On July 1, Brazil finalized a sweeping new regulation package aimed at increasing oversight of crypto asset platforms. The rules—effective January 1, 2027—will impose tougher capital adequacy, risk management, and transparency obligations on companies offering crypto trading, custody, transaction processing, and other digital asset services.
Regulatory scope significantly expanded
The Central Bank of Brazil now requires virtual asset service providers to maintain a minimum capital buffer to guard against potential financial losses. Companies must also establish formal risk management structures and regularly submit detailed financial and operational reports to regulatory authorities.
Bank officials emphasized that these steps aim to strengthen market stability and ensure investor protection. With these measures, standards imposed on crypto businesses will increasingly mirror those faced by traditional financial institutions.
The Central Bank of Brazil’s framework subjects crypto platforms to a stricter regime for capital, risk oversight, and reporting requirements.
New institutional classification for crypto firms
The new rules specifically target organizations designated as SPSAV in Brazil’s regulatory system. These companies operate across various digital asset verticals, including token and cryptocurrency transactions, custody, broker services, and client fund transfers. As the country’s monetary authority, the Central Bank plays a central supervisory role over both the financial system and payment infrastructure.
Under this framework, such service providers and their affiliated structures are classified as Institution Type 3 entities. This status means they’ll be monitored under a supervision regime comparable to that of securities dealers and distribution firms. Regulators cited a need for similar oversight levels for institutions sharing related risk profiles.
The new classification compels crypto companies to step up preparations in the areas of corporate governance, capital planning, and internal audit mechanisms.
These changes could notably increase compliance costs, especially for smaller market participants. Platforms will now be expected to shore up their loss-absorbing capacity, build robust ongoing risk monitoring systems, and update governance practices.
Transitional timeline and added restrictions set
Authorities plan to shift all virtual asset service providers to a Segment 4 classification by June 30, 2028. This move will apply across the board, regardless of company size, and further intensify prudential supervision. The phased rollout allows companies extra time to achieve full compliance before full enforcement.
Additionally, the same rulebook bars Segment 5 financial firms from offering virtual asset services. Segment 5 comprises smaller financial institutions under lighter oversight. Central Bank analysis concluded that crypto asset services demand stricter monitoring than is allowed within this segment.
Part of Brazil’s ongoing approach to crypto oversight
These latest rules dovetail with earlier Brazilian regulatory efforts to govern the crypto sector. Regulations implemented in November 2025 already tackled governance structures, anti-money laundering protocols, foreign currency transactions, and operational standards.
Further measures were rolled out throughout 2026. The National Monetary Council mandated that platforms comply with banking secrecy policies under Supplementary Law 105, while the Central Bank made independent financial audits a prerequisite for operation permits and license renewals.
