Brazil crypto licensing: fewer than 10% of firms plan to apply before deadline

en.cryptonomist.ch 34 m

Legal

Brazil’s crypto industry is bracing for a sharp contraction as a new licensing deadline approaches, with industry estimates suggesting that fewer than 10% of companies currently offering virtual asset services in the country plan to seek Central Bank authorization before October 30. The scale of the pullback illustrates just how disruptive Brazil crypto licensing rules have become for an industry that, until recently, operated with far less oversight.

Key takeaways

Fewer than 10% of Brazil’s estimated 150 to 300 virtual asset companies are expected to apply for Central Bank authorization before the October 30 deadline.
Only 20 to 25 firms are likely to file, and roughly 10 are expected to ultimately win a license as a PSAV, or virtual asset service provider.
Companies that miss the deadline must shut down operations within 30 days.
Capital requirements now range from R$10.8 million to R$37.2 million, alongside strict governance, audit and compliance rules.
Firms including Bitnuvem, NovaDAX, Digitra.com and Coinext have already closed, restructured or exited the retail market.

Brazil’s Crypto Licensing Deadline and Market Impact

The October 30 cutoff marks the moment Brazil’s crypto market shifts from a loosely regulated space into one governed by a formal authorization regime, and most operators appear unwilling or unable to make the jump. According to figures reported by Valor Investe, Brazil is home to somewhere between 150 and 200 domestic and foreign firms providing virtual asset services, though some industry estimates push that number closer to 300.

Limited Applications and Expected Licensed Firms

Out of that broad pool, only 20 to 25 companies are expected to have the capital, corporate structure or strategic interest needed to even file an application. Of those, roughly 10 firms are projected to actually secure authorization as PSAVs — the local designation for licensed virtual asset service providers. That funnel effect, from hundreds of operators down to a handful of licensed names, is the clearest signal yet that Brazil crypto licensing will reshape who gets to legally serve the market.

Enforcement Timeline and Consequences

Firms that were already providing virtual asset services before the new framework took effect in February have until October 30 to file the first stage of their authorization request. Miss that window, and the consequence is blunt: companies get 30 days to wind down operations entirely. Financial institutions that already hold a banking license don’t need this separate authorization, and fund managers stay under the Securities and Exchange Commission’s oversight, known locally as CVM. But for standalone crypto firms, there’s no gray area left — comply or close.

Regulatory Requirements and Compliance Challenges

Brazil’s final crypto regulatory requirements landed far heavier than what the industry initially expected, and that gap between proposal and reality is a big part of why so few firms are applying. The framework now bundles capital thresholds with a long list of operational obligations that many smaller players simply can’t absorb.

Capital Requirements and Operational Standards

During the earlier Public Consultation 109/2024, the Central Bank had floated relatively modest minimums — R$1 million for exchanges, R$2 million for custodians and R$3 million for brokers handling both activities. The rules finalized in November told a different story. Depending on a company’s activities and risk profile, required capital now ranges from R$10.8 million to R$37.2 million, a jump that priced out much of the smaller end of the market.

Capital alone isn’t the whole hurdle. Applicants also need to satisfy requirements covering governance, internal controls, risk management, cybersecurity, anti-money laundering procedures, technical certification and periodic regulatory reporting. Independent audit reports are mandatory too, with auditors expected to review anti-money laundering controls, segregation of customer assets and internal compliance programs. Separate capital and risk rules approved in July begin phasing in from January 2027 and will eventually push virtual asset providers into the Central Bank’s S4 regulatory segment by June 2028 — a tier that smaller S5 institutions won’t be allowed to operate in at all.

Ongoing Reporting and Transaction Controls Starting 2027

The compliance burden doesn’t end once a license is granted. Starting January 1, 2027, licensed exchanges must submit daily asset sufficiency reports proving they hold enough reserves to cover operational and security risks. That same date brings another layer of scrutiny: crypto transfers above $10,000 sent to foreign virtual asset providers or self-custody wallets will be held for up to 24 hours for risk review before release, under rules the Central Bank introduced in August. Providers can release funds sooner once the review is complete, but the default is now delay-first, not instant transfer.

