All news is rigorously fact-checked and reviewed by leading blockchain experts and seasoned industry insiders.
- The rule applies to transfers both to and from self-custody wallets.
- The reporting threshold is $10,000 or the equivalent in virtual assets.
- A separate rule will tighten dealings with unauthorized crypto providers from November 6.
Brazil is bringing large self-custody crypto transfers inside its automatic anti-money laundering reporting framework. From October 1, transfers worth $10,000 or more between covered institutions and self-custody wallets must be reported to Coaf, Brazil’s financial intelligence unit. The measure leaves self-custody legal while giving regulators greater visibility when crypto crosses between supervised infrastructure and wallets controlled directly by users.
What Does Brazil’s $10,000 Crypto Rule Require?
Resolution BCB No. 588 amends Circular No. 3,978, the Banco Central do Brasil framework covering anti-money laundering and counter-terrorist financing procedures for supervised institutions.
The resolution adds virtual-asset transfers to or from self-custody wallets worth at least the equivalent of $10,000 to transactions subject to specific communication to Coaf. The central bank says the change is intended to improve monitoring where users themselves control the private keys, reducing the information available compared with assets held by an authorized institution.
The direction of the transfer does not change the requirement.
A qualifying withdrawal from a covered provider to a self-custody wallet is reportable. So is a qualifying transfer from self-custody into the covered institution.
The $10,000 figure is a reporting threshold rather than a transaction ceiling. Resolution 588 does not prohibit a user from transferring $10,000, $50,000 or more, and a mandatory communication to Coaf does not by itself mean the transaction is illegal or suspicious.
That distinction is central to what Brazil is actually regulating.
The Regulated Perimeter Ends at the Wallet, but Reporting Does Not
Self-custody creates an unusual AML boundary because the institution can identify its own customer but does not necessarily control or have the same information about the wallet on the other side.
Resolution 588 addresses that boundary rather than imposing custody requirements on the wallet itself.
A user remains in control of the private keys. The additional obligation falls on the covered institution when a qualifying transfer crosses the regulated perimeter.
That also explains why the rule applies in both directions. From an AML perspective, crypto leaving a supervised provider for self-custody and crypto arriving from self-custody create versions of the same information gap.
Smaller Transfers Are Not Automatically Aggregated
Resolution 588 also deserves careful reading below the threshold.
The text does not establish a specific mechanism automatically combining multiple sub-$10,000 self-custody transfers until their cumulative value exceeds $10,000.
That should not be interpreted as an exemption from Brazil’s wider AML controls.
Institutions remain subject to monitoring requirements for unusual or potentially suspicious transactions. A deliberately fragmented transaction pattern could therefore raise separate AML concerns even if individual transfers remain below the new automatic reporting threshold.
The distinction is between automatic threshold reporting and risk-based monitoring.
Resolution 588 adds the first for qualifying self-custody transfers without replacing the second.
Why October 1 Matters for Brazil’s Crypto Market
The self-custody change arrives alongside a broader tightening of Brazil’s virtual-asset framework.
Resolution BCB No. 589 modifies rules governing virtual-asset service providers and increases the information institutions will eventually have to provide to the central bank.
The new data set includes customer accounting balances, the quantity and value of virtual assets held in custody, verifiable proof-of-reserves information and assets committed to staking. Those reporting provisions take effect on January 1, 2027.
A separate provision draws another regulatory boundary.
From November 6, 2026, financial institutions, payment institutions and other entities authorized by the central bank generally cannot conduct or facilitate virtual-asset transactions with counterparties providing virtual-asset services without authorization to operate in Brazil, except where Resolution 520 expressly permits it.
That creates two different controls around Brazil’s crypto market:
- Resolution 588 increases visibility when money crosses into or out of self-custody.
- Resolution 589 tightens which intermediaries supervised institutions can transact with.
Self-custody and unlicensed intermediation are therefore being treated differently.
Brazil Is Making Crypto More Legible to Regulators
The central bank has also applied the same $10,000 automatic reporting threshold to foreign-exchange transactions involving the physical delivery or receipt of foreign currency.
That comparison provides useful context for Resolution 588.
Rather than creating a uniquely punitive threshold for crypto, Banco Central do Brasil is bringing certain self-custody flows into an AML reporting architecture that already uses monetary thresholds to increase visibility around transactions where information can become harder to follow.
For crypto providers, however, the operational consequence is significant.
They increasingly need to understand not only who their customer is, but also whether assets are moving to institutional custody, another regulated provider or a wallet controlled directly by the customer.
From October 1, that classification can determine whether a transfer generates an automatic Coaf report.
And from November, the identity of another service provider on the opposite side becomes more consequential as well.
Brazil’s emerging model therefore stops short of restricting private-key ownership. Instead, it is concentrating regulation around the points where self-custody connects with supervised financial infrastructure.
The wallet remains private infrastructure.
The bridge to it is becoming regulated infrastructure.
