The Brazilian digital asset market has entered a new operational phase.
With the publication of Central Bank of Brazil (BCB) Resolutions 552 and 553, there is no longer any ambiguity about who can operate in this segment and under what conditions.
This is no longer a regulatory gray area. It is a formal framework, with authorization, governance, internal control and compliance requirements that, in many respects, mirror those applied to the traditional financial system.
For those working with asset tokenization, virtual asset platforms or structuring operations in the digital market, understanding what these resolutions require in practice is not optional, it is a condition for operating.
This article analyzes what each resolution establishes, who is affected, what the concrete operational requirements are and what separates those building something sustainable from those still operating outside the standard required by the BCB.
What do BCB Resolutions 552 and 553 say and why do they matter?
The direct answer: BCB Resolutions 552 and 553 are the core of Brazil’s regulatory framework for virtual asset service providers.
They put into practice Law 14.478/2022, the Virtual Assets Legal Framework, and turn general principles into concrete authorization, governance and compliance obligations.
For those operating in this market, they define the line between legality and irregularity.
What regulatory context led the Central Bank to issue these resolutions?
The growth in virtual asset trading volume in Brazil throughout 2024 and 2025 created inevitable regulatory pressure.
The Central Bank observed an expanding market with little operational standardization, high money laundering risks and no minimum capital or governance requirements for the agents intermediating these operations.
The BCB’s response was structured in stages. First came Law 14.478/2022, which created the legal concept of a virtual asset and gave the Central Bank authority to regulate service providers in this market.
Next, Resolutions 552 and 553 were published to give operational form to this mandate, establishing the authorization requirements, governance standards and compliance obligations that any entity classified as a VASP must meet to operate legally in Brazil.
Timing also matters: the BCB set transition periods for compliance, but the adjustment window is already closing. Those who have not yet structured themselves face real regulatory risk.
What is the scope of each resolution?
The two resolutions are complementary, but they have different purposes:
| Resolution | Main purpose | Operational focus |
| BCB 552 | Authorization for VASPs to operate | Requirements to obtain and maintain BCB authorization |
| BCB 553 | Governance, internal controls and compliance | KYC, AML, risk management, corporate structure and capital |
In practical terms: Resolution 552 defines who can operate; Resolution 553 defines how they must operate. One does not replace the other, and both must be complied with in an integrated way.
How do these resolutions relate to other capital market regulatory frameworks?
This is one of the most relevant points for those working at the intersection of digital assets and the traditional capital market.
The BCB’s authority over VASPs does not exclude the CVM’s authority over tokens that qualify as securities.
In practice, there are three possible situations:
- Pure virtual asset (e.g. cryptocurrencies without the characteristics of a security): regulated exclusively by the BCB under Resolutions 552 and 553.
- Token with the characteristics of a security (e.g. profit-sharing token, equity token): regulated by the CVM, especially under CVM Resolution 88.
- Hybrid operation: dual regulation, with cumulative BCB and CVM requirements. This is the most complex case and the most common in real estate tokenization platforms and tokenized fund structures.
Understanding this regulatory map is the first step before any operational decision.
What does BCB Resolution 552 establish in practice?
BCB Resolution 552 is the instrument that formalizes the authorization regime for virtual asset service providers in Brazil. It does not just create the obligation to obtain authorization, it defines the criteria the BCB will use to assess each application, the timelines involved and the conditions for maintaining authorization over time.
Who is considered a virtual asset service provider under the resolution?
The resolution defines a VASP (Virtual Asset Service Provider) as any legal entity that, on a regular and professional basis, provides at least one of the following services:
- Exchange between virtual assets and national or foreign currency;
- Exchange between different virtual assets;
- Transfer of virtual assets;
- Custody or administration of virtual assets or of instruments that allow control over them;
- Participation in financial services related to the offering or sale of virtual assets.
The critical point: regularity and professionalism are what trigger classification. A company that carries out these activities occasionally is not automatically a VASP, but any operation with scale and continuity is likely to fall within scope.
Asset tokenization platforms that offer custody or facilitate exchanges need to carefully assess how they are classified.
What authorization requirements does the Central Bank impose?
The BCB authorization process for VASPs involves requirements that go far beyond a simple registration. The main ones are:
- Minimum paid-in capital: an amount set by the BCB according to the size of the entity and the services provided; the resolution establishes tiers that take into account transaction volume and risk profile.
- Adequate corporate structure: a control and management structure consistent with financial system standards, including a fit-and-proper assessment of controlling shareholders and managers.
