Banking & Finance in Brazil

Brazil's banking and finance sector is one of the most sophisticated in Latin America, yet it remains one of the most technically demanding for foreign investors and international lenders. The regulatory architecture combines constitutional provisions, federal legislation, and a dense body of normative instructions issued by the Banco Central do Brasil (Central Bank of Brazil) and the Comissão de Valores Mobiliários (Brazilian Securities Commission, CVM). Any cross-border lending arrangement, fintech entry, or capital markets transaction requires precise alignment with this framework from the outset - not as an afterthought. This article maps the legal landscape across five dimensions: the regulatory structure, lending and credit operations, fintech and payment regulation, AML and compliance obligations, and project finance and dispute resolution. Each section identifies the practical tools available, the conditions under which they apply, and the risks that arise when international clients underestimate local requirements.

Brazil's financial system is governed primarily by Law No. 4,595/1964, which established the National Financial System (Sistema Financeiro Nacional, SFN) and created the Banco Central do Brasil (BCB) as its principal supervisory authority. The BCB holds broad powers to authorise, supervise, and sanction financial institutions operating in Brazil. The CVM, established by Law No. 6,385/1976, regulates capital markets, securities offerings, and investment funds. These two bodies operate in parallel, and their jurisdictions frequently overlap in structured finance and fintech transactions.

The Conselho Monetário Nacional (National Monetary Council, CMN) sits above both regulators as the policy-setting body. CMN resolutions carry binding force on all financial institutions and set the parameters within which the BCB and CVM issue their own normative instructions. A foreign investor entering Brazil's financial sector must track three regulatory layers simultaneously: CMN resolutions, BCB normative resolutions (Resoluções BCB), and CVM instructions.

The BCB's supervisory reach extends to banks, credit cooperatives, payment institutions, exchange brokers, and a growing category of fintechs licensed as Sociedades de Crédito Direto (Direct Credit Companies, SCD) and Sociedades de Empréstimo entre Pessoas (Peer-to-Peer Lending Companies, SEP). These two categories were created by CMN Resolution No. 4,656/2018, which opened a regulated pathway for technology-driven lenders without requiring a full banking licence.

A common mistake among international clients is assuming that a foreign bank's existing regulatory status in its home jurisdiction provides any operational shortcut in Brazil. It does not. Each entity seeking to operate in Brazil's financial system must obtain a separate BCB authorisation, regardless of its global standing. The authorisation process involves capital adequacy assessments, fit-and-proper evaluations of controlling shareholders and directors, and a detailed business plan review. Processing times vary but typically extend beyond six months for complex applications.

In practice, it is important to consider that BCB normative resolutions are amended frequently. A compliance framework built on the regulatory text in force at the time of market entry may become outdated within twelve to eighteen months. International clients operating in Brazil's financial sector should build a continuous regulatory monitoring function into their local operations from day one.

Lending in Brazil is subject to a layered set of rules governing interest rates, collateral, enforcement, and foreign capital flows. The Usury Law (Decreto No. 22,626/1933) historically capped interest rates, but its application to financial institutions was progressively narrowed. Under CMN Resolution No. 4,559/2017 and subsequent instruments, regulated financial institutions are generally exempt from the usury cap and may freely negotiate rates with corporate borrowers. Consumer lending, however, remains subject to the Consumer Protection Code (Código de Defesa do Consumidor, Law No. 8,078/1990), which imposes transparency, disclosure, and fairness obligations that carry real enforcement risk.

Foreign loans extended to Brazilian borrowers are governed by Law No. 4,131/1962 (the Foreign Capital Law) and BCB Resolution No. 3,844/2010. These instruments require registration of the foreign loan with the BCB through the ROF (Registro de Operações Financeiras) system. Registration is a condition for remitting interest and principal abroad. Failure to register before disbursement creates a structural problem: the lender cannot legally repatriate funds without retroactive regularisation, which is possible but costly and time-consuming.

The main collateral instruments available to lenders in Brazil include:

• Alienação fiduciária (fiduciary transfer of ownership) - the most efficient security interest for movable and immovable assets
• Hipoteca (mortgage) - a traditional real property security, slower to enforce than fiduciary transfer
• Penhor (pledge) - used for movable assets, financial instruments, and receivables
• Cessão fiduciária de recebíveis (fiduciary assignment of receivables) - widely used in structured lending

The alienação fiduciária is the preferred instrument in Brazilian secured lending because enforcement does not require court proceedings. Under Law No. 9,514/1997 for real estate and Law No. 10,406/2002 (Civil Code) for movables, the creditor may consolidate ownership upon default and sell the asset extrajudicially within a defined procedural timeline. For real estate, the extrajudicial enforcement process typically runs 60 to 90 days from the first formal notice to the debtor, making it materially faster than litigation.

