Brazil Orders 24-Hour Holds on Large Crypto Transfers Starting in 2027

Brazil's central bank is tightening oversight of large cryptocurrency transfers, requiring regulated providers to delay certain transactions to foreign platforms and self-custody wallets for as long as 24 hours beginning next year.

The requirement takes effect Jan. 1, 2027 under Resolution BCB No. 584/2026, published Aug. 7 by Banco Central do Brasil. Transfers exceeding the equivalent of $10,000 can be placed into the review window when customers move funds from a Brazilian crypto provider to a foreign virtual-asset company or a wallet they control directly. Smaller transfers can also be delayed when a provider identifies elevated fraud risk.

The measure is not a blanket prohibition on withdrawals or international crypto transfers. Providers can release a transaction before the full 24 hours expires when their review does not identify indications of wrongdoing, but they must document the decision and inform customers when a transaction has been placed on hold.

Reuters separately reported Friday that Brazil's central bank had adopted the delay mechanism as part of a broader anti-fraud push involving cryptocurrency transactions.

The rule adds a significant operational control to Brazil's rapidly developing digital-asset regulatory framework and could have particular implications for stablecoin transfers, international payments and users moving assets from centralized exchanges into self-custody.

What the New Rule Does

The regulation targets transactions in which customers place Brazilian reais or digital assets with a regulated provider and subsequently seek to move value outside the provider's domestic environment.

Transfers above the equivalent of $10,000, whether conducted as one transaction or several transactions during the same day, can fall within the required review process. Providers must also apply risk-based controls to smaller transfers when characteristics involving the customer, counterparty, transaction or destination jurisdiction indicate potential fraud.

Banco Central's rationale centers on the speed with which cryptocurrency can be used to move stolen funds after financial fraud occurs. The central bank specifically identified cryptocurrencies, including stablecoins, as instruments that can allow fraud proceeds to leave the reach of victims and financial institutions before suspicious activity is detected.

A 24-hour review period creates a window during which an exchange or other regulated provider can evaluate the transaction before assets enter an overseas service or self-controlled blockchain address where recovery may become more difficult.

That feature places the rule at the intersection of consumer protection and crypto's settlement characteristics.

Blockchain transfers can often settle without the reversal mechanisms available in card networks or some banking systems. Once digital assets reach a self-custody wallet, the originating institution generally cannot independently retrieve them. A pre-transfer review therefore moves fraud controls earlier in the transaction lifecycle.

Self-Custody Is Included

One of the most consequential elements is the rule's application to transfers involving wallets controlled directly by customers.

Brazil had already brought self-custody interactions into its regulated virtual-asset framework. Banco Central's earlier rules require virtual-asset service providers to identify the owner of a self-custody wallet and maintain documented procedures for verifying the origin and destination of assets.

The central bank's broader framework also treats certain international transfers involving virtual assets as foreign-exchange activities and places providers under authorization, governance, anti-money-laundering, security and internal-control requirements.

The new rule builds another layer onto those controls.

For compliant users, self-custody remains permitted. What changes is the possibility that moving a sufficiently large amount from a regulated Brazilian provider into a personal wallet may no longer occur immediately.

That distinction matters because the policy regulates the provider's release of assets rather than the operation of the blockchain itself.

Once assets have left a regulated intermediary and entered a self-controlled wallet, Banco Central cannot impose a protocol-level waiting period on Bitcoin, Ethereum or another decentralized network. The regulatory leverage exists at the point where licensed firms interact with their customers.

Stablecoins Are an Important Part of the Policy

Stablecoins are particularly relevant to Brazil because they can combine crypto settlement infrastructure with exposure to currencies such as the U.S. dollar.

Banco Central's existing virtual-asset rules define fiat-referenced virtual assets and subject regulated providers to detailed requirements involving their operations, governance and customer relationships. The regulator has also incorporated international virtual-asset transfers into Brazil's foreign-exchange framework.

That makes stablecoins useful for legitimate international payments, treasury movement and dollar exposure, but it also makes them attractive for rapidly moving funds across jurisdictions.

The central bank's anti-fraud reasoning reflects that dual use.

The policy does not prohibit stablecoins, nor does it prohibit international crypto payments. Instead, it adds a temporary review mechanism when transaction size or risk characteristics cross specified thresholds.

For exchanges and payment firms, the practical challenge will be distinguishing high-value legitimate activity from transfers that may represent account takeover, social-engineering fraud or attempts to move criminal proceeds.

Brazil Is Moving Crypto Deeper Into Financial Regulation

The new transfer rule is part of a broader regulatory transition rather than a standalone intervention.

Banco Central formally brought virtual-asset service providers under a licensing and supervisory structure through regulations that began taking effect in February 2026. The framework extends requirements involving consumer protection, transparency, anti-money-laundering controls, governance, cybersecurity and internal controls to crypto providers.

The central bank strengthened the framework again in July by classifying virtual-asset service providers within its prudential regime and establishing additional capital and supervisory requirements scheduled to apply from Jan. 1, 2027.

That date now aligns with the introduction of the new transfer-review requirement.

Taken together, the measures increasingly treat regulated crypto companies less like lightly supervised technology platforms and more like financial intermediaries subject to risk-management obligations comparable to other participants in Brazil's financial system.

Industry Had Already Raised Concerns

The delay mechanism has faced industry opposition before becoming final.

