Resolutions BCB No. 588 + 589 published Sep 23 2026 — effective Oct 1 2026 — same deadline VASPs must file authorization requests — only 5 VASPs applied so far* $QI $PHA $BTW
- *Rule:* *covered institutions (banks, payment institutions, VASPs under BCB) must report to COAF (Council for Financial Activities Control) any virtual-asset transfer to/from self-custody wallets >= $10,000 equivalent — both directions — no auto-aggregation of sub-$10k (unlike separate 24h hold rule) — reporting next business day — not a ban, not a cap, not a freeze — does NOT require surrender private keys*
- *588 also adds same $10k for cash FX with physical delivery*
- *589 companion:* *from Nov 6 2026 ban business with unauthorized VASPs — from Jan 1 2027 phased detailed data reporting to BCB begins*
- *24h retention:* *separate rule Jan 2027 — same-day aggregation — for certain large transfers to self-custody or overseas platforms may trigger up to 24h risk-control hold*
- *Why:* *self-custody = blind spot — BCB wants database of self-custody addresses + monitor bridge between regulated custody ↔ user-controlled — reporting = informational not illegal label — aligns Brazil with FATF Travel Rule + global AML 2026 crackdown (Seoul, EU)*
- *Penalty:* *Circular 3,978 AML framework — failure = fines + operational restrictions + COAF investigation*
*BREAKING 🚨 Brazil BCB Resolutions 588/589 Sep 23: VASPs + banks must report self-custody wallet transfers $10k+ to COAF from Oct 1 2026 🚀 Both in/out — no ban no cap no key surrender — reports next biz day — same deadline VASP licensing (5 applied) — Nov 6 no business with unauthorized — Jan 1 2027 phased data + 24h hold same-day aggregation — AML visibility on self-custody bridge ⚡*#QNTRises39% #BitgetBreachForgedRequestsNotStolenKeys #BitcoinSpotETFsTurnNetPositiveYTD
- *Rule:* *covered institutions (banks, payment institutions, VASPs under BCB) must report to COAF (Council for Financial Activities Control) any virtual-asset transfer to/from self-custody wallets >= $10,000 equivalent — both directions — no auto-aggregation of sub-$10k (unlike separate 24h hold rule) — reporting next business day — not a ban, not a cap, not a freeze — does NOT require surrender private keys*
- *588 also adds same $10k for cash FX with physical delivery*
- *589 companion:* *from Nov 6 2026 ban business with unauthorized VASPs — from Jan 1 2027 phased detailed data reporting to BCB begins*
- *24h retention:* *separate rule Jan 2027 — same-day aggregation — for certain large transfers to self-custody or overseas platforms may trigger up to 24h risk-control hold*
- *Why:* *self-custody = blind spot — BCB wants database of self-custody addresses + monitor bridge between regulated custody ↔ user-controlled — reporting = informational not illegal label — aligns Brazil with FATF Travel Rule + global AML 2026 crackdown (Seoul, EU)*
- *Penalty:* *Circular 3,978 AML framework — failure = fines + operational restrictions + COAF investigation*
*BREAKING 🚨 Brazil BCB Resolutions 588/589 Sep 23: VASPs + banks must report self-custody wallet transfers $10k+ to COAF from Oct 1 2026 🚀 Both in/out — no ban no cap no key surrender — reports next biz day — same deadline VASP licensing (5 applied) — Nov 6 no business with unauthorized — Jan 1 2027 phased data + 24h hold same-day aggregation — AML visibility on self-custody bridge ⚡*#QNTRises39% #BitgetBreachForgedRequestsNotStolenKeys #BitcoinSpotETFsTurnNetPositiveYTD
