The process should verify whether companies have adequate controls to identify suspicious transactions
From June 1st, companies that work with virtual assets, such as cryptocurrency brokers, will have to present an independent audit report to be authorized to operate. The BC (Central Bank) issued this Friday (May 29, 2026) that it affects the so-called Virtual Asset Service Provider Societies (SPSAVs). 
The new rules reinforce the sector’s regulation initiated last year. Now, companies will have to submit a report on “reasonable assurance” prepared by an independent auditor registered with the Securities and Exchange Commission (CVM).
In practice, the document will function as an external technical assessment of the mechanisms used by platforms to prevent financial crimes, especially money laundering and terrorist financing.
HOW IT WILL WORK
According to the BC, the audit must verify whether companies have adequate controls to identify suspicious operations, monitor transactions and comply with the rules for preventing illicit activities provided for in Brazilian legislation.
The monetary authority states that the measure seeks to increase the security of authorization processes and align Brazil with international standards for monitoring the cryptoactive market.
The BC also assesses that the participation of independent audits increases the transparency and reliability of the information provided by companies in the sector.
EXPANDED REGULATION
The requirement is part of a larger regulatory package for cryptoactive platforms in the country.
In November last year, the BC published the first rules for the operation of the virtual assets market in Brazil. The standards formalized the creation of SPSAVs and established criteria for operation, governance, combating money laundering and operations in the foreign exchange market.
At the time, the BC stated that the objective was to balance innovation and security, reducing space for fraud and financial scams.
BANK SECRECY
In February this year, the National Monetary Council (CMN) expanded the requirements for the sector, determining that crypto platforms would follow rules similar to those of traditional financial institutions.
With this, those on customer data and operations, following Complementary Law 105, which deals with banking secrecy.
The measures also forced platforms to report suspicious transactions to authorities and established new accounting rules for virtual assets.
WHAT ARE SPSAV
SPSAV are companies authorized to provide services related to virtual assets, such as intermediation, custody and trading of cryptocurrencies and tokens.
The creation of the category was predicted by , known as the legal framework for cryptoactives. The federal government defined the Central Bank as responsible for regulating the sector in the country.
This text was originally published by Agência Brasil, on May 29, 2026. The content is free for republication, citing the source, and was adapted to the standard of Poder360.