The Central Bank has also been building a real-time crypto threat alert system with Hypernative, a response to incidents in which attackers converted stolen funds into cryptocurrency following a major cyberattack. Foxbit and Mercado Bitcoin were among the firms preparing to join that monitoring network — a sign that security infrastructure, not just paperwork, is becoming part of what it takes to stay licensed.

Market Restructuring and Industry Responses

The practical effect of tightening virtual asset service providers Brazil rules is already visible in a wave of closures, mergers and retail exits that started well before the October deadline. This isn’t a hypothetical shakeout — it’s happening in real time.

Firms Closing or Restructuring Amid Regulatory Pressures

Bitnuvem shut down its operations this year, pointing to rising operating costs and regulatory demands. NovaDAX followed in June, ending its Brazilian business under an arrangement that let customers migrate to Foxbit. Digitra.com later closed its retail arm, also steering customers toward Foxbit, while BTG Pactual folded its Mynt crypto platform into the bank’s own existing infrastructure.

Bitso restructured its Brazilian retail model in early September through a partnership with Mercado Bitcoin, shifting retail customers there while keeping its own local focus on infrastructure and institutional services. Then, after nearly a decade in the market, Coinext announced it would close its retail trading and custody business entirely — though its institutional arm, Coinext Asset, keeps operating. Unlike some earlier exits, Coinext explicitly cited the new regulatory environment, saying it had evaluated the requirements, held talks with potential partners and found no workable path to stay in retail. Industry sources told Valor Investe that more portfolio transfers are under negotiation, meaning additional restructuring announcements could surface before the transition period closes.

Banks Expanding Crypto Services and Industry Criticism

Not every part of the market is contracting. Brazilian banks — Itaú, Bradesco, Santander, Banco do Brasil and Nubank among them — have been expanding crypto access since 2025 while operating under their existing regulatory licenses, meaning they skip the new authorization process altogether. Central Bank filings from March showed none of these banks held virtual assets on their own balance sheets, even as Nubank offered digital assets to crypto customers and Itaú offered assets through its investment platform. Mercado Bitcoin, meanwhile, kept growing through the transition: Tether invested in the exchange in July as part of a financing round tied to tokenized assets, payments, lending and onchain capital markets, and the company said it served users with tokenized assets issued.

That contrast — banks scaling up, standalone crypto firms scaling down or closing — is central to why this crypto market restructuring matters beyond Brazil’s borders. It suggests regulation with a high entry bar tends to consolidate activity inside institutions that already have capital and compliance infrastructure, while squeezing out independent operators that don’t.

Ripple’s Latin America public policy and regulatory director, Isabel Sica Longhi, argued the problem wasn’t just the substance of the rules but the speed at which they arrived. “The biggest problem was this sequencing, where everything came together very quickly, without even waiting to see whether the risks that the Central Bank intended to address with Resolutions 519, 520 and 521 would actually be addressed before adjusting the rules,” Longhi said, according to Valor Investe. Executives cited in that report said the Central Bank set a high bar partly in response to earlier fintech-sector problems — fraud, cyberattacks, third-party account misuse and weak internal controls — that shaped the regulator’s cautious approach.

Not everyone in the industry is pushing back. One executive quoted by Valor Investe described compliance as simply part of operating in a regulated market, saying “regulation is not something you cry about, you comply with it.” That executive still warned the current calibration risks reducing innovation by excluding smaller companies and business models that can’t absorb the new costs. Longhi drew a similar but sharper distinction, saying some market thinning is a natural and even necessary part of regulation — but only up to a point. “The thinning of the market is natural and should happen anyway,” she said. “What is not natural, if it happens, is preventing the market from existing and removing small participants simply because they are small participants.”

Whether Brazil ends up with a leaner but more resilient crypto sector, or one that’s simply smaller and more concentrated in the hands of banks and a few large exchanges, should become clearer once the October 30 filing window closes and the Central Bank starts processing applications.

FAQ

How many crypto companies in Brazil are expected to apply for Central Bank authorization?

Industry estimates suggest that only about 20 to 25 firms will apply, with roughly 10 securing the license.

What happens to crypto companies in Brazil that do not apply for authorization by October 30?

They must cease operations within 30 days after the October 30 deadline.

What capital requirements must Brazilian crypto companies meet under the new rules?

Depending on activities, companies must hold capital from R$10.8 million to R$37.2 million plus fulfill governance, security, audit, and compliance obligations.