Brazil’s Federal Revenue Normative Instruction No. 2,291/2025 establishes the Declaração de Criptoativos, or DeCripto, as Brazil’s updated crypto-asset information reporting regime. The rule was issued by the Receita Federal do Brasil on Nov. 14, 2025, published in the Diário Oficial da União on Nov. 17, 2025, and is in force with phased effects. Its main monthly reporting provisions for crypto-asset service providers and Brazilian users applied from July 1, 2026.
The regime is an ancillary reporting framework rather than a stand-alone tax charging rule. The instruction states that taxation of the operations described in the rule follows separate legislation based on the nature and characteristics of each operation. For CryptoSlate readers, the key point is that DeCripto changes the data channel, reporting scope, and timing for crypto transaction information supplied to Brazil’s tax authority.
Key provisions of Brazil’s DeCripto reporting regime
DeCripto requires specified information on operations involving “reportable crypto-assets,” a category that generally covers crypto-assets usable for payment or investment while excluding central bank digital currency and certain e-money products. The report is submitted through the Receita Federal’s Coleta Nacional system, available in e-CAC, using a layout approved by Copes.
The instruction identifies two broad groups of filers. First, crypto-asset service providers must report when they are tax resident in Brazil, organized under Brazilian law, managed in Brazil, have a regular place of business in Brazil, or provide crypto-asset services in Brazil. The rule treats a provider as serving Brazil when, among other indicators, it uses a .br domain, supports local withdrawal or payment mechanisms such as Pix, or directs advertising to Brazilian residents.
Second, Brazilian resident individuals and entities must report covered activity when operations are carried out through a foreign crypto-asset service provider, through a decentralized platform, or without a crypto-asset service provider. For this user-reporting category, the monthly threshold is more than BRL 35,000, measured on an isolated or combined basis.
Reportable crypto operations and data fields
The list of reportable operations includes purchases and sales, swaps between reportable crypto-assets, transfers into or out of user accounts or wallets, airdrops, staking income, mining income, crypto borrowing and repayment, guarantees, certain acquisitions or disposals of goods and services, involuntary losses, primary distributions of asset-referenced reportable crypto-assets, and redemptions of underlying assets.
For service providers, transaction-level reporting includes the operation date, operation type, user identification, reportable crypto-assets used, unit quantities, values in reais, service fees, and asset-reference descriptions where applicable. Providers must also report year-end information for each user, including fiat balances, crypto balances, and acquisition cost where the user has declared that cost. Brazilian users reporting directly must provide similar transaction-level information.
CARF alignment, timing, and transition from the 2019 rules
Normative Instruction No. 2,291/2025 is designed to align Brazil’s crypto reporting with the OECD Crypto-Asset Reporting Framework, which supports automatic exchange of tax-relevant information on crypto-assets. For CARF purposes, the instruction also requires annual aggregated information on reportable persons, transaction types, values, and quantities, supported by due-diligence procedures in Annex II.
The timeline is phased. The instruction entered into force on publication, with most provisions producing immediate effects. Article 8, covering annual aggregated CARF-related reporting by service providers, applied from Jan. 1, 2026. Articles 7 and 9, covering detailed provider and user reporting, applied from July 1, 2026. The same July 1 date also applies to the revocation of RFB Normative Instructions Nos. 1,888/2019 and 1,899/2019.
Under Article 12, monthly DeCripto information is due by the last business day of the month following the relevant set of operations. Annual information is due by the last business day of January of the following calendar year. Late, omitted, inaccurate, incomplete, or incorrect reporting may trigger penalties under the instruction.
Jurisdictional impact
DeCripto is a Brazil federal tax-reporting regime administered by the Receita Federal. It is relevant to domestic service providers, foreign-facing platforms with Brazilian nexus indicators, and Brazilian residents using foreign platforms, decentralized platforms, or non-intermediated arrangements. The profile should be reviewed alongside Brazil’s broader virtual-asset framework and any future Receita Federal technical updates to the DeCripto manual or layout.