lists
  71. The FATF Recommendations
  72. What Latin America's Crypto Surge Means for Compliance Teams | TRM Blog
  73. Countries / Jurisdictions
  74. Brazil Police Crack Down on $9.6 Billion Fuel Scheme
  75. Brazil Investigates $5 Billion Fraud Tied to Fintech Firms - Bloomberg
  76. Fintechs Launder Cocaine Cash for Brazil's Largest Criminal Gang
  77. Police operation targeting Brazil’s largest criminal organization uncovers Panama Papers link - ICIJ
  78. Brazil’s Federal Police Dismantle $540 Million Crypto Laundering Network in “Operation Lusocoin” | TRM Blog
  79. Brazilian Cop-Turned-Banker Arrested in Major Money Laundering Bust | OCCRP
  80. Amazonian territories on the frontlines of the transition minerals race | Global Witness
  81. With support from UNODC Brazil, workshop at CCPI-Amazon advances operational alignment in combating illegal gold mining in the Amazon
  82. UNODC Brazil and PRF Carry Out First Joint Action of the Year in the Fight Against Illegal Mining in the Amazon
  83. UNODC Brazil and the Brazilian Federal Police conduct a gold sample collection campaign in Amapá to strengthen traceability and international cooperation
  84. Brazil Launches Investigation into R$80 Million in Illegal Gold
  85. intersection of criminal activities in the gold mining sector in ...
  86. Brazil Targets Illegal Gold Mines in the Amazon | OCCRP
  87. Brazil Targets Illegal Gold Mines in the Amazon
  88. Operation Leads to Major Gold Seizure in the Brazilian Amazon
  89. Watch Gold’s Price Surge Drives Narcos Into Illegal Mining in the Amazon - Bloomberg
  90. Anti-money laundering and countering the financing of terrorism at international level - Finance
  91. European Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance
  92. EU methodology for the identification of high-risk third countries - Finance
  93. High risk third countries and the international context content of anti-money laundering and countering the financing of terrorism - European Commission
  94. Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance
  95. High-risk and other monitored jurisdictions
  96. Anti-Money Laundering and Terrorist Financing Directive 4 - Finance
  97. Jurisdictions under Increased Monitoring - 19 June 2026
  98. Anti-money laundering: the Commission updates its list of high-risk third-country jurisdictions to strengthen the international fight against financial crime - Finance
  99. Jurisdictions under Increased Monitoring - 13 February 2026
  100. Outcomes FATF Plenary, 17-19 June 2026
  101. Jurisdictions under Increased Monitoring - 13 June 2025
  102. News
  103. FATF changes its grey listing criteria to further focus on risk
  104. Brazil Central Bank Faces Supreme Court Probe Over Banco Master Liquidation - Bloomberg
  105. Banco Master CEO Denies $2.4 Billion Fraud As Brazil Bank Is Liquidated - Bloomberg
  106. Brazil’s Central Bank Was Warned for Years of Banco Master Risks - Bloomberg
  107. Banco Master CEO Arrested as Central Bank Moves to Liquidate Firm
  108. Banco Master Collapse: Brazil Audit Court Orders Probe Into Liquidation of Bank - Bloomberg
  109. Banco Master Collapse in Brazil Highlights Costly Oversight Gaps - Bloomberg
  110. Banco Master May Be Brazil’s Biggest Banking Fraud, Haddad Warns - Bloomberg
  111. Brazil Bank Collapse Spells Turmoil for Firms Holding Its Debt - Bloomberg
  112. Brazil’s Audit Court Backs Off Threat to Undo Master Liquidation - Bloomberg
  113. Banco Master Fraud: Daniel Vorcaro’s Most Powerful Brazil Connections
  114. Counter Terrorism Designations; Issuance of Amended Iran-related Frequently Asked Question | Office of Foreign Assets Control
  115. Iran-related Designations; Counter Terrorism Designations Updates | Office of Foreign Assets Control
  116. Issuance of Executive Order Imposing Sanctions on Foreign Persons Involved in the Global Illicit Drug Trade; Counter Narcotics Designations and Designations Updates | Office of Foreign Assets Control
  117. OFAC Sanctions 100+ ISIS-K Crypto Addresses
  118. Transnational Criminal Organizations Designations; Cuba Designations; Russia-related Designations Removals; Issuance of TCO-related General License; Publication of OFAC-OFSI Comparative Overview | Office of Foreign Assets Control
  119. Transnational Criminal Organizations Designations | Office of Foreign Assets Control
  120. Transnational Criminal Organizations | Office of Foreign Assets Control
  121. West Bank-related Designations; Russia-related Designation; Counter Narcotics Designation and Designations Updates; Transnational Criminal Organizations Designation Update | Office of Foreign Assets Control
  122. Counter Narcotics Designations; Counter Terrorism Designations and Designation Update | Office of Foreign Assets Control