- Documented policies and procedures: the authorization application must be accompanied by governance, risk management and internal control policies that are already in place, not as a future promise, but as an operational reality.
- Proven technology infrastructure: demonstration that the systems used are capable of traceability, security and operational integrity.
- Articles of incorporation and corporate documentation in line with BCB requirements.
The process is not instant. The BCB reviews each application with the same rigor applied to financial institutions, and the entity may be subject to additional questions before approval.
This means that those who start the process without being operationally structured are likely to face a long compliance cycle.
What does BCB Resolution 553 add to the regulatory framework?
If Resolution 552 defines access to the market, Resolution 553 defines the operating standard.
It establishes the ongoing requirements an authorized VASP must meet to keep its authorization active, and this is where most operations face their greatest compliance challenges.
How do KYC, AML and crime prevention obligations apply in this context?
Resolution 553 aligns Brazilian VASPs with the international FATF (Financial Action Task Force) standard for anti-money laundering and countering the financing of terrorism. In practice, this means:
- Structured KYC (Know Your Customer): identification and verification of all customers with documented procedures, including the so-called “Travel Rule” for transfers, under which the originating VASP must collect and transmit the originator’s information to the beneficiary VASP.
- Continuous transaction monitoring: systems to detect suspicious patterns, with automated alerts and defined reporting workflows to COAF, Brazil’s financial intelligence unit.
- Customer risk classification: each customer must have a defined risk profile, with differentiated procedures for high-risk customers, including politically exposed persons (PEPs) and customers with atypical transactions.
- Records and traceability: all transactions must be recorded with enough information to allow auditing, and the BCB may request access to these records at any time.
A practical example: a platform that allows virtual assets to be transferred between users must, before processing the transaction, verify the identity of both parties, screen international sanctions lists, apply the customer’s risk limit and record the operation with full traceability.
This is not a manual process. It needs to be integrated into the operation’s technology infrastructure.
What does the resolution require in terms of capital, corporate structure and liability?
Resolution 553 goes beyond transactional compliance obligations. It establishes permanent structural requirements:
| Requirement | What it requires in practice |
| Ongoing minimum capital | Maintaining minimum capital throughout the operation, not just at the time of authorization |
| Segregation of funds | Separation between customer assets and the VASP’s own assets, a segregated custody requirement |
| Management governance | A management structure with formally defined and documented responsibilities |
| Operational risk management | Mapping and mitigation of technological, operational and liquidity risks |
| Business continuity plan | Formal procedures for restoring operations in the event of failures or incidents |
| Liability of managers | Managers are personally liable for omissions or irregularities, and the BCB may disqualify managers individually |
This set of requirements turns what used to be an informal operation into a structure with governance comparable to a small financial institution. This is not an exaggeration, it is the regulator’s explicit intention.
Who is affected by BCB Resolutions 552 and 553?
This is the question that most divides the market, and the answer is broader than many operators would like.
Directly affected are:
- Cryptocurrency exchanges that operate in Brazil or serve Brazilian residents;
- Tokenization platforms that offer custody of digital assets or facilitate exchanges between tokens;
- Digital brokerages that intermediate virtual asset transactions;
- Digital asset custodians that hold crypto assets on behalf of third parties;
- DeFi platforms with a centralized interface that carry out the listed activities on a regular basis.
There are also cases of indirect classification that require specific analysis:
- FIDC tokenization platforms that include secondary trading modules;
- Asset managers that use blockchain infrastructure to distribute tokenized fund shares;
- Independent structurers that run their own platforms with exchange or custody functionality.
The logic of classification is functional, not nominal. The BCB looks at what the entity does, not what it calls itself.
A “real estate tokenization” platform that holds custody of tokens and allows transfers between users may be a VASP even if it does not identify itself as an exchange.
Who is definitely outside the scope of Resolutions 552 and 553:
- Companies that only issue tokens without offering custody, exchange or transfer services to third parties;
- Platforms that operate exclusively with tokens classified as securities under CVM regulation (provided they do not carry out the activities listed within the BCB’s scope).
What are the concrete operational implications for market participants?
Moving from regulatory diagnosis to real operations is where most platforms face their greatest difficulties.
Complying with Resolutions 552 and 553 is not an isolated compliance task, it is a structural transformation of the operation.
