title: Latin America Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/latin-america/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Latin America LATAM schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 66 sourced findings · 134 sources in the cumulative register 14 Modules baseline.modules[] 66 Findings modules[].findings[] 15 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) No modules moved this cycle. ## Jurisdiction brief ###### Latest update · 19 October 2026 #### Lead Signal Brazil's central bank has moved on two fronts that together redraw the perimeter between domestic instant payments and cross-border crypto settlement. Banco Central do Brasil's Resolution No. 561 bars regulated electronic-FX providers from using stablecoins or other crypto-assets to settle the offshore leg of cross-border payments; from its October 2026 effective date, settlement with overseas counterparties must run through traditional FX operations or non-resident real accounts rather than crypto rails. This lands in the same month that the grandfathering window under BCB Resolution 520 closes: Brazil's VASP licensing transition ends 30 October 2026, after which licensed institutions may no longer transact with unauthorised counterparties, a change expected to force consolidation among smaller unlicensed operators who have traded on the grandfathering grace period. Read together, Brazil is simultaneously narrowing who may operate in the digital-asset space and narrowing what licensed operators may do with crypto rails for cross-border settlement, a double tightening that raises the compliance bar for any payments business routing Brazilian cross-border flows through stablecoins. #### Other Developments **Pix's rule cadence continued at pace.** Instrução Normativa BCB 746 revoked the R$500 per-transaction ceiling on contactless Pix payments, effective 1 October 2026, removing a consumer-facing friction point on the scheme's dominant domestic rail. In a more restrictive vein, Resolução BCB No. 590 requires payment arrangements to block fixed-odds betting transactions, with the obligation applying from the publication date of the underlying Provisional Measure and scheme owners permitted to amend their own rules without prior BCB authorisation — a notable governance detail, since it lets Pix's scheme owner implement a sector-wide payment block without a fresh round of central-bank sign-off. **Mexico's legislature moved on payments digitisation.** The Chamber of Deputies passed a Digital Payments Law on 6 October 2026 that would let the finance ministry mandate digital-only payment in specified sectors, starting with tolls and fuel, and would require federal, state and municipal bodies to accept digital payment; the bill now moves to the Senate and remains draft primary legislation, not yet enacted. Separately, Banxico Circular 9/2026 requires direct and indirect SPEI participants to adapt their banking apps to standardised mobile-transfer guidelines, with a compliance deadline of 14 December 2026 that gives institutions a firm near-term engineering target. #### Cross-Monitor Connections Resolução BCB No. 590's block on fixed-odds betting transactions through Pix intersects directly with the gambling-sector payment-access restriction thread tracked on the gambling regulatory side: a payment-scheme rule cutting off a settlement rail achieves, for betting operators relying on Pix, much of what a licensing-side restriction would achieve, without any change to gambling law itself. The same Brazilian stablecoin-settlement tightening under Resolution 561 also bears on crypto-market-structure tracking of Brazil's digital-asset perimeter, since the FX-leg restriction and the VASP licensing transition closing in the same month are two faces of one regulatory tightening cycle for crypto-adjacent payment flows. #### Outlook The next dated marker for Brazil is the 30 October 2026 close of the VASP grandfathering transition, after which licensed counterparty-only trading becomes mandatory; a 1 February 2027 date is also in view for Resolução BCB No. 587's hybrid Pix/boleto billing feature, which creates a payable-via-boleto option for Pix Cobrança. For Mexico, the Digital Payments Law's Senate passage is the development to watch for Q4 2026, alongside the 14 December 2026 Banxico Circular 9/2026 compliance deadline for SPEI participants; separately, Banxico has drafted an overhaul of the Card Payment Clearinghouse framework and the CNBV is revising its Payment Instrument Networks framework, including an interchange-fee cap review, both signalling a broader push on payments-market structure in Mexico beyond the digital-payments mandate itself. On the commercial side, continued venture investment into LATAM stablecoin infrastructure and corporate payments — evidenced this cycle by Jeeves' funding round and Tether's investment in EFY Finance — suggests infrastructure build-out is proceeding even as Brazil's regulatory settlement perimeter tightens around it. _6 earlier updates not shown here._ ###### Standing brief · as of 21 June 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Brazil has emerged as the de facto rule-setter for Latin American payments across every dimension this Monitor tracks. The Banco Central do Brasil (BCB) now anchors the region's most developed positions in instant-rail infrastructure, stablecoin and virtual-asset regulation, consumer redress, interchange policy and operational resilience, making it the benchmark that regional peers track. Pix, the central-bank instant-payment scheme, reaches roughly 90% of the population with up to about 290 million transactions per day, and is now extending to recurring payments via Pix Automático in early 2026 and to payment-initiation participation under Open Finance by authorised institutions not holding the user's account. That benchmark status was tested severely in 2025. On 30 June 2025, C&M Software, a BCB-authorised technology provider bridging institutions to central-bank infrastructure, suffered a cyberattack on Pix reserve accounts, with theft estimates ranging from approximately R$800m (about US$140m) to over R$1bn and a BCB-ordered emergency suspension affecting more than 300 institutions. The episode exposed payment-technology providers as a systemic single point of failure in the Pix reserve-account chain. In response, the BCB and CMN established additional cyber-security requirements in force from 18 December 2025, with full compliance by 1 March 2026, mandating annual independent intrusion testing with documented vulnerabilities and action plans, alongside a transaction-size limit for non-authorised Pix users announced 5 September 2025. The Brazilian Federal Police and BCB opened a formal investigation into the C&M breach, with an IT operator arrested for selling access credentials that enabled theft from six institutions. #### Other Developments The stablecoin and virtual-asset picture sharpened into a regional divergence. The BCB established its VASP framework via Resolutions 519, 520 and 521 (published 10 November 2025, effective 2 February 2026), operationalising Law 14.478/2022: Resolution 520 requires full fiat/public-debt backing and prohibits algorithmic stablecoins, Resolution 521 routes stablecoin cross-border flows through the FX regime with reporting effective 4 May 2026, and Instruction 701/2026 adds technical-certification requirements. This makes Brazil LATAM's most advanced stablecoin/VASP regime. A material restriction is on the horizon: subsequent Resolution 561 (May 2026) would impose a partial ban on stablecoins as eFX backend settlement from October 2026, a forward caveat we are tracking but which is not yet a confirmed standalone claim. By contrast, Banxico restricts virtual-asset use to internal transactions of e-money institutions (IFPEs) and banks only under its 30 September 2020 rule, leaving no general stablecoin-issuance regime in force and channelling digital-money activity into the IFPE e-money rail. The corridor picture turned structurally negative. Mexico received US$61.79bn in remittances in 2025, a 4.6% decline against 2024's US$64.75bn per Banxico — the first annual decline in over a decade — amid tighter US immigration enforcement, with the downturn continuing into January 2026. A US 1% excise tax on remittances funded with cash, money orders or cashier's checks took effect 1 January 2026 (assessed pending direct primary verification). These pressures favour a shift toward digital and account-funded channels. In licensing, Brazil and Mexico both run open non-bank routes. The BCB licenses non-bank payment institutions under Law 12.865/2013 and BCB Rule #80 (as amended by Rules #494/2025 and #495/2025), creating a non-bank PI route distinct from bank-PSP authorisation, while Mexico's CNBV authorises IFPEs under the 2018 Fintech Law, the largest fintech category at roughly 87-88 active institutions by mid-2025. #### Cross-Monitor Connections Several threads carry illicit-finance dimensions that belong to the Financial Integrity Monitor (FIM) rather than to any WPM conclusion. The C&M Software breach includes a money-laundering dimension under Federal Police investigation; WPM carries only the enforcement and legal-precedent surface. The February 2025 US FTO/SDGT designation of eight transnational criminal organisations operating across Mexico and LATAM raises sanctions-evasion and illicit-finance exposure on correspondent accounts — the use dimension is a FIM matter. Brazil's Resolution 520/2025 Travel Rule extension to VASPs and the FATF/GAFILAT bank-versus-non-bank supervision gap likewise carry illicit-finance significance beyond the Sentinel-fed payments surface that informs our W11 coverage. #### Outlook The near-term regulatory calendar for Brazil is dense: the VASP/stablecoin framework took effect 2 February 2026, cross-border reporting under Resolution 521 began 4 May 2026, the cyber-security compliance deadline fell on 1 March 2026, Pix Automático is launching in the first quarter of 2026, and MED 2.0 multi-layer fund tracing arrives around February 2026. The looming Resolution 561 partial eFX stablecoin ban from October 2026 tempers Brazil's otherwise open posture and is the key forward variable for stablecoin-based corridor and settlement models. Beyond Brazil, Colombia's Bre-B instant-rail launch and rapid adoption signal a second large LATAM A2A market opening, while Mexico consolidates its position as the region's leading fintech-capital destination. Member-state breadth beyond Brazil — particularly Argentina and Chile interchange detail — remains a coverage gap flagged for periodic follow-up. trust tier: ai_unverified _Standing brief, as of 21 June 2026._ #### Regulatory Status Brazil is the LATAM benchmark across every WPM module, with the BCB acting as the de facto regional rule-setter. In licensing (W1a), the BCB licenses non-bank payment institutions under Law 12.865/2013 and BCB Rule #80, amended by Rules #494/2025 and #495/2025, creating a non-bank PI route distinct from bank-PSP authorisation. On conduct and safeguarding (W1b), the BCB permits PIs to hold customer balances in prepaid payment accounts with settlement accounts at the BCB, though full statutory asset-segregation for virtual-asset operations awaits a congressional bill; BCB Normative Nº 491 tightens device-registration fraud controls on Pix. In stablecoins and digital money (W2), the BCB established its VASP framework via Resolutions 519, 520 and 521 (effective 2 February 2026), with full fiat/public-debt backing, an algorithmic-stablecoin prohibition and FX-regime integration; Instruction 701/2026 adds technical-certification requirements, and the looming Resolution 561 partial eFX backend-settlement ban from October 2026 is a tracked caveat. On operational resilience (W3), the June 2025 C&M Software breach and the August 2025 Sinqia incident drove BCB/CMN cyber-security requirements in force from 18 December 2025, with full compliance by 1 March 2026. The criminal investigation into the C&M breach (W7) — including an insider-credential arrest — and an emerging US-Brazil trade dispute over Pix define the legal surface. On scheme compliance (W4), debit interchange is capped at 0.5% and prepaid at 0.7%, with Pix outside interchange regulation driving merchant-fee compression. In product innovation (W9), Pix reaches roughly 90% of the population and is extending to Pix Automático and PISP. On consumer protection (W10), the MED refund channel is being upgraded to self-service and to MED 2.0 five-layer tracing, though only around 9% of 2023 requests were refunded. On AML/CFT (W11), the 2023 FATF/GAFILAT evaluation found the BCB the key supervisor with a bank-versus-non-bank gap, and Resolution 520/2025 extends Travel Rule obligations to VASPs. On settlement access (W12), BCB STR hours and a dedicated Pix window plus a Selic-linked repo facility give non-bank PIs direct settlement-liquidity access. #### Outlook Brazil's risk level is ELEVATED with an active-reform trajectory: advanced VASP/stablecoin and consumer-redress regimes sit alongside major operational-resilience breaches and live enforcement. The dense near-term calendar — VASP framework effective February 2026, cross-border reporting from May 2026, cyber compliance by March 2026, Pix Automático in Q1 2026, MED 2.0 around February 2026 and the Resolution 561 partial eFX ban from October 2026 — keeps Brazil the region's defining watch jurisdiction. trust tier: ai_unverified _Standing brief, as of 21 June 2026._ #### Regulatory Status Mexico runs a mature non-bank e-money market under a restrictive virtual-asset stance. In licensing (W1a), the CNBV authorises IFPEs under the 2018 Fintech Law, with prior favourable opinion from an inter-institutional committee including SHCP and Banxico; the IFPE is the largest fintech category, with roughly 87-88 active institutions by mid-2025, underpinning the dominant wallet and neobank cohort. On stablecoins and digital money (W2), Banxico restricts virtual-asset use to internal transactions of IFPEs and banks only under its 30 September 2020 rule, leaving no general stablecoin-issuance regime in force — the structural contrast to Brazil's open regime. On corridor dynamics (W5), Mexico received US$61.79bn in remittances in 2025, a 4.6% decline and the first annual fall in over a decade, with the downturn continuing into January 2026; the US 1% cash-funded remittance excise tax from January 2026 adds further pressure. In industry structure (W6), Mercado Pago led fintech profitability with US$602m in Q3 2025, and Mexico hosts more than 1,100 fintechs alongside Nubank, Spin by Oxxo, BBVA México and Hey Banco. On AML/CFT (W11), the Sentinel feed reports progress on most technical-compliance deficiencies from the 2016 evaluation and a re-rating on two recommendations, with SHCP leading. In commercial intelligence (W13), Mexico is the leading LATAM fintech-capital destination: Plata stepped up to a US$3.1bn valuation via its US$250m Series B, and Klar raised a US$170m Series C and acquired Bineo (amount not publicly disclosed). #### Outlook Mexico's risk level is ELEVATED with a stable trajectory: a mature IFPE market and scale-profitable non-bank cohort sit against a restrictive virtual-asset stance, a declining remittance corridor and FTO/SDGT correspondent-risk exposure. The corridor inflection and the new US remittance excise tax are the principal forward variables, channelling digital-money activity into the IFPE e-money rail. trust tier: ai_unverified _Standing brief, as of 21 June 2026._ #### Regulatory Status Colombia is an expanding instant-payments market opening on the back of central-bank infrastructure. In product innovation (W9), Bre-B, operated by the Banco de la República, became fully operational on 6 October 2025 after a controlled run from 23 September to 5 October 2025 that verified interoperability across five instant systems and 227 participating institutions. It interconnects the Transfiya and Entrecuentas networks via public digital infrastructure under CIPI public-private governance, and by early 2026 had reached roughly 35m registered users, around 607m transactions and US$25bn in value across 170-plus participants. On corridor dynamics (W5), Bre-B is viewed by cross-border players as a game-changer for payment success rates and real-time settlement, hooking domestic instant rails into cross-border money movement. In commercial intelligence (W13), big-tech embedded-payments entry is rising: Amazon invested US$25m in the platform Rappi on 15 September 2025, with an option to acquire up to 12%, providing capital to expand Rappi Pay (RappiCuenta, RappiCard). #### Outlook Colombia's risk level is MONITORED with an expanding trajectory. Bre-B replicates the Pix model and its rapid adoption signals a second large LATAM A2A market opening, while big-tech entry via the Amazon-Rappi stake points to deepening embedded-payments competition. Post-launch Bre-B adoption metrics rely on a non-primary source relative to the run date and are flagged for refresh. trust tier: ai_unverified _Standing brief, as of 21 June 2026._ #### Regulatory Status At the bloc level, LATAM has no single pan-regional payments licence or instant-rail interlink; each member state runs its own non-bank PI/e-money regime and national instant rail. The cross-cutting structural pressures are correspondent de-risking and remittance-corridor stress. On correspondent banking and settlement (W12), BIS data show roughly a 30% decline in active correspondent activity in Latin America over the prior decade, with smaller and Caribbean jurisdictions worst hit, and the February 2025 US FTO/SDGT designation of eight transnational criminal organisations across Mexico and LATAM raises exposure for US banks holding Latin American correspondent accounts, risking renewed de-risking. On corridor dynamics (W5), the US-LATAM corridor is stressed, with roughly 8-10 MTOs controlling 70-80% of flows. In commercial intelligence (W13), LATAM fintech funding rebounded in 2025, reaching US$572m across 40 deals in Q3 2025 (up 82% year-on-year), led by Mexico. The illicit-finance dimension of the FTO/SDGT designations is routed to the Financial Integrity Monitor. #### Outlook The bloc risk level is ELEVATED with a stable trajectory, driven by region-wide correspondent de-risking and remittance-corridor pressure. No single pan-LATAM instant-rail interlink equivalent to SEPA or PAPSS is confirmed in force; domestic rails such as Pix and Bre-B remain national, bridged by stablecoin and MTO connectivity — a structural integration gap with only partial provenance recorded this cycle. trust tier: ai_unverified ###### Latest update · 11 October 2026 #### Regulatory Status Brazil's approaching Central Bank VASP authorisation deadline of 30 October 2026 is already shaping commercial behaviour in the fintech sector. Bitso moved its Brazilian retail crypto accounts to Mercado Bitcoin effective 1 October 2026, one month ahead of the deadline, in a move described as a licence-cost consolidation decision; the financial terms have not been disclosed. #### Outlook Further consolidation moves among Brazilian VASPs are plausible as the 30 October 2026 deadline approaches; watch for whether other exchanges follow Bitso's pattern of account transfer ahead of the cut-off. _3 earlier updates not shown here._ ###### Standing brief · as of 23 August 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Brazil's payments regulatory environment this cycle is defined by BCB Resolution 561's restructuring of cross-border electronic FX authorization (effective 1 October 2026, Unicad registration update due 30 October 2026, unauthorized-provider transition deadline 31 May 2027), continuing Pix capital requirements (BRL 5 million minimum net equity since 1 January 2026), and mounting international trade friction with the USTR's Section 301 investigation into Pix's design. Pix itself continues to grow its share of Brazilian e-commerce, reaching approximately 42 percent of transaction value with a trajectory toward 50 percent by 2028. #### Outlook Brazil's payments regulatory trajectory is tightening on market access while simultaneously expanding product scope through the new investment-linked eFX channel. The USTR investigation and BCB's exploration of cross-border Pix interlinkage are the two developments most likely to reshape the jurisdiction's payments posture in the coming cycle. trust tier: ai_unverified ###### Latest update · 11 October 2026 #### Regulatory Status Mexico's payments-regulatory environment is in active motion on two fronts. The Chamber of Deputies Finance Committee approved the draft Ley de Economía Digital para Pagos Digitales y Electrónicos by a vote of 24 to 4 on 1 October 2026, part of President Sheinbaum's 2027 Economic Package, introducing a digital CURP for financial-service contracting ahead of a full legislative vote. Separately, Banxico and the CNBV have opened a consultation on card-network and clearing-house rules, reportedly including a gradual reduction of interchange fee caps, though this remains an early-stage, single-sourced development. Banxico's own data shows the eight-year-old Fintech Law has produced 89 authorisations with zero approved regulatory-sandbox models to date. #### Outlook The digital-payments law's full legislative vote, expected in the fourth quarter of 2026, is the clearest near-term milestone for Mexico's payments-regulatory landscape; the interchange-fee consultation's progress is a parallel, less certain thread to track. _1 earlier update not shown here._ ###### Standing brief · as of 14 September 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Mexico's fintech and digital-asset regulatory landscape saw an industry-driven reform push rather than a confirmed regulatory change this cycle. The country's fintech industry is pushing the securities