Brazil's 30 October 2026 VASP cut-off
If you run a virtual asset business that serves Brazilian customers, 30 October 2026 is the date your compliance calendar should be built around. It is not the day the rules start — that was 2 February 2026 — but it is the day the transition window closes for providers that were already operating.
Where the date comes from
The Central Bank of Brazil (BCB) published its virtual asset framework as Resolutions BCB 519, 520 and 521 of 2025. The framework entered into force on 2 February 2026. Providers already operating on that date were given 270 days to file an authorisation request with the BCB. Counting 270 days from 2 February 2026 lands on 30 October 2026.
The 270-day figure matters more than it looks. It is not a grace period during which you can trade indefinitely while you get organised — it is the filing window. Miss it and you are not an applicant, you are an unauthorised provider.
What has to be filed, and under which rule
The procedure sits in Instrução Normativa BCB 704, published on 29 January 2026 and effective from 2 February 2026. IN 704 splits applicants into two tracks:
- Providers already operating before 2 February 2026 follow a two-phase process. Phase one covers evidence of incorporation, a declaration of the activities carried on up to 2 February 2026, reputation checks on controllers, three years of audited financial statements and control documentation.
- Phase two is triggered by a favourable phase one decision and must be started within 60 days of it, extendable by a further 60 days. It covers the business plan (operational, commercial and financial sections, on the BCB template), declarations from administrators, evidence of cybersecurity and technology infrastructure, and a demonstration of financial viability.
- New entrants and existing regulated institutions use a single, undivided procedure. The document set broadly mirrors phase two, minus the evidence of prior activity.
Practically, the two-phase route means the 30 October 2026 deadline bites on phase one. Phase two lands after it, and its clock only starts once the BCB has given a favourable phase one decision.
What happens if you are refused
If an authorisation request is denied or the file is archived, an institution operating at that time must cease activities within 30 days. It must also notify its clients and return their virtual assets and funds by transferring them to other authorised institutions. That is a wind-down obligation with a fixed clock, not an appeal window during which business continues as usual.
The banking wall goes up on the same day
The second half of the deadline is the part that catches firms out. From 30 October 2026, institutions supervised by the BCB — banks, payment institutions and the rest of the regulated perimeter — are prohibited from carrying out or facilitating virtual asset operations with counterparties that provide VASP services without BCB authorisation.
So the date does not only expose you to enforcement. It cuts off access to Brazilian banking and payment rails. For most business models that is the practical shutdown, and it arrives before any formal sanction would.
Capital: R$10.8m to R$37.2m
Minimum capital for authorised providers runs from R$10,800,000 to R$37,200,000 depending on the activities carried on, set by Resolução Conjunta 14 read with Resolução BCB 517 of 3 November 2025. Where you sit in that range is driven by the category you are authorised for under article 4 of Resolution BCB 520 — intermediary, custodian, or broker (the combined permission) — and by the specific services within it.
Confirm your own figure against the resolutions rather than working from the headline range. The requirement is built from components, and adding a single service can move it materially.
What to do with the weeks that remain
- Settle your category under article 4 of Resolution 520 first. It drives capital, the document set and the ongoing prudential treatment.
- If you were operating before 2 February 2026, confirm you can evidence it. The declaration of prior activity is a phase one requirement and is not something you can reconstruct late.
- Get three years of audited financial statements ready. This is the item that most often cannot be accelerated.
- Ask your Brazilian banking partners now what they intend to do about 30 October 2026. Some will act before the date rather than on it.
- If you are a foreign provider without a Brazilian entity, treat incorporation timing — not the application itself — as the binding constraint.
The BCB has also brought virtual asset providers into its prudential and accounting frameworks through Resolutions BCB 552 and 553, so authorisation is the start of an ongoing supervisory and reporting relationship rather than a one-off filing. Plan for the operating model, not just the application.
The checklist behind this article
Everything above is drawn from the same working document I use when I read a file: an 11-page readiness checklist for PSAV authorisation with the Banco Central do Brasil, covering the four layers of the framework, the three modalities under article 4 of Res. BCB 520, why the R$10.8m–R$37.2m range is a calculation rather than a price list, the Phase 1 and Phase 2 document sets under IN BCB 704 with their clocks, the refusal consequences, and the points that are still genuinely open. Figures that come from Brazilian legal commentary rather than from the instruments are marked as such. It is USD 79, and buyers get the updated edition free as the position develops.
If your situation is straightforward, the checklist is genuinely enough and you will not need to speak to me. If it is not, the 48-hour gap check reads what you have and returns a written list of what is missing, in the order it should be fixed.