Brazil's Banking Behemoth Embraces Crypto as Licensing Deadline Looms!

Itaú Unibanco, Brazil's largest private bank, has formally registered as a cryptocurrency service provider with the Central Bank of Brazil. This significant step covers the intermediation and custody of crypto assets, aligning the bank with the activities the regulator assigns to brokerage firms, according to local reports. The move comes as Brazil’s crypto sector faces a compressed timeline to obtain necessary licenses, placing Itaú within a licensing framework that was nonexistent just a year ago.

Brazil's central bank mandates that every company involved in holding, moving, or trading crypto on behalf of customers must register as a regulated provider. By filing its authorization, Itaú signals its clear intention to be a key player in this regulated environment. For Brazilian users, this change is particularly impactful for crypto custody. A provider holding crypto for clients is now required to segregate those assets from its own funds, meet specific minimum capital requirements, and adhere to the same stringent governance and anti-money laundering (AML) standards applicable to securities brokers. This provides clients of an authorized bank with a considerably clearer legal standing compared to those using unregulated applications or offshore exchanges.

For Itaú, this filing represents a substantial commitment. Operating a regulated crypto service entails significant compliance costs, rigorous audit obligations, and comprehensive reporting duties, which smaller competitors may struggle to fulfill. This strategic move also indicates that Brazil's major lenders are determined to integrate crypto within the domestic financial system, rather than allowing foreign platforms to dominate the space.

Itaú's engagement with Bitcoin and other cryptocurrencies predates these new regulations. The bank initially announced its plans for crypto custody in 2022, alongside efforts to build a tokenization platform. By late 2025, it began offering retail clients the ability to buy and sell Bitcoin through its investment application, íon. Crucially, the crypto assets traded on íon are held in custody by Itaú itself, meaning the bank's operational involvement in crypto custody was well-established before the regulatory framework formally took effect.

The regulatory backdrop crystallized in 2025 and early 2026, when the Central Bank of Brazil issued Resolutions 519, 520, and 521. These resolutions established a new license category named Sociedades Prestadoras de Serviços de Ativos Virtuais (SPSAVs), with the rules coming into force on February 2, 2026. This framework categorizes providers into three types: intermediaries, custodians, and brokers. It mandates the formal segregation of client and company assets, sets minimum capital levels, and extends existing customer protection, governance, internal control, security, and anti-money laundering rules that already govern banks and brokers to crypto service providers. Furthermore, Resolution 521 integrated crypto transactions into the foreign-exchange regime, imposing a $100,000 cap on transfers involving unauthorized counterparties, thereby limiting cross-border crypto movements outside regulated channels.

Companies already operating in the crypto space when the new regime commenced were given a transition period to file for authorization. This timeline explains why Itaú’s filing is a response to regulatory pressure rather than a routine update. The Central Bank of Brazil approved even stricter rules on July 1, 2026, which will take effect in 2027. These new requirements will compel providers to meet financial security standards akin to those for securities brokers and distributors. Additionally, the regulator barred institutions in Segment 5—a category designed for smaller banks with simplified rules—from offering virtual asset services. This decision effectively consolidates crypto activity towards larger, better-capitalized financial institutions, a group to which Itaú Unibanco firmly belongs.