Self-custodial wallet / non-custodial software in Brazil

The Banco Central do Brasil has been the authority for authorising and supervising virtual asset service providers since Decreto 11.563/2023 took effect on 20 June 2023. Its SPSAV authorisation rules (Resoluções BCB 519 and 520) have been in force since 2 February 2026.

Lei 14.478 of 21 December 2022 (DOU 22 December 2022), the virtual assets legal framework, entered into force 180 days after publication, on 20 June 2023. It requires virtual asset service providers to obtain prior authorisation from a federal body before operating in Brazil (art. 2), defines VASP services (art. 5), and leaves CVM competence over securities untouched (art. 1 sole paragraph).

Decreto 11.563 of 13 June 2023, in force 20 June 2023, gives the Banco Central do Brasil the power to regulate, authorise and supervise virtual asset service providers under Lei 14.478/2022 (art. 1 II). It does not apply to virtual assets that represent securities and does not alter CVM competence (art. 3).

Virtual asset service providers need prior authorisation (Lei 14.478/2022 art. 2), which the Banco Central do Brasil grants (Decreto 11.563/2023). Under Resolução BCB 520, in force 2 February 2026, a provider must be constituted in Brazil with its head office and management in Brazil (art. 1 sole paragraph). It operates as an intermediary, custodian or broker (art. 4). Minimum capital is built from activity components in Resolução Conjunta 14: R$1m for services, R$3m for custody, R$5m for intermediation and R$7m for lending. Resolução BCB 517 maps the modalities onto these activities. Firms already operating had 270 days from 2 February 2026 to apply (Res. 520 art. 88 I).

Custody of virtual assets requires BCB authorisation. Resolução BCB 520 (in force 2 February 2026) makes custodian (custodiante de ativos virtuais) one of three SPSAV modalities, which may not combine other modalities. Under arts. 28 to 30 every provider must segregate its own funds and virtual assets from those of clients, and document the segregation in a policy that covers proof of reserves.

The Financial Activities Control Council (COAF), created by Lei 9.613/1998 art. 14, is Brazil's financial intelligence unit. It receives, examines and identifies suspicious transactions and applies administrative penalties. Obliged persons, including virtual asset service providers since Lei 14.478/2022 (Lei 9.613 art. 9 sole paragraph XIX), must report suspicious proposals or transactions to COAF within 24 hours (art. 11 II).

The Central Bank of Brazil (BCB) authorises, regulates and supervises virtual asset service providers under Decreto 11.563/2023. It issued Resoluções BCB 519, 520 and 521 on 10 November 2025 (published 11 November 2025, in force 2 February 2026), covering the authorisation process, constitution and operation, and FX-market treatment. With the CMN it issued Resolução Conjunta 14 (3 November 2025) on minimum capital.

The Comissão de Valores Mobiliários (CVM) oversees crypto-assets that qualify as securities, including their public offerings, under Lei 6.385/1976. Lei 14.478/2022 art. 1 sole paragraph preserves that competence, and the CVM set out its approach to tokens in Parecer de Orientação 40 of 11 October 2022.

Resolução CVM 88/2022, the CVM crowdfunding rule that tokenised offers can use, was amended by Resoluções CVM 158/22 and 226/25. The CVM acts against unregistered crypto-linked securities offers under Lei 6.385 art. 19 without waiting for new rules. Examples are stop orders in Deliberação CVM 904 (4 November 2025) and Deliberação CVM 907 (15 April 2026).