Brazil's central bank has finalized rules that will force crypto exchanges to sit on large customer transfers before sending them out the door. Under Resolution No. 584/2026, published August 7, platforms will need to delay transfers of $10,000 or more to foreign virtual asset firms and self-custody wallets by as much as 24 hours once the rule takes effect on January 1, 2027.
The threshold isn't limited to a single transaction. The central bank, known as the BCB, wrote the rule so that the $10,000 trigger can also be met by the combined value of a customer's transfers made on the same day, closing an obvious workaround where a user might split a large withdrawal into smaller pieces.
Why regulators are targeting the transfer window
The central bank's stated rationale is that cryptocurrencies, including stablecoins, have become a fast lane for moving money obtained through financial scams — often faster than victims or institutions can react. CoinDesk reported that the delay window is meant to buy exchanges time to review suspicious activity before funds leave the platform for good, and that smaller transfers can still be held if an exchange's own risk systems flag them.
Exchanges aren't required to use the full 24 hours in every case. If a risk review clears a transaction early, the funds can move immediately — but the platform has to document that decision and notify the customer whenever a transfer is placed on hold. The rule also pushes more responsibility onto exchanges themselves, requiring them to weigh customer profile, transaction pattern, counterparty details and destination jurisdiction before releasing funds.
Brazil isn't acting in isolation
The move puts Brazil in step with a broader global tightening of crypto transfer oversight. In the European Union, the Travel Rule under the Markets in Crypto-Assets framework already requires crypto-asset service providers to collect full originator and beneficiary data — name, account number, address and date of birth — for every transfer, with no minimum threshold at all once the July 1, 2026 compliance deadline passed. Brazil's approach is narrower, applying only above the $10,000 mark, but it reflects the same underlying push to make crypto transfers as traceable as bank wires.
The policy could "impose costs on legitimate users and weaken the competitiveness of domestic exchanges," said Regina Pedroso, president of Brazilian tokenization group Abtoken.
Industry pushback has been swift. Abcrypto, one of Brazil's largest crypto associations and a group that includes Binance, Coinbase, Crypto.com and Tether among its members, has argued the retention period won't meaningfully change illicit usage patterns and will instead burden the legitimate businesses that use crypto rails as a faster alternative to legacy payment systems. It's a familiar tension in crypto policy, echoed in ongoing debates over how far US regulation should reach even as the industry keeps operating around the uncertainty.
Related: Russians Rush to Buy Hardware Wallets Ahead of Sept. 1 Crypto Rules
What exchanges need to build before 2027
With roughly five months until the resolution takes effect, exchanges operating in Brazil will need to stand up same-day aggregation tracking across a customer's transfers, formal hold-and-release documentation workflows, and customer notification systems — infrastructure that mirrors what MiCA-regulated platforms in Europe have already been forced to build this year. Whether the delay meaningfully dents fraud losses, as opposed to simply adding friction for ordinary users, will be one of the first real-world tests of this approach outside the EU.
