Brazil 2026: Practical Compliance Guide, Asset Forfeiture & Digital‑Asset Seizure Law

Brazil’s enactment of Law No. 15. 358/2026 in late March 2026 has dramatically expanded federal authorities’ powers to freeze, seize, and liquidate assets, including cryptocurrency and other digital assets, connected to organized crime and financial offences. For General Counsels, Chief Compliance Officers, and corporate legal teams with any exposure to Brazilian operations, the Brazil seized digital assets law 2026 creates an immediate obligation to reassess internal controls, custody arrangements, and incident-response protocols. This guide delivers a practitioner-level compliance playbook: the concrete steps to take in the first 72 hours after a seizure, the programme changes required to reduce forfeiture risk, and the litigation strategies available when assets are targeted.

Every recommendation is grounded in the statutory text, regulatory guidance from the Banco Central do Brasil, and leading legal commentary.

Executive Summary, What the 2026 Law Changes and Why Counsel Must Act Now

Law No. 15.358/2026, signed into law in late March 2026, amends Brazil’s organized-crime and anti-money-laundering framework to explicitly bring digital assets within the scope of criminal asset forfeiture. The statute authorizes federal judges, upon application by the Ministério Público (Public Prosecutor) or the Polícia Federal, to order the immediate freeze, seizure, and, in defined circumstances, the liquidation of cryptocurrencies, stablecoins, non-fungible tokens, and other virtual assets held on exchanges, in self-custody wallets, or through third-party custodians. Proceeds from liquidated assets may be channelled into public-security budgets, a provision that has attracted significant attention from both industry observers and international press.

The practical effect for corporates is threefold:

• Broader reach. Any digital asset with a nexus to a Brazilian criminal investigation is now subject to seizure, regardless of whether the corporate entity itself is a target or merely a custodian.
• Faster enforcement. Courts may issue ex parte freeze orders, meaning companies may receive no advance notice before wallet balances are locked.
• Heightened executive risk. Officers and directors who fail to maintain adequate compliance programmes face potential personal exposure to criminal and administrative sanctions.

If your assets are frozen or seized, act immediately: (1) preserve all wallet snapshots, transaction logs, and key-management records; (2) halt any internal transfers touching affected wallets or accounts; (3) engage Brazil-qualified criminal counsel within 24 hours.

Quick Action Checklist for Counsel (First 72 Hours)

When a company receives notice, or discovers through on-chain monitoring, that Brazilian authorities have frozen or seized digital assets, the response in the first 72 hours is decisive. Delay can result in permanent loss of privilege, destruction of exculpatory evidence, or missed deadlines for interlocutory relief. The following ten-step protocol should be adapted to each company’s organizational structure and then rehearsed as part of its standing incident-response plan.

10‑Step Immediate Response Protocol

1. Intake and initial assessment. Identify the source of the order (court, Polícia Federal, Ministério Público), the assets affected, and any deadlines stated in the notification. Log the exact time and method of receipt.
2. Preserve digital evidence. Take immediate cryptographic snapshots of all affected wallets, including balances, transaction histories, and metadata. Preserve private-key access records and multi-signature authorization logs in a forensically sound manner.
3. Halt internal transfers. Issue an internal stop-transfer instruction to treasury, finance, and any custodian or exchange holding the affected assets. Document the instruction and its recipients.
4. Freeze internal accounting entries. Ensure that no journal entries, write-offs, or reclassifications are made to the affected asset lines without legal department authorization.
5. Appoint an internal investigation lead. Designate a senior lawyer (in-house or external) to run the internal response. This person controls privilege, evidence flow, and external communications.
6. Notify insurers. If the company holds directors’ and officers’ (D&O), crime, or cyber insurance, provide notice under the relevant policy within the contractual notification window, typically 24 to 72 hours.
7. Preserve privilege. Mark all internal communications regarding the seizure as “privileged and confidential, prepared in anticipation of litigation.” Restrict distribution to need-to-know personnel only.
8. Engage local counsel. Retain or activate Brazil-qualified criminal defence counsel with experience in asset-forfeiture and white-collar crime proceedings. Local counsel will assess whether emergency injunctive relief is available and advise on cooperation strategy.
9. Plan stakeholder communications. Draft holding statements for investors, regulators, board members, and (if publicly listed) the securities market. Coordinate messaging with local counsel to avoid inadvertent admissions.
10. Document the chain of custody. Begin a formal evidence log that tracks every document, file, and wallet record gathered, including who accessed it, when, and under what authority. This log will be critical in any subsequent litigation.

