#
Brazil's BCB restructured cross-border FX authorization: Resolution 561 (effective 1 Oct 2026) restricts eFX providers to BCB-authorized institutional categories and bars unauthorized crypto-settlement channels, with a transition deadline of 31 May 2027 for currently-unauthorized firms.
In Mexico, the CNBV authorises e-money institutions as IFPEs (Instituciones de Fondos de Pago Electrónico) under the 2018 Fintech Law, subject to the prior favourable opinion of an inter-institutional committee that includes SHCP and Banxico. The IFPE is the largest fintech category, with roughly 87-88 active institutions and 89 total ITF authorisations by mid-2025. It is the principal non-bank e-money authorisation in Mexico and the legal basis for the country's dominant wallet and neobank cohort, including Mercado Pago, Klar and Spin. This claim is held at High confidence: multiple law-firm guides support it but no Tier-1 anchor is present.
Outlook
Both the Brazilian PI regime and the Mexican IFPE regime are established standing positions rather than moving targets, and the trajectory is stable. The forward watch items sit in adjacent modules — safeguarding rules, AML supervision and settlement access — rather than in the licensing perimeter itself. Crypto and financial-promotion enforcement across LATAM was not separately searched to quota this cycle and is flagged for periodic follow-up.
Licensing, Authorisation & Market Access
Brazil's Central Bank tightened Pix payment-institution authorisation this cycle through Resolution 506, adopted 26 September 2025, which revised the authorisation criteria set under the original Resolution 1/2020. This is assessed at probable confidence from a tier-4 secondary summary; no tier-1 primary BCB.gov.br host was independently reached this pass, and the finding should be read with that sourcing caveat in mind. Alongside this, a separate activity-tied minimum-capital rule now distinguishes between Pix-offering and non-Pix prepaid institutions: those offering Pix must hold BRL 17.4 million in capital, versus BRL 12.4 million for institutions that do not, with the rule phasing in from 1 July 2026 to the full amount by January 2028. This is a bank-PSP versus non-bank-PI/EMI distinction rendered explicit by the regulation itself: non-bank payment institutions and e-money institutions offering Pix now face a materially higher capital bar than their non-Pix counterparts, while bank-PSPs offering the same functionality are presumably already subject to bank-level prudential capital regimes and are not the direct target of this activity-tied rule.
The market-access implication is that Brazil's non-bank PI/EMI sector faces a rising capital floor tied specifically to Pix participation, which functions as a de facto market-structure filter: smaller non-bank fintechs offering Pix will need to scale capital reserves substantially over the 2026-2028 phase-in window or exit Pix-offering status. This is architecture rather than incident: a structural recalibration of who can participate in Brazil's dominant instant-payment rail as a non-bank institution, rather than a single enforcement action against a named firm.
Separately, and with materially weaker sourcing, Mexico's Fintech Law 2.0 is characterised in trade press as requiring crypto custodians to maintain a minimum capital threshold of US$200,000, tied to the national digital-identity framework. This rests on a single tier-4 blog source, and no primary Banxico or CNBV text was independently reached this pass. This finding is held at uncertain confidence and should not be treated as a settled characterisation of Mexican law; it is flagged explicitly as an area of Mexican primary-source under-indexing relative to the depth of Brazilian sourcing achieved this cycle.
Read together, these two national developments describe a region where licensing and market-access requirements are tightening unevenly: Brazil's tightening is well-evidenced and specific, while Mexico's is asserted but not yet independently verified. This unevenness is itself a finding worth carrying forward: LATAM payments-licensing coverage this cycle is asymmetric across its two largest fintech markets.
Outlook
Watch for the 1 July 2026 commencement of Brazil's phased capital-rule implementation as the first observable market-structure effect of this tightening, and watch for whether smaller non-bank Pix-offering institutions begin exiting or consolidating in response. Separately, watch for whether primary Mexican regulatory text becomes available to confirm or revise the current uncertain-confidence characterisation of the crypto-custodian capital threshold. This is analytical orientation on the regulatory operating environment, not compliance instruction.
2 earlier distinct update(s)
Licensing, Authorisation & Market Access
Brazil's cross-border electronic FX (eFX) authorization framework has been restructured this cycle through BCB Resolution 561, published 30 April 2026 and effective 1 October 2026. The resolution restricts eFX activity to specified BCB-authorized institution types, narrowing the population of entities permitted to operate in this channel, and requires affected providers to update their registration through the Unicad system by 30 October 2026. Providers that are not currently authorized may continue operating on a transitional basis but must apply for BCB authorization by 31 May 2027 or exit the market; this is a bank-and-non-bank-relevant distinction, since both bank-affiliated FX desks and non-bank payment institutions currently active in the eFX channel fall within the restructured perimeter and must separately confirm their authorization status against the new institution-type criteria.
