Brazil VASP: the three-years-audited-financials requirement
Of the eight items in Phase 1 of the Brazilian virtual asset service provider authorisation, seven can be produced in weeks by a firm that already has its house in order. The eighth cannot, because it depends on work that has to have been done in past years by a specific kind of firm. If you are going to miss 30 October 2026, this is the item you will miss it on.
Where the requirement sits
Instrução Normativa BCB n. 704, published 29 January 2026 and effective 2 February 2026, sets out the authorisation procedure. Providers already operating on 2 February 2026 go through two phases; new entrants and existing supervised institutions use the single procedure in art. 5. Article 9 governs Phase 1 for existing providers, lists items I to VIII, and sets the filing deadline of 30 October 2026 in its caput.
Item VIII closes the list, in the words of the instrument: "demonstrações financeiras da instituição relativas aos três últimos exercícios sociais, auditadas por auditor independente registrado na Comissão de Valores Mobiliários". Three financial years of statements, audited by an independent auditor registered with the CVM.
Read the qualifier on the auditor
The registration that counts is with the Comissão de Valores Mobiliários, the securities regulator, not with the Banco Central. A firm that has been audited for three years by a competent local practice that is not on the CVM register does not have what art. 9 VIII asks for, and the fix is a re-audit rather than a covering letter. That is the single most expensive discovery a Brazilian applicant can make in September.
Two related checks are worth making now rather than at filing. Whether the audit opinions cover the entity that will hold the authorisation, rather than a holding company or an offshore parent. And whether all three years were audited to the same standard by a firm that will still stand behind them.
Fewer than three financial years
A provider incorporated in, say, 2024 does not have three exercícios sociais to audit. IN 704 as we read it does not spell out what such an applicant files instead, and we are not going to invent an answer. If this is your position, raise it with the Banco Central in writing well before the deadline and keep the response on file, rather than filing an incomplete Phase 1 set and hoping the gap is read as immaterial.
What IN BCB 739 changed, and what it did not
The most common error in the Brazilian commentary attaches a new document to the 30 October filing. It does not belong there. IN BCB 739, dated 29 May 2026 and published in the Diário Oficial da União of 1 June 2026, made exactly four changes, which the Banco Central records in its own change log: new wording for art. 24, and the inclusion of art. 5 inciso XV, art. 10 inciso X, and Anexo IV.
- It did not touch art. 9. The Phase 1 set due on 30 October 2026 is unchanged.
- The reasonable assurance report on anti-money-laundering controls, issued by a CVM-registered audit firm in the form of Anexo IV, lands in Phase 2 through art. 10 inciso X, and in the new-entrant route through art. 5 inciso XV.
- The rewording of art. 24 is unrelated to virtual assets: it concerns reporting capital increases from retained earnings, reserves or shareholder credits to the Banco Central within 15 days.
Any statement that IN 739 added a document to Phase 1 is wrong. At least one published Brazilian alert binds the assurance report to the 30 October filing; several others describe Anexo IV without naming a phase at all, which leaves the reader to assume the earlier one. Note the practical point in both directions: do not file the assurance report on 30 October thinking it is required, and do not conclude from that error that you can leave the underlying AML work until Phase 2. Phase 2 must be filed within 60 days of a favourable Phase 1 decision, extendable by up to 60 more at the Banco Central's discretion on a justified request. That is not long to build an assurance-ready control environment from nothing.
The other Phase 1 gate
Capital is also tested at Phase 1, and it is a calculation rather than a published price. The arithmetic sits in the annexes to Resolução Conjunta 14/2025 read with Res. BCB 517/2025, combining a cost parcel driven by the number of registered operational categories, with an uplift for in-house technology infrastructure subject to a ceiling, and an activity parcel driven by the services performed and the nature of the funds. The announced range is roughly R$10.8m to R$37.2m; published law-firm worked examples come out lower on some assumptions, which is not necessarily an error in either, because the formula moves with the inputs. Two points are not assumption-dependent: the capital must be subscribed and paid up in cash, with integralisation immediately following subscription, and a commitment letter or parent guarantee is not capital.
What happens if you do not file
A provider that does not file by 30 October 2026 must cease within 30 days, notify its clients and transfer their assets to other authorised institutions. From that date institutions supervised by the Banco Central are prohibited from facilitating virtual asset operations with unauthorised providers, which removes the banking rails independently of anything the provider decides. The same cessation and transfer obligation applies if authorisation is later refused, withdrawn or archived, alongside a 15-day duty to evidence either dissolution or a change of corporate object and name.
Will the date move?
Brazilian industry bodies have publicly asked the Banco Central for more time. As at the date of this article nothing amending art. 9 has been published, IN 704 stands with IN 739 as its only amendment, and the deadline is 30 October 2026. Plan on the published date and treat any extension as a windfall.
The checklist behind this article
The Brazil PSAV authorisation readiness checklist walks Phase 1 item by item, then Phase 2, with the Anexo I to III business-plan content and the Anexo IV assurance heads set out separately so the two phases do not blur. Every item is cited to an article of IN 704 or a resolution number, every figure is marked as instrument text or as reporting of it, and the genuinely open points are marked as open. USD 79, with the updated edition free as the position develops.
If your three years of CVM-audited statements exist and your capital is in cash, the checklist is enough to file from. If they do not exist, or the audited entity is not the applicant entity, the 48-hour gap check is the faster way to find out what is actually recoverable before 30 October.