Brazil Puts 24-Hour Hold on Crypto Transfers Over $10,000

Brazil's central bank will require virtual asset service providers to hold crypto transfers above $10,000 for up to 24 hours before clearing. The rule, which takes effect Jan. 1, 2027, targets fraud that exploits how quickly digital assets can be moved across borders, Banco Central do Brasil said.

The hold applies to a single transfer over $10,000 and to cumulative transfers that cross that threshold within a single day. Transfers to foreign platforms and self-custody wallets are covered too; those are two of the most common exit routes for fraud proceeds. VASPs operating in Brazil must also flag any transfer that trips their internal risk-management protocols, regardless of the dollar amount. A $3,000 transfer that looks suspicious can be frozen as well.

Transfers can clear before the 24-hour window closes if they meet criteria the central bank sets. Those criteria have not been published, so how fast the approval process runs is unclear.

Compliance will require real system changes. Providers need infrastructure that spots qualifying transfers and holds them automatically. Customers get notified when a hold is placed. Providers also keep records of any fraud attempts and what they did about it. The documentation requirement is substantial. The central bank wants a paper trail, not just a pause.

The records exist to reveal patterns. If the same wallet address keeps appearing in flagged transactions, or one foreign platform shows up repeatedly, the documentation gives regulators something to work from. Banco Central do Brasil handles monitoring and enforcement, though no specific enforcement mechanisms have been disclosed.

VASPs have roughly 18 months to prepare. Brazil's crypto market has grown fast, and the VASP ecosystem is reasonably mature, so much of the compliance infrastructure probably already exists. The work will concentrate on smaller operators and customer communication. How does a platform tell someone their $15,000 transfer is on hold without starting a panic or eroding trust?

Japan is the clearest parallel. Its Financial Services Agency and National Police Agency have both pushed exchanges toward anti-scam practices, including withdrawal restrictions and mandatory preregistration of withdrawal addresses. Waiting periods before new addresses can receive funds are also recommended. Those recommendations are non-binding, leaving platforms discretion over how aggressively to apply them. Brazil's rule is compulsory. Japan's guidance remains advisory.

Europe has a different version of the problem. Fraudsters there have posed as regulators and legitimate crypto companies. France has dealt with fake websites mimicking real platforms. The European Securities and Markets Authority said its own identity appeared in falsified documents. European regulators have struggled to respond in part because the continent's patchwork of rules makes coordinated enforcement difficult.

Brazil's approach is centralized by design. One regulator sets the rule and the deadline.

For everyday Brazilian users moving small amounts, nothing changes. The $10,000 threshold keeps casual transactions outside the rule's reach. For traders and businesses regularly sending significant sums to offshore platforms or personal wallets, the 24-hour window introduces real friction. A $50,000 transfer held during a volatile session can lose value if prices move against the sender.

Crypto's value proposition has always rested partly on speed and finality. A mandatory hold cuts against both. Brazil's central bank is betting the fraud reduction is worth the trade-off.

The rule deliberately targets outbound transfers to foreign platforms and self-custody wallets, not domestic exchange-to-exchange moves. Those outbound flows are where fraud proceeds most often disappear, either into offshore accounts or into wallets that cannot be easily traced or frozen. Keeping domestic liquidity relatively unrestricted while tightening the exits is the central bank's stated logic.

Stablecoin transfers would be caught by the threshold as written, because the rule does not carve out any asset class. The central bank's announcement made no specific mention of stablecoins. Stablecoin compliance is tightening in other markets too; Mastercard is testing a single-audit model for stablecoin compliance.

No major Brazilian crypto platform has commented publicly on the rule.