The Central Bank of Brazil has approved three resolutions that, for the first time, establish a clear regulatory framework for the country's crypto market. Resolutions No. 519, No. 520, and No. 521 will enter into force on February 2, 2026, and define the licensing procedures for companies, their operating procedures, and the rules for using crypto assets in international transactions.
The resolutions were developed with the participation of representatives from the crypto industry, banks, lawyers, and international organizations. The discussions resulted in the development of an approach aimed at increasing transparency and mitigating risks in the virtual asset sector.
Resolution No. 520 regulates the activities of virtual asset service providers (SPSAVs). All companies offering crypto services will now be required to obtain authorization from the Central Bank. Depending on their activity profile, they will be divided into three categories: intermediaries, custodial platforms, and crypto brokers. They will be subject to strict standards of corporate governance, client protection, and information security.
Resolution No. 519 outlines the licensing procedure for new market participants and companies already working with crypto assets. It unifies application deadlines and requirements and updates the rules previously in effect for foreign exchange brokers and securities distributors. Thus, all organizations wishing to legally provide crypto services will be required to undergo an approval process and meet uniform Central Bank criteria.
Particular attention is given to Resolution No. 521, which equates certain cryptocurrency transactions to foreign exchange transactions. This category now includes international transfers and payments using crypto assets, transactions to repay foreign debt, the exchange of tokens linked to fiat currencies, and transfers between personal wallets with owner identification.
Companies without a foreign exchange license are limited to $100,000 in international cryptocurrency transfers. Officially licensed operators are required to adhere to the same standards as for traditional foreign exchange transactions.
Starting May 4, 2026, all transactions involving virtual assets in the foreign exchange market and international capital markets will be required to be recorded and reported to the Central Bank. These measures are aimed at preventing money laundering, strengthening controls over capital flows, and improving the reliability of the country's statistical data.
The regulatory changes coincide with the consideration of draft law PL 957/2025, which allows for the payment of salaries in cryptocurrency, provided that at least half of the amount is transferred in fiat.
It is worth recalling that in July 2025, the Central Bank of Brazil suffered a massive cyberattack, during which attackers stole approximately $140 million through a vulnerability in C&M Software. Some of the stolen funds were subsequently laundered through Bitcoin, Ethereum, and USDT.