Brazil's Central Bank (BCB) Resolutions No. 519, 520 and 521 of 10 November 2025 implement the virtual-asset regulatory framework under the supervision of the Central Bank. Resolution 519 establishes VASP authorisation procedures; Resolution 520 sets activity, governance, controls, security and conduct requirements; Resolution 521 integrates specified virtual-asset operations into Brazil's foreign-exchange and international-capital rules. Commencement is staged during 2026 — verify the effective date for each resolution separately.
Resoluções BCB nos. 519, 520 e 521, de 10 de novembro de 2025
Also known as: BCB Resolutions No. 519, 520 and 521 of 2025 — Virtual Asset Regulatory Framework
Overview
Key Details
Jurisdiction
BrazilRegulator
Central Bank of Brazil (BCB)
Law Type
Regulation
Status
Partially EffectiveOfficial Law Number
BCB Resolution No. 519/2025; No. 520/2025; No. 521/2025
Official Title
Resoluções BCB nos. 519, 520 e 521, de 10 de novembro de 2025
Enacted Date
November 10, 2025
Effective Date
Effective date not specified
Topics Covered
Who This Law Applies To
Brazilian virtual-asset service providers and financial institutions providing covered virtual-asset services under BCB supervision.
Key Requirements
- Resolution 519: establishes authorisation procedures for virtual asset service providers in Brazil.
- Resolution 520: sets activity, governance, internal controls, security and conduct requirements for VASPs.
- Resolution 521: integrates specified virtual asset operations into foreign-exchange and international-capital rules.
Official Sources
Official indirect sourceStaged 2026 commencement — verify effective date per resolution. BCB press note is supporting reference; link official Normativo BCB record for each resolution as primary.
Related Laws
Brazil Virtual Assets Law
Law No. 14,478 of 2022
Creates Brazil's legal framework for virtual-asset services and VASPs.
Brazil DeCripto Reporting
Instrução Normativa RFB No. 2,291/2025 – DeCripto
Modernises crypto transaction reporting and aligns it with the OECD Crypto-Asset Reporting Framework.
Decision No. E/35/2023 — VASP Registration and AML/CFT Instructions
Decision No. E/35/2023 on Virtual Asset Service Provider Registration, Cancellation of Registration and AML/CFT Instructions
Oman's FSA Decision No. E/35/2023 requires registration with the Oman Financial Services Authority (formerly Capital Market Authority) before carrying on covered virtual-asset activities in the Sultanate of Oman. It implements AML/CFT, governance and compliance requirements, and provides registration, cancellation and supervisory procedures. This is a VASP registration/AML regime and should be distinguished from any future full licensing framework.
IOSCO Policy Recommendations for Crypto and Digital Asset Markets (2023)
Policy Recommendations for Crypto and Digital Asset Markets — Final Report (FR11/2023)
The IOSCO Policy Recommendations for Crypto and Digital Asset Markets (2023) contain 18 recommendations grounded in the principle of consistent regulation of economically equivalent activities. They address conflicts of interest, market manipulation, custody, disclosure, retail risks and cross-border cooperation. IOSCO recommendations are not self-executing domestic law — implementation depends on member regulators in their respective jurisdictions.
Utility Token Offering Act, 2018 (Act No. 4/2018)
Utility Token Offering Act, 2018 (Act No. 4 of 2018)
Anguilla's Utility Token Offering Act 2018 (Act No. 4/2018) is one of the world's earliest purpose-built utility-token offering frameworks. It creates registration requirements for utility-token issuers, sets offering, disclosure and issuer-qualification conditions, and works with AML regulations and later amendments. Verify the most recent consolidation — a 2020 amendment may affect the effective/status fields.
SBS Resolution No. 02648-2024 — AML/CFT Rules for VASPs
Resolución SBS N.° 02648-2024 — Normas para la Gestión de Riesgos de LA/FT aplicable a PSAVs
Peru's SBS Resolution No. 02648-2024 applies AML/CFT risk-management and compliance duties to virtual asset service providers (PSAVs) supervised by UIF-Peru. It requires customer due diligence, recordkeeping and suspicious-transaction reporting. The resolution also contains a travel-rule chapter, but commencement of the travel rule has been deferred to 1 January 2029 through a later amendment — the travel rule is not currently effective.