  123. Transnational Criminal Organizations Press Chart Archive | Office of Foreign Assets Control
  124. ECSH31555 - Schedule 3ZA - High-Risk Third Countries - HMRC internal manual - GOV.UK
  125. Money Laundering Advisory Notice: High Risk Third Countries - GOV.UK
  126. HM Treasury Advisory Notice: High Risk Third Countries - GOV.UK
  127. ECSH64830 - Schedule 3ZA - High-Risk Third Countries - HMRC internal manual - GOV.UK
  128. Money Laundering Advisory Notice: June 2026 - GOV.UK
  129. High-risk third countries
  130. The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) (No. 3) Regulations 2022
  131. HM Treasury publish updated list of high risk third jurisdictions
  132. The Money Laundering and Terrorist Financing (High-Risk ...
  133. The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) Regulations 2023
  134. FATF/GAFILAT
  135. FATF
  136. US Treasury OFAC
  137. US Treasury OFAC
  138. US Treasury OFAC
  139. US Treasury OFAC
  140. European Commission
  141. HM Treasury (UK)
  142. Bloomberg
  143. Bloomberg
  144. Bloomberg
  145. OCCRP
  146. Chainalysis
  147. TRM Labs
  148. Global Witness / Amazon Underworld
  149. UNODC Brazil / Aurum Project
Coverage gaps
fim-int-2026-07-07-G001: No independent, post-January-2026 e…
fim-int-2026-07-07-G001: No independent, post-January-2026 evidence establishing whether Brazil's e-BEF beneficial-ownership filing reform has materially improved REDESIM database population beyond the 2023 MER finding. [resolved]
fim-int-2026-07-07-G002: The ratified typology library (sent…
fim-int-2026-07-07-G002: The ratified typology library (sentinel-typology-library-v1.0.json, fim-typ-001 through fim-typ-020) was not present in this cycle's context, preventing typology_observations matching against this cycle's Brazil developments. [resolved]
fim-int-2026-07-07-G003: No specific FATF Recommendation-num…
fim-int-2026-07-07-G003: No specific FATF Recommendation-numbered citation (e.g. R.24, R.25) was supplied by Research for any Brazil claim this cycle despite general domain standing coverage referencing those Recommendations. [resolved]
fim-int-2026-07-07-G004: No first BCB VASP supervisory enfor…
fim-int-2026-07-07-G004: No first BCB VASP supervisory enforcement data exists yet to assess whether the new licensing regime is actually detecting and disrupting the Russian, Chinese and drug-trafficking-linked flows identified in Brazilian exchange data. [resolved]
fim-int-2026-07-07-G005: The outcome of Supreme Court and Fe…
fim-int-2026-07-07-G005: The outcome of Supreme Court and Federal Audit Court review of Central Bank supervisory conduct in the Banco Master liquidation is not yet resolved, limiting assessment of whether structural reform will follow. [resolved]
fim-int-2026-07-07-G006: The outcome of the CVM public consu…
fim-int-2026-07-07-G006: The outcome of the CVM public consultation on crypto-asset securities classification, closed June 2026, has not yet been published. [resolved]
fim-int-2026-09-02-G001: D1 sanctions, D2 beneficial ownersh…
fim-int-2026-09-02-G001: D1 sanctions, D2 beneficial ownership, D3 enabler jurisdictions and D4 conflict finance were not independently re-swept in this BR-scoped pass; absence is a coverage gap, not a no-material-change finding. [resolved]
fim-int-2026-09-02-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-02-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No bcb.gov.br-hosted primary text was reached for Resoluções BCB 519-521 this cycle; sourcing rests on T2/T3 corroboration only. [resolved]
fim-int-2026-09-02-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-02-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): BCB implementing norms on Lei 15.328/2026 execution mechanics (due 25 May 2026) were not independently confirmed this cycle. [resolved]
fim-int-2026-09-02-G004: Tier D jurisdiction watch (KH, LA, …
fim-int-2026-09-02-G004: Tier D jurisdiction watch (KH, LA, MX, CO) was out of scope for this BR-specific run and is recorded as a coverage gap, not a finding. [resolved]
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No T1 primary document was independently fetched for D3, D4, D5 or D6 this cycle because retrieval was scoped to Brazil-specific queries; Tier D jurisdictions (KH/LA/MX/CO) were not actively searched. [resolved]
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D2'}): Operation Exchange's specific figures (R$10.4bn, 24 warrants, 73 shell companies) rest on a single T3 source and were not cross-verified against a Polícia Federal primary release this pass. [resolved]