72‑Hour Response Timeline

Sample Internal Escalation Notice

“PRIVILEGED AND CONFIDENTIAL, PREPARED IN ANTICIPATION OF LITIGATION. This notice confirms that [Company] has received / become aware of a judicial order from [Court / Authority] dated [Date] directing the freeze/seizure of digital assets held in [Wallet / Exchange / Custodian]. All personnel with access to the affected assets or related records must immediately cease transfers, preserve all documentation, and direct inquiries to [Investigation Lead]. No external communication regarding this matter is authorised without legal department approval.”

Statutory Summary, Law No. 15.358/2026 and Asset Forfeiture in Brazil 2026

Law No. 15.358/2026 amends several pillars of Brazil’s criminal enforcement architecture. It builds on the existing anti-money-laundering framework (Law No. 9.613/1998) and the organized-crime statute (Law No. 12.850/2013) by inserting explicit provisions governing virtual assets. The new law defines “digital assets” broadly, consistent with the terminology adopted in Brazil’s Virtual Assets Framework (Law No. 14.478/2022) and the Banco Central’s supervisory regulations for Virtual Asset Service Providers (VASPs).

Key Provisions at a Glance

The Banco Central do Brasil, in its role as supervisor of VASPs, has reinforced these provisions by requiring licensed exchanges and custodians to maintain technical capabilities for rapid compliance with judicial freeze orders. Industry observers expect implementing regulations to impose specific response-time requirements, making operational readiness a compliance imperative for any entity offering custody or exchange services in Brazil.

Which Authorities and Courts Execute Seizures, Process Map

Understanding which agency initiates action, and through which court, is essential for responding to criminal investigation in Brazil. The Brazil seized digital assets law 2026 framework involves multiple institutional actors, each with distinct roles and points of engagement for corporate counsel.

Authority Roles and Counsel Engagement Points

In practice, the Ministério Público typically initiates forfeiture proceedings by applying ex parte to a federal judge. The Polícia Federal then executes the order, which, for digital assets, means serving freeze notices on exchanges, custodians, or the company itself. Because ex parte orders are issued without prior notice to the asset holder, the first indication a company receives may be a frozen wallet balance or a formal notification delivered after the fact. This underscores the importance of proactive monitoring and the 72-hour response protocol outlined above.

How Digital Assets (Crypto) Are Seized, Preserved, and Disposed

The mechanics of seizing crypto in Brazil differ fundamentally from traditional asset forfeiture. Understanding these mechanics allows counsel to identify vulnerabilities, challenge procedural errors, and protect asset value.

Seized Crypto Brazil, Practical Mechanics

• Exchange-held assets. Courts serve freeze orders directly on licensed exchanges and custodians. The exchange must prevent withdrawals, transfers, and trades on the affected accounts. Under the BACEN’s supervisory framework for VASPs, failure to comply exposes the exchange to administrative sanctions and potential loss of licence.
• Self-custody wallets. Where assets are held in self-custody (hardware wallets, paper wallets, or software wallets), the Polícia Federal may seize the physical device or compel disclosure of private keys through a judicial order. Multi-signature wallets present enforcement challenges; courts may order each key holder to surrender their respective keys.
• Court-ordered transfers. A judge may direct the transfer of seized digital assets to a court-appointed wallet or custodial account. This is the digital equivalent of depositing seized cash into an escrow account. The blockchain infrastructure creates an immutable record of such transfers, which can be verified on-chain.
• Early liquidation. Given the volatility of many digital assets, Law No. 15.358/2026 permits early judicial liquidation. The court may authorise conversion to Brazilian reais (BRL) or stablecoins to preserve value. Proceeds are held in a judicial deposit account pending the outcome of the criminal case.

Vendor and Custodian Readiness Checklist

• Confirm that exchange/custodian contracts include provisions for compliance with Brazilian judicial orders.
• Verify that the custodian’s technical infrastructure supports rapid wallet freezes and court-ordered transfers.
• Ensure the custodian maintains segregated records sufficient to identify client assets subject to Brazilian jurisdiction.
• Confirm that the custodian is licensed or registered as a VASP with the Banco Central do Brasil where required.
• Map the custodian’s incident-response procedures and average response time to judicial orders.

