Brazil’s Crypto Firms Have Until October 30 to Apply for…

Brazil’s cryptocurrency industry is approaching a major regulatory deadline, with existing virtual-asset service providers required to submit the first phase of their authorization applications to the Banco Central do Brasil by October 30.The deadline applies to companies that were already providing virtual-asset services when the country’s new regulatory framework took effect on February 2. Companies that submit valid applications by the deadline do not need to stop operating while the Central Bank considers them.Those that fail to enter the authorization process face a substantially different position. From October 30, Brazilian banks, payment institutions and other entities supervised by the Central Bank are generally prohibited from conducting or facilitating virtual-asset operations involving providers that are neither authorized nor undergoing authorization.

Exchanges Face New Prudential Requirements

Brazil’s framework implements the country’s 2022 Virtual Assets Law, which established the legal basis for regulating crypto intermediaries and subsequently placed primary oversight with the Central Bank. Resolutions 519, 520 and 521, issued in November 2025, created the detailed authorization and operating framework.The rules divide regulated crypto businesses into three categories: virtual-asset intermediaries, custodians and brokers performing both functions. Existing operators must provide the first stage of their authorization documentation by October 30.Central Bank Instruction 704 requires applicants to submit corporate information and declarations demonstrating that management understands the company’s business, market, funding sources and associated risks. Following a May amendment, applicants must also provide a reasonable-assurance report from an independent auditor registered with Brazil’s securities regulator, the CVM.The wider framework introduces requirements covering governance, cybersecurity, anti-money-laundering controls and asset segregation. Brazilian media reported this week that the regulatory transition is already encouraging conventional banks to expand their cryptocurrency offerings.

October Deadline Creates Market Divide

The October 30 deadline does not mean every crypto company must receive final authorization by that date. Central Bank rules explicitly contemplate a lengthy review. Current regulatory timelines provide as many as 360 days for the first authorization phase and 720 days for the second phase, illustrating why firms are permitted to continue operating while applications remain under consideration.The immediate consequence instead concerns companies that stay outside the process. Resolution 520 prohibits Central Bank-regulated institutions from facilitating trading, intermediation, custody, foreign-exchange services, payment accounts and payment transactions for unauthorized crypto providers that have not entered the authorization process.That potentially cuts non-compliant operators off from essential connections to Brazil’s conventional financial system. Industry groups have already sought more time. ABToken, ABFintechs and Zetta asked the Central Bank to extend transition deadlines by 120 days, arguing companies need additional time to meet the new requirements. As currently published, however, October 30 remains the operative deadline. Brazil represents a significant crypto market.Federal tax authority data cited by Folha de S.Paulo show legal entities recorded R$497 billion in cryptocurrency transactions during 2025, while major banks including Itaú, Bradesco, Santander, Banco do Brasil and Nubank have expanded their digital-asset offerings.The authorization regime therefore represents more than a licensing exercise. It marks the point at which crypto intermediaries become formally integrated into Brazil’s broader prudential regulatory architecture. For firms already operating, October 30 is the critical dividing line. They do not necessarily need an approved license by then.But they do need to be inside the Central Bank’s authorization pipeline—or risk finding that Brazil’s regulated banks and payment companies can no longer do business with them.