Brazil: AML/CTF Regime

Brazil's standing AML/CTF regime remains anchored in the 2023 FATF/GAFILAT mutual evaluation, which is the current governing assessment and not a this-cycle development. That evaluation found improved international cooperation and risk assessment relative to Brazil's 2010 evaluation, while flagging continuing gaps in inter-agency coordination and in the prosecution of money-laundering offences. Brazil is not on the FATF grey or black list.

Against that stable baseline, PL 2901/2026, the Marco Nacional de Fintechs e Plataformas Digitais, proposes to close a documented enabler gap: the absence of a dedicated statutory AML framework for fintechs and digital financial platforms, as distinct from existing BCB and COAF resolutions that currently govern the sector. As reported, the bill would ban anonymous digital accounts, mandate ten-year data retention, impose obligations graduated by firm size and systemic risk, and set fines of up to 20 percent of annual gross revenue for AML infractions. The bill was in early committee stage as of 15 October 2026. This account rests on a single trade-press source without independently retrieved primary legislative text, so both the bill's precise provisions and its prospects for enactment should be treated as reported rather than confirmed.

If enacted, PL 2901/2026 would represent a structural addition to Brazil's AML architecture, a dedicated statutory framework where none currently exists for the fintech and digital-platform sector, rather than an incremental adjustment to an existing regime. That distinction matters under an architecture-over-incident reading: the bill's significance, if it proceeds, lies in creating a framework rather than in any single enforcement action it might later generate.

Outlook

PL 2901/2026's progress through committee is the item to watch; no enactment timeline is confirmed, and the bill remains at an early stage as of 15 October 2026. Brazil's FATF/GAFILAT standing, last assessed in 2023, is not due for a scheduled reassessment within the current cycle window on the evidence available. The overall AML/CTF risk direction for Brazil is assessed as stable, with the fintech bill representing a prospective rather than current change to the regime's architecture.