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): FR-1257 gambling-specific obligation-atom question sets were not depth-researched this cycle; the dominant market-closure event consumed the pooled web-search budget. [resolved]
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): VASP authorisation deadline and unauthorised-counterparty cutoff dates diverge across sources (30 October vs 6 November 2026); no Tier-1 BCB source reconciling the discrepancy was located this cycle. [resolved]
fim-int-2026-10-04-G003: Tier D (KH, LA, MX, CO) was not ind…
fim-int-2026-10-04-G003: Tier D (KH, LA, MX, CO) was not independently swept this cycle given the BR-bound dispatch; a dedicated Mexico TBML/cartel-finance sweep was not run. [resolved]
fim-int-2026-10-04-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G004 ({'scheme': 'financial_integrity', 'value': 'D7'}): Enforcement penalty schedule for non-compliant firms under MP 1.394/2026 (betting prohibition) was not located to primary-instrument standard this cycle. [resolved]
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No BR-specific D2 (Beneficial Ownership) development was located this cycle despite active searching; recorded as a coverage gap, not an assertion of no activity. [resolved]
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No BR-specific D3 (Enabler Jurisdictions) development was located this cycle. [resolved]
fim-int-2026-10-11-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G003 ({'scheme': 'financial_integrity', 'value': 'D4'}): No BR-specific D4 (Conflict Finance) development was located this cycle. [resolved]
fim-int-2026-10-11-G004: Tier D jurisdictions (KH, LA, MX, C…
fim-int-2026-10-11-G004: Tier D jurisdictions (KH, LA, MX, CO) were not within scope for this single-JID Brazil dispatch. [resolved]
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No dedicated primary-source sweep of BR-specific beneficial-ownership registries, enabler-network reporting, or sanctions designations was completed within this cycle's search budget. [resolved]
fim-int-2026-10-18-G002: The Tier D jurisdiction watch (Camb…
fim-int-2026-10-18-G002: The Tier D jurisdiction watch (Cambodia, Laos, Mexico, Colombia) was not actively re-searched this cycle because the full search budget was allocated to Brazil-specific sources. [resolved]
fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): Primary BCB resolution number for the self-custody wallet reporting rule was not independently retrieved; sourced via Agência Brasil's account of the rule. [resolved]
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): Primary BCB Resolução text for 588/589/2026 not directly opened; relies on secondary legal-explainer and trade-press sources. [open]
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No primary COAF/Fazenda notice located for the Willer Tomaz compliance-failure claim. [open]
fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): No BR-specific signal found for D1 (Sanctions), D2 (Beneficial Ownership), D3 (Enabler Jurisdictions), D4 (Conflict Finance), D6 (Compliance Technology) this cycle. [open]
FIM-GAP-001 (D3): Lawyers and several DNFBP categories remai…
FIM-GAP-001 (D3): Lawyers and several DNFBP categories remain effectively unregulated for AML/CFT/CPF purposes in Brazil, per the FATF/GAFILAT MER, leaving a professional-enablement gap for structuring and gatekeeping services.
FIM-GAP-002 (D2): Despite the REDESIM initiative to detect m…
FIM-GAP-002 (D2): Despite the REDESIM initiative to detect misuse of companies, Brazil's beneficial ownership database remains largely unpopulated, undermining transparency of legal entities used in laundering schemes.
FIM-GAP-003 (D6): Fintechs were historically outside the Cen…
FIM-GAP-003 (D6): Fintechs were historically outside the Central Bank's mandatory reporting perimeter to the Federal Revenue Service, a loophole prosecutors say allowed PCC-linked laundering to scale to over 1,500 fintech platforms nationally before the 2025-26 crackdown.
FIM-GAP-004 (D2): The Central Bank was reportedly warned for…
FIM-GAP-004 (D2): The Central Bank was reportedly warned for years about Banco Master's alarming asset growth and opacity without escalating supervisory action, until a $2.4bn+ fraud allegation forced liquidation.
FIM-GAP-005 (D4): Precious-metals sector oversight relies on…
FIM-GAP-005 (D4): Precious-metals sector oversight relies on a self-declaration certification for gold origin, enabling an estimated 30 tonnes/year of illegally-mined Amazon gold (~$1.86bn) to be laundered into the legal supply chain despite growing seizure volumes.
