Brazil regulates virtual asset services through a federal framework.
In 2026, licensing strategy depends on service scope, AML design and Central Bank rulemaking.
Prepared by RUE editorial team · Updated 28 October 2026
Book a licensing assessmentBrazil’s virtual asset service provider authorisation framework is operational in 2026. BCB Resolutions 519 and 520 took effect on 2 February 2026 and govern authorisation and the constitution and operation of SPSAVs. New entrants must obtain the required authorisation before starting regulated services; pre-existing operators must satisfy the applicable transitional rules.
Brazil is not a MiCA jurisdiction, so a crypto license in Brazil does not create EU passporting rights. It is, however, a serious market-entry route for businesses targeting Latin America’s largest economy, provided the model is built around local AML/CFT, consumer protection, tax reporting and operational governance expectations.
At RUE, we structure Brazil projects by first separating exchange, brokerage, custody, transfer and token-related activities, because the legal perimeter is service-driven. That scoping step usually determines whether the project is licensable as designed, needs perimeter adjustments, or should be paired with banking, payments or foreign-exchange analysis.
RUE supports Brazil projects through scope mapping, company setup coordination, AML/CFT framework design, policy drafting, regulator-facing documentation and banking-readiness preparation. Where the model touches payments, FX, securities or token issuance, we flag the perimeter early to avoid filing the wrong application.
Brazil gives access to one of the largest financial and digital-asset user bases in Latin America, which matters for exchanges, on-ramp models and custody-led platforms.
Law No. 14,478/2022 established a federal framework for virtual asset service providers. In 2026, the practical licensing path must still be checked against current Central Bank regulations and implementing acts.
Brazil is strategically important for businesses that need local fiat rails, treasury structuring, payment integration and operational access to a regulated financial ecosystem.
The key issue is not just 'crypto' in general. Brokerage, custody, exchange, token distribution and payment-linked models may trigger different legal questions and require separate structuring.
The first requirement for a crypto license in Brazil is correct legal classification of the business model. Brazil’s framework distinguishes virtual asset services from activities that may fall under payments, securities, foreign exchange or other regulated sectors. A founder who files under the wrong perimeter usually loses time before the regulator even reaches substance.
In 2026, applicants should expect a practical review across five layers:
A recurring issue in Brazil is that founders underestimate local documentation standards. The regulator and counterparties usually want not only constitutional documents, but also clear evidence of beneficial ownership, decision-making lines, internal controls and the real operating model behind the platform.
A local company is typically needed for a fully regulated operating model. Articles, shareholder records, registry filings and tax registrations must match the actual business structure.
The application should define whether the business performs exchange, intermediation, custody, transfer or related virtual asset services. Hybrid models often require additional perimeter analysis.
Controllers, ultimate beneficial owners, directors and senior managers should be fully disclosed, with supporting identity, address, professional background and integrity documents.
Brazil-facing VASP operations need customer due diligence, sanctions and PEP screening, transaction monitoring, alert escalation, recordkeeping and suspicious reporting procedures.
Shell structures are high-risk. The regulator and banking partners typically expect real governance, responsible officers, documented outsourcing and defensible cybersecurity controls.
Applicants should be ready to explain startup funding, ongoing liquidity assumptions, revenue model, client asset flows and projected compliance costs.
Compare Brazil with EU MiCA jurisdictions by regulatory framework, review period, fees, capital and local substance. Local registration or authorisation in Brazil does not provide MiCA authorisation or EU passporting.
6 jurisdictions in this table
* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.
Brazil tax analysis for crypto businesses is entity-specific and should not be reduced to a single headline rate. The tax result depends on the legal form, tax regime, revenue profile, service mix, cross-border flows and whether the business is acting as principal, intermediary, custodian or technology provider.
In practice, founders should separate four tax layers before launch:
Brazil also requires careful reconciliation between regulatory flows and accounting records. For crypto businesses, that usually means mapping fiat inflows, wallet movements, client balances, treasury positions, fees and off-platform settlements into a defensible ledger logic. This is one of the main reasons licensing and accounting should be designed together from day one. See also accounting services and crypto business bank account.
Tax treatment must be confirmed against the current Brazilian federal, state and municipal rules applicable in 2026. The correct approach is not to rely on generic internet summaries, but to validate the exact model before launch.
A crypto license in Brazil is not a one-time filing. In 2026, the real burden is ongoing AML, governance, cybersecurity, reporting and evidence of operational control.
