Brazil’s central bank published new rules on August 7, 2026 requiring crypto exchanges to delay certain customer transfers to foreign platforms and self-custody wallets by up to 24 hours, a measure the bank says is aimed at curbing the use of crypto and stablecoins to move funds obtained through financial fraud.
How the 24-Hour Hold Works
Under Resolution BCB No. 584/2026, the requirement applies once a customer deposits reais or crypto with an exchange and then attempts to send those funds abroad or to a wallet they control.
Transfers exceeding the equivalent of $10,000, whether through a single transaction or several that add up on the same day, trigger the mandatory hold. Smaller transfers are not automatically exempt either, since exchanges can flag them for the same delay if their own risk review considers them suspicious.
Once the risk assessment is complete, institutions must either release the transfer immediately if the 24-hour period has expired or reject the transaction outright. They may release funds within 24 hours if a documented risk review finds no evidence of wrongdoing.
Exchanges are required to notify customers when a transfer has been placed on hold and to document the reasoning behind any decision to release funds early.
The rule gives exchanges more direct responsibility for assessing risk based on the customer, the transaction itself, the counterparty, and the destination jurisdiction, meaning the same $10,000 transfer could face different scrutiny depending on where it’s headed and who’s on the receiving end.
Why Brazil Is Doing This Now
The central bank said the rule reflects the growing use of virtual assets, including stablecoins, to quickly move money obtained through scams, often before victims or financial institutions have any chance to intervene or recover funds.
The resolution formally extends existing fraud-prevention rules that already apply to traditional payment services to cover virtual asset services as well, rather than creating an entirely separate framework.
Alongside the transfer delay itself, covered institutions must now also keep daily records of fraud and attempted fraud tied to payment and virtual asset services, including whatever corrective steps they took in response.
The rule takes effect January 1, 2027, giving exchanges several months to build out the required risk-review processes. Importantly, the central bank retained meaningful room to expand this framework later. It can require a longer hold than 24 hours, extend the requirement to transfers below the $10,000 threshold, and restrict an institution’s ability to release funds early if it finds that institution isn’t complying with the rule as written.
Brazil’s approach mirrors a broader pattern seen in several other jurisdictions, where regulators have started treating fast, irreversible crypto transfers as a specific fraud vector deserving mandatory friction, rather than relying solely on after-the-fact investigation once funds have already left the country.
Not Everyone Sees This as a Clean Win
Regina Pedroso, president of Brazilian tokenization group Abtoken, has pushed back on the framing that this rule only affects bad actors. She’s said the policy could impose real costs on legitimate users and weaken the competitiveness of Brazil’s domestic exchanges relative to platforms operating elsewhere, according to local crypto news outlet Portal do Bitcoin.
That tension, between fraud prevention and added friction for ordinary transfers, is likely to be the central debate as exchanges begin building compliance processes ahead of the January deadline.
It also raises a practical question for exchanges specifically, since building out a risk-assessment process sophisticated enough to distinguish legitimate large transfers from suspicious ones within a strict time window is not a trivial engineering or compliance task, and smaller domestic platforms may face a disproportionate lift compared to larger, better-resourced competitors.
For more on Brazil’s broader recent approach to crypto and adjacent markets, our coverage of Brazil’s ban on prediction market platforms covers a related regulatory move from earlier this year.
What Comes Next
What this means for you: if you use a Brazil-based exchange and plan to move more than $10,000 abroad or into a self-custody wallet, in a single transfer or cumulatively over a day, expect a mandatory hold once this rule takes effect, and budget extra time into any large, time-sensitive transfer.
Smaller transfers are not automatically safe from delay either if an exchange’s own risk system flags them, so the practical takeaway is to expect more friction on cross-border and self-custody transfers generally starting next year, not just on the largest ones.
For readers new to buying and selling crypto in Brazil specifically, our guide on how to buy and sell cryptocurrencies in Brazil covers the basics this new rule builds on.
