Brazil’s central bank has drawn a new line through the country’s crypto compliance map, and it runs straight through private wallets. Resolution BCB No. 588, published on September 23, requires institutions under central bank supervision to report virtual-asset transfers worth at least 10,000 USD to or from self-custody wallets beginning October 1, 2026. The measure folds wallet-to-exchange activity into the same reporting machinery Brazil already uses for large cash operations, and it lands less than a week before it takes effect.
The resolution amends Circular No. 3,978, the anti-money-laundering and counter-terrorist-financing framework governing entities supervised by the central bank. A new item added to Article 49 places qualifying self-custody transfers inside the category of specific operations that covered institutions must communicate to Coaf, the Financial Activities Control Council. The duty applies in both directions: transfers sent to a self-custody wallet and transfers received from one.
## A reporting threshold, not a ban
Despite alarm across social media after the rule surfaced, the text of Resolution 588 does not prohibit self-custody, cap the amount a user can transfer, or require that a qualifying transaction be blocked. B3, the operator of the Brazilian exchange, reported that the 10,000 USD figure functions as a mandatory reporting threshold rather than a transaction limit.
The placement is telling. By amending Article 49 of Circular 3,978, the new provision sits alongside existing mandatory reports for large cash operations and foreign-currency cash transactions. Resolution 588 also adds foreign-exchange transactions involving at least 10,000 USD in physical foreign currency to the same list, treating cross-border physical cash and self-custody crypto as comparable monitoring priorities.
The central bank’s own explanation for the move is informational. Regulators said self-custody can reduce the availability of information for monitoring and risk assessment, because users directly control their private keys rather than holding assets inside an entity where customer and transaction records remain within a supervised perimeter.
## Next-business-day reporting through existing channels
The compliance mechanics are already familiar to Brazilian financial institutions. Article 49 of Circular 3,978 requires covered entities to communicate listed transactions to Coaf by the next business day after the transaction or relevant provision occurs, slotting the new self-custody category into an established process rather than building a new one.
Institutions are also bound by the circular’s confidentiality rule: they may not inform customers or third parties that a Coaf communication has been made. Notably, Resolution 588 does not create a direct filing obligation for individuals. The reporting duty operates exclusively through institutions covered by the central bank’s AML framework when they handle a qualifying transfer on a customer’s behalf.
One distinction matters for compliance teams parsing the fine print. Resolution 588 contains no same-day aggregation language for its automatic trigger. Its text refers to a single transfer with a value equal to or above 10,000 USD. That contrasts with a separate Brazilian rule, and Brazilian regulatory analyses published after the September rules confirmed the gap is deliberate in drafting, if not in intent.
## A different animal from Brazil’s 24-hour hold
The October reporting requirement should not be confused with Resolution BCB No. 584, the anti-fraud rule published in August that triggered global headlines. Resolution 584 permits institutions to retain certain outbound virtual-asset transfers to foreign service providers or self-custody wallets for up to 24 hours under defined risk controls, effective January 1, 2027.
The two rules even count differently. Resolution 584 can apply when one transfer exceeds the 10,000 USD threshold or when the same customer’s transfers reach the threshold in aggregate during a single day. Providers can release a transfer before the full 24 hours elapse once the required risk review is complete. Resolution 588 contains no equivalent aggregation formula.
The absence of an aggregation clause does not create a loophole. Circular 3,978 separately obliges institutions to assess transactions and situations that may indicate money laundering or terrorist financing, with suspicious cases subject to their own reporting process regardless of the size of any single transfer.
## Staged supervision keeps tightening
Resolution 588 is the latest brick in a wall Brazil has been building since 2025. Capital requirements for crypto service providers now sit alongside licensing, governance, security and compliance obligations. A 2026 measure restricted virtual assets from settling payments inside regulated cross-border electronic foreign-exchange channels without banning ordinary transfers outside that system. Tax rules operate separately, including the 17.5 percent levy on crypto gains.
The central bank also issued Resolution BCB No. 589 on September 23 alongside Resolution 588. It changes rules for virtual-asset service providers, adding supervisory information requirements covering customer balances, custody positions, proof of reserves and customer assets committed to staking, with those data submissions taking effect January 1, 2027. From November 6, 2026, authorized institutions also face restrictions on facilitating virtual-asset market operations with counterparties not authorized to operate in Brazil, subject to regulatory exceptions.
For Brazilian users of self-custody wallets, the practical takeaway is modest: transfers of 10,000 USD or more routed through a supervised institution will generate a Coaf report the next business day, silently. Nothing in the resolution changes custody rights, transfer legality, or tax treatment. What it changes is visibility, and in Brazil’s increasingly layered crypto framework, visibility is precisely the point.
—
*Market snapshot at press time: Bitcoin (BTC) trades at 84,607 USD (+1.40 percent 24h), Ethereum (ETH) at 2,716.62 USD (+2.70 percent 24h), and Solana (SOL) at 120.75 USD (+6.64 percent 24h).*
published sep 23, effective oct 1. eight days to restructure how you move funds to cold storage. obrigado BCB
10k USD threshold and one week of warning before it goes live. banks will treat every withdrawal like a Coaf report waiting to happen
fewer, larger, documented transfers and the Coaf report tells a boring story. the friction is the feature from their side
folding self custody into the same rules as cash moves. they basically said wallets are suitcases of money lol
agreed on the suitcase part, but note its a reporting rule, not a ban. Coaf gets the data, you keep the keys
less than a week between publication and it taking effect. obrigado BCB, very cool notice period
one week is nothing, but banks already treat big pix transfers like a crime scene. this just formalizes the same treatment for wallets
people screaming ban on twitter when its literally just a Coaf reporting threshold like cash ops. 10k usd transfers to self custody still go through, it just gets flagged. read Article 49
read article 49 and also the part where the report follows the client, not just the transaction. its not a one time flag, it stacks into your file at every supervised institution
flagged to Coaf still means a human somewhere reads a pattern and maybe asks a boring question. thats the part nobody mentions
and the human reads it in thirty seconds and closes the file. the coaf backlog does more for privacy than any wallet tech lol
correct, not a ban, but flagged still means your relationship manager gets a note. expect the awkward questions at account renewal
resolution 588 amending article 49 of circular 3978. at least they did it by the book instead of some midnight decree
a 10k usd threshold in a brl country means the line moves with the exchange rate. your reporting obligation is basically a forex chart
Exactly. When USD/BRL moved from 5.4 to 6.1 the same transfer crossed the line overnight without me moving a sat. The threshold should have been set in BRL.