Brazil's Crypto Shakeout: PSAV Phase-1 Deadline Oct 30 Requires Audited AML Controls; Lemon Exits
What the Oct 30 deadline actually is (FinanceFeeds). October 30, 2026 is not a license deadline — it is the Phase 1 filing deadline (BCB Normative Instruction 704) for firms already providing virtual-asset services when the regime took effect. And the filing is far more than a form: under Normative Instruction 739 it "must include a reasonable-assurance report from an independent audit firm registered with Brazil's securities regulator, the CVM, covering the effectiveness of anti-money-laundering, counter-terrorist-financing and sanctions controls" — reasonable assurance under the NBC TO 3000 standard, a higher bar than limited assurance, testing how customer due diligence, transaction monitoring, SAR escalation and sanctions screening actually operate. "For providers that have not already tested and remediated those systems, the audit can become the critical path."
Enforcement teeth (Resolution BCB 520). From October 30, BCB-authorized institutions "may not execute or facilitate virtual-asset market transactions with a Brazilian provider that is neither authorised nor in the authorisation process" — cutting unauthorized firms off from regulated counterparties. A provider that misses the filing window must stop operating under transition rules; a filed application later rejected or archived triggers a 30-day wind-down. A favorable Phase 1 decision opens a second stage: 60 days (plus one 60-day extension) to deliver operational evidence.
The shakeout is real. Lemon, the Argentine crypto platform, is shutting its Brazilian operations ahead of the deadline over the new capital and compliance costs (LiveBitcoinNews). CertiK estimates ~120 providers fall within the transition, and warns the pool of CVM-registered audit firms able to perform this specialized assurance work is narrow; the BCB has published no live count of Phase 1 applications. Capital floors run R$10.8M–R$37.2M depending on activities — materially above the R$1M–5M range discussed in consultation — pushing smaller operators toward partnership, acquisition, narrower scope or exit. Further controls are layered on: a 24-hour hold on certain higher-value crypto transfers from January 2027.
"The real countdown is therefore not to a licence award. It is to the point at which an incumbent must have assembled a credible Phase 1 record, secured a qualified auditor and obtained reasonable assurance over controls that have already operated." — FinanceFeeds
Why US entrants should care. Brazil received $318.8B in on-chain value in the year to June 2025 — close to one-third of Latin America's total (Decrypt data cited by FinanceFeeds). Offshore exchanges cannot serve Brazil from abroad: the transition rules require Brazilian activity inside an authorized local structure, making local banking and Pix connectivity part of the licensing analysis1. For a US fintech with crypto ambitions in Brazil, the realistic paths after Oct 30 are acquire-or-partner with an authorized PSAV — not greenfield.
-
An instance of Domestic capital lockups are the mandatory price of regional stablecoin operations. — Regulators force crypto providers into authorized, highly capitalized local entities — R$10.8M–R$37.2M floors that push operators like Lemon to exit rather than lock up domestic capital. ↩︎