← Regulations / Brazil / Operating Models / Crypto ATM

Crypto ATM / kiosk operator in Brazil

Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.

Conditional AI-Generated · Unreviewed

Crypto ATM is conditionally permitted in Brazil with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • VASP authorization from BCB under Law 14,478/2022 (required for any virtual asset service, including ATM/kiosk operations)
  • Tiered capital requirements: BRL 1M–5M (~$200K–$1M USD) depending on activity scope
  • Asset segregation required for custodial functions (cash-in/cash-out to/from kiosk wallets)
  • Suspicious transaction reporting to COAF (Financial Activities Control Council)
  • Cash transaction reporting — cash-intensive operations (ATMs/kiosks) likely subject to enhanced AML scrutiny under COAF rules; no specific cash threshold for kiosks found in provided facts but standard COAF cash transaction reporting (above BRL 10K threshold is typical in Brazil)
  • KYC/onboarding obligations under the VASP framework (Law 14,478/2022), including identity verification for cash-in/cash-out transactions
  • CVM registration may also apply if kiosk dispenses or accepts securities tokens

Key Restrictions

  • Must establish a local legal entity (CNPJ) with a local director
  • Must obtain VASP authorization from BCB under Law 14,478/2022 and Decree 11,563/2023 — no standalone kiosk/money-transmitter license; the VASP license covers virtual asset services including ATM/kiosk operations
  • Grandfathering period for existing operators with deadlines extending to 2025; new entrants must obtain authorization before commencing operations
  • BCB Resolutions Nos. 519, 520, 521 (Nov 2025) and Joint Resolution No. 14 set the detailed VASP licensing framework; launched comprehensive licensing in February 2026
  • Stablecoins pegged to BRL may require additional payment institution authorization from BCB
  • If kiosk transactions involve securities tokens (e.g., tokenized assets), CVM Resolution 88/2022 and CVM oversight apply in parallel

Key Risks

  • Cash-intensive nature of kiosks attracts elevated AML/CTF enforcement risk — COAF may apply stricter reporting standards than those explicitly codified
  • Regulatory overlap between BCB (VASP) and CVM (securities tokens) creates ambiguity if the kiosk supports tokenized assets
  • CVM is actively revising Resolution 88/2022 and has shown willingness to take enforcement action without waiting for new licensing rules
  • BCB's comprehensive VASP licensing launched in Feb 2026 means requirements are still maturing; regulatory expectations may shift during the application process
  • High physical security and compliance cost for cash-handling kiosks given BRL capital requirements and segregation obligations
  • No explicit kiosk-specific regulatory framework — operator must interpret general VASP rules for ATM-specific risks

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 80% confidence

BCB — VASP authorization, prudential supervision (designated authority since June 2023)

[primary] BCB
licensing 20% confidence

Law 14,478/2022 (Legal Framework for Virtual Assets) (2022) — VASP authorization and oversight

licensing 20% confidence

Decree 11,563/2023 (2023) — BCB designated as supervisory authority

licensing 20% confidence

VASP: VASP authorization from BCB under Law 14,478/2022. Tiered capital: BRL 1M-5M (~$200K-$1M USD) depending on activity. 6-12 months timeline. Grandfathering period for existing operators with deadlines extending to 2025. Must establish local entity (CNPJ) with local director.

licensing 20% confidence

CUSTODY: Included under VASP authorization; asset segregation required

licensing 20% confidence

EXCHANGE: VASP authorization from BCB; CVM registration if dealing in securities tokens. Stablecoins pegged to BRL may require payment institution authorization.

licensing 20% confidence

Central Bank of Brazil (BCB): Authorizes, regulates, and supervises VASPs; launched comprehensive licensing in February 2026; issued Resolutions Nos. 519, 520, 521 (November 2025) and Joint Resolution No. 14.

licensing 20% confidence

Financial Activities Control Council (COAF): Handles AML reporting for suspicious activities.

licensing 90% confidence

Resolution CVM 88/2022 is currently under active revision by CVM via Consulta Pública SDM 05/2025, and CVM has already enforced oversight over cryptoasset securities (e.g., token offerings) without waiting for new licensing rules.

[secondary] gov.br — Pt Br [secondary] gov.br — Regulados
licensing 83% confidence

Brazil has recently tightened derivatives rules and blocked prediction market platforms, indicating a shift from static licensing toward proactive market restrictions for financial and derivatives market participants.

[secondary] gov.br — Pt Br [secondary] gov.br — Regulados
licensing 20% confidence

CVM Resolution 88/2022 (2022) — Securities token regulation

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — Crypto ATM/kiosk operators in Brazil must obtain VASP authorization from BCB under Law 14,478/2022 (tiered capital BRL 1M–5M, local entity required), comply with COAF AML/CTF reporting, and may face additional CVM obligations if dealing in securities tokens; no standalone kiosk-specific license exists.

Questions this verdict aims to answer

  • What money-transmitter / kiosk-specific license is required?
  • What cash-transaction reporting thresholds apply?
  • What enhanced-KYC obligations attach to cash-in / cash-out?