BCB Resolution 584/2026: what changes for virtual asset fraud prevention

BCB Resolution No. 584, published on August 7, 2026, extends fraud prevention controls to virtual asset services. Its main provision is a 24-hour precautionary hold for certain transfers abroad or to self-custody wallets.

The rule takes effect on January 1, 2027. It does not impose a blanket freeze on crypto assets, and it does not apply to every transfer in the same way.

This content is for informational purposes only and does not constitute legal or financial advice. It is based on BCB Resolution No. 584 of August 7, 2026, and BCB Resolution No. 520 of November 10, 2025. For the full text, visit the Central Bank of Brazil website.

What BCB Resolution 584/2026 establishes

The resolution amends BCB Resolution No. 142/2021, which already covered fraud prevention in payment services. Its scope now includes virtual asset services provided by authorized institutions, virtual asset service providers, and companies operating under the regulatory transition framework.

In addition to the precautionary hold, institutions must maintain daily records of fraud incidents and attempted fraud, including the corrective measures they took.

The complete resolution is available in the Central Bank of Brazil’s regulatory portal.

When the 24-hour precautionary hold applies

The hold is tied to transfers sent to:

• entities established abroad that operate in the virtual asset market; or
• self-custody wallets.

In those cases, the rule applies to amounts above the equivalent of USD 10,000, whether in a single transaction or in the customer’s total transfers on the same day.

Transactions below that amount may still require additional review when the institution’s risk controls identify a need. The customer profile, transaction characteristics, counterparty, and jurisdiction are among the relevant factors.

The hold is not a permanent block

The Central Bank describes the measure as precautionary. It creates time for additional review before funds are sent to a foreign entity or a self-custody wallet.

Once the assessment is complete, the institution may proceed before the full 24 hours have elapsed, provided the regulatory requirements are met. If the transaction is not approved, it must be rejected under the applicable process.

The Central Bank summarized the measure in an official note on fraud prevention in virtual asset services.

What changes for companies using stablecoins

Stablecoins are also virtual assets. When a transaction meets the conditions in the resolution, the business may face an additional review before the transfer is completed.

In practice, companies should focus on four points:

1. Plan for timing. Not every eligible transaction can be treated as instant.
2. Keep documents organized. Origin, purpose, counterparty, and destination must be demonstrable.
3. Set clear expectations. If a hold applies, communication should explain its precautionary nature and expected timing.
4. Avoid absolute promises. Settlement and availability depend on the flow, review, and institutions involved.

How this relates to TroqPay

TroqPay provides the technology layer for integration, tracking, and reconciliation. Regulated financial steps are carried out by partner institutions according to the product and market.

When BCB Resolution 584/2026 applies to a partner and transaction, additional timing, documents, or reviews may become part of the process. TroqPay’s role is to keep that process visible and organized without replacing each responsible institution’s regulatory obligations or decisions.

When the rule takes effect

The effective date is January 1, 2027. Before then, institutions and businesses using these flows should review product journeys, messages, controls, records, and timing expectations.

The broader framework for virtual asset service providers is set out in BCB Resolution No. 520/2025, which covers their organization, operation, and activities.

Operational readiness checklist

• map transfers abroad and to self-custody wallets;
• identify transactions above the threshold or with higher risk;
• review required customer, counterparty, and destination data;
• adjust timing communicated in the product and support channels;
• preserve traceability for decisions and fraud incidents;
• confirm how each partner will apply the rule to the contracted flow.

The central point is straightforward: fraud prevention is no longer only an onboarding control. It can also affect the timing and execution of specific virtual asset transactions.