FIM-GAP-006 (D6): COAF faces an insufficient number of analy…
FIM-GAP-006 (D6): COAF faces an insufficient number of analysts and limited access to BO information, customs cash declarations, and reporting-entity data, constraining the depth and timeliness of financial intelligence produced.

Evidence

Confidence-tiered claims

BCB-authorised institutions must make a specific communication to COAF for virtual-asset transfers of US$10,000 or more to or from self-custodied wallets, in either direction, effective 1 October 2026. [Source 1]
Probable · 1 source
Existing VASPs must file BCB authorisation requests by 30 October 2026 (270 days after Resolutions 519-521 took effect). Separate reporting states 6 November 2026 as the date from which authorised institutions may no longer transact with unauthorised VASPs. The two dates are not reconciled in sourcing available this cycle. [Source 1]
Disputed · 1 source
COAF published fines in the Diário Oficial da União: R$63,800 (8 Sep 2026) for declaration/requisition failures, and fines against SHC Entretenimento and Hyun Mi Cho Chung for three infractions (14 Sep 2026). [Source 1]
Probable · 1 source
MP 1.394/2026 (25 Sep 2026) prohibits fixed-odds betting nationwide; SPA's portaria (15 Sep 2026) expanding payment-transaction interdiction procedures now applies across the entire formerly-licensed sector, with banks' existing 24-hour account-freeze obligation becoming universal in practice. [Source 1]
Probable · 1 source
Brazil's 2023 Mutual Evaluation found Compliant for 10 and Largely Compliant for 19 of the 40 FATF Recommendations, with Substantially Effective ratings on only 2 of 11 effectiveness outcomes. [Source 1]
Probable · 1 source
virtual-asset transfers of US$10,000+ to/from self-custodied wallets; cash operations ≥R$50,000; cash FX ≥US$10,000 [Source 1]
Probable · 1 source
incumbent VASPs must file for PSAV authorisation by 30 October 2026 (270 days from 2 Feb 2026); after that date BCB-authorised institutions barred from intermediating for unauthorised VASPs [Source 1]
Probable · 1 source
raised US$3.3m with Circle participation while awaiting BCB PSAV authorisation [Source 1]
Probable · 1 source
Compliant on 10 and Largely Compliant on 19 of 40 FATF Recommendations; not on FATF grey list as of 19 June 2026 plenary [Source 1]
Probable · 1 source
if ratified, extinguishes the SPA/COAF-regulated betting sector as a licensed obliged-entity population [Source 1]
Probable · 1 source
10-year document-retention duty for eFX providers, in force 1 October 2026 [Source 1]
Probable · 1 source
Bans anonymous digital accounts, mandates 10-year data retention, imposes graduated obligations by firm size/systemic risk, and fines up to 20% of annual gross revenue for AML infractions; in early committee stage as of 15 Oct 2026. [Source 1]
Probable · 1 source
VASPs must report to COAF any transfer of US$10,000 or more to or from self-custodied (unhosted) wallets, effective 1 October 2026; banks barred from servicing unauthorised crypto firms from this date. [Source 1]
Probable · 1 source
2023 FATF/GAFILAT mutual evaluation remains current; Brazil is not on the FATF grey or black list. [Source 1]
Probable · 1 source
Resolução CVM nº 249/2026 (14 Oct 2026) creates a DLT tokenisation pilot sandbox with AML-adjacent relevance for new tokenised-securities rails. [Source 1]
Uncertain · 1 source
in_force [Source 1]
Probable · 1 source
created [Source 1]
Probable · 1 source
collapsed [Source 1]
Probable · 1 source
enacted_not_yet_effective [Source 1]
Probable · 1 source
Self-custodied wallet transfers equal to or above US$10,000 subject to specific COAF reporting, effective 1 October 2026 [Source 1]
Probable · 1 source
New Federal Police division for illegal-betting and match-fixing investigation under elevated CGLA/DICOR money-laundering coordination, published in the Official Gazette 13 October 2026 [Source 1]
Probable · 1 source
SAR/CDD channel between ~188 licensed betting brands and COAF ceased operating following extinction of all federal authorisations 25 October 2026 [Source 1]
Probable · 1 source
From 6 November 2026, BCB-authorised financial and payment institutions barred from virtual-asset market operations with unauthorised counterparties [Source 1]
Probable · 1 source
increasing [Source 1]
Probable · 1 source