The Central Bank of Brazil issued new anti-fraud requirements for virtual asset service providers, including a preventive hold of up to 24 hours on certain transfers. The hold applies to transfers to foreign-based providers or self-custodied wallets when a transaction, or the customer’s aggregate transfers that day, exceeds USD 10,000. Institutions may also apply it to transactions classified as higher risk under their risk management and monitoring models. The hold is precautionary rather than a permanent freeze, allowing institutions to assess the customer profile, transaction, counterparty and destination jurisdiction. A transfer may be released before 24 hours if the institution finds no indication of irregularity and documents its decision. Providers must also maintain daily records of fraud incidents and attempts involving virtual asset services, along with any corrective measures taken. The requirements take effect on Jan. 1, 2027, allowing covered institutions time to adapt their systems, processes and governance arrangements.