Brazil

Lei das Criptomoedas (2022, effective June 2023). Brazil's Federal Law 14,478 of December 21, 2022 established the foundational crypto framework, defining 'virtual assets' and 'virtual-asset service providers' (VASPs), assigning regulatory authority to the BCB, and establishing penalties for unauthorised activity. The law took effect June 20, 2023.

BCB primary regulation. The Banco Central do Brasil supervises VASP licensing, ongoing compliance, AML / CTF, customer-asset safeguarding, and operational standards. BCB has issued implementing rulebooks through 2023-2025 covering: licensing categories; capital requirements; governance; cybersecurity; consumer-protection rules; operational risk management.

CVM for tokenised securities. Tokens that qualify as securities under Brazilian law (Lei 6,385/1976) fall under the CVM's regulatory perimeter. CVM Resolution 175 (2023) specifically addresses tokenised investment products and tokenised financial assets. The CVM has been active in enforcement against unauthorised securities-token offerings.

Receita Federal for tax. Receita Federal handles tax matters with monthly transaction-reporting requirements for both exchanges (reporting customer activity) and individuals (self-reporting transactions above R$30,000 in any month).

BCB VASP authorisation. Operating a VASP in Brazil (or providing VASP services to Brazilian customers) requires BCB authorisation. Categories cover: exchange services; custody services; broker-dealer services; transfer services. Each category has distinct capital, governance, and operational requirements.

Implementation timeline. BCB has been progressively implementing the Lei's framework through 2023-2025 with phased effective dates for different VASP categories. Transition provisions allow existing operators time to obtain authorisation; the substantive bar has been progressively raised.

Customer-asset safeguarding. BCB rules require VASPs to segregate customer crypto-assets from VASP general assets, maintain customer-asset registers, conduct periodic reconciliations, and meet specific custody-arrangement standards. Customer-asset segregation requirements substantially exceed the pre-Lei standards.

BCB stablecoin framework. BCB has consulted on dedicated stablecoin rules and is implementing them as part of the broader VASP regulatory framework. Fiat-referenced stablecoins serving Brazilian users are within BCB's supervisory perimeter; reserve, segregation, and redemption rules are being progressively defined.

DREX (digital real). Brazil's CBDC project, DREX, is in pilot phase as of mid-2026. The framework contemplates tokenised retail digital real plus tokenised real-denominated bank deposits, with both real-time gross settlement (RTGS) and programmable-money features. DREX is one of the more-advanced retail-CBDC projects globally.

Private USD stablecoin treatment. USDT, USDC, and other USD-denominated stablecoins are traded on Brazilian licensed exchanges as virtual assets under VASP rules. Cross-border foreign-currency-denominated stablecoin use is subject to additional foreign-exchange regulation (Brazil's foreign-exchange framework is notably complex).

Capital gains framework. Brazil treats crypto disposals as capital gains for individual investors. Standard rates apply: 15% on gains up to R$5 million in a year, with graduated higher rates up to 22.5% for substantial gains. The first R$35,000 in monthly disposals is exempt from capital-gains tax for individuals (small-volume exemption).

Monthly self-reporting (above R$30K threshold). Individual investors must self-report monthly crypto transactions exceeding R$30,000 in a given month (sum of buys and sells across all crypto types). Reports go to Receita Federal via the IN 1,888/2019 declaration system.

Exchange reporting. BCB-supervised exchanges report customer transaction data to Receita Federal under the broader Brazilian financial-information reporting framework. Combined with individual self-reporting, Receita Federal has substantial visibility into domestic crypto activity.

Mining, staking, airdrops. Mining and staking rewards are taxable income at fair-market value on receipt. Airdrops to individuals are taxable income on receipt. Subsequent disposal is a separate capital-gains event measured against the receipt-value cost basis.

This is general background, not tax advice. Brazilian tax treatment depends on specific facts and Receita Federal interpretive practice. Consult a Brazilian-qualified contador (accountant) for personal matters.

COAF AML framework. Brazilian AML requirements are administered by the Conselho de Controle de Atividades Financeiras (COAF). VASPs are reporting entities subject to customer due diligence, transaction monitoring, suspicious-transaction reporting to COAF, and recordkeeping.

Travel Rule. Brazil has been progressing Travel Rule implementation in alignment with FATF Recommendation 16 through 2024-2025. Implementation has been integrated into the broader VASP regulatory framework rolled out by BCB.

Sanctions framework. Brazil implements UN-mandated sanctions but has been notably less aligned with US / EU autonomous sanctions on Russia post-2022 (consistent with broader Brazilian foreign-policy independence). Licensed Brazilian VASPs screen against UN-mandated sanctions lists.

Consumer-protection framework. Brazilian consumer-protection law (Código de Defesa do Consumidor) applies to crypto activities. VASPs must provide clear pricing, accurate disclosure, and consumer-grade dispute resolution. PROCONs (state consumer-protection agencies) handle individual complaints.

CVM enforcement. CVM has been active in enforcement against unauthorised securities-token offerings, misleading promotional language, and unsuitable retail recommendations. The Brazilian crypto market has had several high-profile fraud cases (Mining Express, BIVA, others) prompting expanded enforcement activity.

Marketing rules. Misleading promotional language is prohibited under general consumer-protection law. The CVM has issued specific guidance on crypto-related marketing limitations.

BCB supervisory data. Licensed VASPs submit regular supervisory returns to the BCB covering transaction volumes, customer counts, customer-asset balances, AML statistics, and incident reports. The data infrastructure supports both prudential and conduct supervision.

Receita Federal data flows. Receita Federal receives both VASP-reported transaction data and individual-self-reported data via IN 1,888/2019. Cross-border data sharing under existing frameworks (CRS, FATCA) supplements domestic visibility.

OECD CARF. Brazil has committed to OECD CARF implementation on the standard 2027-2028 timeline.

DREX integration. Once DREX launches commercially (anticipated 2027), the tokenised digital-real infrastructure will integrate with VASP reporting to create one of the most comprehensive on-chain data architectures in any large emerging market.