A non-obvious risk in cross-border lending is the interaction between the ROF registration requirement and the timing of security perfection. If a foreign lender disburses funds before completing ROF registration, the loan is technically irregular under BCB rules. Brazilian courts have in some instances treated this irregularity as affecting the enforceability of ancillary security documents. Lenders should sequence disbursement only after confirmed ROF registration.

To receive a checklist on foreign loan registration and collateral structuring in Brazil, send a request to info@vlolawfirm.com.

Project finance and infrastructure lending introduce additional complexity. Brazilian infrastructure projects frequently use the Sociedade de Propósito Específico (Special Purpose Vehicle, SPE) structure, governed by Law No. 11,079/2004 for public-private partnerships and by the Civil Code for purely private arrangements. Lenders to SPEs must assess whether the project benefits from the Regime Diferenciado de Contratações (RDC) or other public procurement frameworks, as these affect the enforceability of step-in rights and direct agreements with the public authority.

Brazil's fintech ecosystem is among the most active in Latin America, driven in part by the BCB's deliberate policy of promoting competition through regulatory innovation. The Pix instant payment system, launched under BCB Resolution No. 1/2020, transformed the domestic payments landscape and created new compliance obligations for all payment service providers. Participation in Pix is mandatory for financial institutions and payment institutions above a defined transaction volume threshold.

Payment institutions are regulated under Law No. 12,865/2013 and BCB Resolution No. 80/2021. The law establishes four categories of payment institution: issuer of post-paid payment instruments, issuer of pre-paid payment instruments, payment transaction initiator, and acquirer. Each category carries distinct capital requirements, operational rules, and BCB authorisation procedures. A foreign company seeking to offer payment services in Brazil must either obtain a local payment institution licence or partner with an already-licensed entity.

Open Finance (previously called Open Banking) was introduced through BCB Joint Resolution No. 1/2020 and expanded progressively. The framework requires participating institutions to share customer data and initiate transactions through standardised APIs, subject to customer consent. For international fintechs, Open Finance creates both an opportunity - access to Brazilian customer financial data for product development - and a compliance burden, as data sharing must comply with the Lei Geral de Proteção de Dados (General Data Protection Law, LGPD, Law No. 13,709/2018) simultaneously.

The SCD and SEP licences created by CMN Resolution No. 4,656/2018 allow technology companies to conduct credit operations without a full banking licence. An SCD may lend its own capital directly to borrowers. An SEP may intermediate peer-to-peer lending. Both are subject to BCB supervision, capital requirements, and AML obligations. The minimum paid-in capital for an SCD or SEP is set at a level that is accessible to well-capitalised startups but requires serious financial planning.

A common mistake is treating the SCD or SEP licence as a light-touch alternative to a banking licence without accounting for the ongoing compliance infrastructure required. The BCB expects licensed fintechs to maintain robust credit risk management, IT security standards aligned with BCB Resolution No. 4,658/2018 (cybersecurity), and full AML/CFT programmes. The cost of building and maintaining this infrastructure often exceeds the initial licensing cost by a significant margin.

Many underappreciate the importance of the BCB's sandbox regime (Laboratório de Inovações Financeiras e Tecnológicas, LIFT), which allows experimental products to be tested under a temporary regulatory waiver. For genuinely novel business models, the sandbox pathway can reduce time-to-market and provide regulatory clarity before full licensing. However, sandbox participation does not guarantee subsequent full authorisation, and the transition from sandbox to licensed operation requires a separate formal application.

Brazil's anti-money laundering framework is anchored in Law No. 9,613/1998 (the AML Law), as substantially amended by Law No. 12,683/2012. The law imposes know-your-customer (KYC), transaction monitoring, suspicious activity reporting, and record-keeping obligations on all financial institutions, payment institutions, and a broad range of designated non-financial businesses. The Conselho de Controle de Atividades Financeiras (Financial Activities Control Council, COAF) is the Brazilian financial intelligence unit responsible for receiving and analysing suspicious transaction reports.

Under BCB Resolution No. 44/2021, financial institutions must implement a risk-based AML/CFT programme covering customer due diligence, enhanced due diligence for politically exposed persons (PEPs), transaction monitoring, and internal controls. The resolution requires institutions to appoint a designated compliance officer responsible for the AML programme and to conduct periodic independent audits of the programme's effectiveness.

