#
Brazil's VASP licensing regime, built on Law 14,478/2022 and BCB Resolutions 519-521, has been in force since February 2, 2026, requiring authorisation, minimum capital (R$10.8M-R$37.2M), and applying a nine-month transition window closing in November 2026, after which non-compliant firms must cease operations. Foreign VASPs face an equivalent local-establishment requirement. A sourcing-tier contradiction affecting several Confirmed-tier claims in this module has been escalated for human verification and is not yet resolved.
The capital bars attached to this framework are not nominal. Firms face a baseline minimum capital requirement of roughly R$10.8 million (approximately US$2 million), rising as high as R$37.2 million depending on business type -- a bar high enough to function as a filter on market entry, particularly for smaller or newer VASPs. Existing firms already operating in Brazil before the new rules took effect are inside a nine-month transition window running from February 2026, with a compliance deadline in November 2026; firms that have not completed authorisation by that point are required to cease operations rather than simply facing supervisory censure. This is a materially harder deadline than a typical soft-launch grace period, and it is the single most consequential compliance event in Brazil's crypto calendar this cycle. Foreign VASPs serving Brazilian clients face the same underlying choice in substance: establish a locally authorised entity under the new framework or risk being barred from serving the market, though the strength of this specific inference rests on secondary reporting rather than a direct BCB statement to that effect.
One caveat needs to travel with this module's Confirmed-tier claims. An internal sourcing check this cycle surfaced a contradiction between the reported tier counts in the run's own metadata (all reporting zero at every tier) and the actual tier tags carried by the sources backing several of this module's core claims -- a BCB press release tagged T1, and academic BCB material tagged T2. That contradiction has been escalated for human verification rather than resolved automatically, and the claims it touches -- the core authorisation requirement, the Resolution 519 pathway update, and a related cross-border classification claim -- are held pending that resolution. The underlying facts are not in dispute; the question is whether the sourcing metadata supporting their Confirmed rating is itself trustworthy, and that has not yet been settled.
Outlook
The November 2026 transition deadline is the module's dominant near-term marker: it will reveal how much of Brazil's existing VASP population completes authorisation versus exits the market outright, and by extension how consolidated the licensed industry becomes. Separately, the primary statutory texts underlying this module -- Law 14,478/2022 itself and Decree 11,563/2023 -- have not yet been retrieved directly from Planalto or BCB primary sources this cycle; firming up that anchoring, alongside resolving the sourcing-tier contradiction noted above, is the priority before this module's claims can be treated as fully clear for publication.
Crypto Licensing
Brazil's virtual-asset licensing regime moved from framework-design to near-implementation this cycle. Entities providing virtual-asset services in Brazil must obtain Banco Central do Brasil authorisation as a Sociedade Prestadora de Serviços de Ativos Virtuais (SPSAV), or, where already an authorised financial institution, must notify BCB of intent to continue providing virtual-asset services. This core authorisation requirement, assessed at probable confidence, sits at the centre of the new Resolução BCB 519/2025 regime.
Resolução BCB 519/2025 establishes a 270-day grandfathering period ending 30 October 2026, during which existing virtual-asset providers may continue operating pending notification or authorisation. This transitional design is deliberate and material: it gives the market a defined runway to come into compliance while the rules themselves are already enacted and dated, taking effect 2 February 2026. The regime rests on Lei 14.478/2022 and Decreto 11.563/2023 as primary and secondary legal basis, with Resoluções BCB 519, 520 and 521/2025 supplying the operative detail, all under the supervisory authority of the Banco Central do Brasil.
Sourcing for the core authorisation and grandfathering requirements rests on Notabene's coverage of the resolutions rather than a bcb.gov.br-hosted primary text, a gap that is registered but does not undermine the underlying finding, since multiple independent secondary sources corroborate the instrument numbers and effective dates. Separately, reported minimum capital figures for SPSAVs by activity class, cited in press coverage as ranging from R$10.8 million to R$37.2 million, have not been confirmed against a primary BCB text this cycle and are held as an unconfirmed figure.
