Brazil’s central bank is introducing new anti-fraud measures that will require virtual asset service providers to temporarily hold certain cryptocurrency transfers above $10,000 for up to 24 hours.
The new rules, established under Resolution BCB No. 584, will take effect on January 1, 2027. The measure applies to transfers destined for foreign entities operating in the virtual asset market and to self-custody wallets, giving service providers additional time to conduct risk assessments before completing potentially suspicious transactions.
Brazil Introduces 24-Hour Crypto Transfer Hold
Under the new framework, Brazilian virtual asset service providers, known locally as PSAVs, will be required to apply a precautionary retention period to certain crypto transfers.
The requirement covers transactions where the amount exceeds $10,000, with the threshold calculated either on an individual transaction or based on the customer’s total volume of qualifying transactions during the same day.
The rule is specifically aimed at transfers sent to:
- Virtual asset service providers or other virtual asset entities located abroad
- Self-custody cryptocurrency wallets
- Other transactions that the provider’s risk-management systems identify as requiring additional review
The measure can apply to cryptocurrencies and stablecoins, reflecting the central bank’s concerns about the rapid movement of funds through digital assets.
Why Brazil Is Introducing the New Rule
The Central Bank of Brazil said the measures are designed to strengthen fraud prevention and protect the integrity of the country’s financial system.
The regulator pointed to the increasing use of virtual assets, including stablecoins, to rapidly move funds obtained through financial fraud. Transfers to foreign platforms or self-custody wallets can make it more difficult for institutions to identify suspicious activity and recover stolen funds.
The 24-hour retention period is intended to create an additional window for risk analysis before the assets leave a regulated platform.
The Rule Is Not a Permanent Crypto Freeze
Importantly, the new requirement does not represent a permanent freeze on cryptocurrency withdrawals.
The Central Bank describes the measure as a precautionary retention. Once a transaction is flagged or meets the applicable threshold, the service provider can conduct an additional risk assessment.
A provider may release the transaction before the full 24-hour period if its documented risk-management procedures determine that the transfer can proceed. If the review identifies sufficient concerns, the institution can reject the transaction.
Customers must also be informed when their transactions are subject to the precautionary retention and told about the applicable timeframe.
Smaller Transactions Can Also Face Delays
The $10,000 threshold does not mean transactions below that amount will automatically be processed without additional checks.
The new rules allow virtual asset service providers to retain other transactions when their risk-management systems determine that additional verification is necessary.
This gives exchanges and other regulated crypto businesses discretion to identify potentially fraudulent transactions based on factors beyond transaction size, including the customer’s profile, transaction characteristics and destination.
Self-Custody Wallets Are Included
One of the most notable aspects of the regulation is its treatment of self-custody wallets.
Unlike custodial exchange accounts, self-custody wallets allow users to control their own private keys. Brazil’s new framework nevertheless requires regulated service providers to apply the precautionary retention mechanism when qualifying transfers are sent to such wallets.
The move reflects regulators’ concern that fraudulent funds can move quickly from regulated platforms into wallets directly controlled by users, potentially making recovery more difficult.
Stablecoins Are Also Covered
Brazil’s central bank has specifically highlighted the increasing use of stablecoins in financial transactions.
Stablecoins can provide faster movement of value than traditional payment rails, particularly for international transfers. However, regulators are increasingly examining their potential use in fraud and illicit financial flows.
The new Brazilian rules therefore extend the anti-fraud framework to virtual asset transactions involving stablecoins as well as other crypto assets.
New Fraud Monitoring Requirements for Crypto Firms
The regulation goes beyond the 24-hour retention requirement.
Virtual asset service providers will also need to strengthen their fraud-risk management procedures and maintain records relating to fraud and attempted fraud associated with their virtual asset and payment services.
These records are intended to help institutions monitor fraudulent activity and document the actions taken in response.
The Central Bank can also impose additional measures on institutions that fail to comply with the requirements. Reporting on the regulation indicates that the authority can require stronger controls, including potentially extending retention procedures in certain circumstances.
Brazil Continues to Tighten Crypto Regulation
The latest measure is part of a broader expansion of Brazil’s regulatory framework for digital assets.
Earlier regulations brought virtual asset service providers under increased Central Bank oversight and established requirements covering areas such as authorization, governance, security, anti-money-laundering controls and certain foreign-exchange activities.
The Central Bank has also established rules governing virtual asset transfers involving international payments and self-custody wallets. Its existing framework requires providers to identify users associated with self-custody wallets and maintain documented procedures for verifying the origin and destination of virtual assets.
The latest 24-hour measure adds another layer of fraud-prevention controls to this developing regulatory framework.
What the New Rule Means for Crypto Users
For Brazilian cryptocurrency users, the biggest practical change will be the possibility of a delay when moving larger amounts of crypto from a regulated provider to an overseas platform or personal wallet.
A user sending more than $10,000 in qualifying transfers may therefore need to account for a potential 24-hour review period.
For exchanges and other crypto businesses, the regulation will require additional infrastructure for transaction monitoring, risk scoring, customer notifications and fraud documentation before the rules take effect.
The regulation gives providers several months to adapt their systems before the January 1, 2027 implementation date.
Brazil’s Crypto Market Faces a New Compliance Era
Brazil has become one of Latin America’s most important cryptocurrency markets, making regulatory changes particularly significant for exchanges, stablecoin companies and international crypto platforms serving Brazilian customers.
The latest policy reflects a broader shift in which regulators are attempting to preserve the speed and utility of digital assets while introducing safeguards similar to those used in traditional financial services.
For users, the most visible effect will be slower access to some large outbound transfers. For regulated crypto businesses, however, the change represents a broader compliance obligation involving fraud prevention, transaction monitoring and risk management.
Conclusion
Brazil’s Central Bank will introduce a new 24-hour precautionary retention requirement for certain crypto transfers above $10,000 beginning January 1, 2027.
The rule targets transfers to foreign virtual asset entities and self-custody wallets and is designed primarily to give regulated providers additional time to identify and prevent fraudulent transactions. It can also apply to smaller transactions when risk-management systems identify the need for additional review.
The measure does not constitute a permanent freeze on cryptocurrency withdrawals. Providers can release qualifying transactions earlier when their risk assessment allows them to proceed, while customers must be informed when a transaction is being held.
As Brazil continues developing its digital asset regulatory framework, the new requirement signals a stronger focus on fraud prevention and transaction monitoring while maintaining a regulated path for cryptocurrency activity.
Also Check: Stripe-Owned Bridge Joins EU MiCA Register as 42nd Authorized Stablecoin Issuer
0VR2IY60
