← Regulations / Brazil / Operating Models / DeFi frontend

DeFi protocol frontend in Brazil

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in Brazil with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Must register as a VASP with BCB if the frontend facilitates virtual asset services (order routing, fee-taking, liquidity aggregation) — Law 14,478/2022
  • AML/CFT obligations under COAF supervision including suspicious transaction reporting (COSIS system), customer due diligence, and record-keeping
  • COAF reporting threshold for suspicious transactions: no fixed de minimis — any unusual transaction must be reported
  • Must implement KYC/AML screening for all users if the frontend exercises control or discretion over transactions
  • If the frontend deals in securities tokens (e.g., tokenized assets), must also comply with CVM Resolution 88/2022 securities rules
  • If the frontend offers BRL-pegged stablecoins or facilitates BRL on/off ramps, may require payment institution authorization from BCB under complementary rules

Key Restrictions

  • Must establish a local legal entity (CNPJ registration) with a local director to apply for VASP authorization
  • Tiered minimum capital: BRL 1M–5M (~$200K–$1M USD) depending on activity type and volume
  • Geofencing required — must block or restrict access from Brazilian residents unless VASP-authorized
  • If the frontend charges fees (spreads, swap fees, routing fees), it is more likely to be classified as a VASP activity under BCB jurisdiction
  • Purely non-custodial, read-only interfaces with no fee collection and no user transaction routing may fall outside VASP scope, but this is legally untested
  • Stablecoins pegged to BRL may trigger payment institution licensing requirements beyond VASP authorization

Key Risks

  • Regulatory ambiguity: The boundary between a 'mere frontend' and a VASP is not clearly defined in law — fee-taking is a strong indicator but control over transactions is a gray area
  • Enforcement risk: BCB has not yet issued detailed guidance on DeFi frontends; grandfathering deadlines extend to 2025 but enforcement posture is unclear
  • CVM may assert jurisdiction if the frontend facilitates access to tokenized securities or derivatives products
  • Recent CVM/BCB actions against prediction markets and derivatives platforms suggest proactive market restriction enforcement
  • Tax risk: Even if not a VASP, frontend operators may have tax reporting obligations for Brazilian users

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 95% confidence

The Banco Central do Brasil has been the authority for authorising and supervising virtual asset service providers since Decreto 11.563/2023 took effect on 20 June 2023. Its SPSAV authorisation rules (Resoluções BCB 519 and 520) have been in force since 2 February 2026.

[primary] Decreto nº 11.563, de 13 de junho de 2023 [primary] Resolução BCB nº 519, de 10 de novembro de 2025 (DOU 11 nov 2025)
licensing 95% confidence

Lei 14.478 of 21 December 2022 (DOU 22 December 2022), the virtual assets legal framework, entered into force 180 days after publication, on 20 June 2023. It requires virtual asset service providers to obtain prior authorisation from a federal body before operating in Brazil (art. 2), defines VASP services (art. 5), and leaves CVM competence over securities untouched (art. 1 sole paragraph).

[primary] Lei nº 14.478, de 21 de dezembro de 2022 — texto compilado [primary] Lei nº 14.478, de 21 de dezembro de 2022 — texto compilado
licensing 95% confidence

Decreto 11.563 of 13 June 2023, in force 20 June 2023, gives the Banco Central do Brasil the power to regulate, authorise and supervise virtual asset service providers under Lei 14.478/2022 (art. 1 II). It does not apply to virtual assets that represent securities and does not alter CVM competence (art. 3).

[primary] Decreto nº 11.563, de 13 de junho de 2023
licensing 85% confidence

Virtual asset service providers need prior authorisation (Lei 14.478/2022 art. 2), which the Banco Central do Brasil grants (Decreto 11.563/2023). Under Resolução BCB 520, in force 2 February 2026, a provider must be constituted in Brazil with its head office and management in Brazil (art. 1 sole paragraph). It operates as an intermediary, custodian or broker (art. 4). Minimum capital is built from activity components in Resolução Conjunta 14: R$1m for services, R$3m for custody, R$5m for intermediation and R$7m for lending. Resolução BCB 517 maps the modalities onto these activities. Firms already operating had 270 days from 2 February 2026 to apply (Res. 520 art. 88 I).