The enforcement record of the BCB and COAF in AML matters has become more assertive in recent years. Administrative sanctions for AML deficiencies range from formal warnings to fines calculated as a percentage of the institution's net worth or the value of the irregular transaction, whichever is higher. In serious cases, the BCB may revoke an institution's operating licence. Criminal liability under Law No. 9,613/1998 extends to individuals, including directors and compliance officers who knowingly facilitate money laundering.

For international financial institutions operating in Brazil through subsidiaries or branches, a non-obvious risk lies in the interaction between global group AML policies and Brazilian regulatory requirements. The BCB does not automatically accept compliance with FATF recommendations or EU AML directives as equivalent to Brazilian regulatory compliance. Group-level policies must be adapted to the specific requirements of BCB Resolution No. 44/2021, including the Portuguese-language documentation and reporting requirements.

Practical scenarios illustrate the compliance exposure:

• A European bank extends a syndicated loan to a Brazilian corporate borrower. The Brazilian subsidiary of the bank must conduct independent KYC on the borrower under BCB rules, even if the group's London office has already completed its own due diligence. Relying on the group's file without local adaptation is a documented source of BCB findings.
• A fintech licensed as an SCD onboards customers entirely through a digital channel. The BCB expects the SCD to maintain documented procedures for remote identity verification aligned with BCB Resolution No. 4,753/2019. Gaps in the digital onboarding procedure are among the most frequently cited deficiencies in BCB inspections of fintechs.
• A payment institution processes transactions for a marketplace platform. If the marketplace's merchants include PEPs or entities in high-risk sectors, the payment institution must apply enhanced due diligence. Failure to identify PEPs in the merchant base has resulted in administrative proceedings.

To receive a checklist on AML compliance programme requirements for financial institutions in Brazil, send a request to info@vlolawfirm.com.

The LGPD intersects with AML compliance in a structurally important way. Customer data collected for KYC purposes is personal data under the LGPD and must be processed on a lawful basis, retained only as long as necessary, and protected against unauthorised access. The Autoridade Nacional de Proteção de Dados (National Data Protection Authority, ANPD) has jurisdiction over LGPD enforcement, separate from the BCB. An institution that shares KYC data within a group structure without a valid data transfer mechanism may face simultaneous BCB and ANPD scrutiny.

Project finance in Brazil typically involves a combination of debt from Brazilian development banks, commercial bank lending, and capital markets instruments. The Banco Nacional de Desenvolvimento Econômico e Social (Brazilian Development Bank, BNDES) remains the dominant long-term lender for infrastructure projects, offering financing lines at subsidised rates under specific sectoral programmes. Foreign lenders participating in project finance alongside BNDES must understand that BNDES financing agreements contain standard covenants and conditions that take precedence in the intercreditor structure.

Debentures (debentures) are the primary debt capital markets instrument in Brazil for project finance and corporate funding. Infrastructure debentures issued under Law No. 12,431/2011 carry tax incentives for individual and foreign investors, making them an attractive instrument for infrastructure project funding. The CVM regulates the public offering of debentures, and issuers must comply with CVM Resolution No. 160/2022 governing public offerings of securities. The offering process involves registration with the CVM, appointment of a lead manager, and preparation of a prospectus meeting CVM disclosure standards.

Receivables investment funds (Fundos de Investimento em Direitos Creditórios, FIDCs) are widely used in structured finance to securitise credit portfolios. FIDCs are regulated by CVM Resolution No. 175/2022, which introduced significant changes to the FIDC framework, including new rules on credit risk management, service provider governance, and investor qualification. Foreign investors may participate in FIDCs subject to BCB registration of the foreign capital investment.

Dispute resolution in Brazilian banking and finance matters follows several pathways. The Brazilian judiciary has specialised business courts (Varas Empresariais) in major commercial centres, including São Paulo and Rio de Janeiro, with judges experienced in financial and corporate matters. Litigation in Brazilian courts is conducted in Portuguese, and foreign parties must engage local counsel and, where applicable, have foreign documents translated and apostilled.

Arbitration is well established in Brazilian financial practice. The Lei de Arbitragem (Arbitration Law, Law No. 9,307/1996), as amended by Law No. 13,129/2015, provides a solid framework for domestic and international arbitration. Brazilian courts consistently enforce arbitration clauses in financial contracts and recognise foreign arbitral awards subject to ratification by the Superior Tribunal de Justiça (Superior Court of Justice, STJ). The ratification process (homologação de sentença estrangeira) typically takes between six and eighteen months depending on the complexity of the award and whether the debtor contests recognition.

The risk of inaction in enforcement matters is concrete. Brazilian limitation periods for credit claims are generally five years under Article 206 of the Civil Code, running from the date the debt becomes due. A creditor that delays initiating enforcement proceedings beyond this period loses the right to judicial recovery of the debt. In practice, creditors should initiate formal demand procedures well before the limitation period expires to preserve their position.

