Brokerage without KYC: what changes for you in Brazil after DeCripto (and the mistake that makes people lose their account)
Since January 2026, with DeCripto in effect, foreign brokerages that serve Brazilians have started reporting activity to the IRS. A lot of people began looking for KYC-free brokerages—those that let you open an account with just an email, without sending an ID or a selfie.
Before you go creating an account anywhere, there are three things you need to understand:
1) No KYC doesn’t mean “no rules.” There’s normally a withdrawal limit (for example, 20,000 USDT per day) until you verify. For most people, that’s already enough to know, but it’s good to know the number beforehand.
2) Not doing KYC does NOT exempt you from declaring crypto on your income tax. These are separate matters. Opening an account without documents doesn’t erase your obligation to the tax authorities.
3) The biggest risk isn’t the brokerage—it's your password. An account without verification in two steps (2FA) is a door with a single lock. If your password leaks, they get in.
About 2FA, the mistake that shows up most in the comments:
- When you activate Google Authenticator, the screen shows a “backup key.” If you don’t store that key somewhere safe and later change your phone or accidentally uninstall the app, you lose access. Getting it back through support takes days, and during that time you won’t be able to withdraw anything.
- Store the key in a password manager or on paper. Never in a photo roll, and never by sending it to yourself on WhatsApp.
- When confirming, the brokerage asks for two 6-digit codes: one from your email, the other from the app. They’re different. Putting the same code in both fields is what causes the “invalid code.”
I recorded a complete tutorial showing all of this step by step, from registration to active 2FA, using BloFin as the example. If you want to see it, just search for Diovane Lopes on YouTube.
I learn, I teach—you truly win for real.
Since January 2026, with DeCripto in effect, foreign brokerages that serve Brazilians have started reporting activity to the IRS. A lot of people began looking for KYC-free brokerages—those that let you open an account with just an email, without sending an ID or a selfie.
Before you go creating an account anywhere, there are three things you need to understand:
1) No KYC doesn’t mean “no rules.” There’s normally a withdrawal limit (for example, 20,000 USDT per day) until you verify. For most people, that’s already enough to know, but it’s good to know the number beforehand.
2) Not doing KYC does NOT exempt you from declaring crypto on your income tax. These are separate matters. Opening an account without documents doesn’t erase your obligation to the tax authorities.
3) The biggest risk isn’t the brokerage—it's your password. An account without verification in two steps (2FA) is a door with a single lock. If your password leaks, they get in.
About 2FA, the mistake that shows up most in the comments:
- When you activate Google Authenticator, the screen shows a “backup key.” If you don’t store that key somewhere safe and later change your phone or accidentally uninstall the app, you lose access. Getting it back through support takes days, and during that time you won’t be able to withdraw anything.
- Store the key in a password manager or on paper. Never in a photo roll, and never by sending it to yourself on WhatsApp.
- When confirming, the brokerage asks for two 6-digit codes: one from your email, the other from the app. They’re different. Putting the same code in both fields is what causes the “invalid code.”
I recorded a complete tutorial showing all of this step by step, from registration to active 2FA, using BloFin as the example. If you want to see it, just search for Diovane Lopes on YouTube.
I learn, I teach—you truly win for real.