regulator CNBV, under new head Ángel Cabrera, for a Fintech Law 2.0 introducing tiered licensing and open-finance rules; this push launched in June 2026 but has not, on the material reaching this monitor, converted into formally filed legislation, and is assessed at Uncertain confidence on a single source. Separately, Bitso remains the dominant commercial player filling the market gap left by Mexican banks' continued restrictions on crypto-related activity, a market-structure observation rather than a regulatory development. #### Outlook Whether the Fintech Law 2.0 push converts into filed legislation is the central open question for this jurisdiction; the durability of the bank-crypto gap that Bitso currently occupies is a secondary factor worth monitoring alongside any licensing-reform movement. trust tier: ai_unverified _Standing brief, as of 14 September 2026._ #### Regulatory Status Argentina's securities regulator, the Comisión Nacional de Valores, tightened its virtual-asset service provider registration perimeter this cycle. Updated PSAV registration requirements, under General Resolution 1058/2025 as amended by Resolution 1139/2026, impose net-worth and documentation thresholds applicable to both domestic and foreign providers targeting Argentine users, extending the registration perimeter's reach beyond locally incorporated entities to any provider marketing to the Argentine user base. #### Outlook Further clarification of what specifically constitutes targeting Argentine users under the updated PSAV framework is the concrete development to watch, given its direct market-access implications for foreign virtual-asset service providers. trust tier: ai_unverified ###### Latest update · 11 October 2026 #### Regulatory Status Colombia's Bre-B instant-payments system continues its trajectory as a maturing, internationally-recognised piece of payments infrastructure. Banco de la República has updated the Bre-B regulatory framework to require clearer, more timely customer notification of technological incidents and more precise user-notification protocols. This update follows, rather than responds to, continued system success: Bre-B received the Central Banking 2026 award for Payments and Market Infrastructure Development in the Retail Segment, and shows broad institutional participation, rapid payment-alias uptake and growing transaction volume since its October 2025 launch, operating under a four-year roadmap through 2029 with ongoing Financial Superintendence supervision. #### Outlook Colombia's four-year Bre-B roadmap through 2029 suggests continued incremental regulatory refinement is likely as the system scales further; no indication of regulatory stress or corrective intervention was evidenced this cycle. ###### Standing brief · as of 4 October 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Colombia's instant-payments infrastructure advanced this cycle with continued progress on Bre-B, a system driven by the central bank, Banco de la República, explicitly positioned as the country's equivalent to Brazil's Pix and Mexico's SPEI. This development occurs alongside Colombia's mandatory Open Finance regime, together positioning the country as the region's second most advanced instant-payments and open-banking market behind Brazil. #### Outlook The pace at which Bre-B closes the maturity gap with Brazil's Pix system, both in transaction volume and in regulatory sophistication, is the key indicator to track for Colombia's payments market over coming cycles. Continued mandatory Open Finance implementation alongside Bre-B's rollout suggests the two developments are proceeding in tandem rather than independently. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-06-20 Mexico's Chamber of Deputies Finance Committee approved the draft Ley de Economía Digital para Pagos Digitales y Electrónicos on 1 October 2026 (24-4), building on SPEI/CoDi/DiMo infrastructure and introducing a digital CURP/citizen digital file for financial-service contracting; this sits alongside Banxico's parallel 'Fintech Law 2.0' consultation and proposed reforms to SPEI Circulars 3/2012 and 14/2017. Standing sub-brief · as of 21 June 2026 311 words · last cycle 2026-10-18 #### Licensing, Authorisation & Market Access LATAM has no single bloc-wide payments licence; each member state runs its own non-bank route, and the contrast between the bank-PSP path and the non-bank payment institution route is the analytical spine of market access in the region. In Brazil, the Banco Central do Brasil licenses non-bank payment institutions under Law 12.865/2013 and BCB Rule #80, as amended by Rules #494/2025 and #495/2025, creating a non-bank PI route distinct from bank-PSP authorisation. This is the foundational market-access path for fintech PSPs and acquirers in the region's largest economy: it determines who can plug into Pix and the settlement infrastructure. Payment institutions need not incorporate as banks and are supervised by the BCB under national payment-system oversight. This non-bank PI/EMI distinction is the central feature of the Brazilian authorisation map and carries through into safeguarding, settlement access and AML supervision. In Mexico, the CNBV authorises e-money institutions as IFPEs (Instituciones de Fondos de Pago Electrónico) under the 2018 Fintech Law, subject to the prior favourable opinion of an inter-institutional committee that includes SHCP and Banxico. The IFPE is the largest fintech category, with roughly 87-88 active institutions and 89 total ITF authorisations by mid-2025. It is the principal non-bank e-money authorisation in Mexico and the legal basis for the country's dominant wallet and neobank cohort, including Mercado Pago, Klar and Spin. This claim is held at High confidence: multiple law-firm guides support it but no Tier-1 anchor is present. #### Outlook Both the Brazilian PI regime and the Mexican IFPE regime are established standing positions rather than moving targets, and the trajectory is stable. The forward watch items sit in adjacent modules — safeguarding rules, AML supervision and settlement access — rather than in the licensing perimeter itself. Crypto and financial-promotion enforcement across LATAM was not separately searched to quota this cycle and is flagged for periodic follow-up. Periodic update · new data 2026-10-19 #### Licensing, Authorisation & Market Access Mexico's payments-regulation perimeter moved on two tracks this cycle. The Chamber of Deputies passed a Digital Payments Law on 6 October 2026 that would empower the finance ministry to mandate digital-only payment acceptance in specified sectors, beginning with highway tolls and fuel, and would require federal, state and municipal government bodies to accept digital payment. The bill is draft primary legislation — it has cleared the lower house and now moves to the Senate, with enactment not yet secured. Separately, Banxico Circular 9/2026 sets a compliance deadline of 14 December 2026 for direct and indirect SPEI participants to adapt their banking apps to standardised mobile-transfer guidelines, a binding operational requirement already in force rather than a proposal. The two instruments sit at different stages of the legislative-regulatory pipeline: the Digital Payments Law is prospective and contingent on Senate passage, while the Circular 9/2026 deadline is a confirmed near-term compliance date that institutions must meet regardless of the legislative outcome. Together they signal sustained regulatory attention on digitising payment acceptance and standardising mobile-transfer infrastructure in Mexico's licensed payments sector, with the SPEI participant population — both direct and indirect — carrying the immediate operational burden. #### Outlook The Digital Payments Law's progress through the Senate is the development to watch into Q4 2026; if enacted, the finance ministry's sector-by-sector mandate authority, starting with tolls and fuel, would materially expand mandatory digital-payment acceptance obligations on affected merchants and government bodies. The nearer-dated marker is the 14 December 2026 Banxico Circular 9/2026 compliance deadline, which SPEI participants must meet irrespective of the legislative track. **6 earlier distinct update(s)** Periodic update · new data 2026-10-11 #### Licensing, Authorisation & Market Access Mexico's Chamber of Deputies Finance Committee approved the draft Ley de Economía Digital para Pagos Digitales y Electrónicos by a vote of 24 to 4 on 1 October 2026, as part of President Sheinbaum's 2027 Economic Package. The draft introduces a digital CURP, or citizen digital file, intended to support financial-service contracting, and proceeds next toward a full legislative vote. Separately, Banxico's own reporting shows the Fintech Law framework, now eight years old, has produced 89 authorisations to date, but zero approvals under the law's Modelos Novedosos regulatory-sandbox category -- a gap that accompanying commentary flags as a pending question for market consolidation and innovation uptake in Mexico's licensed fintech sector. #### Outlook The draft digital-payments law's full legislative vote is expected in the fourth quarter of 2026; its passage would introduce a new digital-identity layer into Mexican financial-service contracting. The continued absence of any approved regulatory-sandbox model under the Fintech Law remains a standing feature of the licensing landscape to watch for change. Periodic update · new data 2026-10-04 #### Licensing, Authorisation & Market Access Brazil's payments-licensing perimeter underwent a structural tightening this cycle. Banco Central do Brasil Resolution 494 revoked the prior exemption model, under which payment institutions below certain financial-volume or transaction-count thresholds had not required prior authorisation, and replaced it with a universal prior-authorisation requirement applying to every payment institution regardless of size. A single filing window ran from 1 to 31 May 2026 for institutions needing to regularise their status under the new regime. The evidence available this cycle points to a materially stricter authorisation pipeline accompanying this rule change, with a slower pace and higher denial rate observed in the January-April 2026 period compared with the full prior year. This is consistent with a regulator moving from a permissive, threshold-based market-access model to a more restrictive, universally applied gatekeeping model, and the effect falls specifically on non-bank payment institutions that previously operated under the volume exemption; bank-affiliated payment service providers, already subject to banking-licence authorisation, are less directly affected by this specific change even where they compete in the same payment-services market. This is best read as a structural shift in market-access conditions rather than a single enforcement event. The removal of the exemption model changes the default