Three practical scenarios illustrate the project finance and dispute resolution landscape:

• A foreign infrastructure fund co-finances a renewable energy project in Brazil through a combination of equity and shareholder loans to the SPE. The shareholder loans must be registered as foreign capital under Law No. 4,131/1962 to allow future remittance of interest and principal. If the fund later seeks to enforce the shareholder loan against the SPE in Brazilian courts, the absence of ROF registration will be raised as a procedural objection by the debtor.
• A Brazilian issuer defaults on infrastructure debentures held by foreign investors. The debenture indenture (escritura de emissão) typically designates a Brazilian trustee (agente fiduciário) with authority to accelerate the debt and initiate enforcement on behalf of all debenture holders. Foreign investors must coordinate with the trustee rather than acting independently, as individual enforcement actions by foreign holders face procedural obstacles in Brazilian courts.
• A European bank seeks to enforce a foreign arbitral award against a Brazilian financial institution. The STJ ratification process requires the award to be final and binding, not contrary to Brazilian public policy, and accompanied by a certified Portuguese translation. The STJ has generally applied a narrow interpretation of the public policy exception, making Brazil a reasonably predictable jurisdiction for foreign award enforcement.

The cost of litigation in Brazilian courts varies significantly by dispute value and complexity. Lawyers' fees for financial disputes typically start from the low thousands of USD for straightforward matters and scale substantially for complex multi-party proceedings. Court filing fees (custas judiciais) are calculated as a percentage of the amount in dispute, subject to caps that vary by state. Arbitration costs at major Brazilian institutions such as the Centro de Arbitragem e Mediação da Câmara de Comércio Brasil-Canadá (CAM-CCBC) or the Câmara de Arbitragem do Mercado (CAM-B3) follow institutional fee schedules that are publicly available and generally comparable to mid-tier international arbitration centres.

To receive a checklist on dispute resolution strategy for banking and finance matters in Brazil, send a request to info@vlolawfirm.com.

What is the main practical risk for a foreign lender extending credit to a Brazilian borrower?

The primary risk is failing to register the foreign loan with the BCB through the ROF system before disbursement. Without valid ROF registration, the lender cannot legally remit interest or principal payments abroad. Retroactive regularisation is technically possible but involves administrative procedures with the BCB, potential penalties, and delays that can extend the effective cost of the transaction significantly. Foreign lenders should treat ROF registration as a condition precedent to disbursement, not a post-closing formality.

How long does it take to obtain a fintech licence in Brazil, and what does it cost?

The BCB's authorisation process for an SCD or SEP licence typically takes between six and twelve months from submission of a complete application, though complex cases may take longer. The process involves capital adequacy review, fit-and-proper assessment of shareholders and directors, and evaluation of the business plan and compliance infrastructure. Direct costs include the minimum paid-in capital requirement, legal and consulting fees for preparing the application, and the ongoing cost of building the compliance infrastructure the BCB expects. Legal fees for the authorisation process typically start from the low tens of thousands of USD for straightforward applications.

When should a foreign creditor choose arbitration over Brazilian court litigation for a financial dispute?

Arbitration is generally preferable when the contract involves sophisticated parties, the dispute value justifies the institutional costs, and the creditor values confidentiality and the ability to select arbitrators with financial expertise. Brazilian courts in São Paulo and Rio de Janeiro have improved their handling of complex financial matters, but proceedings remain slower than arbitration and are conducted exclusively in Portuguese. For cross-border transactions where enforcement of the award may be needed in multiple jurisdictions, international arbitration with a seat in Brazil or a neutral seat with a Brazilian enforcement strategy is typically the more efficient path. Arbitration clauses should be drafted carefully to specify the institution, seat, language, and number of arbitrators, as ambiguities in the clause are a documented source of preliminary disputes.

Brazil's banking and finance legal framework rewards preparation and penalises improvisation. The regulatory architecture is sophisticated, the BCB and CVM are active supervisors, and the interaction between foreign capital rules, AML obligations, and data protection requirements creates a compliance matrix that requires specialist local knowledge. International clients who invest in proper legal structuring at the outset - whether for a lending transaction, a fintech licence, or a project finance deal - consistently achieve better outcomes than those who attempt to adapt generic cross-border templates to the Brazilian context.

Our law firm VLO Law Firm has experience supporting clients in Brazil on banking, finance, and regulatory matters. We can assist with foreign loan registration, fintech licensing strategy, AML compliance programme design, structured finance documentation, and dispute resolution planning. To receive a consultation, contact: info@vlolawfirm.com.