Brazil sets $10,000 self-custody crypto reporting rule for Oct. 1

Brazil will require regulated financial institutions to report crypto transfers of $10,000 or more involving self-custody wallets from Oct. 1, 2026, under Resolution BCB 588, according to Cryptoslate. The rule obliges institutions authorised by the Banco Central do Brasil to notify the Financial Activities Control Council, known as Coaf, whenever they send virtual assets worth at least that amount to a wallet controlled directly by a user or receive the same amount from one.

Key facts

• Under Resolution BCB 588, institutions authorised by the Banco Central do Brasil must notify Coaf of qualifying transfers by the next business day, covering both deposits from and withdrawals to self-custody wallets.
• Qualifying transactions are reported automatically on amount and transaction-type criteria, so a legitimate transfer between an exchange and a customer’s personal wallet can enter Coaf’s system without any suspicion finding.
• Resolution BCB 584, due to take effect on Jan. 1, 2027, establishes a precautionary holding procedure for certain virtual-asset transfers leaving regulated institutions, which may be delayed while additional checks are conducted.
• Brazil accounted for $252.5 billion of crypto activity in the period measured by Chainalysis, the largest market in Latin America, and ranked first in the firm’s 2026 global crypto adoption index.
• Spain’s Directorate General of Taxes said in binding consultation V0848 26, issued on April 21, that self-custody holdings fall outside Form 721 when the taxpayer controls the private keys, according to crypto.news.

How the Brazilian reporting threshold works

The requirement captures movement in both directions across the boundary between regulated platforms and wallets users control themselves. The filing obligation sits with whichever institution processes the transaction, and institutions do not have to judge a transfer suspicious before filing. The value and the transaction type are enough on their own.

Brazil already requires financial institutions to report transactions they separately assess as suspicious. The October provision adds a second layer by giving authorities visibility into large movements between regulated platforms and self-custody, even where no suspicious activity has been identified.

The operational burden is meaningful. Exchanges, banks and other covered providers must identify self-custody counterparties, calculate transaction values and integrate automatic Coaf reporting into their monitoring systems before the deadline. By January, some will also need processes capable of holding outbound transfers for further review.

Spain draws the line at key control, not wallet type

Spain’s approach points in a different direction. The Directorate General of Taxes set out its treatment in binding consultation V0848 26, issued on April 21, while the Spanish Tax Agency’s guidance on Form 721 states that the reporting requirement depends on who controls and safeguards the private cryptographic keys.

Form 721 covers virtual currencies located abroad when they are held by entities that safeguard private cryptographic keys on behalf of customers or otherwise maintain, store and transfer the assets. A €50,000 threshold applies to the reporting obligation, which Spain introduced in 2023 with the first filing period running in 2024.

The distinction turns on custody and control rather than wallet design. A hardware wallet can fall outside the requirement when the taxpayer holds the keys, and a hot wallet can receive the same treatment if it remains self-custodial. A blockchain network operating internationally, or a wallet that can be accessed from outside Spain, does not by itself pull a balance into the Form 721 calculation.

Why it matters

The two jurisdictions are targeting different links in the same chain. Brazil’s measure compels regulated intermediaries to report client transfers across the self-custody boundary, while Spain’s guidance tells individual taxpayers when their own overseas holdings need to be declared. High-value users, trading firms and businesses that routinely move assets between platforms and private wallets are the most likely to trigger automatic filings in Brazil, and exchanges will absorb the cost of identifying and reporting those counterparties.

Exclusion from Form 721 in Spain does not place self-custody activity outside every reporting framework. The European Union’s DAC8 regime, in force since Jan. 1, 2026, requires reporting crypto asset service providers to collect information on reportable users and transactions, including when assets move between regulated platforms and external addresses.

What to watch

Covered institutions have a short window to build counterparty identification and automatic reporting into their systems before Oct. 1. The next marker is Jan. 1, 2027, when Resolution BCB 584 takes effect and outbound transfers leaving regulated institutions may be held for additional checks.

Sources: CryptoSlate, crypto.news