Brazil Central Bank Rules 24-Hour Retention for Crypto Transfers Over $10k

New 24-Hour Hold Rule for Large Crypto Transfers

Brazil’s Central Bank published a regulation on August 7 requiring virtual asset service providers (PSAVs) to retain funds for up to 24 hours before completing transfers that exceed US$10,000 to overseas virtual asset entities or self-custodied wallets. The rule, which takes effect on January 1, 2027, is described as a purely precautionary measure aimed at strengthening fraud prevention and financial system integrity.

The retention applies when a customer’s individual transaction or total daily activity surpasses the $10,000 mark. Institutions may also temporarily block other transactions that need further evaluation under their own risk-management policies. The Central Bank stressed that the hold does not represent a definitive asset freeze—once the additional risk analysis is complete, the PSAV can release the transfer, even before the 24-hour window expires, at its own discretion.

The move responds to the growing use of virtual assets, including stablecoins, to quickly move funds obtained through financial scams abroad or into self-custodied wallets, making prevention and recovery efforts harder. The Central Bank noted the rule aligns with international practices and reinforces user protection while supporting the safe development of Brazil’s virtual asset market.

What the Brazilian Central Bank’s Anti-Fraud Rule Means for the Sector

Compliance Burden for Virtual Asset Service Providers

For PSAVs, the regulation introduces a new operational layer. Firms must now integrate a 24-hour hold trigger into their transaction monitoring, ensure their risk-management policies define clear criteria for invoking and lifting the hold, and keep detailed daily logs of fraud incidents or attempts along with corrective actions. This will likely require upgrades to current anti-money laundering (AML) and fraud detection systems, particularly the ability to track cumulative daily volumes in real time and flag the US$10,000 threshold.

Fraud Deterrence vs. User Friction

The mandatory pause could frustrate users who rely on fast cross-border transfers or quick moves to self-custody. While it gives compliance teams a window to scrutinize suspicious flows, it may also push a subset of high-frequency or time-sensitive transactors toward unregulated offshore exchanges or decentralized protocols that are not subject to the rule. The net effectiveness in curbing fraud will depend on whether criminals simply adapt by splitting transactions or moving below the threshold.

Alignment with International Standards

The Central Bank explicitly frames the regulation as in line with global norms, which helps Brazilian PSAVs argue they are not at a competitive disadvantage. Similar transaction-hold requirements for large or high-risk transfers already exist in traditional banking, and extending them to virtual assets reflects a regulatory push to treat crypto intermediaries more like conventional financial institutions.

How Virtual Asset Providers Should Prepare for January 2027

• Audit transaction monitoring systems now to ensure they can track cumulative daily movements per client and automatically flag the US$10,000 mark, including transfers to foreign entities and self-custodied wallets.
• Draft board-approved risk-management policies that define specific criteria for invoking the 24-hour hold and the parameters under which a transfer can be released early. Align these with existing AML/CFT frameworks.
• Set up fraud-event registers as required, logging every fraud or attempted fraud incident, the corrective actions taken, and outcomes—this will be a key compliance artifact for Central Bank examinations.
• Test the hold workflow in a sandbox well ahead of the January 2027 deadline, involving the technology, compliance and operations teams to simulate real-time holds, analysis, and early-release decisions.
• Train staff on the new rules, especially frontline compliance analysts, to ensure consistent decision-making during the 24-hour review window and proper documentation.