Corporate Criminal Liability and Executive Risk Under Brazil Seized Digital Assets Law 2026

Brazil’s legal framework permits both corporate criminal liability and personal liability for officers and directors. The 2026 reforms sharpen these risks by expanding the categories of assets subject to forfeiture and increasing penalties for entities connected to organized criminal networks. Companies operating in, or holding digital assets connected to, Brazil must understand the matrix of exposure.

Exposure by Entity Type

Executive and Director Protections, Criminal and Administrative Defences

Executives and directors may face personal criminal exposure where they knew of, or should have known of, illicit activity facilitated through the company’s operations or digital-asset holdings. Defences available under Brazilian law generally rest on demonstrating:

• Good-faith compliance efforts. Evidence that the company maintained a documented, adequately resourced criminal compliance programme, including AML controls, know-your-customer (KYC) procedures, and suspicious-transaction reporting.
• Clear delegation and supervision. Formal delegation of compliance functions to qualified personnel, with evidence of board-level oversight and periodic review.
• Prompt self-reporting. Early voluntary disclosure of suspected irregularities to the Ministério Público or COAF, which may be considered a mitigating factor in sentencing and penalty assessments.
• Non-involvement. Evidence that the individual officer or director was not personally involved in the conduct under investigation and took reasonable steps to prevent it.

Industry observers expect the 2026 changes to encourage greater use of cooperation agreements (acordos de colaboração premiada) between corporates and prosecutors, as the expanded forfeiture powers create significant leverage for enforcement agencies.

Updating Criminal Compliance Programmes in Brazil, 6 Priority Changes

The enactment of Law No. 15.358/2026 means that existing compliance programmes must be reviewed and, in most cases, materially updated. The following six areas represent the highest-priority changes for companies with Brazilian exposure to digital assets.

1. AML risk assessment refresh. Reassess the company’s money-laundering and terrorist-financing risk profile to account for digital-asset holdings, including self-custody wallets, DeFi protocol interactions, and cross-border transfers. Map the full lifecycle of digital-asset flows through the organisation and its counterparties.
2. Vendor and custodian due diligence. Conduct enhanced due diligence on every exchange, custodian, and wallet-infrastructure provider that touches the company’s digital assets. Verify VASP licensing status with the Banco Central, review contractual compliance with Brazilian judicial order procedures, and assess technical readiness for rapid freeze compliance.
3. Transaction-monitoring escalation triggers. Update monitoring rules to flag transactions that could indicate forfeiture risk, such as sudden large transfers to or from Brazilian-linked wallets, interactions with flagged addresses, or unusual patterns in stablecoin conversions. Calibrate alert thresholds to the company’s risk appetite and transaction volumes.
4. Internal reporting lines and escalation protocols. Ensure that compliance officers have a clear, documented escalation path to the General Counsel and, where appropriate, the board. Establish a standing “digital-asset incident response team” that includes legal, compliance, IT security, treasury, and communications.
5. Training and awareness. Roll out targeted training for all personnel who manage, transact in, or have access to digital assets. Training should cover the new forfeiture powers, the company’s response protocol, privilege preservation, and the personal liability risks for officers and directors under the 2026 changes.
6. Sanctions and watchlist screening. Integrate Brazilian enforcement watchlists and COAF advisories into the company’s screening infrastructure. Review sanctions-screening tools to ensure they cover Brazilian-specific designations and are updated in real time.

Compliance programmes that can demonstrate these six updates will be in a significantly stronger position to defend against corporate criminal liability in Brazil 2026 and to mitigate executive exposure in the event of an investigation.

Responding to a Criminal Investigation, Litigation and Regulatory Strategy

When assets have been seized and a criminal investigation is underway, corporate counsel must execute a litigation and regulatory strategy that balances immediate asset protection with longer-term defence objectives. Responding to a criminal investigation in Brazil under the new framework requires a nuanced approach.

Litigation Playbook

• Emergency interlocutory relief. File an immediate motion (mandado de segurança or habeas corpus for related liberty restrictions) challenging the proportionality or procedural validity of the seizure order. Courts may grant partial release where the freeze is overbroad or affects assets with no evidentiary connection to the investigation.
• Challenge early liquidation. If the court has authorised early liquidation of digital assets, file an objection on grounds of valuation methodology, market timing, or lack of necessity. Request that assets be converted to stablecoins or held in secure judicial custody rather than sold.
• Preserve privilege aggressively. Brazilian courts recognise attorney-client privilege (sigilo profissional), but its scope in criminal investigations can be contested. Maintain a detailed privilege log and resist disclosure of protected communications.
• Negotiate cooperation. Evaluate whether a formal cooperation agreement with the Ministério Público is strategically advantageous. Cooperation can lead to reduced penalties and partial return of assets, but requires full disclosure, a calculus that must be weighed carefully with counsel.