Outlook
The defining near-term marker is 30 October 2026, when the grandfathering period closes and providers that have not secured authorisation or completed notification lose the ability to continue operating in reliance on the transitional window. Watch for whether a BCB primary-source document becomes available to confirm the licensing regime's minimum capital requirements and to move confidence above probable.
1 earlier distinct update(s)
Crypto Licensing
Brazil's crypto licensing regime moved from statute-on-the-books to operating perimeter with the entry into force of BCB Resolutions 519, 520 and 521 on 2 February 2026. Every virtual asset service provider -- exchanges, custodians, and other intermediaries -- must now hold prior authorisation from the Banco Central do Brasil, completing the licensing architecture envisaged under the 2022 Virtual Assets Law (Law 14,478/2022). This is a landmark completion of a framework rather than a first announcement: the underlying statute has existed since 2022, and this cycle marks the point at which the implementing resolutions actually bind the market.
The capital regime attached to authorisation is tiered by risk classification, with minimum prudential capital reported to range from R$10.8 million to R$37.2 million. Market commentary characterises this threshold as materially favouring larger, already-capitalised incumbents, with smaller operators facing pressure toward consolidation or exit rather than straightforward compliance. This is a structural design choice within the resolutions rather than an incidental side effect, and it is worth tracking whether smaller VASP exits or mergers become visible in coming cycles as the grandfathering window narrows.
Transition mechanics soften the immediate compliance shock for existing operators. A 270-day grandfathering period, running from 2 February to 30 October 2026, allows already-operating VASPs to notify or apply for BCB authorisation without an enforced operational gap. Distinctly, banks, brokers and distributors that already hold authorisation for other regulated financial activities may extend into virtual-asset services through a notification-only pathway rather than pursuing a full new authorisation -- a materially lighter compliance lift than that facing standalone crypto-native VASPs, and one that may accelerate incumbent financial institutions' entry into the space relative to crypto-native competitors.
Foreign VASPs are treated distinctly and more restrictively. Those unable to demonstrate a significant existing Brazilian customer base as of 2 February 2026 face a licensing process that can extend up to two years, a materially longer timeline than the grandfathering track available to entities already established in-market. This creates a meaningful first-mover advantage for foreign VASPs with pre-existing Brazilian user bases and a corresponding barrier for genuinely new foreign entrants.
Outlook
The grandfathering window's 30 October 2026 close is the next hard date on the calendar: VASPs that have not completed notification or authorisation by then face a binding compliance cliff rather than a soft deadline. Separately, the up-to-two-year foreign VASP licensing timeline implies that genuinely new foreign entrants without an existing Brazilian footprint are unlikely to receive authorisation before roughly early 2028, a timeline worth monitoring for any acceleration or further guidance from the BCB in subsequent cycles.
Sources and findings (5)
- T1 · Banco Central do BrasilBanco Central do Brasil (BCB) — VASPs to operate, classified as intermediary, custodian, or virtual asset broker, under Resolution BCB 520retrieved M5bindingin forcenew
- T1 · Banco Central do BrasilResolution BCB 519 — VASP operating-authorisation process, updating rules for segments previously regulated by CMN (FX brokers, securities brokers/distributors)retrieved M4bindingin forcenew
- T4 · The BlockExisting VASPs (transition cohort) — November 2026 compliance deadline (nine-month transition from Feb 2, 2026), after which non-compliant firms must cease operationsretrieved M4bindingin forcenew
- T4 · CoinDeskVASP firms (BR) — R$10.8 million baseline (~US$2M), up to R$37.2 million for certain business typesretrieved M4bindingin forcenew
- T4 · CoinDeskForeign VASP firms serving Brazilian clients — the new BCB VASP framework or risk being barred from the marketretrieved M4bindingin forcenew