Here is a simplified operational flow of how a VASP needs to structure the onboarding of a new customer:
- Data and document collection: full identification, including the ultimate beneficial owner where applicable;
- Identity verification (KYC): document validation using biometric technology or equivalent;
- Sanctions list screening: OFAC, UN, and national and international restriction lists;
- Customer risk classification: low, medium or high profile, with differentiated procedures;
- Account opening with segregation: customer assets are segregated from the platform’s own assets;
- Continuous monitoring: any atypical transaction generates an alert and may trigger a report to COAF.
This flow needs to be supported by technology. It cannot be manual at scale. This is where the choice of infrastructure makes all the operational difference.
BLOCKBR’s asset tokenization infrastructure for the regulated financial market was designed to integrate these compliance layers natively. The KYC/AML module, blockchain transaction traceability and segregated custody are not features added later, they have been part of the operational architecture from the start.
Platforms that run on BLOCKBR Whitelabel start from a foundation that already treats the requirements of Resolution 553 as a condition for operating, not as a later adaptation.
BLOCKBR Station goes further: it connects the operation directly to the regulated agents needed for full institutional compliance, including DTVM, qualified custody, registration with a central depository and fiduciary agent structures. This integration is what separates a tokenization operation that meets the requirements of Resolutions 552 and 553 from one that merely claims to meet them.
For platforms that want to operate as VASPs to an institutional standard, the question is not whether they will need these layers, but whether they will build them from scratch or operate on a structure that already has them integrated. The difference in time, cost and regulatory risk is significant.
The BCB may request records of any transaction, and the lack of adequate traceability is, in itself, a regulatory violation.
FAQ: Frequently asked questions about BCB Resolutions 552 and 553
What are BCB Resolutions 552 and 553?
They are the rules issued by the Central Bank of Brazil that regulate the activities of virtual asset service providers (VASPs) in the country.
Resolution 552 establishes the requirements for authorization to operate; Resolution 553 defines the standards for governance, internal controls, compliance, capital and corporate structure that must be maintained on an ongoing basis. Together, they put into practice the Virtual Assets Legal Framework (Law 14.478/2022).
Who needs Central Bank authorization to operate with virtual assets?
Any legal entity that, on a regular and professional basis, provides exchange, transfer, custody or intermediation services for virtual assets needs BCB authorization.
The criterion is functional: the BCB looks at what the entity does, not what it calls itself. Tokenization platforms that include custody or secondary trading of tokens may fall within scope even if they do not identify themselves as exchanges.
What is a VASP and how does BCB regulation apply to it?
VASP stands for Virtual Asset Service Provider. In Brazil, the BCB adopted the FATF definition and incorporated it into Resolutions 552 and 553.
A Brazilian VASP must obtain BCB authorization (Resolution 552) and maintain ongoing governance and compliance standards (Resolution 553). Non-compliance may result in revocation of the authorization and personal liability for managers.
What is the difference between BCB and CVM regulation for digital assets?
The BCB regulates virtual asset service providers, meaning those who offer exchange, custody, transfer or intermediation.
The CVM regulates digital assets that qualify as securities, such as profit-sharing tokens, equity tokens and similar structures. When an operation involves both dimensions, there is dual regulation.
CVM Resolution 88, for example, regulates offerings of tokens as securities, and it neither replaces nor conflicts with BCB Resolutions 552 and 553.
Is financial asset tokenization subject to BCB Resolutions 552 and 553?
It depends on the operating model. Issuing tokens that represent financial assets does not, on its own, necessarily classify the entity as a VASP.
But if the platform offers custody of the tokens, facilitates exchanges between them or allows transfers between users on a regular basis, classification as a VASP is likely.
Real estate tokenization operations with an integrated secondary market, for example, need to be analyzed case by case.
What happens to platforms that operate without Central Bank authorization?
Operating as a VASP without BCB authorization is a violation against the national financial system. The consequences include an order to cease activities, administrative fines, civil and criminal liability for managers and, in cases of repeat offenses or serious violations, referral to the Public Prosecutor’s Office. In addition, unauthorized platforms face growing difficulty maintaining banking relationships, as banks and payment institutions tend to close the accounts of unregulated entities due to their own regulatory risk.
The regulated digital asset market in Brazil no longer has room for ambiguity. BCB Resolutions 552 and 553 were designed to eliminate informal operations and create a clear institutional standard, and that standard is here to stay.
Compliance is not a cost of entry, it is the structure that defines who will operate in the next market cycle.
If you are structuring or reviewing your operation in the digital asset market, the starting point is not the regulation, it is the infrastructure.
Explore BLOCKBR’s infrastructure and see how operations that meet the requirements of BCB Resolutions 552 and 553 are built in practice.
