Brazil Gives Banks 24 Hours to Freeze Illegal Betting Accounts Under SPA Rules

Portaria 2,750 turns June's "financial asphyxiation" decree into a procedure: a red-flag list for Pix, a 24-hour block on notification, forfeiture of what is frozen, joint tax liability for banks that keep processing, and a safe harbour for those that report.

• The Finance Ministry published Portaria SPA/MF 2,750 in the Official Gazette on 14 September, signed by Secretary of Prizes and Betting Daniele Correa Cardoso on 10 September, setting out how banks, payment institutions and scheme operators must identify, block and report transactions linked to unauthorised betting in Brazil
• It operationalises Decree 13,033 of 19 June, which created the "financial asphyxiation" instruments, and the joint tax liability in Complementary Law 224 of December 2025, and revokes the more general Portaria 566 of March 2025
• Article 5 lists the warning signs: Pix descriptions containing "apostas", "bônus" or "recarga", keys and QR codes swapped straight after a block, recently created companies at virtual offices receiving pulverised inflows, and gateways used to hide the beneficiary
• Once the SPA issues a finding of irregularity, notified institutions have 24 hours to block the accounts and 48 hours to confirm; blocked funds go into forfeiture proceedings, and institutions that keep processing can be held jointly liable for the tax owed
• The data layout and technical procedures wait on an Instrução Normativa not yet published, after which institutions have 30 days to adapt, BNLData reports

The Decree Gets Its Operating Manual

Brazil's Finance Ministry has published the rulebook that tells the country's banks and payment institutions exactly what to do when the betting regulator names an unlicensed operator, three months after a presidential decree gave it the power to ask.

Portaria SPA/MF 2,750, signed on 10 September by Daniele Correa Cardoso, Secretary of Prizes and Betting, and published in the Diário Oficial da União on 14 September, regulates the financial fight against the illegal fixed-odds betting market. According to BNLData, it details how banks, payment institutions and the operators of payment arrangements must identify, block and report transactions linked to operators without authorisation, replacing Portaria 566 of 20 March 2025, which dealt with the same subject in general terms. Decree 13,033 of 19 June 2026 created the "financial asphyxiation" instruments and Complementary Law 224 of 26 December 2025 introduced joint tax liability; together they set the legal framework, and the new portaria defines the procedures institutions must follow.

The most detailed part is Article 5, which reads as a compliance manual for bank monitoring teams. Among the indicators of irregular operation are repeated or concentrated amounts in recurring bands consistent with betting deposits; a high frequency of small or medium transfers in short intervals from distinct senders; Pix transaction descriptions containing terms such as "apostas", "bônus", "recarga", "palpites" or "prêmios" or the names of betting brands; and the frequent replacement of Pix keys, QR codes or recipient accounts immediately after a block or account closure. Transactions to companies registered at virtual offices, co-working spaces or residential addresses count, as do recently constituted CNPJs that begin receiving large pulverised volumes inconsistent with their declared activity, and the use of payment gateways or intermediaries to hide the final beneficiary or purpose. The portaria also creates the category of "intermediary person": any natural or legal person who repeatedly moves funds for the benefit of an irregular operator, extending the rules beyond the operator to the mule structures and payment providers used to mask the destination of money. Selection and analysis procedures must be completed within 45 days of a suspicion being identified.

Twenty-Four Hours to Block, Then Forfeiture

The operational flow starts with the SPA issuing a finding of irregularity, which also opens administrative forfeiture proceedings over the blocked funds in favour of the Union. The Secretariat notifies financial institutions through a secure electronic system and simultaneously informs the Central Bank for supervisory purposes. Institutions then have a maximum of 24 hours to block the accounts of the identified operators and prevent new transactions, and must confirm compliance within 48 hours of the block. The file is passed to the Ministry of Justice's National Secretariat of Public Security to conduct the forfeiture. A customer who tries to pay an identified person is to be told by their own bank that the transaction cannot be completed because of an SPA notification.

Block notifications may be accompanied by a communication of joint tax liability under Article 6 of Complementary Law 224, regulated by Portaria MF 1,766 of 17 June 2026, meaning institutions that allow irregular transactions to proceed can answer jointly for the tax due. To encourage proactive reporting, Article 7 provides that a communication made in good faith creates no civil or administrative liability for the reporting institution. The portaria cites National Monetary Council Resolution 5,320 of 25 June 2026 as the basis on which institutions may reject transactions, indicating prior coordination between the SPA and the Central Bank. One element limits the immediate effect: the minimum data to be reported, the layout of communications and the technical procedures are delegated to an Instrução Normativa that has not yet been published, and institutions will have 30 days from its publication to adapt their systems.

This Is the Finance Ministry's Answer to the President, and It Was Already Written

Lula said on 14 September that a government decision on betting was "coming very soon"; the same day, his Finance Ministry published a portaria signed four days earlier that goes after the illegal market rather than the legal one. The 1,400-Pix-transfer bettor the president cited on Sunday is precisely the pattern Article 5 describes, and the mechanism the president asked the Central Bank about, detecting repeated payments to the same company, is what this rule obliges every bank to run. The Finance Ministry's position, that the regulated market is the harm-reduction policy and the offshore market is the target, now has an enforcement procedure with deadlines, penalties and a forfeiture route. Whatever the Civil House drafts about online casino games, the machinery to choke unauthorised operators' payments exists from this week, and it will be the licensed operators' best argument that the legal market should be left to work.

Joint Tax Liability Is the Clause That Will Make Banks Move

Regulators in the Netherlands and Germany spent this week saying that fines on offshore operators are not paid and that only the payment rails offer leverage; Chile's CMF proposed a rule for card acquirers on Monday. Brazil has gone further than either. A 24-hour blocking obligation is a compliance cost; joint liability for the operator's unpaid tax turns every processed transaction into a contingent liability on the bank's own balance sheet, and the safe harbour for good-faith reports tilts the incentive the other way. Banks will over-report rather than under-report, which is the point. The risk is the same as everywhere Pix-pattern rules are used: the red flags describe legitimate operators' traffic too, and the 45-day analysis window and the unpublished data layout will decide whether licensed operators spend the next year proving they are not the target.

Brazil has written the procedure the rest of the world is still consulting on. The instruction that makes it run is the last piece missing.