Brazilian crypto association ABcripto previously asked Banco Central to suspend an earlier version of the proposal, arguing that a mandatory waiting period could create operational costs and disadvantage domestic providers relative to foreign or decentralized alternatives.

That criticism illustrates the central trade-off facing regulators.

A mandatory review window can provide additional time to detect fraudulent transfers, but one of crypto's principal attractions is its ability to move value quickly and continuously.

If customers experience delays on legitimate transactions through regulated Brazilian providers, some may attempt to move activity toward services outside the local regulatory perimeter.

That does not necessarily make the rule ineffective, but it means implementation will matter.

Providers capable of performing rapid risk assessment and releasing low-risk transactions early may create a substantially different customer experience from firms that routinely default to the maximum 24-hour period.

Analysis: The Rule Changes the Meaning of Crypto Settlement at the Exchange Layer

Brazil's decision highlights an emerging regulatory model that preserves blockchain settlement while limiting immediacy at regulated entry and exit points.

Governments do not need to alter Bitcoin, Ethereum or stablecoin protocols to change how quickly customers can use them through licensed intermediaries.

They can regulate the gateway.

A transaction may technically be capable of settling onchain within minutes, while the exchange holding the customer's assets is legally required to wait before broadcasting it.

That separation between protocol settlement speed and regulated withdrawal speed will become increasingly important as digital assets move deeper into mainstream finance.

Brazil's framework demonstrates how regulators can preserve legal access to self-custody and international crypto transfers while applying banking-style fraud controls before assets leave an accountable intermediary.

The model may prove appealing to other jurisdictions struggling with authorized-push-payment fraud, account takeover and stablecoin-enabled cross-border movement.

It could also become controversial if safeguards designed for exceptional transactions gradually become routine friction for ordinary users.

What Exchanges Will Have to Build

The requirement creates more than a timer.

Brazilian providers will need systems capable of evaluating transaction risk based on customer behavior, transfer size, destination wallet, counterparty and jurisdiction. They must also document decisions when transfers are released early and notify customers when a transaction has been delayed.

That pushes regulated crypto companies toward the fraud-monitoring architecture already common within banking and payments.

Blockchain analytics may become increasingly important because an exchange reviewing a self-custody withdrawal can evaluate whether a destination address has connections to scams, sanctioned entities, stolen funds or suspicious transaction clusters.

Identity controls become important as well. Banco Central's existing framework already requires providers to identify self-custody wallet owners and document procedures relating to the origin and destination of virtual assets.

For large international exchanges serving Brazilian customers, compliance architecture may therefore become a competitive factor alongside trading fees, liquidity and asset availability.

The Competitive Risk

There is also a market-structure question.

A regulated provider can be required to delay a withdrawal. A decentralized application or foreign platform outside Brazil's effective jurisdiction may not follow the same procedure.

That creates the possibility of regulatory asymmetry.

The industry's earlier opposition emphasized concerns that additional friction could weaken the competitiveness of locally regulated platforms.

The counterargument is that stronger protections could make regulated firms more attractive to banks, institutional investors and consumers who value recoverability and fraud prevention.

Both effects are plausible.

Brazil's regulatory experiment will therefore provide useful evidence about whether stronger transaction controls push users away from licensed platforms or increase confidence in regulated digital-asset services.

Why This Matters Beyond Brazil

Brazil is an important test case because its government is not attempting to eliminate digital assets from the financial system.

Banco Central has instead constructed rules for authorized virtual-asset companies, international transfers, self-custody interactions, prudential requirements and financial-crime controls.

The 24-hour rule represents the next stage of that approach.

Rather than debating whether crypto should exist inside regulated finance, the policy asks a more operational question: how should regulated institutions manage the unique fraud risks created by assets capable of moving globally and irreversibly?

That question is likely to become more important as stablecoins expand into payments, remittances and institutional settlement.

What Comes Next

The key date is Jan. 1, 2027, when the new transfer requirement is scheduled to take effect.

Before then, exchanges and other providers will need to adapt compliance procedures, transaction-monitoring systems, customer notifications and risk models.

The industry's response will also deserve attention.

The most important metric may not be how many transfers are delayed for the full 24 hours. It may be how frequently providers can clear legitimate transactions early while successfully identifying suspicious ones.

If the rule catches meaningful fraud without materially slowing normal customer activity, Brazil could provide a model for risk-based crypto withdrawal controls.

If delays become common and users migrate toward less regulated alternatives, the policy could demonstrate the limits of applying traditional fraud-prevention mechanisms to digital assets.

The Crypto Managers Perspective

Institutional perspective and market analysis from The Crypto Managers Editorial Team.

Analysis

Brazil's new rule represents something larger than another crypto compliance requirement.

It illustrates how regulated crypto is beginning to inherit the operating characteristics of traditional finance.

The blockchain may remain open 24 hours a day. The asset may remain transferable without a central clearinghouse. The customer may still have the legal right to withdraw into self-custody.

But the regulated intermediary connecting that customer to the network increasingly looks like a financial institution.

It must know the customer, assess the transaction, document the destination, screen for fraud and, when necessary, stop the transfer before it leaves.

That is an important evolution for investors and institutions evaluating the future of digital assets.

The central regulatory debate is gradually shifting away from whether crypto can coexist with the financial system.

The new question is what compromises will be required when crypto's speed and irreversibility meet the fraud, compliance and consumer-protection expectations of regulated finance.

Brazil has now provided one answer: keep the transaction legal, but give regulated intermediaries time to determine whether it should move.