--- title: "Brazil (BR) — Financial-Integrity Intelligence · Sentinel" canonical: https://sentinel.gi/jurisdictions/brazil/ source_html: /jurisdictions/brazil/index.html description: "Financial integrity intelligence for Brazil (BR): sanctions, beneficial ownership, enabler jurisdictions, conflict finance, digital assets and compliance technology — with sourced findings." generated_at: 2026-11-08T17:53:23Z content_sha256: fd951c021a7d850a23a74b1120ca0f07af1935e54d4aa4c73e709804ec56e557 generator: "fe-fleet/md-twin@1.0" --- # Brazil (BR) — Financial-Integrity Intelligence · Sentinel Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved. Financial Integrity Monitor # Brazil BR Domains covered 8 of 8 Sources 149 Role actions 8 Horizon <90d 4 Jurisdiction profile FATF status: Largely Compliant Tier: A Risk direction: Increasing Enablement vs enforcement: Mixed AML Law 9613/1998 with COAF (FIU) at its centre, coordinated via the ENCCLA inter-agency mechanism; joint FATF/GAFILAT MER (Dec 2023) found improved risk understanding and TF criminalisation but weak DNFBP supervision and unpopulated BO data. More New BCB Resolutions 519-521 (Nov 2025) create a VASP licensing regime effective Feb 2026. Key deficiencies - Lawyers and several DNFBP categories remain effectively unregulated for AML/CFT/CPF purposes - Beneficial ownership database (REDESIM) largely unpopulated despite legal framework - Fintech sector historically outside Central Bank reporting/AML perimeter, exploited at scale by organised crime (PCC) - COAF resourcing and BO/customs-data access limitations constrain financial intelligence depth - Money laundering prosecution results, especially for environmental and organised-crime proceeds, lag behind risk profile Recent developments (18m) - FATF/GAFILAT MER Brazil (Dec 2023) placed Brazil under enhanced follow-up; effectiveness gaps remain live in 2025-26 monitoring - BCB Resolutions 519, 520, 521 (Nov 2025) operationalised the 2022 Virtual Assets Law; VASP authorisation regime effective 2 Feb 2026 - US Treasury/OFAC imposed unprecedented Global Magnitsky sanctions on sitting Supreme Court Justice Alexandre de Moraes (Jul 2025) and his wife (Sep 2025), later reversed (Dec 2025) - Federal Police Operations Quasar/Tank/Hidden Carbon and Hydra (Aug-Oct 2025) exposed a ~$9.6bn fuel/fintech laundering network tied to the PCC - Banco Master SA liquidated (Nov 2025) amid an alleged $2.4bn+ fraud, triggering Supreme Court and Federal Audit Court scrutiny of Central Bank supervision - OFAC designated PCC and Comando Vermelho as Transnational Terrorist Groups (SDGT/FTO) and, by mid-2026, extended designations to PCC-linked Brazilian fintech entities Brief ## Lead signal #### Lead Signal Brazil's financial integrity architecture moved on two fronts at once this cycle, and the two movements are structurally linked even though they sit in different regulatory lanes. The Central Bank (Banco Central do Brasil, BCB) reached two binding deadlines in its virtual-asset authorisation regime within the same window: incumbent virtual-asset service providers already operating as of 2 February 2026 were required to file for BCB authorisation by 30 October 2026, and from 6 November 2026 BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are not authorised or mid-authorisation, under Resolucao BCB no 589/2026. Layered onto this, a new reporting trigger from Resolucao BCB no 588/2026 took effect 1 October 2026, requiring specific communication to the financial intelligence unit COAF of transfers involving self-custodied wallets equal to or above the equivalent of US$10,000. Taken together, these measures convert a previously loose perimeter around virtual-asset activity into a hard-edged authorisation and counterparty-screening regime, with the banking sector itself now the enforcement chokepoint. Read full brief #### Lead Signal Brazil's financial integrity architecture moved on two fronts at once this cycle, and the two movements are structurally linked even though they sit in different regulatory lanes. The Central Bank (Banco Central do Brasil, BCB) reached two binding deadlines in its virtual-asset authorisation regime within the same window: incumbent virtual-asset service providers already operating as of 2 February 2026 were required to file for BCB authorisation by 30 October 2026, and from 6 November 2026 BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are not authorised or mid-authorisation, under Resolucao BCB no 589/2026. Layered onto this, a new reporting trigger from Resolucao BCB no 588/2026 took effect 1 October 2026, requiring specific communication to the financial intelligence unit COAF of transfers involving self-custodied wallets equal to or above the equivalent of US$10,000. Taken together, these measures convert a previously loose perimeter around virtual-asset activity into a hard-edged authorisation and counterparty-screening regime, with the banking sector itself now the enforcement chokepoint. Alongside this, Brazil's domestic money-laundering enforcement structure was reorganised. A new Federal Police division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), was approved 9 October and published in the Official Gazette 13 October 2026, operating under an elevated money-laundering and asset-recovery coordination structure reporting into the Directorate of Combating Organised Crime. This reorganisation came as, separately, every federal sports-betting authorisation was extinguished on 25 October 2026, which appears to have collapsed the suspicious-activity and customer-due-diligence reporting channel that had been built out under the 2023 betting law for roughly 188 licensed betting brands. The juxtaposition is notable: enforcement capacity for money-laundering typologies tied to betting was being built up at the same moment the regulated channel that fed it information was being dismantled. #### Other Developments Self-custody reporting trigger embeds into existing suspicious-activity architecture. The 1 October 2026 trigger under Resolucao BCB no 588/2026 does not stand alone; it extends the same COAF-facing reporting logic that already governs suspicious-activity communication generally, meaning virtual-asset operators and banks handling flows to or from self-custodied wallets above the threshold now sit inside a reporting obligation with the same institutional destination as conventional anti-money-laundering reporting. VASP authorisation deadline converts informal operators into a binary population. The 30 October 2026 filing deadline for incumbent virtual-asset service providers functions as a sorting mechanism: providers that filed move toward authorised status and continued eligibility to deal with the banking sector, while those that did not file face exclusion from banking relationships once the 6 November 2026 counterparty cut-off takes hold. The structural effect is to formalise, within a matter of weeks, a population of virtual-asset businesses that had previously operated without a binding authorisation gate. Betting-sector compliance failures preceded the licence extinction. Reporting prior to the 25 October 2026 extinction of federal betting authorisations had already identified serious failures in suspicious-activity-of-money-laundering reporting attributed to the Finance Ministry's own assessment of the licensed segment, suggesting the reporting channel was already degraded in practice before it was removed as a matter of law. The confidence attached to this specific finding is held at the probable tier, pending location of a primary notice from the financial intelligence unit or the Finance Ministry. #### Cross-Monitor Connections The collapse of the licensed betting-sector reporting channel combined with a nationwide prohibition is the kind of development that routes most directly to monitors tracking conflict finance and commodity-flow integrity elsewhere in the fleet, insofar as displaced wagering volume is assessed to migrate toward unlicensed or offshore channels that fall outside any reporting perimeter at all; it also has an information-operations dimension where offshore betting platforms are used to launder reputational or narrative material alongside funds. On the digital-asset side, the BCB's dual deadlines sit squarely alongside developments tracked for state-capture and compliance-technology risk elsewhere in the fleet, since a banking sector newly required to screen virtual-asset counterparties for authorisation status will need technology capable of making that determination reliably at transaction speed; no compliance-technology vendor or control development specific to Brazil was identified this cycle, however, so that connection remains structural rather than evidenced. #### Outlook The near-term test for Brazil's virtual-asset authorisation regime is whether the population of incumbent providers that filed by 30 October 2026 is processed to authorised status before the 6 November 2026 counterparty cut-off creates a practical bottleneck, since any provider still mid-authorisation when the cut-off takes hold occupies an ambiguous status that the Central Bank will need to clarify in guidance. For the betting sector, the open question is whether displaced wagering activity is captured by the enforcement architecture built around the new Federal Police division, or whether, as the jurisdiction-risk assessment this cycle suggests, the removal of the licensed channel increases exposure by pushing volume toward channels with no reporting obligation at all. Brazil's overall risk direction for this cycle is read as increasing, driven by the combination of a widened enforcement structure confronting a sector that has lost its reporting channel, and by compliance gaps already identified in that sector before the channel was removed. Earlier periodic briefs (6) 4 Nov 2026 · fim-2026-11-01 #### Lead Signal Brazil's financial integrity architecture moved on two fronts at once, and the two movements are structurally linked even though they sit in different regulatory lanes. The Central Bank (Banco Central do Brasil, BCB) reached two binding deadlines in its virtual-asset authorisation regime within the same window: incumbent virtual-asset service providers already operating as of 2 February 2026 were required to file for BCB authorisation by 30 October 2026, and from 6 November 2026 BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are not authorised or mid-authorisation, under Resolucao BCB no 589/2026. Layered onto this, a new reporting trigger from Resolucao BCB no 588/2026 took effect 1 October 2026, requiring specific communication to the financial intelligence unit COAF of transfers involving self-custodied wallets equal to or above the equivalent of US$10,000. Taken together, these measures convert a previously loose perimeter around virtual-asset activity into a hard-edged authorisation and counterparty-screening regime, with the banking sector itself now the enforcement chokepoint. Alongside this, Brazil's domestic money-laundering enforcement structure was reorganised. A new Federal Police division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), was approved 9 October and published in the Official Gazette 13 October 2026, operating under an elevated money-laundering and asset-recovery coordination structure reporting into the Directorate of Combating Organised Crime. This reorganisation came as, separately, every federal sports-betting authorisation was extinguished on 25 October 2026, which appears to have collapsed the suspicious-activity and customer-due-diligence reporting channel that had been built out under the 2023 betting law for roughly 188 licensed betting brands. The juxtaposition is notable: enforcement capacity for money-laundering typologies tied to betting was being built up at the same moment the regulated channel that fed it information was being dismantled. #### Other Developments Self-custody reporting trigger embeds into existing suspicious-activity architecture. The 1 October 2026 trigger under Resolucao BCB no 588/2026 does not stand alone; it extends the same COAF-facing reporting logic that already governs suspicious-activity communication generally, meaning virtual-asset operators and banks handling flows to or from self-custodied wallets above the threshold now sit inside a reporting obligation with the same institutional destination as conventional anti-money-laundering