posture for every new entrant and for existing smaller institutions that had previously operated below the threshold, and the timing -- a defined filing window followed by observable tightening in outcomes -- suggests the new regime is being actively administered rather than merely declared. #### Outlook The key open question is whether the stricter authorisation pipeline observed in the early months of the new regime is a transitional adjustment as the market works through a backlog of filings under the new universal requirement, or a durable feature of BCB's revised approach to payment-institution licensing. Institutions that missed or are still working through the May 2026 filing window, or that are newly entering the Brazilian market, should expect the observed denial-to-authorisation ratio to be a more reliable guide to near-term market-access conditions than the pre-Resolution 494 baseline. Periodic update · new data 2026-09-21 #### Licensing, Authorisation & Market Access Brazil's licensing perimeter for virtual-asset service providers crossed a firm threshold this cycle. The Banco Central do Brasil's VASP authorization regime, created under Resolutions 519 through 521, entered force on 2 February 2026. The regime imposes minimum capital requirements ranging from BRL 10.8 million to BRL 37.2 million depending on the activity conducted, and provides a 270-day grandfathering window running to 30 October 2026, after which unauthorized providers lose the ability to operate as authorized VASPs. This is a bank-and-nonbank-both licensing regime: it applies across the market-access spectrum rather than being confined to bank-affiliated entities, extending Brazil's payments-market-access architecture to a previously unauthorized activity category. Mexico's licensing landscape, by contrast, remains at the proposal stage. The country's fintech industry is pushing the securities regulator CNBV, under new head Ángel Cabrera, for a Fintech Law 2.0 with tiered licensing and open-finance rules. This push launched in June 2026, but on the single source available to this monitor it has not yet converted into formally filed legislation, and confidence in the trajectory of this reform is accordingly Uncertain. Unlike Brazil's completed rule-entry-into-force, Mexico's development remains industry advocacy for regulatory change rather than a market-access development that has yet occurred. Argentina presents a third pattern: incremental tightening of an existing registration perimeter rather than the creation of a wholly new licensing category. The Comisión Nacional de Valores, Argentina's securities regulator, updated its PSAV, proveedor de servicios de activos virtuales, registration requirements through General Resolution 1058/2025, amended by Resolution 1139/2026. The updated requirements impose net-worth and documentation thresholds, and they apply not only to domestically incorporated providers but explicitly to foreign providers targeting Argentine users. This extraterritorial reach is a notable market-access feature: it means the registration perimeter is defined by the location of the targeted user base rather than solely by the provider's place of incorporation, which has direct implications for any foreign virtual-asset service provider marketing to Argentine users without a local registration. Across all three jurisdictions, the licensing story this cycle is one of divergent speed and divergent mechanism. Brazil completed its rule-making and entered a defined implementation window; Argentina tightened an existing framework's thresholds and extraterritorial reach; Mexico remains at the industry-advocacy stage with no confirmed legislative vehicle yet. The bank-versus-nonbank distinction is most sharply drawn in Brazil, where the new VASP authorization category sits alongside, rather than replacing, existing bank-based payment licensing, meaning institutions must now track two parallel authorization tracks for any counterparty engaged in both traditional payments and virtual-asset activity. #### Outlook Brazil's 30 October 2026 grandfathering cliff is the domain's clearest near-term deadline; the next cycle should reveal whether the transition from unauthorized to authorized VASP status proceeds cleanly across the market or whether meaningful gaps persist. Mexico's Fintech Law 2.0 push bears watching for any move from industry advocacy toward a formally filed legislative text, which would represent a material escalation in confidence and materiality. Argentina's extraterritorial PSAV registration requirement may prompt further clarification or enforcement guidance regarding what specifically constitutes targeting Argentine users, a definitional question with direct market-access consequences for foreign providers. Periodic update · new data 2026-09-08 #### Licensing, Authorisation & Market Access Brazil's Central Bank tightened Pix payment-institution authorisation this cycle through Resolution 506, adopted 26 September 2025, which revised the authorisation criteria set under the original Resolution 1/2020. This is assessed at probable confidence from a tier-4 secondary summary; no tier-1 primary BCB.gov.br host was independently reached this pass, and the finding should be read with that sourcing caveat in mind. Alongside this, a separate activity-tied minimum-capital rule now distinguishes between Pix-offering and non-Pix prepaid institutions: those offering Pix must hold BRL 17.4 million in capital, versus BRL 12.4 million for institutions that do not, with the rule phasing in from 1 July 2026 to the full amount by January 2028. This is a bank-PSP versus non-bank-PI/EMI distinction rendered explicit by the regulation itself: non-bank payment institutions and e-money institutions offering Pix now face a materially higher capital bar than their non-Pix counterparts, while bank-PSPs offering the same functionality are presumably already subject to bank-level prudential capital regimes and are not the direct target of this activity-tied rule. The market-access implication is that Brazil's non-bank PI/EMI sector faces a rising capital floor tied specifically to Pix participation, which functions as a de facto market-structure filter: smaller non-bank fintechs offering Pix will need to scale capital reserves substantially over the 2026-2028 phase-in window or exit Pix-offering status. This is architecture rather than incident: a structural recalibration of who can participate in Brazil's dominant instant-payment rail as a non-bank institution, rather than a single enforcement action against a named firm. Separately, and with materially weaker sourcing, Mexico's Fintech Law 2.0 is characterised in trade press as requiring crypto custodians to maintain a minimum capital threshold of US$200,000, tied to the national digital-identity framework. This rests on a single tier-4 blog source, and no primary Banxico or CNBV text was independently reached this pass. This finding is held at uncertain confidence and should not be treated as a settled characterisation of Mexican law; it is flagged explicitly as an area of Mexican primary-source under-indexing relative to the depth of Brazilian sourcing achieved this cycle. Read together, these two national developments describe a region where licensing and market-access requirements are tightening unevenly: Brazil's tightening is well-evidenced and specific, while Mexico's is asserted but not yet independently verified. This unevenness is itself a finding worth carrying forward: LATAM payments-licensing coverage this cycle is asymmetric across its two largest fintech markets. #### Outlook Watch for the 1 July 2026 commencement of Brazil's phased capital-rule implementation as the first observable market-structure effect of this tightening, and watch for whether smaller non-bank Pix-offering institutions begin exiting or consolidating in response. Separately, watch for whether primary Mexican regulatory text becomes available to confirm or revise the current uncertain-confidence characterisation of the crypto-custodian capital threshold. This is analytical orientation on the regulatory operating environment, not compliance instruction. Periodic update · new data 2026-08-25 #### Licensing, Authorisation & Market Access Brazil's cross-border electronic FX (eFX) authorization framework has been restructured this cycle through BCB Resolution 561, published 30 April 2026 and effective 1 October 2026. The resolution restricts eFX activity to specified BCB-authorized institution types, narrowing the population of entities permitted to operate in this channel, and requires affected providers to update their registration through the Unicad system by 30 October 2026. Providers that are not currently authorized may continue operating on a transitional basis but must apply for BCB authorization by 31 May 2027 or exit the market; this is a bank-and-non-bank-relevant distinction, since both bank-affiliated FX desks and non-bank payment institutions currently active in the eFX channel fall within the restructured perimeter and must separately confirm their authorization status against the new institution-type criteria. Layered onto the eFX restructuring is a separate, already-in-force capital requirement for participants in Brazil's domestic instant-payment scheme, Pix: since 1 January 2026, Pix participants must maintain a minimum net equity of BRL 5 million, in addition to existing AML/KYC and LGPD data-protection obligations. Together, these two developments show Brazil tightening market-access conditions on two related but distinct payment rails within the same regulatory season — the domestic instant-payment scheme via capital adequacy, and the cross-border FX channel via authorized-institution-type restriction — rather than a single unified licensing reform. #### Outlook The near-term compliance calendar for market participants is dense: eFX providers must reconcile their institution-type status against Resolution 561 by the 1 October 2026 effective date, update Unicad registration by 30 October 2026, and unauthorized international payment providers face a longer-dated 31 May 2027 authorization deadline. Whether non-bank payment institutions currently active in the eFX channel will qualify under the BCB-authorized institution types named in Resolution 561 is the key open question for market-access purposes and should be the focus of the next research cycle. Periodic update · new data 2026-08-11 #### Licensing, Authorisation & Market Access Brazil's Banco Central has established the region's most comprehensive licensing and market-access regime for virtual-asset service providers this cycle. Resolutions 519, 520 and 521 create a formal SPSAV authorization framework, with capital requirements ranging from R$10.8 million to R$37.2 million depending on activity scope, in force since February 2, 2026. Firms already operating in Brazil's virtual-asset market have a 270-day transition