Brazil's Central Bank has given every crypto firm operating in the country until October 30, 2026 to file for formal authorization, backed by an independent audit of their compliance controls. A new report from CertiK shows Brazil pulled in $318.8 billion in on-chain crypto value over the past year, with most of that volume moving through dollar-pegged stablecoins.
Brazil's Central Bank has set a hard deadline for pulling the country's crypto industry under formal supervision: every virtual asset service provider must file for authorization by October 30, 2026, backed by a "reasonable assurance report" attesting that the firm's anti-money laundering and sanctions controls actually work. A new report from blockchain security firm CertiK lays out what the rules require and why they matter for the firms operating in the market.
According to Chainalysis data cited in the report, Brazil ranks fifth globally for crypto adoption. The country pulled in $318.8 billion in on-chain value over the twelve months to June 2025. Nearly a third of all Latin American activity flowed through Brazilian wallets and platforms, roughly double the next two markets, Argentina and Mexico, combined.
What the licensing rules require
The regime rests on Law 14,478/2022, Brazil's Legal Framework for Virtual Assets, and took its current shape on November 10, 2025, when the Central Bank published three resolutions at once. Minimum capital runs from roughly R$10.8 million to R$37.2 million, about $2 million to $6.7 million, depending on the license category, and the Central Bank bars operators from registering out of co-working spaces.
CertiK estimates about 120 providers currently serve the market, most without a formal license. Foreign firms running Brazil operations from offshore shells now have 270 days to bring them onshore.
Why the Central Bank is focused on stablecoins
CertiK calls Brazil a "Stablecoin Nation": about 80% of declared crypto volume moves through dollar-pegged tokens. USDT alone accounts for 88.7% of that flow, and total stablecoin activity reached R$1.13 trillion between 2019 and 2025. CertiK argues this reliance makes stablecoins a monetary-policy question for the Central Bank rather than only a consumer-protection one.
Marcos Rocha of Veirano Advogados, a law firm that advised on the filings, told CertiK the market underestimated the work involved. According to CertiK, he added that "the review will be thorough, detailed, and highly technical."
Hacks add pressure on security standards
The push for audited compliance comes as crypto theft keeps climbing. Per CertiK's Hack3d tracking, $1.32 billion left the industry to hacks and exploits across 344 incidents in the first half of 2026. Wallet compromises drove $444.5 million of that loss, and phishing took $366.3 million. The largest hit, Kelp DAO, cost $291 million. The second-largest, Drift Protocol, cost $285 million; both came from operational and infrastructure failures rather than broken smart contracts.
CertiK points to a similar pattern after Europe's MiCA framework and Dubai's VARA regime, where unlicensed volume migrated to firms that secured a license.
Source: CertiK
Trading involves risk.
Risk Disclaimer
