Brazil: A Market Effectively Closed by Regulation
Operating a crypto ATM in Brazil is technically not prohibited — but a 2025 central bank resolution has made the traditional cash-based model explicitly non-compliant. With only 6–10 machines active across a country of 215 million people and the world's fifth-highest crypto adoption rate, the numbers tell the story before the regulations do.¹
Last updated: May 2026
One Law That Changes Everything
Brazil's foundational crypto legislation is Lei nº 14.478/2022 (the "Marco Legal das Criptomoedas"), effective June 2023. It established that VASPs require prior federal authorization to operate, with the Banco Central do Brasil (BCB) designated as the primary regulator.²
On November 10, 2025, the BCB published four implementing resolutions — 517, 519, 520, and 521 — all effective February 2, 2026.³ The decisive provision for crypto ATMs sits in Resolution 521, which explicitly prohibits "transactions with cash, whether in domestic or foreign currency, through virtual asset service points."⁴
This is not ambiguous. Multiple top-tier Brazilian law firms — Cescon Barrieu, Felsberg Advogados, Conduit Pay — confirm it.⁵ A machine that accepts banknotes and delivers Bitcoin violates this rule. All existing operators face an October 30, 2026 compliance deadline: obtain BCB authorization under compliant terms, or cease operations.⁶
Getting Licensed: Banking-Grade Requirements
Any entity performing crypto-fiat exchange must register with the BCB as an SPSAV (Sociedade Prestadora de Serviços de Ativos Virtuais). A crypto ATM operator qualifies as an Intermediary at minimum.⁷
Requirements include: Brazilian legal entity (Ltda. or S.A.), physical headquarters in Brazil (coworking explicitly prohibited), at least three Brazil-resident officers, and BCB fit-and-proper approval for directors.⁸
Minimum capital under Resolutions 517 and 519 is tiered — for an intermediation-only operation, Brazilian law firms estimate R$ 9.2–10.8 million (~USD 1.6–1.9M).⁹ Full broker-custodian operations reach R$ 37.2M.¹⁰ Authorization takes up to 360 days for new entrants.¹¹ Legal and advisory costs alone run USD 50,000–200,000.¹²
AML and KYC: Strict, Federal, and Non-Negotiable
VASPs are explicitly listed as obligated entities under Lei 9.613/1998.¹³ All customers must provide full identification — CPF verified against government databases, full name, address, occupation, and government-issued ID. There are no anonymous transaction allowances at any threshold.¹⁴
Key obligations: transactions of R$ 50,000+ trigger automatic COAF reporting within one business day;¹⁵ SARs must be filed within 24 hours of a decision to report;¹⁶ zero-activity annual reports are required. The Travel Rule applies from February 2027 (domestic) and February 2028 (cross-border).¹⁷
Banking: Achievable, But Only After Licensing
Brazil's banking environment is unusually crypto-friendly — Itaú, Nubank, BTG Pactual, and XP Investimentos all offer crypto services, and Mercado Bitcoin holds a BCB payment institution license.¹⁸ A properly licensed SPSAV should be able to secure banking relationships.
The obstacle is reaching that point. R$ 10.8M+ in minimum capital and mandatory local incorporation mean only well-capitalized operators will qualify — and obtaining a bank account before BCB licensing is extremely difficult in practice.¹⁹
The key enabler is sequencing: achieve BCB licensing first, then approach banks with full compliance documentation in hand. The licensing certificate materially improves banking acceptance.
The Numbers: What Entry Actually Costs
Total setup costs for a 5-machine operation:²⁰
| Category | Estimate |
| BCB minimum capital (intermediary) | ~USD 1.9M |
| Legal and advisory | USD 100,000–250,000 |
| Hardware + import duties (5 units) | USD 65,000–110,000 |
| Corporate formation and RADAR | USD 10,000–25,000 |
| Anatel certification | USD 5,000–15,000 |
| Year 1 operations | USD 120,000–180,000 |
| Total minimum | ~USD 2.2–2.5M |
Hardware import carries an additional 55–75% tax burden (cascading II, IPI, PIS, COFINS, ICMS).²¹ Anatel homologation — required for devices with WiFi or mobile data — takes 2–6 months and cannot be skipped.²² Annual ongoing compliance runs USD 80,000–150,000.
Estimated time from decision to first operational ATM: 12–18 months.
The October 2026 Deadline Changes Everything
All existing crypto ATM operators in Brazil must either achieve BCB authorization under terms consistent with the cash prohibition, or cease operations by October 30, 2026.²³ This deadline is fixed, and the authorization process takes up to 360 days — meaning any operator not already in the licensing pipeline is effectively out of time.
Beyond October 2026, BCB-authorized entities will be prohibited from transacting with unlicensed VASPs entirely. Key subsequent milestones: prudential capital rules (Basel-aligned) take effect January 2027; Travel Rule Phase 1 (domestic) February 2027; Travel Rule Phase 2 (cross-border) February 2028.²⁴
The upside: a $318 billion crypto market, institutional banking support, and a regulatory framework that — if you can meet it — provides real legitimacy. The downside: the cash prohibition is absolute, minimum capital requirements are extreme relative to the business model, and Pix (57 billion transactions annually) plus Nubank's 80 million crypto customers mean digital alternatives have already captured the market that ATMs would serve.²⁵
Coin Cloud deployed 25+ machines in Brazil before its 2023 bankruptcy. Today, 6–10 machines serve 215 million people. That is not a growth story waiting to happen — it is a structural signal.²⁶
Sources and references:
1. Chainalysis & Veriff, 2. LOC & International Bar Association, 3. Cointelegraph & Cointribune, 4. Felsberg Advogados & Cescon Barrieu & Conduit Pay, 5. Felsberg Advogados & Cescon Barrieu & Conduit Pay, 6. OneSafe & Notabene, 7. Notabene & Gofaizen Sherle, 8. Cescon Barrieu & Chambers and Partners & Mattos Filho, 9. NDM & Yahoo Finance, 10. Yahoo Finance, 11. International Bar Association, 12. International Bar Association, 13. LOC & International Bar Association, 14. Tecalis & AML Watcher, 15. With Persona, 16. With Persona & ANBIMA, 17. Sumsub & Notabene, 18. Finance Magnates & Chainalysis, 19. Chainalysis & Anbima, 20. General Bytes Internal Cost Analysis & Novatrade Brazil, 21. Novatrade Brazil & International Trade Administration, 22. China Gate & Moderna Tecnologia, 23. OneSafe & Notabene & CNB/SP, 24. Sumsub & Notabene & Chainalysis, 25. Galileo Financial Technology & Veriff & The Defiant, 26. CoinDesk & Benzinga & Statista.
Legal Disclaimer: This blog article by GENERAL BYTES is for informational purposes only and does not constitute formal legal, financial, or investment advice. The Brazil regulatory landscape is subject to sudden changes and aggressive enforcement; always consult with specialized UK counsel before considering market entry.