Skip
CYBER TARGET
EN ▾

← مقالات وأدلة عن الاحتيال والأمن السيبراني والخصوصية

Money laundering: FATF lists, a COAF record and Brazil's crypto rules

FATF removed four countries from its grey list in October 2026, Brazil's COAF set a record and the Central Bank tightened crypto rules. What changes now.

Three recent moves are reshaping anti-money-laundering efforts in Brazil and beyond: the Financial Action Task Force (FATF) updated its lists in October 2026, Brazil's financial intelligence unit COAF set a production record in 2025, and the Central Bank tightened crypto rules.

FATF lists, October 2026

At its October 28–30, 2026 plenary, the first under the UK presidency, FATF removed four jurisdictions from the grey list (Côte d'Ivoire, Bulgaria, Monaco and the DR Congo) and added none, per AML UAE. The list now has 18 names: Angola, Bolivia, Bosnia and Herzegovina, Cameroon, Haiti, Iraq, Kenya, Kuwait, Laos, Lebanon, Nepal, Papua New Guinea, South Sudan, Syria, Venezuela, Vietnam, the British Virgin Islands and Yemen. Iran and North Korea remain subject to countermeasures and Myanmar to enhanced due diligence.

Brazil, the US and Mexico are on no list (IBA). Brazil's 2023 mutual evaluation flagged lawyers outside the AML regime, a nearly empty beneficial-ownership registry and weak non-corruption prosecutions (FATF). US and Mexico evaluations are due in December 2026. New FATF president Giles Thomson has made fraud a priority (FATF).

COAF's record year

Indicator20242025
Financial intelligence reports18,76220,548 (+9.52%)
Reports receivedn/a~7.6 million
Sanction cases decided3237
Finesn/aR$96.9 million

Sources: COAF RGI 2025 and COAF. In the US, suspicious activity reports topped a record 4.1 million in 2025, with cyber-related SARs up 30% (Forvis Mazars).

Brazil's new crypto rules

  • BCB Resolutions 519–521 (in force February 2, 2026) license virtual-asset service providers, require AML controls, bring crypto under FX rules and cap transfers with unauthorized foreign counterparties at $100,000; existing firms got 270 days to apply (Lefosse).
  • BCB Resolution 588/2026 (from October 1, 2026) adds automatic COAF reports for physical FX of $10,000 or more and for virtual-asset transfers to or from self-hosted wallets of $10,000 or more (Schiefler).
  • BCB Resolution 589/2026 bars authorized institutions from dealing with unauthorized providers from November 6, 2026.

The 2025 "Carbono Oculto" operation showed why: a network tied to the PCC gang moved at least R$52 billion through fuel businesses, investment funds and fintech pooled accounts (BBC Brasil). In the Basel AML Index 2025, Brazil ranked 80th of 177 (score 5.40), Mexico 71st and the US 113th, against a 5.28 global average (Basel Institute).

What to do

  • Crypto firms: file for authorization on time and stop dealing with unauthorized providers.
  • Banks: update systems for the new automatic reports.
  • Obliged sectors such as jewelry and luxury goods should register with COAF.
  • Apply enhanced due diligence to grey-list jurisdictions.

المصدر

+

EN · PT · ES · FR · ZH · AR