Layered onto the eFX restructuring is a separate, already-in-force capital requirement for participants in Brazil's domestic instant-payment scheme, Pix: since 1 January 2026, Pix participants must maintain a minimum net equity of BRL 5 million, in addition to existing AML/KYC and LGPD data-protection obligations. Together, these two developments show Brazil tightening market-access conditions on two related but distinct payment rails within the same regulatory season — the domestic instant-payment scheme via capital adequacy, and the cross-border FX channel via authorized-institution-type restriction — rather than a single unified licensing reform.
Outlook
The near-term compliance calendar for market participants is dense: eFX providers must reconcile their institution-type status against Resolution 561 by the 1 October 2026 effective date, update Unicad registration by 30 October 2026, and unauthorized international payment providers face a longer-dated 31 May 2027 authorization deadline. Whether non-bank payment institutions currently active in the eFX channel will qualify under the BCB-authorized institution types named in Resolution 561 is the key open question for market-access purposes and should be the focus of the next research cycle.
Licensing, Authorisation & Market Access
Brazil's Banco Central has established the region's most comprehensive licensing and market-access regime for virtual-asset service providers this cycle. Resolutions 519, 520 and 521 create a formal SPSAV authorization framework, with capital requirements ranging from R$10.8 million to R$37.2 million depending on activity scope, in force since February 2, 2026. Firms already operating in Brazil's virtual-asset market have a 270-day transition window, running to October 30, 2026, within which to notify or apply for BCB authorization; any firm that does not secure authorization by that deadline must cease operations and migrate client assets within 30 days. This is a tier-one, high-confidence finding directly sourced to the Banco Central's own press materials, and it applies across both bank and non-bank market participants — the regime does not carve out a lighter-touch path for non-bank virtual-asset operators relative to banks entering the same activity.
A related instrument, expected around May 2026, would add a further market-access precondition: independent CVM-registered audits as a requirement before licensing is granted. This raises the bar specifically for non-bank applicants, who are less likely to already maintain CVM-standard audit relationships than bank entrants, and represents a second, distinct market-access control layered on top of the core capital-and-authorization requirement in Resolutions 519-521.
The bank-versus-non-bank distinction carries particular weight in Brazil's case because the new capital thresholds — R$10.8 million to R$37.2 million — sit well above the capitalization levels many smaller, non-bank virtual-asset platforms have historically operated with in the region's light-touch VASP environment. Banks entering the same VASP authorization category are likely to clear the capital bar more readily given existing prudential capital bases, meaning the practical market-access effect of Resolutions 519-521 may be a consolidation of Brazil's non-bank VASP sector toward fewer, better-capitalized players, alongside increased participation from bank-affiliated entities entering the space under the same licensing umbrella.
In Mexico, market-access dynamics this cycle are shaped less by a new licensing instrument than by the continuing partial implementation of an existing one. Open-finance API-sharing obligations under Fintech Law Article 76 remain only partially in force: ATM-location and branch-data sharing obligations are active, but secondary rules governing transactional-data sharing were still pending as of January 2026. This is a market-access-relevant gap because it affects the conditions under which non-bank fintech entrants can build products dependent on transactional data access from incumbent banks — a structurally different market-access constraint than Brazil's capital-and-audit-based licensing model, but one that similarly shapes which categories of firm can compete on equal footing.
Read together, these two jurisdictions illustrate different modes of market-access control operating in the region at the same time: Brazil moving to a comprehensive, capital-and-audit-gated authorization model for a previously unlicensed activity category, and Mexico continuing a slower, rule-by-rule implementation of an already-legislated open-finance mandate.
Outlook
Brazil's October 30, 2026 transition deadline is the defining near-term market-access event in the region: it will determine how many existing virtual-asset operators can meet the capital, audit and authorization bar, and by extension how concentrated the post-transition Brazilian VASP market becomes. The pending CVM-audit precondition adds a further filter likely to weigh more heavily on smaller non-bank entrants than on bank-affiliated applicants. In Mexico, the pace at which transactional-data-sharing secondary rules are finalized will determine when the open-finance market-access mandate moves from partial to full implementation, a milestone still without a confirmed date as of this cycle.
Sources and findings (6)
- T1Law No. 12.865/2013 (Brazil payments) — Planalto/BCB
- T1BCB Resolution #495/2025 and Resolution #80 (BCB official)
- T1World Bank FPS Brazil/Pix case study
- T1Ley para Regular las ITF (Fintech Law) — CNBV (gob.mx)
- T1Fintech Law (ITF/IFPE authorisation) — CNBV (gob.mx)
- T3Mexico Business News