Brazil Closes VASP License Window With 68 Applicants Including Itaú and Binance

Brazil's central bank closed its virtual asset service provider license window on November 2, 2026, with 68 firms filing for authorization under Law No. 14,478/2022, the country's Legal Framework for Virtual Assets. The applicant pool includes Itaú Unibanco, BTG Pactual and Binance, alongside a range of fintechs.

The Banco Central do Brasil (BCB) ran the process under the 2022 framework, which requires every virtual asset service provider (VASP) operating in the country to obtain prior authorization. The license covers exchange, custody, settlement and fiat on- and off-ramp services. Firms that filed by the deadline may keep operating while the BCB reviews their applications. Those that didn't face a hard stop.

What does this change for crypto banking in Brazil?

The deadline converts a gray zone into a binary compliance requirement. Only authorized entities will be permitted to facilitate crypto-to-fiat conversion, custody and trading once licenses are granted. The BCB expects to issue the first authorizations in the second half of 2027, after a review running through the year.

The framework imposes capital reserves, anti-money-laundering procedures, consumer protection rules and cybersecurity standards equivalent to those applied to traditional banks. That raises the bar for operators. It also gives counterparties something banks and auditors have lacked: legal certainty about who may lawfully handle Brazilian reais in digital-asset form.

The operational consequences cut in several directions. Unlicensed exchanges and custodians will eventually have to cease operations, potentially stranding client funds. Banking partners may terminate relationships with unlicensed firms to protect their own standing. For any business accepting or settling in BRL, or using a crypto off-ramp tied to BRL, the intermediary's license status becomes a supply-chain risk factor that belongs inside KYB checks.

Why Brazil is a bellwether

Brazil consistently ranks at the top of global crypto adoption indexes, driven by a large unbanked population and high remittance flows. Its shift to a formal, gatekept regime makes it a test case for other emerging markets weighing the same transition.

The licensing trend extends well beyond Brazil. The EU's MiCA created a single passportable license, the US is advancing stablecoin legislation, the FDIC provides a framework for bank engagement with crypto, and Hong Kong, Singapore and the UAE are refining their own regimes. Deutsche Bank's entry into crypto custody signals the infrastructure is maturing.

Stablecoin volume exceeded $16 trillion globally in 2026, and regulated on- and off-ramps reduce settlement risk in cross-border treasury operations that depend on that flow.

What happens next

The immediate task for businesses is diligence: map every service touching Brazilian reais, verify whether each provider publicly confirmed its BCB application, and line up backup platforms among the applicants so a switch can happen within days if a partner falls out of the licensed pool.

Once the BCB grants the first licenses, the authorized/unauthorized distinction becomes legally operative and enforcement follows. The pool of reliable partners will narrow at first but gain stability. For now, the 68-firm applicant list is the closest thing Brazil has to a safe list of providers — and the deadline to join it has already passed.