Brazil’s central bank has introduced a mandatory independent audit requirement for crypto service providers seeking or renewing licenses. Under the new regulation, firms must submit an auditor’s report, prepared by professionals registered with the Comissão de Valores Mobiliários, as part of their application. The audits will scrutinize anti-money laundering controls, customer asset segregation, risk management systems, and employee compliance programs.
Companies that fail these checks may face delays or denials in obtaining operational approval. For crypto platforms already active in Brazil, licensing now hinges on external verification of internal controls rather than self-reported documents. While the central bank hasn’t disclosed expected audit costs, compliance experts estimate they could range from tens of thousands to hundreds of thousands of dollars, depending on transaction volume and company size.
Large exchanges may absorb these costs, but smaller platforms and startups could feel the pressure. This move is part of Brazil’s broader effort to tighten oversight of virtual assets. The country approved its first crypto legal framework in 2022, designated the central bank as the primary regulator in 2023, and has since added rules on custody, stablecoin supervision, and governance. Existing providers have until October 2026 to fully comply.
Despite the regulatory hurdles, Brazil remains a key market for global exchanges, having processed around $318 billion in crypto transactions in 2024 and 2025, according to Chainalysis. The new audit rule arrives amid a weaker crypto market, with Bitcoin down over 10% in the past week, trading at $68,960. For firms eyeing Brazil’s large market, navigating these stricter requirements will be essential for continued operation.