Brazil's central bank has introduced a mandatory hold of up to 24 hours for large crypto transfers sent abroad. The new rule takes effect on January 1, 2027, and will affect exchanges, traders, and holders of self-custody wallets.
What the new BCB rule changes
Banco Central do Brasil (BCB) published Resolution No. 584/2026 on August 7. The document requires licensed virtual asset service providers (VASPs) to hold transfers for up to 24 hours when funds go abroad or to wallets controlled by the client.
The reasoning is simple: the regulator sees fraudsters moving stolen funds through crypto faster than victims can report the theft to police or their bank. The resolution names stablecoins directly, for example USDT, as a tool used to pull money out of the financial system quickly.
This is Brazil's second move of this kind this year. The central bank had already restricted crypto settlement in regulated cross-border payment rails, and attention has now shifted to direct transfers between wallets and exchanges. Providers have less than five months left to prepare their internal procedures before the resolution takes effect.
If a risk review during the hold finds nothing suspicious, a provider can release the transfer before the 24 hours expire. Clients must be notified of any hold placed on their funds.
Who the 24-hour hold affects
The threshold kicks in at transfers above $10,000, whether in a single transaction or combined across several transactions in one day. Smaller amounts can also get held if a provider's own risk-management system flags them as suspicious.
When assessing risk, providers must weigh several factors at once: the client, the nature of the transaction, the counterparty, and the destination jurisdiction. That gives exchanges far broader authority than simply comparing an amount to a limit. For example, if a client makes five transfers of $3,000 each in a single day, the combined total still crosses the threshold and triggers a review.
The rule covers transfers to foreign platforms and to wallets a client controls directly, including hardware wallets. That means a routine Bitcoin withdrawal from an exchange to a personal cold wallet could also face a review if it crosses the threshold.
Providers must document fraud cases, attempted fraud, and the corrective steps taken. The BCB wants a systematic approach to risk control inside each VASP, not a one-off reaction to complaints.
How this affects exchanges and traders
Brazil remains one of the largest crypto markets in Latin America, with local platforms and branches of global exchanges active in the country, including local partners of Binance. For these players, the new requirement means extra compliance costs and risk scoring on every transaction, and the BCB's decision will test how flexibly major platforms can adapt to the new rules without losing customers.
Not everyone in the industry backs the approach.
"This will raise costs for regular users and weaken the position of Brazilian platforms compared to offshore competitors."
- Regina Pedroso, president of Abtoken, from an interview with Portal do Bitcoin
Offshore platforms without a Brazilian VASP license formally fall outside this requirement. That is the main risk Pedroso points to, since funds could simply flow toward jurisdictions with weaker oversight.
Traders who make frequent cross-border transfers will feel the friction. Money that used to arrive instantly can now sit for a day even without any sign of fraud. For large one-off amounts, the hold works more like insurance than an obstacle, since providers can clear it early once the review is done.
The market is already reacting cautiously. Some Brazilian companies are warning clients ahead of time and preparing notices and interfaces for the new rule before it takes effect in 2027.
Risks for stablecoin holders
The BCB singles out stablecoins as the main tool fraudsters use, so this segment will get the closest scrutiny during reviews. Money earned through fraud is most often converted into a dollar-pegged token and moved out of the country before the victim even contacts their bank.
The regulator also requires providers to log not just actual fraud cases but attempted fraud that was stopped before funds left the platform. That is meant to build a body of data the BCB can use for further rulemaking.
For regular USDT holders and other dollar-token users, this creates a few practical consequences:
- transfers above $10,000 to foreign platforms may wait up to a day, even when the funds are entirely legitimate
- exchanges can flag smaller amounts as suspicious on their own and hold them without prior agreement from the client
- the lack of a clear standard for a "suspicious" transaction leaves room for subjective calls at individual VASPs
- clients should keep records of where their funds came from in case of extra questions during a review
Similar concerns have already surfaced in Europe. After the MiCA licensing deadline, scammers started impersonating regulators and companies using fake websites and watchdog logos. France's financial regulator, the AMF, reported fake websites posing as licensed companies, while the European Securities and Markets Authority (ESMA) recorded cases of scammers misusing its name in falsified documents.
What comes next
Brazil joins a growing list of countries tightening crypto oversight through the lens of fraud prevention rather than classic taxation. Japan's regulator has proposed similar limits for exchanges, such as preregistering withdrawal addresses and adding a waiting period for new wallets. Other proposed safeguards there include per-customer withdrawal limits, stronger transaction monitoring, phishing-resistant multi-factor authentication, and checks that a bank remitter's name matches the crypto account holder. Even so, the rules remain voluntary, while Brazil is making them mandatory from January 1, 2027. Before then, VASPs will need to rebuild their risk-management procedures, recordkeeping, and client notifications, and how strictly the rule gets enforced in practice will become clear only in its first months.
Comments
Your email address will not be published. Required fields are marked *