Brazil is preparing to strengthen safeguards against cryptocurrency-related fraud through a new regulatory measure that introduces a mandatory waiting period for certain outbound transfers. The Central Bank of Brazil (Banco Central do Brasil) published Resolution BCB No. 584/2026 on August 7, 2026, amending earlier fraud-prevention rules to specifically cover virtual asset service providers.
The changes take effect on January 1, 2027.
Under the updated framework, crypto platforms and other authorized institutions must hold transfers of digital assets for up to 24 hours after a customer deposits funds—whether in Brazilian reais or cryptocurrencies—before executing them.
This requirement applies when the destination is either a self-custody (non-custodial) wallet controlled by the user or a foreign virtual asset service provider operating outside Brazilian oversight.
The hold is triggered automatically for amounts exceeding the equivalent of US$10,000, calculated either as a single transaction or as the aggregate of a customer’s transfers on the same day.
Smaller transfers may also face the same delay if a provider’s internal risk-management systems flag them for closer examination.
The central bank has described the retention as strictly precautionary.
It is intended to give firms time to assess potential risks associated with the customer profile, the nature of the transaction, the counterparty, and the destination jurisdiction.
Providers must notify customers promptly when a hold is applied, clearly explaining its temporary and protective purpose along with its expected duration.
If a risk review is completed and no concerns are identified, the institution may release the funds before the full 24-hour period expires, provided the decision is properly documented.
At the end of the waiting period, the provider must either process the transfer or reject it.
The rule encompasses both traditional cryptocurrencies and fiat-referenced stablecoins.
Officials cited the growing use of these assets to rapidly move proceeds from financial scams beyond the reach of recovery efforts as a key motivation.
By creating a brief window for analysis, the measure aims to reduce the speed at which illicit funds can leave the regulated system.
Institutions are also required to maintain detailed records of fraud incidents, attempted fraud, and the corrective actions taken.
Non-compliance could lead the central bank to impose stricter conditions, such as longer holds, lower value thresholds, or limits on early releases.
Industry professionals have noted that while the policy strengthens consumer protections and aligns crypto services more closely with traditional payment safeguards, it may introduce friction for legitimate users who value rapid settlement or prefer self-custody.
Domestic platforms could face competitive pressures relative to fully offshore alternatives. Nonetheless, the resolution forms part of Brazil’s broader effort to integrate virtual asset providers into its existing financial regulatory architecture while addressing emerging risks.