You deposit funds with a Brazilian exchange. You then try to send $12,000 to a wallet you control. From January 1, 2027, that transfer does not go anywhere for 24 hours. Brazil’s central bank
You deposit funds with a Brazilian exchange. You then try to send $12,000 to a wallet you control.
From January 1, 2027, that transfer does not go anywhere for 24 hours.
Brazil’s central bank published Resolution BCB No. 584/2026 on August 7. It is short, specific, and aimed at exactly two destinations.
The rule applies when a customer funds an account with reais or crypto and then tries to move those funds out.
Two destinations trigger it. Self-custody wallets, and crypto firms based outside Brazil.
The threshold is $10,000, measured either as a single transaction or as a customer’s combined daily total. Splitting a transfer into smaller pieces does not avoid it.
Smaller transfers can also be held if the provider’s own risk systems flag them. So size is the automatic trigger, but behavior is a trigger too.
ScenarioSubject to the 24-hour hold?$15,000 to your own hardware walletYes$15,000 to a foreign exchangeYesThree transfers of $4,000 on the same dayYes, daily total exceeds $10,000$15,000 between accounts on the same Brazilian platformNo$15,000 to another regulated Brazilian platformOutside this specific requirement$2,000 flagged by the provider risk systemYes, at the provider discretion
The central bank was explicit that this is a review window, not a freeze. Transfers still complete. They just do not complete instantly.
Providers can release a held transfer early if their review clears it. They have to document that decision and notify the customer that a hold was applied.
So the 24 hours is a ceiling rather than a fixed waiting period. In practice, how fast funds move will depend on how good each platform’s risk desk is.
The rule does not ban self-custody. It does not restrict what you hold or where you eventually hold it.
The part that has drawn less attention is what happens to firms that do not comply.
Under the resolution, the central bank can impose stricter requirements on a non-compliant firm. That includes ordering holds longer than 24 hours, extending the procedure to transfers below $10,000, or removing that firm’s ability to release transactions early.
That is a meaningful escalation ladder. The baseline rule is uniform, but a platform with poor controls can end up operating under a harsher regime than its competitors.
Firms must also keep detailed daily records of fraud and attempted fraud, and document the anti-fraud measures they apply.
This did not appear from nowhere. Resolution 584 amends a 2021 fraud-prevention framework that governed payment providers, extending it to cover virtual assets and stablecoins.
It builds on Brazil’s 2022 Virtual Assets Law, which made the central bank the primary regulator for crypto service providers, followed by a series of resolutions tightening compliance.
The rule also covers providers still working through the adaptation process set out under Resolution 520 of November 2025. That closes the gap where transitional firms could have processed higher-risk transfers without the safeguard.
Brazil is not a small market to run this experiment in. It ranked fifth in Chainalysis’s 2025 global adoption index and received $318.8 billion in crypto value between July 2024 and June 2025.
The central bank’s reasoning targets a specific failure pattern. Fraud victims usually discover a scam after the money has already left the country or moved into a wallet only the scammer controls.
Once funds sit in self-custody abroad, recovery is close to impossible. A one-day window is an attempt to create a moment where intervention is still possible.
The objection from Brazilian crypto associations is the obvious one. Rules built to catch bad actors do not distinguish between them and everyone else.
A trader moving funds between venues to catch a price move loses that ability. A business paying a foreign supplier in stablecoins now builds a day of latency into its treasury operations.
Security-conscious users are hit in a particular way. Moving coins off an exchange promptly is standard practice after a deposit, and this rule specifically slows that down.
Delay mechanisms are not common in crypto regulation. Most frameworks focus on licensing, reporting and reserve requirements rather than putting a clock on individual transactions.
That makes Resolution 584 a distinctive piece of rulemaking, and it lands in the region’s largest crypto market. Whether other Latin American regulators copy it is the thing worth watching over the next year.
The wider direction is familiar. Regulators everywhere are tightening the points where crypto touches the traditional system, as seen when governments moved on Bitcoin ATM rules and when Hong Kong formalized its stablecoin framework.
Self-custody rights have been pushed the other way elsewhere, including when Kentucky lawmakers moved to protect them in statute.
Brazil has been actively courting the industry at the same time, having granted Binance its 21st global license. Tighter rules and open doors are running in parallel.
There are almost 17 months before this takes effect. That is deliberate, to let firms rebuild monitoring systems.
For individuals in Brazil, the practical adjustment is planning. Large moves to self-custody or foreign platforms need a day of lead time built in from January.
For businesses, the question is whether stablecoin settlement still works operationally with a 24-hour gate on outbound transfers above $10,000.
The rule text is published and the mechanics are clear. What is not yet clear is how aggressively providers will use the discretionary flag on smaller transfers.
This is not financial advice.
Optimisus covers crypto and technology news for readers who want the detail behind the headline.