Cross‑Border Coordination and Mutual Legal Assistance

Multinationals must be prepared for cross-border dimensions. Brazilian prosecutors may issue mutual legal assistance treaty (MLAT) requests to jurisdictions where the parent company, exchanges, or custodians are located. Counsel should:

• Map all jurisdictions in which affected digital assets are held or through which they have transited.
• Engage local counsel in each relevant jurisdiction to anticipate and respond to MLAT requests.
• Centralise document preservation to ensure consistent and privilege-compliant responses across borders.
• Monitor for parallel investigations by foreign regulators or law enforcement agencies.

Indicative Litigation Timeline

Practical Templates and Annexes

The following templates are designed to be adapted to your organisation’s specific circumstances. They should be reviewed by qualified Brazilian counsel before use.

1. Sample Preservation Notice to Exchange or Custodian

“URGENT, LEGAL HOLD NOTICE. [Company] has been notified of a judicial order dated [Date] issued by [Court] in proceeding No. [Case Number] directing the freeze of digital assets in account(s) [Account ID / Wallet Address]. You are hereby instructed to: (a) immediately freeze all withdrawals, transfers, and trades on the identified account(s); (b) preserve all transaction logs, KYC records, and metadata associated with the account(s) from [Date Range]; and (c) confirm compliance with this notice in writing within [24/48] hours. All communications regarding this matter should be directed to [Investigation Lead / External Counsel].”

2. Chain‑of‑Custody Evidence Checklist

• Wallet address(es) and blockchain network(s) affected
• Cryptographic snapshot of wallet balance at time of seizure (block height, timestamp, hash)
• Full transaction history export for the affected address(es) covering the prior 24 months
• Private-key access log (who held keys, when access was last used, storage method)
• Multi-signature configuration records (number of signers, identities, authorisation threshold)
• Exchange/custodian account statements and KYC documentation
• Copy of the judicial order and any accompanying documentation served
• Internal communications log (date, time, sender, recipient, subject, privilege-marked)

3. Sample Privilege Log Fields

• Document date and time
• Author and all recipients
• Subject line or document title
• Type of privilege claimed (attorney-client / work product / litigation privilege)
• Brief, non-privileged description of the document’s subject matter
• Reviewing attorney’s name and date of privilege determination

4. Board Briefing Memorandum, Suggested Headings

• Summary of the seizure order and assets affected
• Current status of the investigation and any cooperation discussions
• Insurance coverage status and notifications made
• Immediate financial impact and any material disclosure obligations
• Recommended next steps and authorisation requests

Conclusion and Next Steps for Counsel

The Brazil seized digital assets law 2026 represents a step change in enforcement capability. Corporates, custodians, and executives with any Brazilian nexus must treat this legislation as a compliance priority, not a background regulatory development. The practical effect will be felt most acutely by those who fail to prepare.

Three priority actions for counsel:

1. Conduct an immediate gap analysis of your compliance programme against the six priority changes outlined in this guide, with particular focus on digital-asset transaction monitoring and custodian due diligence.
2. Rehearse the 72-hour response protocol with your internal incident-response team and your external counsel network, ensuring that every participant understands their role, privilege obligations, and escalation path.
3. Engage specialist Brazil criminal counsel to review your organisation’s specific exposure, advise on cooperation strategy, and prepare interlocutory defence materials in advance of any enforcement action.

This article is published for informational purposes and does not constitute legal advice. Organisations facing or anticipating enforcement action under Law No. 15.358/2026 should seek jurisdiction-specific counsel. Last reviewed: April 28, 2026.

Sources

1. CoinDesk, Brazil Passes Law Turning Seized Crypto Into Public‑Security War Chest
2. Yahoo Finance, Brazil Just Unlocked Criminal Bitcoin
3. CoinMarketCap Academy, Brazil Law Channels Seized Crypto Into Police Funding
4. Sumsub, Brazil Passes Law to Use Seized Criminal Digital Assets
5. Mattos Filho, Technology Law Brazil Trends
6. Banco Central do Brasil, Virtual Asset Guidance
7. Norton Rose Fulbright, Digital Asset Disputes: 2025 in Review and What to Expect in 2026
8. Fireblocks, What to Know About Brazil SPSAV Framework