window, running to October 30, 2026, within which to notify or apply for BCB authorization; any firm that does not secure authorization by that deadline must cease operations and migrate client assets within 30 days. This is a tier-one, high-confidence finding directly sourced to the Banco Central's own press materials, and it applies across both bank and non-bank market participants — the regime does not carve out a lighter-touch path for non-bank virtual-asset operators relative to banks entering the same activity. A related instrument, expected around May 2026, would add a further market-access precondition: independent CVM-registered audits as a requirement before licensing is granted. This raises the bar specifically for non-bank applicants, who are less likely to already maintain CVM-standard audit relationships than bank entrants, and represents a second, distinct market-access control layered on top of the core capital-and-authorization requirement in Resolutions 519-521. The bank-versus-non-bank distinction carries particular weight in Brazil's case because the new capital thresholds — R$10.8 million to R$37.2 million — sit well above the capitalization levels many smaller, non-bank virtual-asset platforms have historically operated with in the region's light-touch VASP environment. Banks entering the same VASP authorization category are likely to clear the capital bar more readily given existing prudential capital bases, meaning the practical market-access effect of Resolutions 519-521 may be a consolidation of Brazil's non-bank VASP sector toward fewer, better-capitalized players, alongside increased participation from bank-affiliated entities entering the space under the same licensing umbrella. In Mexico, market-access dynamics this cycle are shaped less by a new licensing instrument than by the continuing partial implementation of an existing one. Open-finance API-sharing obligations under Fintech Law Article 76 remain only partially in force: ATM-location and branch-data sharing obligations are active, but secondary rules governing transactional-data sharing were still pending as of January 2026. This is a market-access-relevant gap because it affects the conditions under which non-bank fintech entrants can build products dependent on transactional data access from incumbent banks — a structurally different market-access constraint than Brazil's capital-and-audit-based licensing model, but one that similarly shapes which categories of firm can compete on equal footing. Read together, these two jurisdictions illustrate different modes of market-access control operating in the region at the same time: Brazil moving to a comprehensive, capital-and-audit-gated authorization model for a previously unlicensed activity category, and Mexico continuing a slower, rule-by-rule implementation of an already-legislated open-finance mandate. #### Outlook Brazil's October 30, 2026 transition deadline is the defining near-term market-access event in the region: it will determine how many existing virtual-asset operators can meet the capital, audit and authorization bar, and by extension how concentrated the post-transition Brazilian VASP market becomes. The pending CVM-audit precondition adds a further filter likely to weigh more heavily on smaller non-bank entrants than on bank-affiliated applicants. In Mexico, the pace at which transactional-data-sharing secondary rules are finalized will determine when the open-finance market-access mandate moves from partial to full implementation, a milestone still without a confirmed date as of this cycle. **Sources and findings (6)** 1. T1 Law No. 12.865/2013 (Brazil payments) — Planalto/BCB 2. T1 BCB Resolution #495/2025 and Resolution #80 (BCB official) 3. T1 World Bank FPS Brazil/Pix case study 4. T1 Ley para Regular las ITF (Fintech Law) — CNBV (gob.mx) 5. T1 Fintech Law (ITF/IFPE authorisation) — CNBV (gob.mx) 6. T3 Mexico Business News ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-06-20 Member-state conduct/safeguarding regimes attach to the licence. In Brazil, PIs may freely move balances customers hold on prepaid payment accounts and fund their settlement (PI) accounts at the BCB, with consumer-protection/transparency rules applying; the full legal recognition of asset-segregation for some virtual-asset operations awaits congressional approval. Mexico updated its transparency and financial-consumer-protection laws to cover IFCs and IFPEs, including digital onboarding. Standing sub-brief · as of 21 June 2026 234 words · last cycle 2026-08-05 #### Conduct, Safeguarding & Financial Promotions The safeguarding question in Brazil turns on how customer balances are held and protected, and it carries the non-bank PI/EMI distinction directly. The BCB permits payment institutions to hold customer balances in prepaid payment accounts, with PI settlement accounts funded at the BCB and costless standing facilities. However, full statutory asset-segregation recognition for virtual-asset operations remains pending a specific bill in Congress — a noted insolvency and safeguarding plumbing gap. Customer-fund protection and that pending asset-segregation bill are the key insolvency-risk variable for PI and VASP operators holding client balances in Brazil. The settlement-plumbing detail is anchored to Tier-1 World Bank material; the pending bill rests on a Tier-3 law-firm source. On the conduct side, the BCB introduced device-registration controls via Normative Nº 491, obliging institutions to tighten first-time and unregistered-device fraud controls on Pix. These conduct controls raise the fraud-prevention compliance baseline for all Pix participants, banks and non-banks alike. This claim rests on a single Tier-3 vendor source and is held at High confidence. #### Outlook The live W1b watch item is the congressional asset-segregation bill, whose passage would close the recognised insolvency gap for virtual-asset operations. Device-registration and broader conduct controls are an escalating fraud-prevention vector tied to the wider operational-resilience response. Crypto and financial-promotion enforcement in LATAM was not separately searched to quota this cycle and is flagged as a thin, under-indexed vector for periodic follow-up. Periodic update · new data 2026-08-11 #### Conduct, Safeguarding & Financial Promotions Brazil's central bank has materially strengthened the conduct and penalty regime governing Pix participation this cycle. Resolutions 506 and 507 strengthen penalties for Pix-participant non-compliance, including exclusion from the Pix ecosystem and longer re-application waiting periods for firms seeking to re-enter after exclusion. This is a tightening-trajectory development that sits alongside, but is analytically distinct from, the standing capital-adequacy requirement tracked under payment corridor dynamics: where the capital requirement is a structural entry-and-continuity condition, the strengthened penalty regime is a conduct-enforcement tool aimed at participants already inside the ecosystem who fail to meet ongoing compliance obligations. The practical effect is to raise the cost of non-compliance for existing Pix participants meaningfully, particularly through the longer re-application waiting period, which extends the commercial consequence of exclusion beyond the immediate loss of Pix access. In Argentina, conduct-and-registration obligations for crypto-asset businesses are advancing on two parallel regulatory tracks. The Comisión Nacional de Valores' Resolution 1058/2025 establishes a PSAV registration regime requiring registration for crypto businesses exceeding a 35,000 UVA (approximately USD 29,246) monthly volume threshold, while UIF Resolution 49/2024 sets a parallel set of AML/CFT obligations for the same class of firms. These two instruments together constitute Argentina's current conduct-and-registration baseline for crypto-asset businesses, operating independently of — but likely to interact with — the central bank's separately tracked initiative to permit licensed banks to offer crypto services. The CNV/UIF regime is nonbank-focused by design, targeting the crypto-asset-business registration category rather than bank entities, which positions it as a conduct-and-safeguarding framework specifically for the nonbank segment of Argentina's crypto market at a moment when that market is also being opened to bank entrants through a separate channel. #### Outlook Brazil's strengthened Pix penalty regime is likely to be tested as more participants operate under the tightened capital and conduct requirements introduced across this cycle's Pix-related instruments; the longer re-application waiting period in particular changes the risk calculus for participants weighing the commercial cost of a compliance lapse. In Argentina, the interaction between the CNV/UIF nonbank registration-and-AML regime and the central bank's forthcoming bank-crypto-services framework will be worth monitoring as banks begin to enter a market segment that nonbank PSAVs have so far occupied under a distinct conduct regime; how the two regimes are reconciled is a live open question for the jurisdiction's conduct-and-safeguarding architecture going into the framework's targeted April 2026 implementation. **Sources and findings (4)** 1. T1 World Bank FPS Brazil/Pix case study 2. T2 Banco Central do Brasil (BCB) — official communications 3. T3 Lexology (digital markets, funding and payment services in Mexico) 4. T1 BCB Normative Resolution No. 491 (BCB official) ### W2 Stablecoins & Digital Money Confirmed confirmed 2026-06-20 Brazil has pulled stablecoin activity fully inside its foreign-exchange and VASP-licensing perimeter (BCB Resolutions 519-521, effective 2 February 2026); a further restriction (Resolution 561) bars regulated electronic-FX providers from using stablecoins to settle the offshore leg of cross-border payments, becoming effective in October 2026. Colombia and most other LATAM jurisdictions still lack a dedicated stablecoin regime. Horizon · 2026-02-02 (±quarter) BCB VASP/stablecoin framework (Res. 519/520/521) takes effect_in_force_pending · T3_ Horizon · 2026-05-04 (±quarter) BCB Res. 521 cross-border virtual-asset reporting obligations begin_in_force_pending · T3_ Horizon · 2026-10 (±quarter) BCB Res. 561 partial ban on stablecoins as eFX backend settlement_adopted · T3_ Standing sub-brief · as of 21 June 2026 326 words · last cycle 2026-10-18 #### Stablecoins & Digital Money Brazil is now LATAM's most advanced stablecoin and VASP regime, and the divergence with Mexico's restrictive stance is the structural feature of digital money in the region. The BCB established its VASP framework via Resolutions 519, 520 and 521, published 10 November 2025 and effective 2 February 2026, operationalising Law 14.478/2022. Resolution 520 requires full fiat and public-debt backing and prohibits algorithmic stablecoins; Resolution 521 routes stablecoin cross-border flows