Brazil’s Central Bank mandates independent financial audits for crypto service providers

Starting June 1, the Central Bank of Brazil officially tightened licensing requirements for Virtual Asset Service Providers (VASPs), mandating that all cryptocurrency firms applying for or renewing their licenses undergo independent financial audits. The audit scope covers compliance with anti-money laundering (AML) and countering the financing of terrorism (CFT) regulations, segregation of client funds from platform-owned funds, risk management mechanisms, and staff training. Audit firms must be registered with the Brazilian Securities and Exchange Commission (CVM). Previously, Brazil established a regulatory framework for virtual assets through legislation in 2022 and introduced the VASP licensing category in November 2025. This latest regulation further strengthens compliance oversight of the cryptocurrency industry.