Brazil has a federal legal framework for virtual asset services, but the exact licensing perimeter and application mechanics in 2026 must be checked against the latest Banco Central do Brasil implementing rules.
This matters because many articles use the phrase crypto license in Brazil as if it were a single static permit. In reality, founders should verify:
RUE treats Brazil as a jurisdiction where regulatory scoping comes before application drafting. That reduces the risk of building a platform that is commercially ready but legally misclassified.
Answer a few quick questions to find out if this jurisdiction suits your crypto business
Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:
Recommended Regulatory Route
Banco Central do Brasil authorisation for the applicable virtual asset service provider category
Estimated Budget
€24,000 – €35,000
Estimated Timeframe
4–6 months
EU Passporting
Not available through this jurisdiction’s local registration or authorisation
We classify the business model first: exchange, brokerage, custody, transfer, token activity, fiat handling and any overlap with securities, payments or FX regulation.
We coordinate the Brazilian company structure, ownership file, director setup, representation documents and core corporate registrations needed for a regulated project.
We prepare the AML/CFT framework, governance documents, risk matrix, onboarding logic, outsourcing controls and security documentation aligned with the actual operating model.
We assemble the licensing file, including corporate, personal, business, financial and control documents, and align the narrative across all sections before submission.
We support responses to information requests, clarification rounds and adjustments if the authority challenges scope, governance, custody or transaction-flow assumptions.
After approval, we help implement reporting lines, accounting coordination, banking readiness, internal training and ongoing compliance controls.
Open the key issues founders, compliance teams and legal leads usually need to confirm before launch.
Yes, Brazil has a legal framework for virtual asset service providers, but the practical licensing route in 2026 depends on the current implementing regulations.
The correct question is not only whether a crypto license in Brazil exists, but which services are already within the active authorization perimeter and which regulator is competent for the exact model.
The Banco Central do Brasil is the main authority to monitor for the virtual asset licensing framework, but some models may also raise securities issues for the CVM.
This is why exchange, custody, token issuance and payment-linked products should be scoped separately before filing.
Foreign ownership is generally possible, but the structure must be documented properly and matched with Brazilian corporate, tax and representation requirements.
In practice, regulators and banks will also want transparency on UBOs, source of funds and who actually controls operations.
No, a crypto license in Brazil does not provide EU passporting.
If your target market is the European Union, you should compare Brazil with a CASP license, MiCA license or a jurisdiction such as Lithuania.
Exchange, brokerage, custody, transfer, token distribution, fiat on-ramp and any payment-linked feature should be reviewed before application.
The regulator will care about who controls client assets, how transactions are executed and whether the product crosses into another regulated perimeter.
There is no reliable universal timeline that should be stated without reference to the current implementing rules and the exact service scope.
The real duration depends on whether the file is complete, whether the model is straightforward and whether the regulator raises perimeter or governance questions.
Brazil applies an activity-based methodology for minimum paid-up capital and net equity under Joint Resolution 14/2025 and BCB Resolution 517/2025. The required amount must be calculated for the operator’s actual activities and structure, taking account of any applicable transition provisions.
The core file usually includes corporate documents, UBO evidence, director records, a business plan, financial projections and a full compliance pack.
For custody or platform models, the authority and counterparties may also expect more detailed ICT, cybersecurity and outsourcing documentation.
A Brazilian SPSAV must meet the applicable corporate, governance and premises requirements. BCB Resolution 519 requires effective and exclusive use of its registered headquarters address and prohibits coworking, virtual-office and other shared premises for that purpose, except for institutions within the same conglomerate.
Brazil-facing crypto businesses should expect customer due diligence, sanctions and PEP screening, transaction monitoring, suspicious activity escalation and recordkeeping obligations.
The AML framework should be adapted to blockchain typologies such as mixer exposure, rapid wallet hops, mule patterns and high-risk counterparties.
Not always.
Token issuance may require separate analysis because some token structures can raise securities, payments or consumer law issues beyond the core virtual asset service perimeter. Utility claims alone do not settle the classification.
Brazil is a domestic Latin American market-entry jurisdiction, while Lithuania is part of the EU MiCA ecosystem.
If you need EU-wide scaling potential, compare Brazil with the crypto license in Lithuania. If you need Brazilian users, local rails and Brazil-specific operations, a crypto license in Brazil is the relevant route.
