Brazil's Central Bank set an October 30, 2026 deadline for crypto VASPs to file for authorization. Minimum capital up to $6.7M, onshore presence required, and stablecoin dominance drives the regime.
Alpha Score of 43 reflects weak overall profile with moderate momentum, weak value, weak quality. Based on 3 of 4 signals — score is capped at 90 until remaining data ingests.
Brazil’s crypto market is about to get a formal supervisor. The Central Bank of Brazil (BCB) set a hard deadline of October 30, 2026, for every virtual asset service provider (VASP) to file for authorization. A new report from blockchain security firm CertiK details what the rules demand and why the clock is ticking.
Brazil rankes fifth globally for real crypto adoption, according to Chainalysis data cited in the report. The country received $318.8 billion in on-chain value over the 12 months to June 2025. Nearly a third of all Latin American crypto activity ran through Brazilian wallets and platforms, roughly double the next two markets combined.
The regime rests on Law 14,478/2022, the Legal Framework for Virtual Assets. On November 10, 2025, the BCB published three resolutions at once. They define who must be licensed, set capital floors, and link crypto to foreign-exchange rules.
Any company that lets customers trade, hold, or send crypto must file for authorization by October 30, 2026. The application must include a “reasonable assurance report” from an audit firm registered with the securities regulator. The report must attest that the firm’s anti-money-laundering and sanctions controls actually work. Independent confirmation replaced the old promise of compliance.
The entry costs are not small. Minimum capital runs from roughly R$10.8 million to R$37.2 million, about $2 million to $6.7 million, depending on the license category. The BCB bars operators from using co-working spaces as their registered office. The report estimates about 120 providers currently serve the market, most without a formal license.
Foreign firms that served Brazil from offshore shells now have to bring operations onshore within 270 days. The perimeter is precise. The report is blunt about its purpose: to end the era of a Portuguese-language website, global liquidity, and no local presence.
Brazil is, in the report’s phrase, a “Stablecoin Nation.” About 80% of declared crypto volume moves through dollar-pegged tokens. USDT alone accounts for 88.7% of that flow. Total stablecoin activity reached R$1.13 trillion between 2019 and 2025. Tether’s USDT is already cashable at 24,000 ATMs across the country.
That reliance on foreign money is why the Central Bank leads the regime. “When four out of every five reais in crypto pass through an instrument pegged to a foreign currency, the phenomenon ceases to be a matter of consumer protection and becomes a matter of monetary policy,” CertiK argues. The report says that single fact explains why the Central Bank, not the capital markets regulator, runs the rules, and why stablecoins head the next regulatory wave.
Per CertiK’s own Hack3d tracking, $1.32 billion left the industry to hacks and exploits across 344 incidents in the first half of 2026. Wallet compromises drove $444.5 million of that. Phishing took $366.3 million. The two largest hits, Kelp DAO at $291 million and Drift Protocol at $285 million, came from operational and infrastructure failures, not broken smart contracts.
Marcos Rocha from Veirano Advogados, a law firm that advised on the filings, told CertiK that the market underestimated the work. “The most common issue we have observed is the underestimation of the complexity and timing involved in preparing an authorization application,” he said. He added that “the review will be thorough, detailed, and highly technical.”
Antônio Neto, Head of Growth LATAM at the Solana Foundation, described a growing swing toward licensed operators. “What we’re seeing as the first real wave is projects choosing to operate under an authorized PSAV rather than pursue their own license,” he said. Later in the report he argued the “Brazilian market is structurally moving onto the regulated rail.”
The capital floor and the assurance bottleneck will reshape the field. The report’s thesis is that a license becomes an asset. Acquisition of an already-authorized local operator becomes the fast route in for foreign entrants. The same pattern followed Europe’s MiCA and Dubai’s VARA regimes, where unlicensed volume migrated to the survivors.
There are gray zones the report flags plainly. Non-custodial wallets, DeFi front-ends, and tokenized securities remain the securities regulator’s territory. The CVM has stated that a tokenized share is still a share.
The report’s verdict: Brazil’s market is one “in which the ability to prove replaces the ability to promise.”
For the roughly 120 providers now serving Brazilian users, the application must reach the Central Bank by October 30, 2026. It must carry an independent assurance report.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.