reporting. VASP authorisation deadline converts informal operators into a binary population. The 30 October 2026 filing deadline for incumbent virtual-asset service providers functions as a sorting mechanism: providers that filed move toward authorised status and continued eligibility to deal with the banking sector, while those that did not file face exclusion from banking relationships once the 6 November 2026 counterparty cut-off takes hold. The structural effect is to formalise, within a matter of weeks, a population of virtual-asset businesses that had previously operated without a binding authorisation gate. Betting-sector compliance failures preceded the licence extinction. Reporting prior to the 25 October 2026 extinction of federal betting authorisations had already identified serious failures in suspicious-activity-of-money-laundering reporting attributed to the Finance Ministry's own assessment of the licensed segment, suggesting the reporting channel was already degraded in practice before it was removed as a matter of law. The confidence attached to this specific finding is held at the probable tier, pending location of a primary notice from the financial intelligence unit or the Finance Ministry. #### Cross-Monitor Connections The collapse of the licensed betting-sector reporting channel combined with a nationwide prohibition is the kind of development that routes most directly to monitors tracking conflict finance and commodity-flow integrity elsewhere in the fleet, insofar as displaced wagering volume is assessed to migrate toward unlicensed or offshore channels that fall outside any reporting perimeter at all; it also has an information-operations dimension where offshore betting platforms are used to launder reputational or narrative material alongside funds. On the digital-asset side, the BCB's dual deadlines sit squarely alongside developments tracked for state-capture and compliance-technology risk elsewhere in the fleet, since a banking sector newly required to screen virtual-asset counterparties for authorisation status will need technology capable of making that determination reliably at transaction speed; no compliance-technology vendor or control development specific to Brazil was identified, however, so that connection remains structural rather than evidenced. #### Outlook The near-term test for Brazil's virtual-asset authorisation regime is whether the population of incumbent providers that filed by 30 October 2026 is processed to authorised status before the 6 November 2026 counterparty cut-off creates a practical bottleneck, since any provider still mid-authorisation when the cut-off takes hold occupies an ambiguous status that the Central Bank will need to clarify in guidance. For the betting sector, the open question is whether displaced wagering activity is captured by the enforcement architecture built around the new Federal Police division, or whether, as the jurisdiction-risk assessment suggests, the removal of the licensed channel increases exposure by pushing volume toward channels with no reporting obligation at all. Brazil's overall risk direction is read as increasing, driven by the combination of a widened enforcement structure confronting a sector that has lost its reporting channel, and by compliance gaps already identified in that sector before the channel was removed. 3 Nov 2026 · fim-2026-11-03 #### Lead Signal Brazil's central bank has moved on two fronts at once, and the combination is the signal worth foregrounding. Resolucao BCB no 588/2026 adds a specific reporting obligation to the Conselho de Controle de Atividades Financeiras (COAF) for transfers involving self-custodied virtual-asset wallets at or above the equivalent of US$10,000, taking effect 1 October 2026. In parallel, Resolucao BCB no 589/2026, published 23 September 2026, bars BCB-authorised financial and payment institutions from transacting with virtual-asset counterparties that are not authorised, or mid-authorisation, in Brazil, with that prohibition commencing 6 November 2026. Read together, these two instruments close the self-custody and unauthorised-counterparty gaps around the perimeter the Central Bank has been building for incumbent virtual-asset service providers, who faced a 30 October 2026 filing deadline to remain in the authorisation pipeline. The self-custody reporting trigger is corroborated across two independent sources; the banking cut-off date is sourced to a single outlet reporting the resolution's text, so the precise statutory pinpoint remains unconfirmed pending primary publication. The second development concerns the enforcement architecture for anti-money-laundering work generally, not virtual assets specifically. A new Federal Police division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), was approved 9 October and published 13 October 2026. It sits inside a reorganised General Coordination structure for the repression of money laundering and asset recovery, giving money-laundering enforcement a dedicated coordination level it did not previously have. This is a structural change in enforcement capacity, arriving at the same moment the licensed sports-betting sector's own suspicious-activity-reporting channel to COAF appears to have ceased functioning for that segment following the nationwide betting ban. #### Other Developments The licensed-betting SAR channel has effectively collapsed. With every federal betting authorisation extinguished on 25 October 2026, the suspicious-activity and customer-due-diligence channel that previously ran between roughly 188 licensed betting brands and COAF no longer operates for that segment. A legal-commentary source flags this alongside the Willer Tomaz case, cited as an example of a legacy compliance gap involving flows of approximately R$5 billion, though this finding rests on a single tier-three commentary source rather than a primary Fazenda or COAF notice, and is treated as probable rather than confirmed accordingly. The virtual-asset authorisation calendar is now the operative AML control for that sector. The 30 October incumbent-filing deadline and the 6 November counterparty cut-off operate as sequential gates: firms that did not file lose the ability to be treated as authorised counterparties, and from 6 November authorised institutions cannot deal with them regardless. The exact minimum-capital bands for different virtual-asset activity classes remain unconfirmed, with press reporting citing a range between BRL 10.8 million and BRL 37.2 million pending a definitive Central Bank breakdown. #### Cross-Monitor Connections The betting-sector enforcement reorganisation and the virtual-asset authorisation perimeter are, on the evidence available, parallel rather than connected developments, but both bear on how payment and settlement rails intersect with illicit-finance controls in Brazil, a question that also concerns the operational and consumer-protection read of the same Central Bank resolutions elsewhere in this jurisdiction's coverage. The collapse of a sector-specific reporting channel alongside the creation of dedicated federal enforcement capacity is the kind of architecture shift that typically precedes a reallocation of investigative resources toward payment corridors used by the displaced activity; that reallocation is not yet evidenced and is noted here as a structural watch point rather than an observed fact. #### Outlook The 6 November 2026 counterparty cut-off is the near-term date that will test whether the virtual-asset authorisation regime functions as intended; whether unauthorised operators actually lose banking access on that date, rather than continuing informally, will be the operative question for the following cycle. The capital-band question flagged in the gaps register remains open and should resolve once the Central Bank publishes a definitive breakdown. Separately, whether the enforcement capacity created by DRAME is deployed against payment flows left exposed by the collapse of the licensed-betting SAR channel is a structural question the evidence cannot yet answer, and is offered as orientation rather than prediction. 18 Oct 2026 · fim-2026-10-18 #### Lead Signal Brazil's crypto-AML perimeter is tightening through supervisory build-out rather than new legislation this cycle. Banco Central do Brasil rules effective 1 October 2026 require virtual-asset service providers to report to COAF any transfer of US$10,000 or more to or from self-custodied, unhosted wallets, under the BCB's VASP framework established by Resolutions 519 through 521. Banks are barred from servicing unauthorised crypto firms from the same date. The rule change coincides with a dated transitional deadline already running under the VASP regime: incumbent virtual-asset providers must have filed for BCB authorisation by 30 October 2026 to continue operating pending review. The two developments together describe a supervisory architecture reaching further into self-custody flows precisely as the authorisation perimeter around who may lawfully provide virtual-asset services in Brazil closes. #### Other Developments A national fintech AML framework remains at the proposal stage. PL 2901/2026, the Marco Nacional de Fintechs e Plataformas Digitais, would ban anonymous digital accounts, mandate ten-year data retention, impose graduated obligations scaled to firm size and systemic risk, and set fines of up to 20 percent of annual gross revenue for AML infractions. The bill was in early committee stage as of 15 October 2026, and this account rests on a single trade-press source without independently retrieved primary legislative text, so the bill's provisions should be read as reported rather than confirmed in final form. Brazil's standing mutual evaluation remains the 2023 FATF/GAFILAT report. Brazil is not on the FATF grey or black list, and the 2023 evaluation remains the current governing baseline rather than a this-cycle development. The evaluation found improved international cooperation and risk assessment since 2010 alongside continuing gaps in inter-agency coordination and money-laundering prosecution. A securities-market tokenisation sandbox has AML-adjacent relevance. Resolução CVM nº 249/2026, dated 14 October 2026, creates a DLT tokenisation pilot sandbox. This is a securities-market structural development rather than a direct AML rule change, and its eventual bearing on AML exposure in tokenised-securities rails is not yet established. #### Cross-Monitor Connections The self-custody wallet reporting extension and the fintech AML bill both speak directly to crypto and payments monitoring: a tightening AML perimeter around unhosted-wallet transfers is architecture that a crypto-focused reading would treat as a VASP compliance-cost and classification question, while a payments-focused reading would treat the same BCB rulemaking as a scheme-level compliance event sitting alongside Brazil's broader 2026 payments reforms. Neither reading displaces the other; they are the same architectural fact seen through different institutional lenses. #### Outlook The near-term calendar is dated and concrete: the VASP incumbent authorisation deadline falls on 30 October 2026, after which unauthorised firms lose access to banking relationships with BCB-regulated institutions. PL 2901/2026 remains in early committee stage with no confirmed enactment timeline. Brazil's risk direction is assessed as stable overall notwithstanding these developments, since no new FATF action and no new sanctions designations attach to this cycle's findings; the crypto-reporting tightening is best read as incremental supervisory build-out within an existing framework rather than a change in Brazil's underlying risk posture. 