Effective June 1, the Central Bank of Brazil has mandated independent financial audits for all virtual asset service providers (VASPs). This measure serves as a strict prerequisite for obtaining or renewing an operating license, marking a new phase of regulatory oversight in the country's crypto market.

Under the new regulations, assessments must be conducted by professionals accredited by the Brazilian Securities and Exchange Commission (CVM). The audit scope extends beyond corporate financial health to evaluate the robust implementation of Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) protocols. Key verification areas include the strict segregation of corporate and client funds, risk management efficacy, staff preparedness for emergency scenarios, and the accuracy of client investment profile classifications. These requirements apply equally to new license applicants and existing operators seeking authorization renewal.

This regulatory tightening continues a trajectory established in 2022, when virtual asset services were placed under Central Bank jurisdiction, culminating in November 2025 with the formalization of strict cybersecurity and asset custody standards to combat fraud. Amidst the recent ban on 28 prediction and betting platforms (including Polymarket and Kalshi) for derivatives trading violations, and an upcoming October 1 restriction prohibiting electronic foreign exchange (eFX) providers from using cryptocurrencies for international remittances, the Brazilian market is advancing toward comprehensive formalization and transparency.