Brazil: Licensing, Authorisation & Market Access

Licensing, Authorisation & Market Access

PL 2901/2026 proposes a national regulatory framework for fintechs and digital financial platforms, the Marco Nacional de Fintechs e Plataformas Digitais, built around a proposed Sistema Nacional de Integridade Financeira Digital that would coordinate the Banco Central, COAF, Receita Federal, Polícia Federal, CADE and ANPD. The bill proposes a permanent regulatory sandbox and tiered obligations administered by the BCB, scaled according to firm size and systemic risk. As an early-stage bill, this account rests on a single trade-press source without independently retrieved primary legislative text, so the precise market-access implications for payment institutions and crypto-asset operators cannot yet be confirmed.

Separately, a dated transitional deadline applies to international payment service providers operating under BCB Resolution 561's cross-border framework: providers not yet authorised may continue temporarily but must apply for BCB approval by 31 May 2027 to continue operating beyond that date. This is a market-access deadline attaching to an existing cross-border payments rule rather than a feature of the proposed PL 2901/2026 framework.

Together, these developments describe a market-access landscape with one confirmed, dated transitional deadline for cross-border payment providers and one early-stage legislative proposal whose eventual effect on licensing and market access for fintech and digital-platform firms remains unconfirmed.

Outlook

PL 2901/2026's committee progress is the item to track for any confirmed market-access implications; no enactment timeline is established as of this cycle. The 31 May 2027 BCB approval deadline for unauthorised international payment providers is a fixed, dated milestone that will determine which providers retain cross-border market access beyond that date.

Licensing, Authorisation & Market Access

A rewritten activity-based minimum-capital rule has materially raised the capital bar for institutions offering Pix in Brazil. Offering Pix alone now adds an estimated R$5 million to an institution's minimum capital requirement. The Central Bank's own estimate puts the combined shortfall across affected institutions at roughly R$8 billion, approximately US$1.55 billion, spread across 679 of Brazil's 1,751 relevant institutions, about 39 percent of that population, equal to roughly half a percent of the financial system's reference equity. The source characterises this estimate itself with Uncertain confidence, so the headline figures should be read as indicative of scale rather than as a settled regulatory fact pending confirmation.

The rule applies specifically to non-bank payment institutions and e-money institutions rather than to banks as a class, reflecting the Central Bank's activity-based approach to capital requirements: an institution's capital obligation now scales with which payment activities, including Pix participation, it actually offers, rather than resting solely on its licence category. For smaller fintechs whose core proposition is Pix access, this converts what was previously a near-costless scheme obligation into a material capital commitment.

Outlook

The scale and even the direction of this development's ultimate market impact depends on whether the Central Bank's R$8 billion shortfall estimate is confirmed as implementation guidance is published. Given the estimate's own Uncertain sourcing, the near-term signal to watch is whether the Central Bank issues a corrected or confirmed figure, and whether any transition period is granted to institutions found short of the new requirement.

Licensing, Authorisation & Market Access

Two distinct BCB instruments moved Brazil's payments licensing baseline this cycle. First, Resolução no. 587, published 18 September 2026, ends mandatory Pix participation for institutions with 500,000 or more active accounts -- a threshold that captures the largest banks and payment institutions specifically -- while simultaneously tightening fraud-marking responsibility for those that remain participants. The same instrument opens salary accounts to Pix Automático recurring-payment functionality from 1 July 2027 and brings hybrid boleto-plus-Pix-QR billing under formal regulation from 1 February 2027, extending the scheme's regulatory perimeter into billing structures that had previously operated in a less formalised space. Second, and separately, a rewritten minimum-capital rule ties required regulatory capital to activities performed rather than to entity label: offering Pix alone now adds approximately R$5 million to a firm's capital requirement, phasing in from 25% of the requirement on 1 July 2026 to full requirement by January 2028.