11 Oct 2026 · fim-2026-10-11 #### Lead Signal Brazil's Banco Central do Brasil tightened the crypto AML and licensing perimeter materially this cycle, layering two instruments that together close off the unregulated edges of the virtual-asset sector. Resolucao BCB no 588/2026, in force since 1 October 2026, adds mandatory COAF reporting for virtual-asset transfers of US10,000 or more to or from a self-custodied wallet, alongside new cash-operation and FX cash-operation reporting hypotheses. In parallel, the authorisation deadline under Resolucao BCB no 519/2025 falls on 30 October 2026: incumbent virtual-asset service providers must file for PSAV authorisation by that date, after which BCB-authorised institutions will be barred from intermediating for unauthorised VASPs. #### Other Developments BlindPay raises capital while awaiting authorisation. Brazilian crypto-payments fintech BlindPay raised US3.3 million with participation from US stablecoin issuer Circle, announced 23 September 2026, to expand cross-border stablecoin payment infrastructure between Brazil and the United States. BlindPay has a pending BCB PSAV authorisation application due by the 30 October 2026 deadline, illustrating that commercial activity in the sector continues even as the regulatory perimeter tightens around it. Brazil's standing AML/CFT position. Brazil's regime remains anchored in Lei no 9.613/1998, with COAF as the financial intelligence unit and BCB, CVM and SUSEP as sectoral supervisors. Brazil is not on the FATF list of jurisdictions under increased monitoring as of the 19 June 2026 plenary statement, and its 2023 FATF/GAFILAT Mutual Evaluation rates the country Compliant on 10 and Largely Compliant on 19 of 40 Recommendations. #### Cross-Monitor Connections The BCB's crypto AML tightening connects directly to the world-payments monitor's coverage of Brazil's stablecoin and cross-border payments architecture, since Resolucao 588/2026's reporting threshold and the PSAV authorisation cliff both regulate activity at the intersection of virtual-asset custody and payment settlement. The commercial funding activity around BlindPay, a crypto-payments fintech operating in a cross-border corridor with a US stablecoin issuer, is similarly a shared data point for any monitor tracking the structural development of Brazil's digital-asset payments infrastructure rather than purely its AML dimension. #### Outlook The 30 October 2026 PSAV authorisation deadline is the determinative near-term event: any VASP that has not filed by then faces exclusion from intermediation by BCB-authorised institutions. Whether BlindPay and similarly-positioned fintechs secure authorisation ahead of that date will be a useful proxy for how smoothly the broader incumbent VASP population navigates the authorisation cliff. 4 Oct 2026 · fim-2026-10-04 #### Lead Signal Banco Central do Brasil Resolutions 588 and 589 of 2026 extend Brazil's anti-money-laundering reporting perimeter onto self-custodied virtual-asset transfers. From 1 October 2026, BCB-authorised institutions must make a specific communication to the Conselho de Controle de Atividades Financeiras, COAF, for virtual-asset transfers of US$10,000 or more to or from self-custodied wallets, in either direction. This closes a gap that had previously let value move between a custodial, regulated rail and an unhosted wallet without a reporting trigger attaching to the self-custody leg of the transaction. The expansion arrives alongside, but is not reconciled with, a separate cutover date problem: existing virtual-asset service providers must file Banco Central authorisation requests by 30 October 2026, while a separate, lower-tier report states that authorised institutions may no longer transact with unauthorised virtual-asset providers from 6 November 2026. Both dates are specific and independently sourced, and sourcing available this cycle does not reconcile them, so the finding is recorded as Disputed rather than simply thin. #### Other Developments Betting-sector prohibition converts payment-conduct architecture sector-wide. Medida Provisoria 1.394/2026, signed 25 September 2026, prohibits fixed-odds betting nationwide. The Secretaria de Premios e Apostas's own payment-interdiction portaria, published 15 September 2026 and aimed at expanding procedures to prevent, identify and repress payment transactions linked to irregular fixed-odds betting exploitation, now governs a sector that has itself become unauthorised in its entirety. Banks' existing 24-hour account-freeze obligation for unlicensed operators becomes, in practical effect, a universal obligation across what was until recently a licensed and AML-supervised industry. This is an architecture-level shift: a targeted anti-illegal-market tool now operates as the default posture for an entire formerly-regulated sector, materially raising AML exposure for banks and payment companies with any betting-sector relationships. Routine COAF administrative enforcement continued at modest scale. COAF published fines in the Diário Oficial da União during September 2026: R$63,800 on 8 September 2026 for declaration and requisition failures, and separate fines against SHC Entretenimento and Hyun Mi Cho Chung for three infractions, published 14 September 2026. This is ordinary periodic AML-control enforcement rather than a new typology, and is noted here for completeness against the more structurally significant developments above. Brazil's standing FATF effectiveness gap persists unchanged. Brazil's 2023 Mutual Evaluation found the country Compliant for 10 and Largely Compliant for 19 of the 40 FATF Recommendations, but Substantially Effective on only 2 of 11 effectiveness outcomes. Brazil remains off the FATF grey list. This structural gap between technical compliance and effectiveness predates this cycle and is carried forward as context for the new crypto-reporting and betting-conversion developments above, neither of which has yet been tested against that effectiveness gap. #### Cross-Monitor Connections The betting-sector prohibition is tracked in first-party depth by the gambling-regulatory monitor; its AML and payment-conduct consequences, described above, are financial-integrity's downstream read of a licensing event that monitor is tracking as the primary story. Similarly, the crypto-specific regulatory detail behind Resolutions 588 and 589, including the VASP authorisation and classification architecture those resolutions sit within, is tracked in first-party depth by the crypto monitor; financial-integrity's reading here is confined to the AML reporting-perimeter consequence of those same instruments. The payments-conduct dimension of both the crypto reporting expansion and the betting-sector payment-interdiction architecture is tracked by the world-payments monitor from the conduct and scheme-compliance angle, distinct from the AML-reporting angle addressed here. #### Outlook The immediate question to watch is whether Banco Central do Brasil reconciles the 30 October 2026 VASP-authorisation filing deadline with the separately reported 6 November 2026 unauthorised-counterparty cutoff; until it does, institutions planning compliance timelines face a live date conflict rather than a settled compliance calendar. On the betting side, the payment-interdiction architecture's sector-wide reach will itself depend on whether Medida Provisoria 1.394/2026 survives its pending Supremo Tribunal Federal challenge and congressional conversion process; a reversal of the prohibition would, in turn, revert the payment-interdiction posture back toward its prior, narrower, unlicensed-operator-only scope. 28 Sep 2026 · fim-2026-09-28 #### Lead Signal Brazil enters this cycle carrying an escalating US unilateral sanctions posture against organised-crime financial infrastructure that has no identified EU or UK parallel. OFAC designated two Brazilian nationals and four companies (three based in São Paulo, one in Lisbon) on 1 July 2026 under Executive Orders 14059 and 13224, for laundering over $30 million in drug proceeds via cryptocurrency on behalf of the Primeiro Comando da Capital (PCC), a criminal organisation the US Department of State has separately designated a Foreign Terrorist Organization. This action follows a related May 2026 round and sits alongside a July 2026 designation targeting a support network for a previously sanctioned Brazilian Supreme Federal Court justice. Taken together, these two rounds of OFAC action against Brazil-domiciled targets, without any corresponding EU Council or UK OFSI listing surfacing this cycle, describe a structural divergence in sanctions architecture rather than an isolated enforcement event. #### Other Developments Operation Exchange tested Brazil's beneficial-ownership screening apparatus directly. On 3 July 2026 the Polícia Federal executed 24 warrants and froze approximately R$10.4 billion (roughly US$2 billion) in cash, assets and cryptocurrency tied to a PCC-linked laundering network built through 73 shell companies. The figures rest on a single tier-3 source and have not been cross-verified against a Polícia Federal primary release, but the operation is notable less for its scale than for what it demonstrates: a laundering network of this size was able to layer through Brazil's CNPJ-based corporate registration system despite the formal registry-suspension mechanism that is meant to deny banking access to non-compliant entities. That gap between the formal mechanism and its practical circumvention is the more durable finding here. Brazil's AML/CFT regime itself remains structurally stable. COAF operates as Brazil's autonomous financial intelligence unit, administratively linked to the Banco Central do Brasil, and Brazil remained off both the FATF grey list and the FATF blacklist following the 19 June 2026 plenary update, at which Bosnia and Herzegovina and Iraq were added to increased monitoring while Algeria and Namibia were removed. This standing regime is the backdrop against which the OFAC and Operation Exchange developments should be read: Brazil's own institutional AML architecture is not itself flagged as deficient, even as US authorities pursue autonomous, Brazil-specific enforcement action against criminal financial networks operating within it. #### Cross-Monitor Connections The PCC's laundering scheme's dependence on cryptocurrency rails to move drug proceeds concurrent with Brazil's evolving virtual-asset-service-provider licensing framework is a direct crypto-monitor connection: enforcement pressure on the criminal use of crypto rails is rising at the same moment Brazil's regulator is tightening the licensed on-ramp and off-ramp perimeter for virtual-asset services. The beneficial-ownership stress-test exposed by Operation Exchange also connects to broader corporate-transparency questions relevant to a world-payments read of Brazilian financial-system access, where shell-company layering through correspondent and domestic banking channels remains a live structural vulnerability distinct from Brazil's formal registry design. #### Outlook The question to watch is whether OFAC's two consecutive designation rounds against Brazil-domiciled targets in 2026 draw a third round, and whether the EU or UK move to align with the US listings or continue to diverge. A continuing divergence pattern would leave correspondent banks and crypto-exposed institutions with Brazilian counterparties navigating inconsistent sanctions exposure across jurisdictions. On the beneficial-ownership side, whether Brazilian authorities move to tighten CNPJ-registration screening in response to the exposure demonstrated by Operation Exchange, or whether the shell-company vulnerability persists unaddressed, will determine whether this cycle's finding was a one-off stress event or the start of a structural correction. Domain intelligence (D1–D8) #### Sanctions Architecture and Evasion Brazil's sanctions exposure this cycle is defined by a run of unilateral US Treasury action rather than any multilateral listing. On 1 July 2026, OFAC designated two Brazilian nationals and four companies -- three in São Paulo, one in Lisbon -- under Executive Orders 14059 and 13224, citing over $30 million in drug proceeds laundered via cryptocurrency for the Primeiro Comando da Capital (PCC). The PCC itself carries a separate Foreign Terrorist Organization designation from the US Department of State, a status distinct from and additional to the Treasury sanctions architecture, giving US authorities both a terrorism-finance and a narcotics-finance basis to pursue the network's financial infrastructure. A second, related July 2026 action sanctioned Lex Instituto de Estudos Juridicos LTDA and an individual, Viviane Barci de Moraes, for supporting a Brazilian Supreme Federal Court justice designated by OFAC in July 2025 -- a judicial-support-network designation that is a materially different sanctions theory from the PCC financial-crime designations, targeting obstruction-adjacent conduct rather than drug-trafficking proceeds. Continue reading The structurally significant finding is not any single