Is crypto legal in Brazil? Regulation and PSAV rules explained

Is crypto legal in Brazil right now?

Yes, crypto is legal in Brazil. Buying, holding, and trading it is not banned. But since Lei 14.478/2022, exchanges that serve Brazilian users count as "prestadoras de serviços de ativos virtuais" (PSAV), and from 2 February 2026 they need authorisation from the Banco Central do Brasil (BCB) to keep operating. If an exchange skips that step, Brazilian regulators have already shown what happens to it (see the Bybit case below).

This is different from asking "which exchange should I use in Brazil?" or "how does Binance work here?" Those questions have their own guides. This one is about the rules themselves, so you know what to check before you send money anywhere.

The timeline: how Brazil's crypto rules got here

Brazil didn't write one law and stop. Four moments matter if you want the short version.

Law 14.478 of 21 December 2022 set guidelines for virtual asset service providers (PSAVs) in Brazil. According to the Banco Central do Brasil's November 2025 presentation (read 2026-11-02), companies need BCB authorisation and supervision under rules in force from 2 February 2026, and firms already operating may continue during a transition while they prove compliance and apply.

We read that presentation directly. It names the rule categories (virtual asset services, authorisation, virtual assets in the FX market, virtual assets in international capital flows) but does not spell out individual resolution numbers on any slide, so we don't state one here. If you see a specific resolution number cited elsewhere, check it against the BCB's own normativos page before relying on it.

Note the CVM warning on Bybit predates the 2022 law. It came from a separate question: was Bybit acting like a securities broker without the right registration. More on that below.

What counts as a PSAV and why it matters

PSAV stands for "prestadora de serviços de ativos virtuais." The BCB's own presentation defines virtual asset services as carrying out, on behalf of third parties, the purchase, sale, intermediation, and custody of crypto assets. Three service types exist under the framework: intermediação (brokering trades), custódia (holding assets), and corretora (both combined) [source: BCB November 2025 presentation].

Who can register as a PSAV, per the same presentation: dedicated virtual-asset companies (Sociedades Prestadoras de Serviços de Ativos Virtuais, or SPSAVs), multiple/commercial/investment/FX banks, and securities or FX brokers and dealers. Under the 2022 law, being a PSAV is not optional paperwork. It's the category that decides whether the BCB has authority over your money once it sits on an exchange.

From 2 February 2026, a PSAV needs BCB authorisation to operate. Companies already providing virtual asset services in Brazil get a transition window to prove they meet the requirements, which the presentation lists as AML/CFT controls (PLD/CT), security, and capital, before they apply for authorisation or file the required notice. That's a temporary state, not a free pass forever.

Two regulators, two lanes. The BCB covers virtual asset service providers as a category, including crypto used in cross-border payments and international capital flows (PSAVs must report detailed data on crypto foreign-exchange operations starting in May 2026, per the same presentation). The CVM steps in separately when a crypto product or company behaves like a securities offering or broker. Bybit's warning came from the CVM lane, not the BCB one.

The BCB's own framing, from the same source: the rules follow the EU's MiCA model and the Financial Stability Board's principle of "same activity, same risk, same rules," and align with FATF (GAFI) Recommendations 15 and 16 on virtual assets.

What happens when an exchange isn't authorised? (the Bybit case)

Here's a real example of what "not authorised" looks like in practice. On 2 September 2022, Brazil's securities regulator CVM issued Ato Declaratório 20.123, warning that Bybit Fintech Limited was operating without the registration required for a securities broker in Brazil. The notice was last updated 30 January 2024, and no removal of that warning has been published since.

That's the whole point of a public regulator notice: it stays visible so anyone can check it, not just on the day it's issued. A warning like this does not mean your funds disappear automatically. It means the company operated outside the rules a regulator applies to that kind of service, and the record of that stays public.

