Crypto-funded debit card in Brazil
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Brazil with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VASP authorization from BCB under Law 14,478/2022 required — AML/CTF program mandatory as part of licensing (COAF oversees suspicious activity reporting)
- Monthly transaction reporting to RFB (IN RFB 1,888) for crypto transactions above BRL 30,000 per month
- 15% capital gains tax on disposals above BRL 35,000 per month applies to crypto-to-fiat conversions
- KYC/AML obligations for cardholders flow from the VASP license — identity verification, source of funds, transaction monitoring required
- COAF suspicious transaction reporting (SARs) for any unusual or suspicious activity
Key Restrictions
- Must establish a local legal entity with CNPJ and a local director
- Stablecoins pegged to BRL may require payment institution authorization from BCB in addition to VASP authorization
- Tiered minimum capital requirements: BRL 1M–5M (~$200K–$1M USD) depending on activity type
- 6–12 month licensing timeline; existing operators had grandfathering periods extending to 2025
- Crypto-to-fiat conversion (off-ramp) is regulated as a VASP activity under BCB supervision — likely requires a payment/EMI license or partnership with a licensed payment institution for the fiat side
- Must partner with a BCB-licensed payment institution or issuer for the card program (BIN sponsorship / card issuance); a standalone VASP license may not cover card issuance
Key Risks
- Regulatory ambiguity remains around the precise license categorization for crypto-funded debit cards — whether a full payment institution license (IP/SCM) is needed on top of VASP authorization
- Stablecoin regulation is in flux — BRL-pegged stablecoins may be reclassified as payment instruments triggering additional BCB oversight
- CVM continues to actively revise securities token rules (Consulta Pública SDM 05/2025) — potential for card-linked rewards tokens or yield-bearing stablecoin balances to be classified as securities
- COAF AML enforcement is active — any compliance gaps in transaction monitoring or suspicious activity reporting carry significant penalty risk
- BCB began comprehensive VASP licensing in February 2026 — operators not yet authorized face enforcement exposure
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
BCB — VASP authorization, prudential supervision (designated authority since June 2023)
Law 14,478/2022 (Legal Framework for Virtual Assets) (2022) — VASP authorization and oversight
Decree 11,563/2023 (2023) — BCB designated as supervisory authority
VASP: VASP authorization from BCB under Law 14,478/2022. Tiered capital: BRL 1M-5M (~$200K-$1M USD) depending on activity. 6-12 months timeline. Grandfathering period for existing operators with deadlines extending to 2025. Must establish local entity (CNPJ) with local director.
CUSTODY: Included under VASP authorization; asset segregation required
EXCHANGE: VASP authorization from BCB; CVM registration if dealing in securities tokens. Stablecoins pegged to BRL may require payment institution authorization.
Central Bank of Brazil (BCB): Authorizes, regulates, and supervises VASPs; launched comprehensive licensing in February 2026; issued Resolutions Nos. 519, 520, 521 (November 2025) and Joint Resolution No. 14.
Financial Activities Control Council (COAF): Handles AML reporting for suspicious activities.
Evidence fact br.tax not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card program is permissible in Brazil but requires (1) BCB VASP authorization under Law 14,478/2022 with a local entity and local director, (2) likely a payment institution license (or partnership with a licensed payment institution) for the fiat/e-money card-issuance side, (3) partner-bank/BIN-sponsor arrangements with a BCB-regulated issuer, and (4) full AML/KYC obligations including COAF suspicious transaction reporting and RFB monthly reporting above BRL 30,000.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?