designation but the pattern across them: two separate rounds of OFAC action against Brazil-domiciled targets in a single year, with no identified parallel EU Council or UK OFSI listing for either round. This is a sanctions-regime divergence, not merely an enforcement gap -- it means correspondent banks, payment processors and crypto-exposed institutions holding Brazilian counterparty relationships face a sanctions landscape where US exposure and EU/UK exposure diverge materially for the same underlying entities and networks. An institution screening only against EU or UK lists would find both PCC-linked designees and the judicial-support-network designees clear, while an OFAC screen would flag them -- a live discrepancy rather than a historical curiosity. The PCC designations also carry a digital-asset dimension worth flagging within the sanctions frame specifically: cryptocurrency was the transmission mechanism for the underlying laundering, not merely incidental to it, meaning any institution with crypto-exposed correspondent relationships into Brazil should treat this as a live typology rather than a one-off case. The absence of a corroborating EU or UK designation for the same PCC network, six months on, is itself informative -- either the underlying evidentiary basis has not yet crossed the threshold for a parallel EU/UK listing, or the two blocs have made a deliberate choice not to align, and neither hypothesis can be resolved from this cycle's evidence. #### Outlook The next signal to watch is whether the divergence pattern holds through a third designation round or whether the EU or UK move to align with the two 2026 OFAC actions. Absent alignment, institutions with Brazilian correspondent or crypto-counterparty exposure should expect the US autonomous-listing environment to keep moving ahead of the multilateral one, with fresh PCC-network designations plausible given the scale of the underlying laundering operation already exposed by Operation Exchange. Judgment: No BR-specific sanctions-architecture signal found this cycle. Uncertain #### Beneficial Ownership and Corporate Transparency Globally, the EU AML Package sets the structural direction for beneficial-ownership regulation: the AML Regulation (Reg (EU) 2024/1624, directly applicable), the sixth AML Directive transposed per Member State, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority together shift supervision from purely national authorities toward a hybrid EU-level regime with direct and indirect supervisory perimeters. Brazil sits entirely outside that perimeter as a non-EEA jurisdiction, and the EU AML Package is not the primary subject matter for Brazil's own beneficial-ownership exposure this cycle. The directly relevant development in Brazil is domestic: Operation Exchange. Continue reading On 3 July 2026, the Policia Federal executed 24 warrants and froze approximately R$10.4 billion -- roughly US$2 billion -- in cash, assets and cryptocurrency tied to a PCC-linked laundering network structured through 73 shell companies. This figure rests on a single tier-3 source and was not cross-verified against a Policia Federal primary release this cycle, so the precise scale should be treated as indicative rather than confirmed. What the operation demonstrates, regardless of the exact figure, is a practical gap between Brazil's formal beneficial-ownership mechanism -- CNPJ taxpayer registration, which under the standing regime can be suspended to deny an entity banking access -- and its ability to catch sophisticated shell-company layering before it reaches the scale exposed here. The formal registry-suspension mechanism is a post-hoc denial tool; it does not appear, on this evidence, to have prevented the network from operating and moving assets at scale in the first instance. This distinguishes a design gap from an enforcement failure: Brazil's CNPJ-based registry exists and can be used punitively once a network is identified, but 73 shell companies operating long enough to accumulate and layer R$10.4 billion in assets before detection suggests the screening and monitoring layer that should flag anomalous corporate structures earlier in their lifecycle did not do so here. Whether this is a resourcing gap, a data-quality gap in the CNPJ registry itself, or a genuine sophistication advantage on the part of the network cannot be resolved from this cycle's evidence. #### Outlook The question for the next cycle is whether Brazilian authorities respond to the Operation Exchange exposure with a tightening of CNPJ-registration screening or beneficial-ownership verification requirements, or whether the vulnerability is treated as a one-off enforcement success rather than a structural finding requiring a regulatory response. Given the scale of assets involved, continued monitoring of any BCB or COAF policy response is warranted. Judgment: No BR beneficial-ownership development found this cycle. Uncertain Judgment: No BR-specific enabler-jurisdiction finding this cycle. Uncertain Judgment: Not applicable in regime this cycle for BR. Uncertain #### Crypto, Digital Assets, and Financial Innovation Brazil's virtual-asset regulatory perimeter tightened on two coordinated timelines this cycle, both issued by the Central Bank (Banco Central do Brasil, BCB) under its authority over virtual-asset service providers. Incumbent virtual-asset service providers that were already operating in Brazil as of 2 February 2026 were required to file for BCB authorisation by 30 October 2026. That deadline is paired with a second measure, Resolucao BCB no 589/2026, under which, from 6 November 2026, BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are neither authorised nor mid-authorisation. Read together, the two measures convert the authorisation filing from an administrative formality into the precondition for continued access to the regulated banking system: a virtual-asset provider that missed the filing window risks being treated, within days, as an unauthorised counterparty that no BCB-regulated institution can lawfully continue to serve. Continue reading A third measure reached into the same reporting architecture from a different angle. Resolucao BCB no 588/2026 took effect 1 October 2026, introducing a specific reporting obligation to the financial intelligence unit, COAF, for transfers of virtual assets to or from self-custodied wallets equal to or above the equivalent of US$10,000. This closes a gap that self-custody arrangements have historically presented to reporting regimes built around custodial intermediaries: a transfer that does not pass through a second regulated custodian still generates a reporting duty once it crosses the threshold, placing the obligation on the authorised institution or virtual-asset operator on the Brazilian side of the transfer. The research this cycle relied on secondary legal-explainer and trade-press sources for the text of both the 588 and 589 resolutions rather than the primary Central Bank instrument text directly, which is noted as an evidentiary gap even though the underlying facts are corroborated across more than one outlet. The practical sequencing matters for firms operating in or into the Brazilian market. The filing deadline, the self-custody reporting trigger, and the counterparty cut-off land within a five-week span, meaning a virtual-asset business with Brazilian counterparties has had to resolve its authorisation status, its self-custody reporting exposure, and its banking relationships against the same calendar. For a bank or payment institution on the Brazilian side of these relationships, the obligation is now to verify authorisation status of virtual-asset counterparties as a continuous condition, not a one-time onboarding check, since a counterparty that was authorised yesterday is a live compliance question again after 6 November 2026 if its status has not been confirmed as maintained. #### Outlook The most immediate open question is how the Central Bank treats virtual-asset providers that filed before the 30 October 2026 deadline but whose authorisation has not been granted by the 6 November 2026 counterparty cut-off. Absent clarifying guidance, authorised institutions face a binary choice between treating mid-authorisation filers as compliant counterparties, which carries regulatory risk if the Central Bank later disagrees, or suspending those relationships pre-emptively, which carries commercial and market-disruption cost. The self-custody reporting trigger is likely to generate an early volume of reports to COAF as authorised institutions adjust transaction-monitoring thresholds to the US$10,000 benchmark; whether that volume is proportionate to actual illicit-finance risk, or simply reflects the mechanical capture of a bright-line threshold, will only become clear once a reporting pattern builds up over subsequent reporting periods. Judgment: BCB's VASP authorisation regime reaches two binding deadlines (30 Oct filing; 6 Nov banking cut-off) and a new COAF self-custody reporting trigger took effect 1 October 2026. Probable Judgment: No new RegTech/compliance-technology signal for BR this cycle; carried forward from standing position. Uncertain #### AML/CTF Regime Brazil's domestic anti-money-laundering enforcement architecture was restructured this cycle at the same moment that one of its principal regulated reporting channels was removed. On the enforcement side, the Federal Police created a new division, the Divisao de Repressao a Apostas Ilegais e Manipulacao de Resultados Esportivos (DRAME), approved 9 October and published in the Official Gazette on 13 October 2026. The new division operates under an elevated coordination structure for combating money laundering and asset recovery, reporting into the Directorate of Combating Organised Crime, giving money-laundering enforcement tied to illegal betting and match-fixing its own dedicated general coordination structure rather than leaving it distributed across general organised-crime casework. Continue reading That institutional build-out coincided with the collapse of the reporting perimeter it might otherwise have drawn on. Every federal sports-betting authorisation was extinguished on 25 October 2026, which, on the evidence available this cycle, dismantled the suspicious-activity and customer-due-diligence reporting channel that had been established under the 2023 betting law for a licensed segment of roughly 188 betting brands. That channel had fed suspicious-activity reports from the licensed sector to COAF; its removal means that a population of operators that had been inside the regulated reporting net is now, by definition, outside it, with no equivalent legal channel yet reported as having replaced it for the activity that previously ran through licensed brands. The timing has a further complication. Reporting prior to the licence extinction had already pointed to serious failures in suspicious-activity-of-money-laundering reporting attributed to a Finance Ministry assessment of the licensed segment, meaning the channel being dismantled was already functioning imperfectly before it was removed as a matter of law. This finding is held at the probable rather than confirmed tier of confidence, since no primary notice from COAF or the Finance Ministry itself was located this cycle to support it directly; it rests on a single secondary legal-commentary source. The combined picture, however, is read by the jurisdiction-risk assessment this cycle as one of increasing risk: a newly built enforcement structure is now confronting a sector whose regulated reporting channel has been removed, with the betting volume it formerly served presumed to be displaced toward unlicensed or offshore channels that fall outside any reporting duty at all. This sits within the three-pillar balance that anti-money-laundering, counter-terrorist-financing, and counter-proliferation-financing findings warrant: the developments identified this cycle are squarely anti-money-laundering in character, concerning reporting-channel architecture and enforcement coordination, with no counter-terrorist-financing or counter-proliferation-financing signal identified for Brazil this cycle. #### Outlook The structural question for Brazil's AML regime going forward is whether the new Federal Police coordination structure is matched by an alternative reporting mechanism for betting-related financial flows now that the licensed