Crypto License in Brazil

The main authority to watch for crypto licensing in Brazil is the Banco Central do Brasil, but not every crypto activity belongs to the same regulator.

Brazil’s regulatory architecture is functional. A virtual asset service model may sit primarily under the Central Bank, while adjacent features can raise issues for other authorities. The most important practical split is this:

• Banco Central do Brasil — core authorization and supervisory role for the virtual asset service framework as implemented;
• CVM — securities perimeter, especially where token structures resemble investment contracts or other regulated instruments;
• COAF-related AML logic — suspicious activity reporting and financial intelligence expectations remain central to operating readiness;
• Federal Revenue and local tax administration — tax registration, bookkeeping and reporting consistency;
• commercial registry and corporate authorities — incorporation, amendments and legal representation formalities.

A practical nuance many founders miss is that Brazilian counterparties, including banks and payment providers, often perform their own perimeter review. Even if the business is conceptually a VASP, a weak explanation of fiat handling, custody flows or token economics can delay onboarding long before the regulator issues a formal decision.

For businesses comparing Brazil with Europe, the key contrast is that a CASP license or MiCA license is an EU framework issue, while Brazil is a separate domestic regime. A crypto license in Brazil is therefore a market-entry tool for Brazil, not a substitute for EU authorization.

The legal analysis starts with the service actually delivered to the client, not with the marketing label used by the startup.

In Brazil, the most common regulated or regulation-sensitive models include:

• exchange services — matching or converting virtual assets and, in many cases, handling fiat on- and off-ramps;
• brokerage or intermediation — arranging client transactions without necessarily operating a full order book;
• custody — safeguarding private keys or otherwise controlling client virtual assets;
• transfer-related services — moving virtual assets on behalf of customers;
• platform operations — running the infrastructure through which users trade or access crypto-related services.

Founders should not assume that one filing automatically covers every adjacent revenue line. For example, adding staking-like yield features, token launch support, card-linked spending or treasury management can materially change the compliance perimeter. The same is true if the platform issues its own token, offers return expectations, or pools client assets in a way that resembles collective investment activity.

A useful structuring test is to map each product feature against four questions:

• Does the company ever control client fiat?
• Does the company ever control client private keys?
• Does the company act as principal, agent or technical facilitator?
• Does the token or product create rights that look like securities, e-money or payments instruments?

That matrix usually reveals whether the business is a straightforward VASP-style operator or a more complex regulated group requiring multiple workstreams.

Applications are delayed most often by weak scope definition, not by missing formality.

The red flags we see most often in Brazil crypto projects are:

• the founder describes the platform as an “exchange” but cannot explain who controls fiat and keys;
• the AML policy is generic and not adapted to blockchain-specific typologies;
• outsourcing is extensive, but no one can show who remains accountable for compliance;
• the group structure is offshore-heavy and source of funds is poorly evidenced;
• the token model is presented as utility-only while the economics suggest investment features;
• financial projections ignore compliance, custody and fraud-loss costs;
• the company seeks banking before it has a credible regulatory narrative.

These issues are fixable, but they should be corrected before submission and before approaching banks or payment partners.