These two instruments pull in different directions for different segments of the market. The participation-mandate removal reduces a specific compliance burden for the largest bank and non-bank institutions that had been compelled to participate in Pix regardless of business model; the activity-based capital rule increases the compliance burden specifically for smaller non-bank payment institutions and EMIs that offer Pix as one of several services, since capital requirements now scale with the activities a firm actually performs rather than being fixed by its licence category alone. This carries forward the standing baseline set by BCB Resolution 506 (26 September 2025, amending Resolution 1/2020), which revised Pix authorisation criteria and fraud-prevention measures for payment institutions on a phased timeline running through May 2026; the two 2026 instruments sit on top of that authorisation baseline rather than replacing it.

The bank-versus-non-bank distinction is the analytical spine of both changes: the participation-mandate removal chiefly affects large banks and large non-bank PSPs alike above the 500,000-account threshold, while the activity-based capital rule specifically targets non-bank payment institutions and EMIs whose capital requirements had previously been decoupled from the specific activities -- like Pix provision -- that they perform.

Outlook

The capital rule's phase-in through January 2028 gives smaller Pix-offering non-bank institutions a multi-year runway to raise capital, but the 1 July 2026 start of the 25% phase-in means the compliance clock is already running. Watch for whether the BCB issues further guidance disaggregating Resolutions 519-521 from Resolução 587 and the capital rule, since the current record does not fully disaggregate how these instruments interact for a firm offering both VASP-adjacent and Pix services.

Licensing, Authorisation & Market Access

The Banco Central do Brasil materially compressed the compliance timeline for unauthorised payment institutions this cycle, bringing forward the deadline to request formal BCB authorisation from December 2029 to May 2026. This is a confirmed, high-impact development that narrows the runway for non-bank payment institutions and e-money issuers still operating outside the authorised perimeter, applying specifically to the nonbank_pi_emi segment rather than to bank-affiliated PSPs. Separately, BCB Resolution 506 revised Pix authorisation criteria alongside fraud-prevention and penalty measures for payment institutions, effective from 26 September 2025, amending the foundational Resolution 1/2020 that governs the Pix arrangement. This revision applies across both bank and non-bank participants in the Pix scheme, reflecting the dual-track bank/nonbank structure of Brazil's instant-payments ecosystem.

Taken together, these two developments indicate that BCB is narrowing the compliance window on two fronts simultaneously: bringing unauthorised non-bank institutions into the formal authorisation regime faster than previously scheduled, and tightening the standards that authorised Pix participants, bank and non-bank alike, must meet on fraud prevention. The compressed 2029-to-2026 deadline shift is particularly significant for market-access planning, since it removes what had been a multi-year runway for institutions that had not yet sought authorisation.

Outlook

The May 2026 deadline is the key date to track: watch for enforcement activity or a wave of late authorisation applications as the compressed deadline approaches, and for whether BCB signals any further acceleration of authorisation requirements for other categories of payment institution.

Licensing, Authorisation & Market Access

Brazil's payments and digital-asset licensing perimeter tightened materially this cycle. Banco Central do Brasil's Resolution 506, adopted 26 September 2025, revised Pix authorisation criteria for payment institutions, including provisions addressing non-authorised entities. Building on that, a new activities-based minimum-capital rule for payment institutions offering Pix begins phasing in from 1 July 2026, reaching half the required capital amount in January 2027 and the full amount in January 2028, a change that falls specifically on non-bank payment institutions rather than banks. Most significantly, BCB's Resolutions 519, 520 and 521, published 10 November 2025 and effective 2 February 2026, complete a formal authorisation regime for virtual-asset service providers across intermediation, custody and brokerage modalities, with no exemption category, and a two-hundred-seventy-day transition running to 30 October 2026.

Taken together, these three instruments push both non-bank payment institutions and virtual-asset service providers toward capital and authorisation standards that more closely resemble those already applied to banks, formalising market access in both sectors simultaneously rather than sequentially.

Outlook

The clearest near-term markers are the phased capital thresholds, arriving in January 2027 and January 2028, and the 30 October 2026 VASP authorisation deadline, after which unauthorised virtual-asset service providers lose the ability to transact with BCB-supervised entities. Both will test how much of the current non-bank payment and virtual-asset population can meet bank-comparable standards without exiting the market or consolidating.