channel is gone, or whether enforcement capacity is being built to interdict a flow of activity that has lost its principal source of advance suspicious-activity intelligence. If displaced betting volume migrates to unlicensed or offshore platforms as the jurisdiction-risk assessment anticipates, the practical effect may be a widening gap between enforcement capability and reporting visibility, even as the institutional architecture on the enforcement side strengthens. Confirmation of the compliance-failure finding attributed to the Finance Ministry, through a primary notice rather than secondary commentary, would materially change how that specific claim should be weighted in future assessments of the pre-existing reporting channel's reliability. Judgment: The total prohibition of licensed betting collapsed the SAR-reporting channel between ~188 licensed betting brands and COAF; a new Federal Police division (DRAME) and financial-flow interdiction regime for illegal-betting flows were created. Probable #### Commercial Activity Brazilian crypto-payments fintech BlindPay raised US3.3 million (reported as R16.9 million) in a funding round with participation from US stablecoin issuer Circle, announced 23 September 2026. The stated purpose was to expand cross-border stablecoin payment infrastructure between Brazil and the United States. BlindPay has a pending application for BCB PSAV authorisation, due by the 30 October 2026 deadline under Resolucao BCB no 519/2025, meaning the company is raising capital and building out cross-border infrastructure while still navigating the same authorisation cliff that applies to the rest of Brazil's incumbent virtual-asset service provider population. Continue reading This commercial event sits inside, rather than apart from, the tightening regulatory perimeter described under crypto and digital assets this cycle: Resolucao BCB no 588/2026 expanded mandatory COAF reporting for self-custodied virtual-asset transfers of US10,000 or more effective 1 October 2026, and the PSAV authorisation deadline of 30 October 2026 under Resolucao BCB no 519/2025 will determine which incumbent providers, BlindPay potentially among them, retain the ability to be intermediated by BCB-authorised institutions going forward. Circle's participation as investor is notable given Circle's own position as a major stablecoin issuer with a direct commercial interest in the cross-border stablecoin payment corridor BlindPay is building. The finding rests on a single T3-quality journalism source; no corroborating company filing or regulatory disclosure was retrieved this cycle, so the funding figures and stated use of proceeds should be read as reported rather than independently verified. #### Outlook Whether BlindPay secures its PSAV authorisation ahead of the 30 October 2026 deadline is the immediate marker to watch, both for BlindPay specifically and as a proxy for how incumbent virtual-asset firms more broadly are navigating Brazil's authorisation cliff while continuing to raise capital and build cross-border infrastructure. Judgment: No commercial transaction among integrity-infrastructure firms identified this cycle for BR. Uncertain Regulatory horizon In Force Pending 6 Nov 2026 · ±quarter ### BCB-authorised-institution banking cut-off for unauthorised virtual-asset counterparties From 6 November 2026, BCB-authorised financial and payment institutions are barred from transacting with virtual-asset counterparties that are neither authorised nor mid-authorisation. [Source](https://capitalaberto.com.br/regulacao/2026/10/prazo-do-bc-aperta-cerco-sobre-ativos-virtuais) Proposed 2026-Q4 · ±half_year ### Central Bank supervisory and deposit-insurance reform following Banco Master collapse Ongoing Supreme Court and Federal Audit Court scrutiny, plus Congressional attempts to alter deposit-guarantee limits and central bank director tenure, may reshape BCB supervisory independence and disclosure rules. [Source](https://www.bloomberg.com/news/articles/2025-12-26/brazil-s-central-bank-faces-court-scrutiny-over-bank-liquidation) In Force Pending 2026-Q4 · ±quarter ### VASP authorisation / unauthorised-counterparty cutover BCB-authorised banks and payment institutions become barred from transacting with unauthorised virtual-asset providers once the disputed cutover date arrives. source not collected In Force Pending 2026-Q4 · ±quarter ### BCB VASP incumbent authorisation deadline From 30 Oct 2026, unauthorised VASPs lose access to banking/FX relationships with BCB-regulated institutions. [Banco Central do Brasil Source](https://madronaadvogados.com.br/publicacoes/conhecimento-em-foco/banco-central-regulamenta-o-mercado-de-ativos-virtuais/) 4 dated · 2 pending date · baseline fim-2026-07-09 Role action cards MLRO ### Self-custody wallet reporting to COAF and the collapse of the betting SAR channel both land in the same window. A specific reporting trigger for self-custodied virtual-asset transfers above US$10,000 took effect 1 October 2026, widening the population of reportable events. Separately, the suspicious-activity channel that previously ran from licensed betting brands to COAF no longer exists following the 25 October 2026 extinction of federal betting authorisations, removing a prior source of typology intelligence for betting-linked flows. 2 evidence refs Compliance ### Virtual-asset counterparty authorisation status becomes a continuous screening requirement from 6 November 2026. BCB-authorised institutions must now verify that virtual-asset counterparties are authorised or mid-authorisation on an ongoing basis, not only at onboarding, since the authorisation status of a counterparty can change against a fixed regulatory calendar. 2 evidence refs Legal ### Extinction of all federal betting authorisations creates an abrupt change in licensed-sector legal status. Clients that held federal betting authorisations as of 24 October 2026 no longer hold them as of 25 October 2026, with reported compliance failures in suspicious-activity reporting attributed to the Finance Ministry assessment of that segment preceding the extinction, at the probable rather than confirmed level of confidence. 1 evidence refs Board ### Brazil's jurisdiction risk direction is assessed as increasing this cycle. The combination of a dismantled licensed-betting reporting channel and a tightened virtual-asset authorisation perimeter is read as raising overall illicit-flow risk exposure for Brazil, driven by anticipated displacement of betting volume to unlicensed channels. 1 evidence refs CTO ### Virtual-asset counterparty screening and self-custody wallet detection both require live regulatory-status data. Systems that monitor virtual-asset transactions now need to flag self-custodied wallet transfers at the US$10,000 equivalent threshold and separately confirm counterparty authorisation status against the Central Bank's authorisation list on a continuous basis to support the 6 November 2026 cut-off. 2 evidence refs Risk ### Displacement risk from the betting-sector prohibition is an emerging cross-channel exposure. The jurisdiction-risk assessment identifies increasing risk driven by potential migration of betting volume to unlicensed or offshore channels outside the reporting perimeter, compounded by compliance gaps already reported in the outgoing licensed segment. 2 evidence refs Operations ### Transaction-monitoring thresholds need adjustment for the new self-custody reporting trigger. Operational screening for virtual-asset transfers must now capture the US$10,000-equivalent self-custody threshold effective 1 October 2026, and counterparty-authorisation checks must be embedded into workflow ahead of the 6 November 2026 cut-off. 2 evidence refs Audit ### The evidentiary basis for the betting-sector compliance-failure finding rests on a single secondary source. No primary notice from COAF or the Finance Ministry was located to support the reported compliance failures in the licensed betting segment; the finding is held at the probable rather than confirmed tier, which audit should note as a gap pending a primary-source update. 1 evidence refs Scenario sketches ### Betting-volume displacement into unlicensed offshore channels An illustrative pathway worth tracking: volume previously placed through the now-extinguished licensed betting brands could migrate toward offshore or unlicensed platforms that sit entirely outside the COAF reporting perimeter, with settlement routed through informal payment intermediaries or virtual-asset rails rather than the regulated banking system. If this pathway were to materialise, the new Federal Police coordination structure would be confronting a flow of activity with materially reduced visibility compared to the licensed channel it replaced. Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact. Standing trackers (T1–T6) Tracker Status Note T1 · Russian Sanctions-Evasion Architecture no_change T2 · EU AML Package / AMLA no_change T3 · FATF Grey List no_change T4 · Beneficial-Ownership Register Status no_change T5 · Crypto & Digital-Asset Integrity escalating VASP filing deadline and banking cut-off reached inside this cycle's window; COAF self-custody reporting trigger live from 1 October 2026. T6 · Sanctions Regime Divergence no_change Registers ### Enforcement actions - 30 Jul 2025 - 22 Sep 2025 - 14 Oct 2025 - 28 Aug 2025 - 18 Nov 2025 - 1 Jul 2026 - 30 Jul 2025 - 22 Sep 2025 - 14 Oct 2025 - 28 Aug 2025 - 18 Nov 2025 - 1 Jul 2026 - 3 Jul 2026 - 14 Sep 2026 - 8 Sep 2026 - OFAC imposed Global Magnitsky sanctions on sitting Brazilian Supreme Court Justice Alexandre de Moraes, over his oversight of prosecutions against former President Jair Bolsonaro, blocking his US assets and those of a linked holding company. 30 Jul 2025 - OFAC extended Global Magnitsky sanctions to Viviane Barci de Moraes, wife of Justice Alexandre de Moraes and owner of a São Paulo law firm, escalating pressure days after Bolsonaro's coup-plot conviction. 22 Sep 2025 - Operation Hydra targeted fintechs allegedly used by the PCC to launder illicit proceeds; a police officer who owned one of the fintechs was arrested, following whistleblower testimony from a businessman later murdered at Guarulhos airport. 14 Oct 2025 - Operations Quasar, Tank and Hidden Carbon exposed illicit transactions totalling at least 52 billion reais ($9.6bn) across Brazil's fuel supply chain and fintech industry, with PCC members implicated. 28 Aug 2025 - The Central Bank moved to liquidate Banco Master SA after fraud allegations tied to opaque assets and fabricated credit instruments; CEO Daniel Vorcaro was arrested attempting to board a private jet to Dubai. 18 Nov 2025 - OFAC updated its counter-terrorism/counter-narcotics designations to include Brazilian fintech and construction entities linked to an individual (de Oliveira Shimada) laundering PCC drug proceeds via crypto back into Brazil. 1 Jul 2026 ### Sanctions changes - 30 Jul 2025 - 12 Dec 2025 - 1 Jul 2026 - 4 Dec 2025 - 30 Jul 2025 - 12 Dec 2025 - 1 Jul 2026 - 4 Dec 2025 - 1 Jul 2026 - 1 Jan 2026 - OFAC listed sitting Brazilian Supreme Court Justice Alexandre de Moraes under Global Magnitsky sanctions, an unprecedented unilateral US action against a senior judicial officer of a major G20 economy over his handling of the Bolsonaro coup-plot prosecution. 30 Jul 2025 - OFAC removed Alexandre de Moraes, his wife Viviane Barci de Moraes, and the linked LEX law firm from the Global Magnitsky sanctions list as US-Brazil relations began to normalise. 12 Dec 2025 - OFAC progressively expanded Transnational Terrorist Group (SDGT/FTO) designations covering PCC and Comando Vermelho to include Brazilian fintech and corporate front entities used to launder cross-border drug proceeds via cryptocurrency. 1 Jul 2026 - The European Commission's December 2025 update to its AML/CFT high-risk third-country list added Bolivia and the British Virgin Islands and delisted six African/other jurisdictions, while Brazil remained absent from the list, consistent with its FATF-clean status. 