A trading discipline applies here too, even though this isn't a trading question: you don't guess whether a rule applies to you, you read what's actually published and act on that. Guessing at a company's legal status because its app looks polished is the same mistake as guessing where a price will go instead of reading what the chart is actually showing.

Why isn't Bybit an option here?

Bybit is not on CompareCEX's list for Brazil. The CVM notice above is public, unresolved as of the last check, and specific to how Bybit was operating in Brazil's securities space. We don't link to it, review it for Brazilian users, or place any sign-up button for it on this page.

How to check an exchange's status yourself before you deposit

Don't take any article's word for this, including ours. Regulator pages change, and the only version that matters is the one published today.

1. Go to bcb.gov.br and search for the exchange's legal name (not just its brand name) plus "PSAV" or "autorização."
2. Go to gov.br/cvm and search for the same legal name, to check for any Ato Declaratório or enforcement notice.
3. Check the date on anything you find. A notice from 2022 with no update since tells you something different from one updated last month.
4. If you can't find the exchange on either site, that's not proof it's fine. It may mean the authorisation process is still in progress under the transition period, or it may mean it hasn't applied at all.
5. Write down what you found and when, before you fund an account. Not after.

That last step matters more than it sounds. A habit that catches people in trading also catches people here: skipping the written check and relying on memory or a "someone told me it's fine" shortcut. A quick note with today's date and what the regulator page actually said takes two minutes and gives you something to look back at later.

Binance is on our list of exchanges available to Brazilian users (checked against public sources, last checked 2026-09-12); confirm its current authorisation status with the Banco Central before depositing. Binance requires identity verification (KYC) to use most features^†, and its main licensing is through the FSRA in Abu Dhabi's ADGM^†, not a Brazil-specific licence. Its headquarters structure is based in the UAE^†. None of that replaces checking the BCB's own page for current status.

Common mistakes

• Treating "I can still open an account" as proof of authorisation. A transition period lets existing PSAVs keep operating while they apply, it isn't a stamp of approval.
• Checking an exchange's status once and never again. Rules took effect 2 February 2026; a status from last year isn't current.
• Searching the exchange's brand name instead of its legal entity name on regulator sites. The two aren't always the same.
• Assuming a CVM or BCB notice gets taken down once a company "fixes things." The Bybit notice has had no published removal as of its last update.
• Confusing "legal to buy crypto" with "this exchange is authorised to serve me." Brazil answers yes to the first question broadly. The second question needs a specific check, every time.

FAQ

Is Bitcoin illegal in Brazil?

No. Buying, holding, and trading Bitcoin and other crypto assets is legal in Brazil. What changed is the licensing requirement for the companies offering exchange services, not the activity of owning crypto itself.

Does Binance have a Brazil-specific licence?

Not according to any verified source we have. Binance's listed authorisation is FSRA in Abu Dhabi's ADGM^†. Check the BCB's own PSAV listings for its current Brazil status before depositing.

What does PSAV mean in Portuguese crypto rules?

PSAV stands for "prestadora de serviços de ativos virtuais," the legal category for companies offering virtual asset services under Lei 14.478/2022. It's the category the BCB now requires authorisation for.

Why does CompareCEX mention Bybit if it's not recommended?

Because the CVM's public warning against Bybit is the clearest real example of what an unauthorised exchange notice looks like in Brazil. It's a cautionary case, not a comparison option. See our full best crypto exchange in Brazil guide for exchanges we do review.

DISCLOSURE: CompareCEX may earn a commission when you sign up through our links. This does not influence our editorial scores.

RISK: Crypto assets are volatile and unregulated in many jurisdictions. Not financial advice.

This page is educational content, not investment advice. Rules referenced here come from planalto.gov.br, bcb.gov.br, and gov.br/cvm as verified on the dates stated above. See our methodology for how we check exchange facts, our affiliate disclosure for how links work, and our Binance in Brazil guide for exchange-specific details. Updated 2 November 2026.