through the FX regime, with reporting effective 4 May 2026; and Instruction 701/2026 adds technical-certification requirements. The backing and FX-integration rules directly shape stablecoin-based corridor and settlement business models. This framework is held at High confidence on convergent Tier-3 reporting. A material forward restriction is carried as a caveat: subsequent Resolution 561 (May 2026) would impose a partial ban on stablecoins as eFX backend settlement from October 2026. Because its sources are not yet in this cycle's source register, it is asserted as a forward caveat rather than a standalone confirmed claim, and it is recorded as a tracked gap pending source registration. By contrast, Banxico restricts virtual-asset use to internal transactions of IFPEs and banks only, under its 30 September 2020 rule, leaving no general stablecoin-issuance regime in force; e-money via the IFPE remains the practical digital-money vehicle in Mexico. Mexico's restrictive stance is the structural contrast to Brazil's open regime, channelling digital-money activity into the IFPE e-money rail. The Travel Rule dimension of Resolution 520 and the FATF supervision gap carry illicit-finance significance that is routed to the Financial Integrity Monitor. #### Outlook The Brazilian framework took effect 2 February 2026, with Resolution 521 cross-border reporting beginning 4 May 2026; both are now in force. The defining forward variable is Resolution 561's partial eFX backend-settlement ban from October 2026, which tempers Brazil's otherwise open posture and is the principal item to track for stablecoin-based corridor and settlement businesses. The Brazil-Mexico divergence will continue to shape where such models can operate across LATAM. Periodic update · new data 2026-10-19 #### Stablecoins & Digital Money Brazil's central bank tightened the stablecoin perimeter on two fronts converging in October 2026. BCB Resolution No. 561 bars regulated electronic-FX providers — payment institutions, e-money issuers and acquirers among them — from using stablecoins or other crypto-assets to settle the offshore leg of cross-border payments; from the resolution's effective date, settlement with overseas counterparties must instead run through traditional FX operations or non-resident real accounts. This closes off a settlement channel that regulated providers had been using, pushing cross-border stablecoin flows back onto conventional FX rails for any provider operating under BCB authorisation. The second front is structural rather than transactional: Brazil's VASP licensing transition under BCB Resolution 520's grandfathering regime ends 30 October 2026. Entities that have been operating under grandfathered status while their licence applications are processed must complete licensing by that date; after it, licensed institutions may not transact with unauthorised counterparties, a restriction expected to force consolidation among smaller operators that have not yet secured authorisation. The two measures land in the same month and reinforce each other: one narrows who may lawfully operate as a counterparty, the other narrows what licensed counterparties may do with stablecoins in cross-border settlement. #### Outlook The immediate marker is the 30 October 2026 close of the Resolution 520 grandfathering window, after which the unauthorised-counterparty restriction takes full effect and consolidation pressure on unlicensed operators should become visible. The precise day-level commencement of Resolution 561's offshore-settlement restriction within October 2026 was not confirmed from primary BCB text this cycle and remains a dated detail to confirm. Both changes bear watching for their effect on LATAM-facing stablecoin infrastructure providers that route settlement through Brazilian regulated entities. **Sources and findings (6)** 1. T1 BCB Resolutions 519/520/521 (bcb.gov.br) — VASP framework 2. T1 BCB Resolutions 519/520/521 (bcb.gov.br) 3. T1 BCB Resolution 521 (bcb.gov.br) — virtual-asset FX operations 4. T1 BCB Resolution 520 (bcb.gov.br) — Travel Rule / AML 5. T1 Fintech Law — virtual-asset provisions; CNBV/Banxico (gob.mx) 6. T3 Mondaq / KLA Law ### W3 Operational Resilience & Critical Infrastructure Confirmed confirmed 2026-06-20 C&M Software (30 Jun 2025, ~R$800m–>R$1bn) and Sinqia (Aug 2025, ~R$710m) Pix-rail breaches exposed PSTIs as a systemic single point of failure; BCB/CMN cyber resolutions in force 18 Dec 2025, full compliance 1 Mar 2026. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open its jurisdiction pages on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/) Horizon · 2026-03-01 (±quarter) BR cyber-security full compliance deadline (BCB/CMN resolutions)_in_force_pending · T3_ Standing sub-brief · as of 21 June 2026 248 words · last cycle 2026-09-14 #### Operational Resilience & Critical Infrastructure The 2025 Pix-rail breaches define LATAM operational resilience. On 30 June 2025, C&M Software, a BCB-authorised payment-technology provider bridging institutions to central-bank infrastructure, suffered a cyberattack on Pix reserve accounts. Theft estimates range from approximately R$800m (about US$140m) to over R$1bn, reported as a range across AInvest and TechNadu rather than a single figure, and the BCB ordered an emergency suspension affecting more than 300 institutions. The episode exposed payment-technology providers as a systemic single point of failure in the Pix reserve-account chain, applying to both bank and non-bank participants. In response, the BCB and CMN established additional cyber-security requirements, in force 18 December 2025 with full compliance by 1 March 2026. These require annual independent intrusion testing with documented vulnerabilities and action plans, plus a transaction-size limit for non-authorised Pix users announced 5 September 2025. Mandatory intrusion testing and recovery-time documentation raise the operational-resilience compliance floor for every Pix participant and technology provider. A second resilience datapoint — a roughly R$710m incident at Sinqia, an Evertec subsidiary, in August 2025 — is noted as a further driver of the regulatory response. #### Outlook The trajectory is escalating. The 1 March 2026 full-compliance deadline has passed and the resilience floor for technology providers is now materially higher. The structural lesson — that PSTIs sit as a single point of failure in the reserve-account chain — will continue to drive both regulatory tightening and the parallel criminal enforcement tracked in the Legal & Litigation module. Periodic update · new data 2026-09-21 #### Operational Resilience & Critical Infrastructure Brazil's Banco Central tightened operational-resilience requirements for the Pix instant-payments rail on two fronts this cycle, both aimed at non-bank participants specifically. First, the BCB accelerated the deadline by which non-authorized payment institutions must obtain accreditation to operate within Pix, compressing what had been a longer-dated schedule into a window running from 1 January to 1 May 2026. Second, and announced in October 2025 but continuing to shape the operational-resilience posture into this cycle, the BCB asserted new authority to block Pix keys belonging to institutions or payment service providers it deems unsecure from scams, fraud, or illicit activity. Both developments extend BCB's operational control over the Pix ecosystem, but they do so through different mechanisms. The accelerated accreditation deadline is a market-entry-timing tool: it compresses the runway non-bank payment institutions have to achieve the operational standards Pix participation requires, effectively forcing faster compliance investment from institutions that had been operating on a longer transition assumption. The key-blocking authority is a live, ongoing operational-control tool: it gives BCB standing power to remove specific institutions' Pix keys from circulation on a fraud or security basis, independent of any licensing-status change, functioning as a continuous enforcement lever rather than a one-time compliance gate. The bank-versus-non-bank distinction is the analytical spine of this domain's finding. Both measures are targeted specifically at non-bank payment institutions and PSPs; the accreditation acceleration explicitly affects the nonbank_pi_emi category, while the key-blocking authority applies across both bank and non-bank participants but is understood as principally addressing weaker security postures more commonly associated with newer non-bank entrants. This is consistent with a broader regulatory pattern: as Pix's transaction volume and systemic importance grow, the BCB is increasingly treating operational-security parity between bank and non-bank participants as a precondition for continued non-bank access to the rail, rather than allowing a two-tier security standard to persist as the network scales. The scale context matters for understanding why this tightening is occurring now. Pix processes approximately 8.6 billion transactions per month, worth roughly US$660 billion, with 93% adult usage and a transaction value 8.6 times that of all card transactions combined domestically. A payment rail of this systemic scale and reach naturally draws heightened operational-resilience scrutiny, and the accelerated accreditation timeline and new key-blocking authority both read as responses to that scale rather than isolated administrative decisions. #### Outlook The 1 May 2026 accreditation deadline is the concrete date to watch; the next cycle should indicate whether non-authorized payment institutions achieved accreditation within the compressed window or whether transitional gaps or enforcement actions emerged. The key-blocking authority, being an ongoing rather than one-time mechanism, bears continued monitoring for any pattern of institutions actually losing Pix-key privileges, which would provide the first concrete evidence of how actively BCB intends to exercise this power. **Sources and findings (4)** 1. T3 AInvest / Access-Shield technical analysis 2. T3 Global Government Fintech 3. T3 Baker McKenzie Connect On Tech 4. T3 Global Government Fintech ### W4 Scheme & Network Compliance Confirmed confirmed 2026-06-20 Brazil's Central Bank (BCB) continues to iterate the Pix rulebook: Resolução BCB nº 587 (18 September 2026) removed the blanket mandatory-participation rule for institutions above 500,000 active accounts (replacing it with case-by-case exemptions), introduced institutional accountability for fraud flags (7-day response, up to 5-year attachment to a CPF/CNPJ), and scheduled hybrid boleto/Pix-QR billing (1 Feb 2027) and Pix Automático for salary accounts (1 Jul 2027). Standing sub-brief · as of 21 June 2026 183 words · last cycle 2026-10-18 #### Scheme & Network Compliance Brazil's interchange regime, combined with Pix's near-zero cost, is the core driver of merchant-fee compression and the