Brazil orders reporting $10K self-custody transfers

TLDR

Brazils central bank is introducing a rule that forces regulated crypto providers to report self custody wallet transfers of $10,000 or more, increasing oversight without banning self custody.

1. Resolution BCB No. 588 requires supervised institutions to report single crypto transfers of at least $10,000 to or from self custody wallets starting October 1, 2026.
2. The reports go to Brazils financial crime watchdog and can be used to map users self custody addresses, while unlicensed providers are pushed out of the regulated market.
3. Further rules in 2027 will add 24 hour holds and broader data reporting, so users should watch which exchanges get licensed and how they handle large withdrawals.

Deep Dive

1. Rule Details And Scope

Brazils central bank published Resolution BCB No. 588 on September 23, 2026, amending its AML and counter terrorism financing framework to cover large self custody crypto transfers.

Under the rule, institutions under central bank supervision, including licensed virtual asset service providers, must report any single transfer of virtual assets worth $10,000 or more to or from a self custody wallet to the Financial Activities Control Council (Coaf) by the next business day. This is clearly described as a reporting obligation, not a ban or cap on self custody, and does not create new taxes or fees for users, according to regulatory analysis on Resolution BCB No. 588.

Customers themselves do not file these reports, and the institutions are not allowed to inform them when a specific report is sent.

2. Effects On Users And Market

Reported data can be used by Coaf to organize transactions and build a database of self custody addresses tied to users who move funds through regulated exchanges, as noted in coverage of the Brazilian resolutions on Bitcoin.com. This strengthens tracing and risk assessment but reduces privacy around large moves out of or into private wallets.

Alongside 588, Resolution BCB No. 589 restricts dealings with unauthorized crypto providers from November 6, 2026, and requires licensed providers to submit detailed supervisory data on balances, custody and proof of reserves from January 1, 2027. Only a handful of VASPs have applied for licenses out of a much larger local provider base, pointing to likely consolidation around a small set of regulated venues.

3. What To Watch Next

Resolution 588 triggers only on single transfers at or above $10,000. A separate rule, Resolution BCB No. 584, effective January 1, 2027, allows providers to aggregate multiple same day transfers to reach $10,000 and temporarily hold such outbound transfers for up to 24 hours for risk review, as summarised in this regulatory overview.

Users and businesses should watch three things in the coming year. First, which exchanges and payment firms secure licenses in Brazil, since unlicensed providers will face growing restrictions. Second, whether large withdrawals or deposits begin to feel slower or more scrutinised once the 24 hour retention framework is active. Third, whether similar reporting thresholds appear in other jurisdictions, which would further normalize state level visibility into self custody flows.

Conclusion

Brazils new $10,000 reporting rule does not ban self custody, but it does turn large movements between exchanges and private wallets into flagged events in a national database. For crypto users in Brazil, the main shift is not loss of access, but reduced privacy and a tighter dependence on a small group of licensed providers, with more detailed data and potential transfer holds coming into force through 2027.