The Central Bank's Resolution 584, published on 7 August, takes effect in January and applies to any transfer heading to a self-custody wallet or foreign exchange. Cumulative daily volume counts, not just single tickets.
Brazil's central bank has told the country's crypto exchanges to sit on any withdrawal above $10,000 for a full 24 hours before releasing it. Resolution BCB No. 584, published on 7 August, folds virtual-asset service providers into the same fraud-prevention regime that already governs bank payments. It takes effect on 1 January 2027.
The rule applies to two categories of transfer: funds moving to any foreign virtual-asset firm, and funds moving to a self-custody wallet. Domestic exchange-to-exchange payments are outside the scope. The $10,000 threshold can be reached on a single transaction or on the day's running total, so a customer who pushes out ten transfers of $1,100 will trigger the same hold as one who sends $11,000 in a single go.
Providers keep discretion to hold smaller transfers where their own risk systems flag something. They can also release a held transfer early, provided the review is documented. In practice, that turns the 24-hour window into a maximum rather than a floor: an exchange confident in a customer's paperwork can push funds out sooner, but if the BCB later disagrees, the exchange carries the risk.
The Central Bank has framed the resolution as a fraud-prevention measure. Brazilian regulators have been increasingly explicit about a pattern they see repeatedly in domestic investigations: scammers convert stolen reais into a dollar stablecoin, route it to a foreign platform or a private wallet, and finish the laundering before the victim has even logged the complaint. Once the funds cross the border on-chain, recovery is close to impossible. A day's delay gives compliance teams time to correlate the outbound ticket with any incoming fraud reports.
The reach of the rule is substantial. Brazil is by some distance the largest crypto market in Latin America; Chainalysis has ranked it in the world's top ten by on-chain value received for three consecutive years, and the country hosts the region's most active retail user base. The major domestic exchanges (Mercado Bitcoin, Foxbit and Bitso) all sit inside the BCB's perimeter and will have to build the hold logic into their withdrawal flow by year-end 2026. Binance, still the dominant international venue for Brazilian users, is treated as a domestic VASP under Brazilian rules once it services local residents.
What the resolution does not do is target the underlying self-custody transfer itself. There is no attempt to restrict who a Brazilian may send crypto to, no whitelisting regime for approved addresses, no per-user annual cap. The friction sits at the on-ramp exit, not at the wallet layer. Anyone determined to move funds off a regulated exchange still can; they will simply wait a day.
That framing places Brazil somewhere between two international poles. It is closer to the enhanced due-diligence regimes the FATF has recommended for cross-border virtual-asset transfers than to the outright restrictions India's central bank has argued for on the international stage. It also stops short of the wholesale delisting regime that MiCA's transitional period pushed onto European exchanges at the start of July, when every licensed EU platform had to pull unauthorised stablecoins from its books.
The rule will also test how much friction Brazilian users tolerate before routing around the licensed exchanges entirely. Peer-to-peer volume on Binance's Brazilian book was already growing before this resolution; a 24-hour hold on withdrawals to self-custody may accelerate that shift, or push activity toward smaller unlicensed venues that ignore the rule at their peril. Enforcement bandwidth is the open question. The BCB has published the resolution; it has not yet published how it plans to police compliance across dozens of registered VASPs.
Exchange-industry reaction has been measured rather than combative. Most licensed operators had already implemented risk-based holds on suspicious transfers under their internal AML programmes; the resolution codifies the practice and sets a floor, but it does not introduce a mechanism that mature compliance teams have not seen before. The bigger operational lift is the cumulative-daily calculation, which requires exchanges to track outbound flow per customer in real time and trigger the hold retroactively once a customer's day breaches the threshold.
Brazil now joins a small group of jurisdictions that treat self-custody transfers as a distinct regulatory category rather than an ordinary withdrawal. Vietnam this year set fines of up to $3,800 for trading off licensed rails; Colombia and Argentina are drafting frameworks of their own, and neither has floated anything as prescriptive as Brazil's 24-hour rule so far.