card-to-instant-rail migration shaping LATAM acquirer economics. The BCB caps debit interchange at a 0.5% weighted-average and 0.8% maximum (October 2018), simplified to a single 0.5% cap in April 2023, and brought prepaid into scope at 0.7% with harmonised settlement. Pix sits outside interchange regulation — peer-to-peer transfers are free, with low person-to-business and business-to-business fees — giving an average Pix cost of around 0.33% against debit at roughly 1.13% and credit at roughly 2.34%. The cost-comparison figures are anchored to BIS Bulletin No 52 (Tier-1), with the interchange detail drawn from Tier-3 sources. #### Outlook The interchange regime itself is stable, but the cost gap between regulated card interchange and the near-zero Pix rail continues to drive structural migration toward instant payments and to compress acquirer margins. Member-state breadth is limited this cycle: Argentina and Chile interchange-cap detail was not separately searched to quota, leaving the W4 spread concentrated on Brazil and flagged for periodic follow-up to reduce big-market over-indexing within the bloc. Periodic update · new data 2026-10-19 #### Scheme & Network Compliance Brazil's Pix scheme saw an active rule-change cadence this cycle, moving in both a liberalising and a restrictive direction simultaneously. Instrução Normativa BCB 746 revoked the R$500 per-transaction ceiling on contactless Pix payments, effective 1 October 2026, removing a cap that had constrained higher-value tap-to-pay use cases on the scheme. In the other direction, Resolução BCB No. 590 requires payment arrangements to block fixed-odds betting transactions; notably, the obligation applies from the publication date of the underlying Provisional Measure rather than from a separate commencement date, and the resolution lets scheme owners amend their own operating rules to implement the block without seeking prior BCB authorisation for each change. That governance detail is itself significant for network-compliance purposes: it delegates implementation discretion to the scheme owner once the policy direction is set centrally, a faster-moving rule-change mechanism than a fresh regulatory proceeding for every adjustment. The combined effect is a scheme that is simultaneously easing a consumer-facing transaction limit and tightening sector-specific access controls, both within the same reporting window. #### Outlook Resolução BCB 587's hybrid Pix/boleto billing feature, allowing Pix Cobrança to be paid via boleto, is dated to take effect 1 February 2027 and is the next scheme-level change on the calendar. The betting-transaction block under Resolution 590 is worth monitoring for its practical enforcement mechanics, given the scheme-owner self-amendment pathway, and for its interaction with payment-access restrictions on the betting sector more broadly. **2 earlier distinct update(s)** Periodic update · new data 2026-10-11 #### Scheme & Network Compliance Banxico and the CNBV have opened a public consultation on proposed rules governing card payment networks and clearing houses in Mexico, reportedly including a gradual reduction of interchange fee caps. This is an early-stage development: the reporting underlying it rests on a single source, and the scope, timeline and final form of any interchange-fee change remain unconfirmed. #### Outlook Watch for additional corroboration of the consultation's scope and for any published timeline toward final rules; a confirmed interchange-fee reduction would materially affect card-network economics for both bank and non-bank participants in the Mexican market. Periodic update · new data 2026-10-04 #### Scheme & Network Compliance Banco Central do Brasil issued Resolução BCB nº 587 on 18 September 2026, bundling four changes to the Pix rulebook. The most structurally significant is the end of the blanket requirement for institutions holding more than 500,000 active transactional accounts to offer Pix; that universal participation mandate is replaced with case-by-case exemptions, meaning a large institution that previously had no route out of Pix participation may now seek exemption on an individual basis. This loosens the participation side of the scheme's governance. At the same time, the resolution tightens the accountability regime around fraud flagging within Pix. An institution that registers a fraud flag against a user must now inform that user, offer a review channel, and respond to any challenge within seven days. The flag itself can attach to a user's CPF or CNPJ and to their Pix key for up to five years, a duration long enough to materially affect a flagged user's ability to transact across the scheme for an extended period. This pairs a due-process obligation onto an instrument that previously operated with less transparency toward the flagged party. The same resolution also schedules two forward-dated product changes. Hybrid billing, combining a boleto barcode with a Pix Cobrança QR code, is authorised for regular or dynamic payment slips not linked to financial assets, with that authorisation taking effect 1 February 2027. A second scheduled change extends Pix Automático, the recurring-payment mechanism, to salary accounts, with that change taking effect 1 July 2027. Both are adopted rather than merely proposed, giving institutions a defined runway to build toward each effective date. No direct text of Resolução BCB nº 587 from the Banco Central do Brasil's own publication channel was available this period; all four elements described here rest on secondary reporting. The scheme-level picture should be read with that sourcing position in mind pending confirmation from the Banco Central's own resolution text. #### Outlook The two scheduled effective dates, 1 February 2027 for hybrid billing and 1 July 2027 for Pix Automático on salary accounts, are the concrete calendar markers to track for institutions building toward Pix rulebook compliance. The case-by-case exemption process replacing the blanket participation mandate is also worth monitoring, as its practical operation — how exemptions are sought and granted — was not detailed in reporting reviewed this period. **Sources and findings (4)** 1. T3 Latin American Journal of Central Banking (ScienceDirect) 2. T3 VIXIO / PYMNTS 3. T3 ScienceDirect (Pix/Drex study) 4. T1 BIS Bulletin No 52 / ScienceDirect ### W5 Payment Corridor Dynamics Confirmed confirmed 2026-06-20 Colombia's Bre-B interoperable instant-payments system (launched 6 October 2025 under Banco de la República's Art. 104, Law 2294/2023 mandate) continues broad institutional uptake; Banco de la República updated the Bre-B regulatory framework in March 2026 to require clearer, more timely customer notification of technological incidents, and the system was awarded Central Banking's 2026 'Payments and Market Infrastructure Development - Retail Segment' award. Horizon · 2026-01-01 (±quarter) US 1% remittance excise tax (cash/money-order/cashier's-check funded)_in_force_pending · T3_ Horizon · 2026-01-01 (±quarter) US 1% remittance excise tax (cash/money-order/cashier's-check funded)_in_force_pending · T3_ Standing sub-brief · as of 21 June 2026 316 words · last cycle 2026-10-11 #### Payment Corridor Dynamics The US-Mexico corridor — the world's largest remittance corridor — turned negative in 2025 for the first time in over a decade. Mexico received US$61.79bn in 2025, a 4.6% decline against 2024's US$64.75bn per Banxico, amid tighter US immigration enforcement, and the downturn continued into January 2026 at -1.4% year-on-year. Broader LATAM inbound remittances reached roughly US$174.4bn in 2025 per the IDB. The corridor turning negative reshapes MTO volumes and corridor risk; roughly 8-10 MTOs control 70-80% of US-LAC flows. This is held at High confidence on Tier-3 reporting of Banxico data, with the January 2026 continuation carried as a caveat. A new fiscal layer compounds the pressure: the US IRS applies a 1% excise tax on remittances funded with cash, money orders or cashier's checks, effective 1 January 2026. A cash-funded remittance tax incentivises a shift toward digital and account-funded channels and pressures cash-heavy MTO models on the US-LATAM corridor. This is held at Assessed confidence — only Tier-3 reporting citing the IRS is cited, with no direct Tier-1 IRS document, pending primary verification. On the cross-border infrastructure side, Colombia's Bre-B interoperable instant-payments ecosystem, launched 6 October 2025, is viewed by cross-border players as a game-changer for payment success rates and real-time settlement, hooking domestic instant rails into cross-border money movement and expanding reach for MTOs and stablecoin bridges. This rests on a single Tier-3 source and is held at Assessed confidence. #### Outlook The corridor trajectory is structurally stressed: a declining US-Mexico flow, a new US cash-remittance excise tax in force from January 2026, and correspondent de-risking pressure together mark an inflection that favours digital and account-funded channels. No single pan-LATAM instant-rail interlink equivalent to SEPA or PAPSS is confirmed in force; domestic rails such as Pix and Bre-B remain national, bridged by stablecoin and MTO connectivity. Primary-source verification on the corridor figures and the excise tax is the principal outstanding gap. Periodic update · new data 2026-10-11 #### Payment Corridor Dynamics Colombia's Bre-B instant-payments system continues to mature from a position of institutional strength. Banco de la República has updated the Bre-B regulatory framework to require clearer and more timely customer notification of technological incidents and more precise user-notification protocols -- a refinement introduced alongside growth rather than in response to any identified system failure. This reading is reinforced by two further facts from the central bank's own publications: Bre-B received the Central Banking 2026 award for Payments and Market Infrastructure Development in the Retail Segment, and the system shows broad institutional participation, rapid payment-alias uptake and growing transaction volume since its October 2025 launch, operating under a four-year roadmap through 2029 with ongoing supervision from Colombia's Financial Superintendence. Taken together, these developments describe a system being incrementally refined as it scales, rather than one responding to stress. #### Outlook Bre-B's four-year roadmap through 2029 provides a long runway against which further regulatory refinements, such as this cycle's incident-notification update, should be read as routine maturation rather than exceptional intervention. Continued growth in institutional participation and transaction volume is the key trend to track going forward. **4 earlier distinct update(s)** Periodic update · new data 2026-10-04 #### Payment Corridor Dynamics Pix, Brazil's instant-payment system, set a new single-day settlement record on 4 September 