Itaú Unibanco, Brazil’s largest private bank, has formally registered with the Central Bank of Brazil to intermediate and custody crypto assets under the country’s new licensing framework. The filing aligns Itaú with regulations that require all entities holding, moving, or trading digital assets for customers to operate as regulated providers. This move places the bank within a legal structure established by Resolutions 519, 520, and 521, which created the Sociedades Prestadoras de Serviços de Ativos Virtuais (SPSAV) category effective February 2, 2026.
The registration covers intermediation and custody activities, subjecting Itaú to strict governance, anti-money laundering standards, and minimum capital requirements similar to those applied to securities brokers. A key component of the new regime is the mandatory segregation of client assets from the firm’s own funds. Additionally, Resolution 521 integrated crypto transactions into the foreign-exchange regime, imposing a $100,000 cap on transfers with unauthorized counterparties to limit cross-border movements outside regulated channels.
Itaú’s operational involvement in crypto predates this regulatory formalization. The bank announced custody plans in 2022 and began allowing retail clients to trade bitcoin via its íon investment app in late 2025, where it already held assets in custody. The current filing solidifies this position legally. The timing reflects a compressed transition period for companies already operating when the rules took effect. Furthermore, stricter financial security requirements are set to begin in 2027, and institutions in Segment 5, a simplified-rules category for smaller banks, have been barred from offering virtual asset services, effectively concentrating crypto activity among larger, well-capitalized players like Itaú.
Itaú’s formal registration signals a decisive shift toward institutionalizing cryptocurrency services within Brazil’s traditional banking sector. By complying with the SPSAV framework, the bank leverages its existing infrastructure to meet rigorous compliance costs and audit obligations that may be prohibitive for smaller competitors. This consolidation strategy allows Itaú to capture market share from unregulated apps and offshore exchanges, offering clients a clearer legal footing regarding asset custody and consumer protection.
The exclusion of Segment 5 institutions from providing virtual asset services further reinforces the trend toward concentration among major financial players. As the Central Bank tightens financial security requirements starting in 2027, the barrier to entry rises, favoring large banks with robust internal controls. This regulatory environment not only legitimizes crypto custody but also integrates it deeply into the domestic financial system, reducing reliance on foreign platforms and potentially stabilizing local market dynamics through standardized oversight.
