Brazil’s central bank has rolled out a new regulatory framework that will require licensed crypto trading platforms to submit daily proof that they hold enough assets to cover operational and security risks starting Jan. 1, 2027. The measures were published through market communications on March 3 and are aimed at reducing the risk of hacks, operational breakdowns, and misuse of customer funds.
The framework moves crypto intermediaries closer to commercial-bank style prudential standards. Exchanges will need to demonstrate adequate fiat and crypto reserves on a daily basis, while also complying with bank-like requirements on data protection and confidentiality. The central bank is also tightening oversight of cross-border crypto flows and the way digital assets are recorded on balance sheets.
Customer funds must be fully separated from platform assets
One of the central requirements is full segregation between customer assets and exchange-owned assets. Platforms must keep their own fiat and crypto accounts entirely separate from client accounts, blocking the commingling of operating capital with custodial balances. Regulators want to make it harder for exchanges to reuse customer funds for proprietary trading or unsecured lending, while also making legal ownership clearer in a resolution or bankruptcy scenario.
That structure pushes Brazilian exchanges closer to a custodial model, where they act as fiduciaries over client holdings rather than taking broader balance-sheet risk. The rule also reflects lessons from major offshore exchange failures, where opaque reserves and internal fund movements contributed to insolvencies and lengthy withdrawal freezes.
Crypto holdings will need standardized balance-sheet treatment
Brazilian regulators are also requiring exchanges to recognize crypto assets on their balance sheets under a dedicated accounting manual tailored to digital instruments. Instead of treating crypto only as off-balance-sheet custodial items, platforms will have to follow standardized guidance for classification, valuation, and impairment. The goal is to make financial statements more comparable across the sector and reduce information gaps between exchanges, investors, and auditors.
The rules also extend to customer data, transaction records, and internal communications. Exchanges will need stronger controls to prevent leaks and unauthorized access, a key issue in a market where on-chain and off-chain data can be combined to map user behavior in detail.
Cross-border crypto transfers face tighter audits
The new regime also expands scrutiny over international crypto transfers. Exchanges handling cross-border flows will face stricter audits and controls tied to the origin of funds, the destination of transfers, and the on-chain routes used to move value between wallets and jurisdictions. Supervisors plan to use blockchain analytics together with reporting requirements to improve traceability and make it harder to use crypto rails for money laundering, tax evasion, or criminal financing.
In practical terms, that means exchanges may need to build or integrate stronger compliance systems capable of flagging suspicious cross-border activity and retaining documentation for audits. For smaller platforms, daily reserve attestations, full asset segregation, and transaction monitoring are likely to raise operating costs. Larger venues with more mature infrastructure may find it easier to absorb those changes.
At the time of the announcement, BTC and ETH were both trading lower as the broader crypto market moved into a risk-off stretch. The rules do not single out any specific token, but the message is clear: a major emerging-market economy is bringing crypto exchanges deeper into the perimeter of traditional financial supervision.