4 Dec 2025 ### Regulatory horizon (register) - Central Bank supervisory and deposit-insurance reform following Banco Master collapse - VASP authorisation / unauthorised-counterparty cutover - PL 2901/2026 - Marco Nacional de Fintechs e Plataformas Digitais (MNFPD) - BCB VASP incumbent authorisation deadline - VASP incumbent authorisation filing deadline - BCB-authorised-institution banking cut-off for unauthorised virtual-asset counterparties - SPSAV VASP authorisation deadline for existing crypto firms - CVM ruling on crypto-asset securities classification - FATF/GAFILAT enhanced follow-up report on Brazil's MER action plan - Central Bank supervisory/deposit-insurance reform following Banco Master collapse ### Active schemes - [CRITICAL] PCC fintech/fuel-sector laundering infrastructure - [CRITICAL] PCC/Comando Vermelho crypto-enabled cross-border laundering - [HIGH] Illegal Amazon gold laundering via shell companies - [HIGH] Crypto-to-fiat laundering pipeline via Brazilian VASPs - [CRITICAL] Banco Master opaque-asset structuring and fabricated credit Sources - [The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) Regulations 2023](https://www.legislation.gov.uk/uksi/2023/704/made) - [https://www.fatf-gafi.org/en/publications/Mutualevaluations/Brazil-mer-2023.html](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Brazil-mer-2023.html) - [https://g3newswire.com/brazilian-finance-ministry-regulates-joint-tax-liability-for-institutions-that-enable-unauthorised-betting/](https://g3newswire.com/brazilian-finance-ministry-regulates-joint-tax-liability-for-institutions-that-enable-unauthorised-betting/) - [https://hipther.com/gaming-and-entertainment-latin-america/2026/05/14/111710/brazils-betting-evolution-regulation-politics-and-compliance/](https://hipther.com/gaming-and-entertainment-latin-america/2026/05/14/111710/brazils-betting-evolution-regulation-politics-and-compliance/) - [https://www.mattosfilho.com.br/unico/normas-regulamentacao-ativos-virtuais/](https://www.mattosfilho.com.br/unico/normas-regulamentacao-ativos-virtuais/) - [https://thedigitalbanker.com/brazils-pix-goes-global-while-crypto-faces-tighter-controls/](https://thedigitalbanker.com/brazils-pix-goes-global-while-crypto-faces-tighter-controls/) - [Lei Complementar nº 224, de 26 de dezembro de 2025](https://www.planalto.gov.br/ccivil_03/leis/lcp/lcp224.htm) - [Resolução BCB nº 519, de 10 de novembro de 2025](https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?tipo=Resolu%C3%A7%C3%A3o%20BCB&numero=519) - [Resolução BCB nº 521, de 10 de novembro de 2025](https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?numero=521&tipo=Resolu%C3%A7%C3%A3o%20BCB) - [https://home.treasury.gov/news/press-releases/sb0257](https://home.treasury.gov/news/press-releases/sb0257) - [https://www.kslaw.com/insights/articles/treasury-sanctions-brazilian-criminal-network](https://www.kslaw.com/insights/articles/treasury-sanctions-brazilian-criminal-network) - [https://www.zyphe.com/resources/news/pcc-money-laundering-sanctions-ofac-crypto-july-2026](https://www.zyphe.com/resources/news/pcc-money-laundering-sanctions-ofac-crypto-july-2026) - [https://www.fatf-gafi.org/en/countries/detail/Brazil.html](https://www.fatf-gafi.org/en/countries/detail/Brazil.html) - [https://www.bcb.gov.br/en/financialstability/moneylaundering](https://www.bcb.gov.br/en/financialstability/moneylaundering) - [https://www.unodc.org/documents/treaties/UNCAC/WorkingGroups/workinggroup2/2022-November-7-11/Brazil_Responses_to_Questionnaire_on_BOT_Regimes_EN.pdf](https://www.unodc.org/documents/treaties/UNCAC/WorkingGroups/workinggroup2/2022-November-7-11/Brazil_Responses_to_Questionnaire_on_BOT_Regimes_EN.pdf) - [Ric.com.br](https://ric.com.br/cotidiano/criptomoedas-coaf-e-novas-regras-o-que-muda-a-partir-de-1o-de-outubro-de-2026/) - [TFTC](https://www.tftc.io/brazil-self-custody-reporting-resolution-588-589-bcb) - [Rio Times Online](https://www.riotimesonline.com/brazil-crypto-rules-2026/) - [Symplexia Labs](https://news.symplexia.com/pt-br/2026/10/nova-economia/cryptomoedas/regulacao-cripto-veja-a-situacao-de-cada-exchange-no-processo-de-autorizacao-do-banco-central/) - [Atlas Público](https://atlaspublico.com.br/orgao/conselho-de-controle-de-atividades-financeiras) - [Secretaria de Prêmios e Apostas (gov.br)](https://www.gov.br/fazenda/pt-br/composicao/orgaos/secretaria-de-premios-e-apostas) - [KnowYourCountry](https://www.knowyourcountry.com/country-reports/brazil/) - [https://www.bocater.com.br/boletim-bocater/banco-central-reforca-regras-de-pld-ft-para-ativos-virtuais/](https://www.bocater.com.br/boletim-bocater/banco-central-reforca-regras-de-pld-ft-para-ativos-virtuais/) - [https://ric.com.br/cotidiano/criptomoedas-coaf-e-novas-regras-o-que-muda-a-partir-de-1o-de-outubro-de-2026/](https://ric.com.br/cotidiano/criptomoedas-coaf-e-novas-regras-o-que-muda-a-partir-de-1o-de-outubro-de-2026/) - [https://legismap.com.br/leis-e-normas/resolucao-bcb-n-588-de-23-09-2026](https://legismap.com.br/leis-e-normas/resolucao-bcb-n-588-de-23-09-2026) - [http://fcm.law/en/autorizacao-psav-banco-central/blockchain-web3/](http://fcm.law/en/autorizacao-psav-banco-central/blockchain-web3/) - [https://www.mercgroup.com.br/insights/regulacao-psav-ativos-virtuais-bcb-519-520-521-autorizacao-capital-pld-controles-auditoria](https://www.mercgroup.com.br/insights/regulacao-psav-ativos-virtuais-bcb-519-520-521-autorizacao-capital-pld-controles-auditoria) - [https://www.knowyourcountry.com/country-reports/brazil/](https://www.knowyourcountry.com/country-reports/brazil/) - [https://exame.com/future-of-money/fintech-brasileira-capta-r-169-milhoes-em-rodada-de-investimento-com-aporte-da-circle/](https://exame.com/future-of-money/fintech-brasileira-capta-r-169-milhoes-em-rodada-de-investimento-com-aporte-da-circle/) - [https://www.congressonacional.leg.br/materias/medidas-provisorias/-/mpv/175871](https://www.congressonacional.leg.br/materias/medidas-provisorias/-/mpv/175871) - [https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709compilado.htm](https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709compilado.htm) - [https://www.letsmoney.com.br/fintech/marco-fintechs-projeto-lei-lavagem-dinheiro/](https://www.letsmoney.com.br/fintech/marco-fintechs-projeto-lei-lavagem-dinheiro/) - [https://www.brasilemfolhas.com.br/2026/10/projeto-cria-marco-regulatorio-para-fintechs-e-mira-lavagem-de-dinheiro/](https://www.brasilemfolhas.com.br/2026/10/projeto-cria-marco-regulatorio-para-fintechs-e-mira-lavagem-de-dinheiro/) - [https://agenciabrasil.ebc.com.br/economia/noticia/2026-09/bc-amplia-controle-sobre-criptomoedas-e-mira-carteiras-proprias](https://agenciabrasil.ebc.com.br/economia/noticia/2026-09/bc-amplia-controle-sobre-criptomoedas-e-mira-carteiras-proprias) - [RIC.com.br](https://ric.com.br/cotidiano/criptomoedas-coaf-e-novas-regras-o-que-muda-a-partir-de-1o-de-outubro-de-2026/) - [amplojuridico.com.br](https://amplojuridico.com.br/lavagem-dinheiro-apostas-esportivas-willer-tomaz/) - [yogonet.com](https://www.yogonet.com/international/news/2026/10/15/126844-brazil-creates-federal-police-betting-enforcement-unit-amid-nationwide-ban) - [capitalaberto.com.br](https://capitalaberto.com.br/regulacao/2026/10/prazo-do-bc-aperta-cerco-sobre-ativos-virtuais) - [December 2023 Anti-money laundering and counter-terrorist financing measures](https://www.fatf-gafi.org/content/dam/fatf-gafi/mer/Brazil-Mutual-Evaluation-2023.pdf.coredownload.inline.pdf) - [Brazil's measures to combat money laundering and terrorist financing](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Brazil-mer-2023.html) - [Mutual Evaluation Report of Brazil](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mutualevaluationreportofbrazil.html) - [Brazil](https://www.fatf-gafi.org/en/countries/detail/Brazil.html) - [Outcomes FATF Plenary, 25-27 October 2023](https://www.fatf-gafi.org/en/publications/Fatfgeneral/outcomes-fatf-plenary-october-2023.html) - [Mutual Evaluations](https://www.fatf-gafi.org/en/publications/Mutualevaluations.html) - [FATF](https://www.fatf-gafi.org/en/home.html) - [Consolidated assessment ratings](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Assessment-ratings.html) - [Consolidated Processes and Procedures for Mutual Evaluations and Follow-Up: “Universal Procedures”](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Universal-Procedures-2023.html) - [Publications](https://www.fatf-gafi.org/en/publications.html) - [Sanctions Programs and Country Information | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information) - [Archive of Changes to OFAC's Sanctions Lists | Office of Foreign Assets Control](https://ofac.treasury.gov/specially-designated-nationals-list-sdn-list/archive-of-changes-to-the-sdn-list) - [Global Magnitsky Designations Removals | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20251212) - [Recent Actions | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions) - [Global Magnitsky Designation | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20250730) - [Five steps to effective cryptocurrency sanctions compliance in 2026](https://www.elliptic.co/blog/five-steps-to-effective-cryptocurrency-sanctions-compliance-in-2026) - [Crypto Sanctions: 2026 Crypto Crime Report](https://www.chainalysis.com/blog/crypto-sanctions-2026/) - [Sanctions List Updates](https://ofac.treasury.gov/recent-actions/sanctions-list-updates) - [Inside Iran’s Growing $7.8 Billion Crypto Ecosystem](https://www.chainalysis.com/blog/iranian-crypto-activity-geopolitical-tensions-2026/) - [2026 Crypto Crime Report: Scams](https://www.chainalysis.com/blog/crypto-scams-2026/) - [US Sanctions Brazil Supreme Court Justice Moraes Over Bolsonaro Case - Bloomberg](https://www.bloomberg.com/news/articles/2025-07-30/us-sanctions-brazil-supreme-court-justice-over-bolsonaro-case) - [Magnitsky Act: Why US Sanctioned Brazilian Supreme Court Justice’s Wife - Bloomberg](https://www.bloomberg.com/news/articles/2025-09-23/magnitsky-act-why-us-sanctioned-brazilian-supreme-court-justice-s-wife) - [US Sanctions Brazilian Justice Moraes’ Wife Under Magnitsky Act - Bloomberg](https://www.bloomberg.com/news/articles/2025-09-22/us-sanctions-brazilian-justice-moraes-wife-under-magnitsky-act-mfv8nsar) - [EUA sancionam Alexandre de Moraes por caso Bolsonaro - Bloomberg](https://www.bloomberg.com/news/articles/2025-07-30/eua-sancionam-alexandre-de-moraes-por-caso-bolsonaro) - [Global Magnitsky Designations | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20250922) - [US Lifts Sanctions on Brazil Supreme Court Judge Alexandre de Moraes - Bloomberg](https://www.bloomberg.com/news/articles/2025-12-12/us-removes-brazil-supreme-court-judge-from-sanctions-list) - [EE.UU. sanciona al juez Moraes que investiga a Bolsonaro por intento de golpe - Bloomberg](https://www.bloomberg.com/news/articles/2025-07-30/ee-uu-sanciona-al-juez-moraes-que-investiga-a-bolsonaro-por-intento-de-golpe) - [Banco do Brasil Mulls Options If US Escalates Magnitsky Sanctions - Bloomberg](https://www.bloomberg.com/news/articles/2025-09-04/banco-do-brasil-mulls-options-if-us-escalates-magnitsky-sanctions) - [Brazil's Crypto Crime Challenge: How Global Money Laundering Networks Target Latin America's Largest Market](https://www.chainalysis.com/blog/brazil-crypto-crime-money-laundering-regulation/) - [FINANCIAL ACTION TASK FORCE ON MONEY LAUNDERING IN SOUTH AMERICA](https://www.fatf-gafi.org/content/dam/fatf-gafi/mer/MER%20Brazil%20full.pdf.coredownload.inline.pdf) - [Fintechs, Banks Targeted in Brazil Crackdown on Money Laundering - Bloomberg](https://www.bloomberg.com/news/articles/2025-08-28/fintechs-banks-targeted-in-brazil-crackdown-on-money-laundering) - ["Black and grey" lists](https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html) - [The FATF Recommendations](https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Fatf-recommendations.html) - [What Latin America's Crypto Surge Means for Compliance Teams | TRM Blog](https://www.trmlabs.com/resources/blog/what-latin-americas-crypto-surge-means-for-compliance-teams) - [Countries / Jurisdictions](https://www.fatf-gafi.org/en/countries.html) - [Brazil Police Crack Down on $9.6 Billion Fuel Scheme](https://www.bloomberg.com/news/articles/2025-08-28/brazilian-police-crack-down-on-4-2-billion-fuel-crime-scheme) - [Brazil Investigates $5 Billion Fraud Tied to Fintech Firms - Bloomberg](https://www.bloomberg.com/news/articles/2026-05-28/brazil-investigates-5-billion-fraud-tied-to-six-fintech-firms) - [Fintechs Launder Cocaine Cash for Brazil's Largest Criminal Gang](https://www.bloomberg.com/news/features/2024-12-03/brazil-s-biggest-drug-gang-investigated-for-fintech-schemes) - [Police operation targeting Brazil’s largest criminal organization uncovers Panama Papers link - ICIJ](https://www.icij.org/investigations/panama-papers/police-operation-targeting-brazils-largest-criminal-organization-uncovers-panama-papers-link/) - [Brazil’s Federal Police Dismantle $540 Million Crypto Laundering Network in “Operation Lusocoin” | TRM Blog](https://www.trmlabs.com/resources/blog/brazils-federal-police-dismantle-540-million-crypto-laundering-network-in-operation-lusocoin) - [Brazilian Cop-Turned-Banker Arrested in Major Money Laundering Bust | OCCRP](https://www.occrp.org/en/news/brazilian-cop-turned-banker-arrested-in-major-money-laundering-bust) - [Amazonian territories on the frontlines of the transition minerals race | Global Witness](https://globalwitness.org/en/campaigns/transition-minerals/amazonian-territories-on-the-frontlines-of-the-transition-minerals-race/) - [With support from UNODC Brazil, workshop at CCPI-Amazon advances operational alignment in combating illegal gold mining in the Amazon](https://www.unodc.org/cofrb/en/noticias/2026/04/-workshop-at-ccpi-amazon-advances-operational-alignment-in-combating-illegal-gold-mining.html) - [UNODC Brazil and PRF Carry Out First Joint Action of the Year in the Fight Against Illegal Mining in the Amazon](https://www.unodc.org/cofrb/en/noticias/2026/03/unodc-brazil-and-prf-carry-out-first-joint-action-of-the-year-in-the-fight-against-illegal-mining-in-the-amazon.html) - [UNODC Brazil and the Brazilian Federal Police conduct a gold sample collection campaign in Amapá to strengthen traceability and international cooperation](https://www.unodc.org/cofrb/en/noticias/2025/12/unodc-brazil-and-the-brazilian-federal-police-conduct-a-gold-sample-collection-campaign-in-amap-to-strengthen-traceability-and-international-cooperation.html) - [Brazil Launches Investigation into R$80 Million in Illegal Gold](https://www.occrp.org/en/daily/17831-brazil-launches-investigation-into-r-80-million-in-illegal-gold) - [intersection of criminal activities in the gold mining sector in ...](https://www.unodc.org/cofrb/uploads/documents/TAPAJOS/INTERSECTION_OF_CRIMINAL_ACTIVITIES_IN_THE_GOLD_MINING_SECTOR_IN_THE_BRAZILIAN_AMAZON.pdf) - [Brazil Targets Illegal Gold Mines in the Amazon | OCCRP](https://www.occrp.org/en/news/brazil-targets-illegal-gold-mines-in-the-amazon) - [Brazil Targets Illegal Gold Mines in the Amazon](https://www.occrp.org/en/daily/16186-brazil-targets-illegal-gold-mines-in-the-amazon) - [Operation Leads to Major Gold Seizure in the Brazilian Amazon](https://www.unodc.org/unodc/en/frontpage/2026/June/operation-leads-to-major-gold-seizure-in-the-brazilian-amazon.html) - [Watch Gold’s Price Surge Drives Narcos Into Illegal Mining in the Amazon - Bloomberg](https://www.bloomberg.com/news/videos/2025-01-24/gold-s-price-surge-drives-narcos-into-illegal-mining-in-the-amazon) - [Anti-money laundering and countering the financing of terrorism at international level - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level_en) - [European Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance](https://finance.ec.europa.eu/news/european-commission-updates-list-high-risk-countries-strengthen-international-fight-against-2025-12-04_en) - [EU methodology for the identification of high-risk third countries - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level/eu-methodology-identification-high-risk-third-countries_en) - [High risk third countries and the international context content of anti-money laundering and countering the financing of terrorism - European Commission](https://finance.ec.europa.eu/financial-crime/high-risk-third-countries-and-international-context-content-anti-money-laundering-and-countering_en) - [Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance](https://finance.ec.europa.eu/news/commission-updates-list-high-risk-countries-strengthen-international-fight-against-financial-crime-2025-06-10_en) - [High-risk and other monitored jurisdictions](https://www.fatf-gafi.org/en/topics/high-risk-and-other-monitored-jurisdictions.html) - [Anti-Money Laundering and Terrorist Financing Directive 4 - Finance](https://finance.ec.europa.eu/regulation-and-supervision/financial-services-legislation/implementing-and-delegated-acts/anti-money-laundering-and-terrorist-financing-directive-4_en) - [Jurisdictions under Increased Monitoring - 19 June 2026](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [Anti-money laundering: the Commission updates its list of high-risk third-country jurisdictions to strengthen the international fight against financial crime - Finance](https://finance.ec.europa.eu/news/anti-money-laundering-commission-updates-its-list-high-risk-third-country-jurisdictions-strengthen-2022-12-20_en) - [Jurisdictions under Increased Monitoring - 13 February 2026](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-february-2026.html) - [Outcomes FATF Plenary, 17-19 June 2026](https://www.fatf-gafi.org/en/publications/Fatfgeneral/outcomes-fatf-plenary-june-2026.html) - [Jurisdictions under Increased Monitoring - 13 June 2025](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2025.html) - [News](https://www.fatf-gafi.org/en/the-fatf/news.html) - [FATF changes its grey listing criteria to further focus on risk](https://www.fatf-gafi.org/en/publications/Fatfgeneral/FATF-grey-listing-criteria.html) - [Brazil Central Bank Faces Supreme Court Probe Over Banco Master Liquidation - Bloomberg](https://www.bloomberg.com/news/articles/2025-12-26/brazil-s-central-bank-faces-court-scrutiny-over-bank-liquidation) - [Banco Master CEO Denies $2.4 Billion Fraud As Brazil Bank Is Liquidated - Bloomberg](https://www.bloomberg.com/news/articles/2025-11-22/banco-master-ceo-denies-2-4-billion-fraud-as-bank-is-liquidated) - [Brazil’s Central Bank Was Warned for Years of Banco Master Risks - Bloomberg](https://www.bloomberg.com/news/articles/2025-11-20/brazil-s-central-bank-was-warned-for-years-of-banco-master-risks) - [Banco Master CEO Arrested as Central Bank Moves to Liquidate Firm](https://www.bloomberg.com/news/articles/2025-11-18/banco-master-ceo-arrested-central-bank-moves-to-liquidate-firm) - [Banco Master Collapse: Brazil Audit Court Orders Probe Into Liquidation of Bank - Bloomberg](https://www.bloomberg.com/news/articles/2026-01-05/brazil-audit-court-orders-probe-into-liquidation-of-banco-master) - [Banco Master Collapse in Brazil Highlights Costly Oversight Gaps - Bloomberg](https://www.bloomberg.com/opinion/articles/2025-11-28/banco-master-collapse-in-brazil-highlights-costly-oversight-gaps) - [Banco Master May Be Brazil’s Biggest Banking Fraud, Haddad Warns - Bloomberg](https://www.bloomberg.com/news/articles/2026-01-13/banco-master-may-be-brazil-s-biggest-banking-fraud-haddad-warns) - [Brazil Bank Collapse Spells Turmoil for Firms Holding Its Debt - Bloomberg](https://www.bloomberg.com/news/articles/2025-11-19/brazil-bank-collapse-spells-turmoil-for-firms-holding-its-debt) - [Brazil’s Audit Court Backs Off Threat to Undo Master Liquidation - Bloomberg](https://www.bloomberg.com/news/articles/2026-01-07/brazil-s-audit-court-backs-off-threat-to-undo-master-liquidation) - [Banco Master Fraud: Daniel Vorcaro’s Most Powerful Brazil Connections](https://www.bloomberg.com/graphics/2026-banco-master-fraud-case/) - [Counter Terrorism Designations; Issuance of Amended Iran-related Frequently Asked Question | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20260529) - [Iran-related Designations; Counter Terrorism Designations Updates | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20260605) - [Issuance of Executive Order Imposing Sanctions on Foreign Persons Involved in the Global Illicit Drug Trade; Counter Narcotics Designations and Designations Updates | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20211215) - [OFAC Sanctions 100+ ISIS-K Crypto Addresses](https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/) - [Transnational Criminal Organizations Designations; Cuba Designations; Russia-related Designations Removals; Issuance of TCO-related General License; Publication of OFAC-OFSI Comparative Overview | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20260623) - [Transnational Criminal Organizations Designations | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20250312) - [Transnational Criminal Organizations | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information/transnational-criminal-organizations) - [West Bank-related Designations; Russia-related Designation; Counter Narcotics Designation and Designations Updates; Transnational Criminal Organizations Designation Update | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20240314) - [Counter Narcotics Designations; Counter Terrorism Designations and Designation Update | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20260701) - [Transnational Criminal Organizations Press Chart Archive | Office of Foreign Assets Control](https://ofac.treasury.gov/transnational-criminal-organizations-press-chart-archive) - [ECSH31555 - Schedule 3ZA - High-Risk Third Countries - HMRC internal manual - GOV.UK](https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh31555) - [Money Laundering Advisory Notice: High Risk Third Countries - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2) - [HM Treasury Advisory Notice: High Risk Third Countries - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2/hm-treasury-advisory-notice-high-risk-third-countries) - [ECSH64830 - Schedule 3ZA - High-Risk Third Countries - HMRC internal manual - GOV.UK](https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh64830) - [Money Laundering Advisory Notice: June 2026 - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2/money-laundering-advisory-notice-high-risk-third-countries--2) - [High-risk third countries](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/high-risk-third-countries) - [The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) (No. 3) Regulations 2022](https://www.legislation.gov.uk/uksi/2022/1183/made) - [HM Treasury publish updated list of high risk third jurisdictions](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/hm-treasury-publish-updated-list-of-high-risk-third-jurisdictions) - [The Money Laundering and Terrorist Financing (High-Risk ...](https://www.legislation.gov.uk/uksi/2023/704/pdfs/uksiem_20230704_en_001.pdf) - [The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) Regulations 2023](https://www.legislation.gov.uk/uksi/2023/704/made) - [FATF/GAFILAT](https://www.fatf-gafi.org/content/dam/fatf-gafi/mer/Brazil-Mutual-Evaluation-2023.pdf.coredownload.inline.pdf) - [FATF](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Brazil-mer-2023.html) - [US Treasury OFAC](https://ofac.treasury.gov/recent-actions/20250730) - [US Treasury OFAC](https://ofac.treasury.gov/recent-actions/20250922) - [US Treasury OFAC](https://ofac.treasury.gov/recent-actions/20251212) - [US Treasury OFAC](https://ofac.treasury.gov/recent-actions/20260701) - [European Commission](https://finance.ec.europa.eu/news/european-commission-updates-list-high-risk-countries-strengthen-international-fight-against-2025-12-04_en) - [HM Treasury (UK)](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2/money-laundering-advisory-notice-high-risk-third-countries--2) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-07-30/us-sanctions-brazil-supreme-court-justice-over-bolsonaro-case) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-11-20/brazil-s-central-bank-was-warned-for-years-of-banco-master-risks) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-08-28/brazilian-police-crack-down-on-4-2-billion-fuel-crime-scheme) - [OCCRP](https://www.occrp.org/en/news/brazilian-cop-turned-banker-arrested-in-major-money-laundering-bust) - [Chainalysis](https://www.chainalysis.com/blog/brazil-crypto-crime-money-laundering-regulation/) - [TRM Labs](https://www.trmlabs.com/resources/blog/what-latin-americas-crypto-surge-means-for-compliance-teams) - [Global Witness / Amazon Underworld](https://globalwitness.org/en/campaigns/transition-minerals/amazonian-territories-on-the-frontlines-of-the-transition-minerals-race/) - [UNODC Brazil / Aurum Project](https://www.unodc.org/cofrb/en/noticias/2026/04/-workshop-at-ccpi-amazon-advances-operational-alignment-in-combating-illegal-gold-mining.html) Coverage gaps fim-int-2026-07-07-G001: No independent, post-January-2026 e… fim-int-2026-07-07-G001: No independent, post-January-2026 evidence establishing whether Brazil's e-BEF beneficial-ownership filing reform has materially improved REDESIM database population beyond the 2023 MER