巴西要求对价值1万美元的自托管加密货币转账提供COAF报告

Brazil's new regulations: Transfers of more than US$10,000 from managed wallets must be reported to the Financial Activities Control Council

Brazil's Central Bank (BCB) issued Resolution 588, requiring regulated financial institutions to report transfers of cryptoassets worth at least US$10,000. The measure extends the automatic anti-money laundering reporting obligation to transactions conducted between supervised platforms and user-controlled addresses.

According to Resolution No. 588 issued on September 23, transfers or transfers of virtual assets involving self-managed wallets with amounts reaching or exceeding US$10,000 must be specifically notified to the Financial Activities Control Committee (Coaf). The rule will officially take effect on October 1, 2026.

Reporting obligations apply to two-way transactions. Whether it is withdrawn from a regulated agency into a customer's controlled wallet or deposited funds from a self-managed address, it is within the reporting scope as long as certain conditions are met. Brazil's central bank said the measure is mainly aimed at situations where users control private keys themselves, because in such situations, regulated agencies may have less information available to use for monitoring and risk assessment.

The new reporting rule does not affect the use of self-managed services

The measure does not set a $10,000 transfer cap, nor does it prohibit users from controlling their wallets. Instead, it requires agencies to comply with mandatory reporting obligations when eligible transfers cross the boundary between a regulated service provider and a self-managed wallet.

For months, Brazil has been tightening control of this border. A proposal put forward in June proposed a 24-hour freeze period for large transfers diverted to self-managed wallets or overseas crypto companies, while previous rules restricted the use of cryptocurrencies in regulated cross-border payment infrastructure.

The above-mentioned 24-hour mechanism was later established separately in Resolution 584. Starting from January 1, 2027, virtual asset service providers must implement a prudential review period for individual transfers or specific transfers totaling more than US$10,000 by customers that day and destined for foreign crypto companies or self-managed wallets. Brazil's central bank's final framework allows institutions to release transfers early before the full 24-hour period expires, supported by risk assessments.

Brazil joins the global trend to strengthen regulation of transfers from self-managed wallets

Brazil's approach follows the broader regulatory trend of focusing on regulating what happens when crypto assets leave custody without banning private wallets.

Thailand recently finalized a regulation on self-managed wallets, requiring licensed digital asset companies to verify customers 'ownership or control of private keys when sending or receiving cryptocurrency through their platforms. Thailand's "Travel Rules" framework will take effect on February 27, 2027 and requires originator and beneficiary information, counterparty verification, transaction monitoring and record retention.

These two systems use different control methods. Thailand requires wallet ownership verification at regulated transfer points, while Brazil's Resolution 588 triggers an automatic reporting mechanism to Coaf when transfers involving self-custody reach the $10,000 threshold.

Brazil's new requirements are part of a package of regulatory policies covering virtual asset service providers it issued in September. Brazil's central bank said that anti-money laundering related changes will take effect on October 1, and that same month existing encryption service providers must also formally submit authorization applications under their increasingly sophisticated virtual asset framework.