[primary] Lei nº 14.478, de 21 de dezembro de 2022 — texto compilado [primary] Decreto nº 11.563, de 13 de junho de 2023 [primary] Resolução BCB nº 520, de 10 de novembro de 2025 — texto consolidado
licensing 90% confidence

Custody of virtual assets requires BCB authorisation. Resolução BCB 520 (in force 2 February 2026) makes custodian (custodiante de ativos virtuais) one of three SPSAV modalities, which may not combine other modalities. Under arts. 28 to 30 every provider must segregate its own funds and virtual assets from those of clients, and document the segregation in a policy that covers proof of reserves.

[primary] Resolução BCB nº 520, de 10 de novembro de 2025 — texto consolidado [primary] Resolução BCB nº 520, de 10 de novembro de 2025 — texto consolidado
licensing 85% confidence

Exchanging virtual assets for fiat or other virtual assets is a VASP service under Lei 14.478/2022 art. 5. It requires prior authorisation (art. 2), granted by the Banco Central do Brasil (Decreto 11.563/2023). Tokens that are securities stay under CVM competence (Lei 14.478 art. 1 sole paragraph), and their public offers need CVM registration or exemption (Lei 6.385 art. 19). Since 2 February 2026, buying, selling or exchanging fiat-referenced virtual assets (stablecoins) is part of the FX market under Resolução BCB 521.

[primary] Lei nº 14.478, de 21 de dezembro de 2022 — texto compilado [primary] Lei nº 14.478, de 21 de dezembro de 2022 — texto compilado [primary] Decreto nº 11.563, de 13 de junho de 2023
licensing 95% confidence

The Central Bank of Brazil (BCB) authorises, regulates and supervises virtual asset service providers under Decreto 11.563/2023. It issued Resoluções BCB 519, 520 and 521 on 10 November 2025 (published 11 November 2025, in force 2 February 2026), covering the authorisation process, constitution and operation, and FX-market treatment. With the CMN it issued Resolução Conjunta 14 (3 November 2025) on minimum capital.

[primary] Decreto nº 11.563, de 13 de junho de 2023 [primary] Resolução BCB nº 519, de 10 de novembro de 2025 (DOU 11 nov 2025) [primary] Resolução BCB nº 520, de 10 de novembro de 2025 — texto consolidado
licensing 90% confidence

The Comissão de Valores Mobiliários (CVM) oversees crypto-assets that qualify as securities, including their public offerings, under Lei 6.385/1976. Lei 14.478/2022 art. 1 sole paragraph preserves that competence, and the CVM set out its approach to tokens in Parecer de Orientação 40 of 11 October 2022.

[primary] Lei nº 14.478, de 21 de dezembro de 2022 — texto compilado [primary] Parecer de Orientação CVM nº 40, de 11 de outubro de 2022 — Os CriptoAtivos e o Mercado de Valores Mobiliários [primary] Lei nº 6.385, de 7 de dezembro de 1976 — texto compilado
licensing 90% confidence

The Financial Activities Control Council (COAF), created by Lei 9.613/1998 art. 14, is Brazil's financial intelligence unit. It receives, examines and identifies suspicious transactions and applies administrative penalties. Obliged persons, including virtual asset service providers since Lei 14.478/2022 (Lei 9.613 art. 9 sole paragraph XIX), must report suspicious proposals or transactions to COAF within 24 hours (art. 11 II).

[primary] Lei nº 9.613, de 3 de março de 1998 — texto compilado [primary] Lei nº 9.613, de 3 de março de 1998 — texto compilado
licensing 90% confidence

Resolução CVM 88 of 27 April 2022 (DOU 28 April 2022) governs public offers of securities issued by small companies through online crowdfunding platforms (plataforma eletrônica de investimento participativo), with registration waived. It revoked Instrução CVM 588 and was amended by Resoluções CVM 158/22 and 226/25. The CVM's approach to crypto tokens is set out separately in Parecer de Orientação CVM 40 of 11 October 2022.

[primary] Resolução CVM 88, de 27 de abril de 2022 [primary] Parecer de Orientação CVM nº 40, de 11 de outubro de 2022 — Os CriptoAtivos e o Mercado de Valores Mobiliários
licensing 80% confidence

Brazil has recently tightened derivatives rules and blocked prediction market platforms, indicating a shift from static licensing toward proactive market restrictions for financial and derivatives market participants.

[secondary] gov.br — Pt Br [secondary] gov.br — Regulados

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a DeFi protocol frontend serving Brazilian residents is likely regulated as a VASP under Law 14,478/2022 if it takes fees or controls user transactions, requiring BCB authorization, local entity (CNPJ), BRL 1M–5M capital, and full AML/KYC obligations; a purely passive, non-custodial, fee-free interface may fall outside scope but this is legally untested.

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?