Brazil introduced the Travel Rule framework through Central Bank Resolution No. 520, which was published on November 10, 2025. This resolution establishes rules for virtual asset service providers (Sociedades Prestadoras de Serviços de Ativos Virtuais, SPSAVs) and other authorised institutions, aligning Brazil’s regulatory framework with the FATF Recommendation 16.
With Resolution 520, Brazil has integrated the Travel Rule into its broader AML/CFT regime, strengthening transparency requirements for virtual asset transfers and reinforcing risk management, supervision, and data retention obligations.
Going forward, entities providing virtual asset services in Brazil must comply with Travel Rule requirements when conducting domestic and international crypto-asset transactions, in line with the phased implementation timeline set by the Central Bank.
What is the scope of the Travel Rule in Brazil?
The Brazilian Travel Rule is based on FATF Recommendation 16 and applies the collection, storage, and transmission of information related to the originator and beneficiary of virtual asset transactions.
Under Central Bank Resolution 520, virtual asset service providers must transmit user information to the receiving institution whenever they execute virtual asset transactions. This information must also be used to support internal risk management policies, identify suspicious activity, and comply with AML/CFT obligations.
Who is the supervisory body for VASPs in Brazil?
The Central Bank of Brazil (Banco Central do Brasil – BCB) is the competent authority responsible for:
- Supervising compliance with Resolution 520;
- Monitoring AML/CFT obligations related to virtual asset services; and
- Accessing retained Travel Rule data for supervisory and enforcement purposes.
What is the Travel Rule threshold in Brazil?
No explicit threshold is defined; the Travel Rule applies to all transactions.
Travel Rule requirements in Brazil
VASPs must comply with Travel Rule requirements for virtual asset transactions as specified under Resolution 520, including the transmission and retention of minimum originator and beneficiary information.
At a minimum, the originating VASP must provide the receiving institution with:
- Originator’s name (individual or legal entity);
- Originator’s fiat account at the originating institution (payment or deposit account if domestic, or equivalent account if international);
- Originator’s residential address;
- Originator’s CPF, CNPJ, or international identification number;
- Originator’s virtual asset wallet address;
- Beneficiary’s name (individual or legal entity);
- Beneficiary’s fiat account at the beneficiary institution (payment or deposit account if domestic, or equivalent account if international);
- Beneficiary’s virtual asset wallet address.
Does the Brazilian Travel Rule apply to self-hosted wallets?
Yes. Transfers involving self-hosted wallets fall within the scope of the Brazilian Travel Rule.
For transactions to or from self-hosted wallets, VASPs must report the following information to the Central Bank of Brazil:
- Customer name (originator or beneficiary);
- CPF, CNPJ, or international identification number;
- Verification of wallet ownership or control;
- Transaction date;
- Virtual asset involved;
- Value of the virtual assets transferred;
- Transaction value in Brazilian reais;
- Indication of whether the wallet is the origin or destination of the transaction.
VASPs are also expected to implement technological mechanisms to verify wallet control, such as micro-transfer ownership tests (e.g. “satoshi tests”) or message-signing requests.
When do you need to comply with the Travel Rule in Brazil?
Resolution 520 enters into force on 2 February 2026, with a phased implementation timeline:
- 2 February 2027: Mandatory compliance for domestic virtual asset transactions;
- 2 February 2028: Mandatory compliance for international virtual asset transactions.
Which regulations are applicable to the Travel Rule in Brazil?
Central Bank Resolution No. 520 of 10/11/2025