finding. [resolved] fim-int-2026-07-07-G002: The ratified typology library (sent… fim-int-2026-07-07-G002: The ratified typology library (sentinel-typology-library-v1.0.json, fim-typ-001 through fim-typ-020) was not present in this cycle's context, preventing typology_observations matching against this cycle's Brazil developments. [resolved] fim-int-2026-07-07-G003: No specific FATF Recommendation-num… fim-int-2026-07-07-G003: No specific FATF Recommendation-numbered citation (e.g. R.24, R.25) was supplied by Research for any Brazil claim this cycle despite general domain standing coverage referencing those Recommendations. [resolved] fim-int-2026-07-07-G004: No first BCB VASP supervisory enfor… fim-int-2026-07-07-G004: No first BCB VASP supervisory enforcement data exists yet to assess whether the new licensing regime is actually detecting and disrupting the Russian, Chinese and drug-trafficking-linked flows identified in Brazilian exchange data. [resolved] fim-int-2026-07-07-G005: The outcome of Supreme Court and Fe… fim-int-2026-07-07-G005: The outcome of Supreme Court and Federal Audit Court review of Central Bank supervisory conduct in the Banco Master liquidation is not yet resolved, limiting assessment of whether structural reform will follow. [resolved] fim-int-2026-07-07-G006: The outcome of the CVM public consu… fim-int-2026-07-07-G006: The outcome of the CVM public consultation on crypto-asset securities classification, closed June 2026, has not yet been published. [resolved] fim-int-2026-09-02-G001: D1 sanctions, D2 beneficial ownersh… fim-int-2026-09-02-G001: D1 sanctions, D2 beneficial ownership, D3 enabler jurisdictions and D4 conflict finance were not independently re-swept in this BR-scoped pass; absence is a coverage gap, not a no-material-change finding. [resolved] fim-int-2026-09-02-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-09-02-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No bcb.gov.br-hosted primary text was reached for Resoluções BCB 519-521 this cycle; sourcing rests on T2/T3 corroboration only. [resolved] fim-int-2026-09-02-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-09-02-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): BCB implementing norms on Lei 15.328/2026 execution mechanics (due 25 May 2026) were not independently confirmed this cycle. [resolved] fim-int-2026-09-02-G004: Tier D jurisdiction watch (KH, LA, … fim-int-2026-09-02-G004: Tier D jurisdiction watch (KH, LA, MX, CO) was out of scope for this BR-specific run and is recorded as a coverage gap, not a finding. [resolved] fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No T1 primary document was independently fetched for D3, D4, D5 or D6 this cycle because retrieval was scoped to Brazil-specific queries; Tier D jurisdictions (KH/LA/MX/CO) were not actively searched. [resolved] fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D2'}): Operation Exchange's specific figures (R$10.4bn, 24 warrants, 73 shell companies) rest on a single T3 source and were not cross-verified against a Polícia Federal primary release this pass. [resolved] fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): FR-1257 gambling-specific obligation-atom question sets were not depth-researched this cycle; the dominant market-closure event consumed the pooled web-search budget. [resolved] fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): VASP authorisation deadline and unauthorised-counterparty cutoff dates diverge across sources (30 October vs 6 November 2026); no Tier-1 BCB source reconciling the discrepancy was located this cycle. [resolved] fim-int-2026-10-04-G003: Tier D (KH, LA, MX, CO) was not ind… fim-int-2026-10-04-G003: Tier D (KH, LA, MX, CO) was not independently swept this cycle given the BR-bound dispatch; a dedicated Mexico TBML/cartel-finance sweep was not run. [resolved] fim-int-2026-10-04-G004 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G004 ({'scheme': 'financial_integrity', 'value': 'D7'}): Enforcement penalty schedule for non-compliant firms under MP 1.394/2026 (betting prohibition) was not located to primary-instrument standard this cycle. [resolved] fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No BR-specific D2 (Beneficial Ownership) development was located this cycle despite active searching; recorded as a coverage gap, not an assertion of no activity. [resolved] fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No BR-specific D3 (Enabler Jurisdictions) development was located this cycle. [resolved] fim-int-2026-10-11-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-10-11-G003 ({'scheme': 'financial_integrity', 'value': 'D4'}): No BR-specific D4 (Conflict Finance) development was located this cycle. [resolved] fim-int-2026-10-11-G004: Tier D jurisdictions (KH, LA, MX, C… fim-int-2026-10-11-G004: Tier D jurisdictions (KH, LA, MX, CO) were not within scope for this single-JID Brazil dispatch. [resolved] fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No dedicated primary-source sweep of BR-specific beneficial-ownership registries, enabler-network reporting, or sanctions designations was completed within this cycle's search budget. [resolved] fim-int-2026-10-18-G002: The Tier D jurisdiction watch (Camb… fim-int-2026-10-18-G002: The Tier D jurisdiction watch (Cambodia, Laos, Mexico, Colombia) was not actively re-searched this cycle because the full search budget was allocated to Brazil-specific sources. [resolved] fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): Primary BCB resolution number for the self-custody wallet reporting rule was not independently retrieved; sourced via Agência Brasil's account of the rule. [resolved] fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): Primary BCB Resolução text for 588/589/2026 not directly opened; relies on secondary legal-explainer and trade-press sources. [open] fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No primary COAF/Fazenda notice located for the Willer Tomaz compliance-failure claim. [open] fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): No BR-specific signal found for D1 (Sanctions), D2 (Beneficial Ownership), D3 (Enabler Jurisdictions), D4 (Conflict Finance), D6 (Compliance Technology) this cycle. [open] FIM-GAP-001 (D3): Lawyers and several DNFBP categories remai… FIM-GAP-001 (D3): Lawyers and several DNFBP categories remain effectively unregulated for AML/CFT/CPF purposes in Brazil, per the FATF/GAFILAT MER, leaving a professional-enablement gap for structuring and gatekeeping services. FIM-GAP-002 (D2): Despite the REDESIM initiative to detect m… FIM-GAP-002 (D2): Despite the REDESIM initiative to detect misuse of companies, Brazil's beneficial ownership database remains largely unpopulated, undermining transparency of legal entities used in laundering schemes. FIM-GAP-003 (D6): Fintechs were historically outside the Cen… FIM-GAP-003 (D6): Fintechs were historically outside the Central Bank's mandatory reporting perimeter to the Federal Revenue Service, a loophole prosecutors say allowed PCC-linked laundering to scale to over 1,500 fintech platforms nationally before the 2025-26 crackdown. FIM-GAP-004 (D2): The Central Bank was reportedly warned for… FIM-GAP-004 (D2): The Central Bank was reportedly warned for years about Banco Master's alarming asset growth and opacity without escalating supervisory action, until a $2.4bn+ fraud allegation forced liquidation. FIM-GAP-005 (D4): Precious-metals sector oversight relies on… FIM-GAP-005 (D4): Precious-metals sector oversight relies on a self-declaration certification for gold origin, enabling an estimated 30 tonnes/year of illegally-mined Amazon gold (~$1.86bn) to be laundered into the legal supply chain despite growing seizure volumes. FIM-GAP-006 (D6): COAF faces an insufficient number of analy… FIM-GAP-006 (D6): COAF faces an insufficient number of analysts and limited access to BO information, customs cash declarations, and reporting-entity data, constraining the depth and timeliness of financial intelligence produced. ## Evidence #### Confidence-tiered claims BCB-authorised institutions must make a specific communication to COAF for virtual-asset transfers of US$10,000 or more to or from self-custodied wallets, in either direction, effective 1 October 2026. [[Source 1]](#sec-sources) Probable · 1 source Existing VASPs must file BCB authorisation requests by 30 October 2026 (270 days after Resolutions 519-521 took effect). Separate reporting states 6 November 2026 as the date from which authorised institutions may no longer transact with unauthorised VASPs. The two dates are not reconciled in sourcing available this cycle. [[Source 1]](#sec-sources) Disputed · 1 source COAF published fines in the Diário Oficial da União: R$63,800 (8 Sep 2026) for declaration/requisition failures, and fines against SHC Entretenimento and Hyun Mi Cho Chung for three infractions (14 Sep 2026). [[Source 1]](#sec-sources) Probable · 1 source MP 1.394/2026 (25 Sep 2026) prohibits fixed-odds betting nationwide; SPA's portaria (15 Sep 2026) expanding payment-transaction interdiction procedures now applies across the entire formerly-licensed sector, with banks' existing 24-hour account-freeze obligation becoming universal in practice. [[Source 1]](#sec-sources) Probable · 1 source Brazil's 2023 Mutual Evaluation found Compliant for 10 and Largely Compliant for 19 of the 40 FATF Recommendations, with Substantially Effective ratings on only 2 of 11 effectiveness outcomes. [[Source 1]](#sec-sources) Probable · 1 source virtual-asset transfers of US$10,000+ to/from self-custodied wallets; cash operations ≥R$50,000; cash FX ≥US$10,000 [[Source 1]](#sec-sources) Probable · 1 source incumbent VASPs must file for PSAV authorisation by 30 October 2026 (270 days from 2 Feb 2026); after that date BCB-authorised institutions barred from intermediating for unauthorised VASPs [[Source 1]](#sec-sources) Probable · 1 source raised US$3.3m with Circle participation while awaiting BCB PSAV authorisation [[Source 1]](#sec-sources) Probable · 1 source Compliant on 10 and Largely Compliant on 19 of 40 FATF Recommendations; not on FATF grey list as of 19 June 2026 plenary [[Source 1]](#sec-sources) Probable · 1 source if ratified, extinguishes the SPA/COAF-regulated betting sector as a licensed obliged-entity population [[Source 1]](#sec-sources) Probable · 1 source 10-year document-retention duty for eFX providers, in force 1 October 2026 [[Source 1]](#sec-sources) Probable · 1 source Bans anonymous digital accounts, mandates 10-year data retention, imposes graduated obligations by firm size/systemic risk, and fines up to 20% of annual gross revenue for AML infractions; in early committee stage as of 15 Oct 2026. [[Source 1]](#sec-sources) Probable · 1 source VASPs must report to COAF any transfer of US$10,000 or more to or from self-custodied (unhosted) wallets, effective 1 October 2026; banks barred from servicing unauthorised crypto firms from this date. [[Source 1]](#sec-sources) Probable · 1 source 2023 FATF/GAFILAT mutual evaluation remains current; Brazil is not on the FATF grey or black list. [[Source 1]](#sec-sources) Probable · 1 source Resolução CVM nº 249/2026 (14 Oct 2026) creates a DLT tokenisation pilot sandbox with AML-adjacent relevance for new tokenised-securities rails. [[Source 1]](#sec-sources) Uncertain · 1 source in_force [[Source 1]](#sec-sources) Probable · 1 source created [[Source 1]](#sec-sources) Probable · 1 source collapsed [[Source 1]](#sec-sources) Probable · 1 source enacted_not_yet_effective [[Source 1]](#sec-sources) Probable · 1 source Self-custodied wallet transfers equal to or above US$10,000 subject to specific COAF reporting, effective 1 October 2026 [[Source 1]](#sec-sources) Probable · 1 source New Federal Police division for illegal-betting and match-fixing investigation under elevated CGLA/DICOR money-laundering coordination, published in the Official Gazette 13 October 2026 [[Source 1]](#sec-sources) Probable · 1 source SAR/CDD channel between ~188 licensed betting brands and COAF ceased operating following extinction of all federal authorisations 25 October 2026 [[Source 1]](#sec-sources) Probable · 1 source From 6 November 2026, BCB-authorised financial and payment institutions barred from virtual-asset market operations with unauthorised counterparties [[Source 1]](#sec-sources) Probable · 1 source increasing [[Source 1]](#sec-sources) Probable · 1 source