For any foreign investor, bank, or fintech evaluating an acquisition in Brazil’s crypto sector, the regulatory baseline starts with one document: Federal Law 14.478, enacted on December 21, 2022, and known as Brazil’s Crypto Legal Framework (Marco Legal das Criptomoedas). This article explains what acquirers need to know about Law 14.478/2022 — what it regulates, who supervises it, how the licensing transition works, and where the strategic opportunities lie for inbound M&A in 2026.
See BitcoinP2P’s VASP Transition Profile →
What Law 14.478/2022 Actually Regulates
Law 14.478/2022 establishes the legal definition of a virtual asset, defines the activities that constitute “virtual asset services,” designates the licensing authority, and embeds anti-money-laundering, fraud prevention, and consumer protection obligations into Brazilian federal law. The activities covered include: exchange between virtual assets and fiat currency, exchange between virtual assets, transfer of virtual assets, custody and administration of virtual assets, and participation in financial services and provision of services related to the issuance or sale of a virtual asset.
The law explicitly excludes securities (regulated by CVM), traditional payment arrangements (regulated under Law 12.865/2013), and electronic representations of national currency. This carve-out is important: it means tokenized securities and stablecoins pegged to BRL fall under different regulators. For foreign acquirers, this matters during target screening — a Brazilian operator that touches tokenized securities is subject to dual oversight.
The Central Bank of Brazil as VASP Supervisor
By presidential decree following Law 14.478, the Central Bank of Brazil (BCB) was designated as the licensing and supervisory authority for VASPs. The BCB issued its detailed regulatory rollout through 2024 and 2025, covering minimum capital requirements, fit-and-proper criteria for controllers and managers, segregation of customer assets, governance standards, and reporting frequency.
Talk to the BitcoinP2P M&A Team →
The Two-Tier Market Created by the Transition
| Category | Profile | M&A Implication |
|---|---|---|
| Tier 1 — Incumbents | Operating since pre-2022, with continuous IN 1888 reporting | Premium target |
| Tier 2 — Recent entrants | Founded 2022–2024, partial compliance history | Mid-market |
| Tier 3 — Greenfield | Newly licensed, no operating history | Lowest premium |
Tier 1 operators are the scarce asset. Brazil counts only a small number of crypto operators with continuous IN 1888 reporting since 2019 and uninterrupted operations through the regulatory transition. These targets command a premium because their compliance fingerprint is verifiable through Receita Federal records — and cannot be replicated by any new entrant, regardless of capital.
Key Provisions Acquirers Should Read Carefully
Article 5 — The Definition of “Virtual Asset”
Article 5 defines virtual asset as “a digital representation of value that can be traded or transferred by electronic means and used for payments or for investment purposes.” This broad definition captures Bitcoin, stablecoins (non-BRL pegged), most altcoins, and a wide range of utility tokens. Acquirers should ensure the target’s operational scope falls cleanly within Article 5 — overlap with securities triggers CVM oversight.
Article 7 — Authorization Requirement
Article 7 establishes that VASP activity in Brazil requires prior authorization from the federal authority. This is the single most consequential provision for M&A: post-acquisition, the controlling shareholder change must be approved or notified to the BCB depending on transaction size and structure. Acquirers should incorporate BCB notification timelines into closing schedules.
Article 9 — AML/CFT and Beneficial Owner Identification
Article 9 imposes full AML obligations on VASPs, including beneficial owner identification, suspicious transaction reporting to COAF (Brazil’s FIU), and record retention. Targets without robust AML programs are unbuyable for institutional acquirers — this is a screening filter, not a fixable defect.
Article 10 — Penalties
Article 10 imports the penalty regime from the National Financial System framework: fines up to R$2 billion or 200% of the irregular operation, intervention, and license revocation. For acquirers, this means historical infractions of the target are inheritable — clean tax and AML indemnities are mandatory.
Interaction with IN 1888/2019
Receita Federal Normative Instruction 1888/2019 predated Law 14.478 and remains in force. It requires Brazilian crypto operators to file detailed monthly transaction reports for any transaction above R$30,000 or any user crossing aggregate thresholds. Critically, the law does not start the compliance clock at 2022 — it inherits the 2019 reporting obligation.
“The single most defensible due diligence question in any Brazilian crypto acquisition is: ‘Show me your IN 1888 receipts from August 2019.’ Operators who can produce them are a different asset class.”
— Compliance Counsel, Brazilian VASP
Common Acquirer Misconceptions
“Law 14.478 banned crypto in Brazil”
False. Law 14.478 legalized and regulated crypto operations. Brazil has one of the most permissive but fully regulated crypto regimes in the G20.
“All Brazilian VASPs already have BCB licenses”
False. The BCB’s full licensing rollout is ongoing. Most operators are in transition. The transition phase itself is what creates the M&A window.
“Foreign acquirers face capital controls on Brazilian VASPs”
False. Foreign direct investment into Brazilian VASPs is permitted under standard Banco Central foreign capital registration (RDE-IED). Dividend repatriation is allowed.
“BCB will block foreign ownership of Brazilian VASPs”
False. There is no foreign ownership restriction in Law 14.478. Fit-and-proper review applies equally to domestic and foreign controllers.
View the BitcoinP2P Investors Page →
Frequently Asked Questions
What is Law 14.478/2022?
Federal Law 14.478, enacted December 21, 2022, is Brazil’s Crypto Legal Framework. It defines virtual assets, regulates virtual asset service providers (VASPs), and designates the Central Bank of Brazil as the supervisor.
Does Law 14.478 require BCB licenses for all crypto operators in Brazil?
Yes. Article 7 requires prior authorization from the federal authority for VASP activity. Existing operators are in a structured transition phase to the new licensing regime.
Are stablecoins regulated under Law 14.478?
Stablecoins not pegged to BRL fall under Law 14.478 as virtual assets. BRL-pegged digital instruments may fall under separate payment-system or e-money rules.
Can a foreign company hold 100% of a Brazilian VASP?
Yes. There are no foreign ownership restrictions in Law 14.478. Standard fit-and-proper review by the BCB applies to ultimate beneficial owners.
Schedule an Introductory Call →
Read also: How to Acquire a VASP in Brazil — 2026 M&A Playbook