The Banco Central do Brasil (BCB), Brazil’s central bank, will soon require virtual asset service providers (VASPs) to have at least 24 hours holding checkpoint for $10,000 crypto transfer transactions.
Brazil will release the new regulation on January 1, 2027, leaving crypto providers less than five months to integrate necessary changes to their systems.
On August 7, 2026, Banco Central do Brasil published Resolution BCB No. 584/2026, an anti-fraud regulation that mandates a 24-hour holding period for specific cryptocurrency transfers in response to the growing use of visual assets in fraudulent cases.
Under the new anti-fraud rules, transfers reaching $10,000 to foreign platforms or to self-custody wallets must be retained by the provider for 24 hours. For example, if a customer deposit Brazilian reais or cryptocurrency from a regulated provider and then moves the resulting assets to a foreign crypto company or self-custody wallet.
Brazil’s Action Against Crypto Scams
Brazil’s aggressive move is not a permanent freeze but rather a precautionary one. This applies to either one big transaction or a combined smaller transaction made by the same customer on the same day.
Exchanges may still be processed before the 24‑hour period ends if the review shows no indication of fraud, supported by documented decisions and assessed risk factors.
Self‑custody wallets remain legal, with regulators viewing them as a safeguard against fraud and money laundering. Normally, crypto users expect withdrawals to be processed quickly once cleared and verified.
The only change is the introduction of a 24-hour holding period for transfers, giving authorities time to review large transactions before they leave the system. During this period, customers can still move assets from regulated exchanges into their personal wallets.
Crypto Providers Ahead of 2027 Changes
With less than 5 months on their hands, crypto providers must adapt to the changes and keep their customers informed before the resolution takes place.
Aside from the new transfer rules, crypto providers must start operating under an additional prudential requirement covering both capital and risk management.
In other words, Brazil is moving in a stricter oversight by requiring providers to not only comply with transfer rules but to also maintain sufficient capital while actively managing financial risk under continuous supervision.
This demonstrates a shift from basic crypto regulation to a more structured and bank-like framework, where providers are expected to demonstrate stability, accountability, and stronger risk controls as part of their day-to-day operations.