2026, processing 318 million transactions worth a combined R$186.9 billion. This is a volume signal for the region's dominant instant-payment rail and indicates continued, and by this measure accelerating, adoption even as the underlying licensing perimeter for payment institutions tightens under Resolution 494. Colombia's Bre-B, an instant-payment system driven by the central bank, Banco de la República, is advancing as the country's analogue to Pix and to Mexico's SPEI system. This positions Colombia's corridor infrastructure as following a similar developmental trajectory to Brazil's, albeit at an earlier stage of maturity, and situates Colombia as the region's second most advanced instant-payments market after Brazil. The corridor dynamics in both markets sit against a backdrop of regulatory change on adjacent fronts -- Brazil's Pix system is itself the subject of a separate fraud-liability reallocation this cycle, addressed under consumer protection, while Colombia's Bre-B rollout is paired with a mandatory Open Finance regime addressed under product innovation. Corridor volume and corridor regulation are moving in parallel in both markets rather than in isolation from one another. #### Outlook Whether Pix's record volume on 4 September 2026 represents a peak or a new baseline will become clearer over subsequent cycles; sustained volume at or above this level alongside the newly tightened fraud-liability rules under Resolution 587 will be an early test of whether the reallocated liability regime changes reporting-institution behaviour without suppressing transaction volume. Colombia's Bre-B trajectory toward full parity with Pix as a corridor is a multi-year development to track rather than a near-term milestone. Periodic update · new data 2026-09-21 #### Payment Corridor Dynamics Pix's domestic scale is now the platform from which Brazil's cross-border payment-corridor ambitions are being built, and this cycle surfaces both that ambition and a live trade-policy friction point standing against it. Pix processes approximately 8.6 billion transactions per month, worth roughly US$660 billion, reaching 93% adult usage domestically, with transaction value running 8.6 times that of all card transactions combined in the country. That scale is now the base on which Banco Central's cross-border exploration rests: as of August 2026, Banco Central confirmed it is studying both direct bilateral Pix links with individual countries' instant-payment systems and multilateral hub-based connections that would allow Pix to interoperate with multiple foreign systems through a shared connection point. This cross-border ambition, however, is not developing in a policy vacuum. The United States Trade Representative opened an investigation in July 2025 into Pix as a potentially discriminatory national payment standard, treating Brazil's instant-payment infrastructure as a live trade-policy question rather than a purely domestic financial-infrastructure matter. This finding carries only Uncertain confidence, resting on a single Tier 4 source, but it is analytically significant regardless of its eventual outcome: it means Pix's corridor-expansion story cannot be read purely as a payments-infrastructure success story. Any cross-border link Brazil pursues, whether bilateral or multilateral, will need to be understood against the backdrop of an active US trade-policy scrutiny of the underlying domestic scheme, adding a genuine friction dimension to what would otherwise be framed simply as infrastructure interoperability. The corridor-dynamics reading here differs from a pure product-innovation or licensing reading precisely because of this trade-policy overlay. Pix's cross-border link exploration is, on one level, a natural extension of a highly successful domestic instant-payment scheme seeking interoperability with peer systems abroad, a pattern seen elsewhere with other instant-payment schemes pursuing cross-border links. But the concurrent USTR investigation means Brazil's corridor-expansion agenda carries geopolitical and trade-policy weight beyond the typical infrastructure-interoperability calculus that might apply to a similar move by a scheme not under active foreign trade-policy scrutiny. No specific bilateral or multilateral partner country was identified in the material reaching this monitor this cycle; the finding is that BCB is studying both link types as options, not that any specific corridor has been agreed or is imminent. This absence of a named partner is itself worth noting rather than inferring a likely candidate. #### Outlook The corridor-dynamics domain's key open question is whether Brazil's cross-border Pix exploration produces a concrete bilateral or multilateral announcement in a subsequent cycle, and whether such an announcement proceeds independently of or in response to the USTR investigation's eventual outcome. The USTR investigation itself is the domain's most consequential open trade-policy thread; any formal action or finding from that investigation would be a material development for this corridor-dynamics tracking regardless of its direction. Periodic update · new data 2026-08-25 #### Payment Corridor Dynamics Brazil's Pix instant-payment scheme is now entangled in a formal US trade dispute. The United States Trade Representative has initiated a Section 301 investigation into Pix, alleging that its design constitutes a discriminatory practice harming US commerce; this is the first major US trade-policy challenge to a LATAM public instant-payment scheme's zero-fee, mandatory-participation architecture, and it escalates a friction that had previously existed mainly in policy commentary into a formal trade-investigation footing. At the same time, Pix's domestic corridor dominance continues to grow: the scheme reached approximately 42 percent of Brazilian e-commerce transaction value in the prior year, with market projections putting it at 45 percent by year-end 2026 and 50 percent by 2028, continuing to displace credit cards as Brazil's leading e-commerce payment method. Brazil's central bank is also exploring an entirely different corridor dimension: expanding Pix to interoperate with other countries' international instant-payment systems. If pursued, cross-border Pix interlinkage would extend the scheme's reach well beyond its current domestic footprint and would represent a second major structural shift in Brazil's payment-corridor posture, distinct from and additive to the ongoing USTR trade dispute. The corridor-dynamics picture in Brazil this cycle is therefore one of simultaneous domestic-dominance growth, international-interlinkage exploration, and international trade-policy pushback. #### Outlook The USTR Section 301 investigation is the primary corridor-dynamics watch item; its procedural trajectory, and whether it produces any tariff or retaliatory recommendation, would be a material escalation warranting close tracking. BCB's exploration of Pix cross-border interlinkage is a separate thread worth monitoring independently. Non-Brazil LATAM payment corridors remain an acknowledged research gap this cycle and should be prioritized to assess whether similar corridor dynamics are emerging elsewhere in the bloc. Periodic update · new data 2026-08-11 #### Payment Corridor Dynamics Brazil's Pix ecosystem, Colombia's Bre-B, and Mexico's SPEI/CoDi/DiMo complex all saw material rail-level developments this cycle, each illustrating a different facet of instant-payments corridor dynamics in the region's three largest markets. In Brazil, Instrução Normativa No. 746, effective October 1, 2026, alters Pix Automático and approximation-limit rules, enabling daily-limit change requests and recipient-limit registration — a granular control layer aimed at fraud mitigation within an already-dominant instant-payments rail. This sits alongside a separate, already-active capital requirement: since January 1, 2026, Pix transactional-account participants must maintain a minimum paid-in capital or net equity of R$5 million on a continuous basis under Resolution BCB 429/2024, a standing prudential condition for rail participation rather than a one-time entry bar. Colombia's Bre-B is the standout corridor-dynamics story of the cycle by scale and pace. Launched October 6, 2025, the interoperable instant-payment system had 218 participating entities — 26 banks, 153 cooperatives and four SEDPEs — by the end of January 2026, and settled 370.4 million transactions worth COP 59 trillion in its first four months of live operation, a tier-one, central-bank-sourced finding. Two additional operators are expected to join the system during 2026. Building on this base, Bre-B is set to add recurring automatic debits without cards, announced in July 2026 and resting on user-authorization, cancellation and notification safeguards introduced in a March 2026 regulatory update. Bre-B's participant composition is itself an analytically notable corridor-governance feature: with 153 of its 218 participating entities being cooperatives rather than banks, Colombia's rail has achieved a breadth of institutional participation — reaching smaller, often rural-serving financial cooperatives — that neither Brazil's bank-dominated Pix rollout nor Mexico's SPEI corridor has matched at a comparable stage of development. This breadth may partly explain the rail's rapid transaction-volume scale-up, since it extends instant-payments access to customer segments historically underserved by bank-centric rails. In Mexico, Banxico's June 2026 normative modifications standardize the mobile-app transfer experience across SPEI, CoDi and DiMo — three previously fragmented instant-payment interfaces — and introduce a new Nivel 2 Bis account tier aimed at micro and small merchants. This corridor-standardization move is consistent with a broader structural shift flagged this cycle: a Banxico official's March 2026 statement that SPEI transfer volume is expected to surpass card-payment volume in Mexico during 2026, with adoption skewed toward younger demographics. Taken together, the standardization of the mobile interface layer and the underlying volume shift toward account-to-account transfers suggest Mexico's retail-payments corridor mix is undergoing a structural rebalancing away from cards, mirroring — though on a different timeline and through different regulatory instruments — the account-to-account dominance already established in Brazil via Pix and now emerging in Colombia via Bre-B. #### Outlook Brazil's Pix limit-rule changes take effect October 1, 2026, adding fraud-control granularity to a rail that already dominates the country's retail-payments corridor; the standing R$5 million capital requirement for participants will continue to shape which institutions can sustain Pix participation over time. Colombia's recurring-debit feature, expected in the third quarter of 2026, is the corridor development most likely to expand Bre-B's addressable use cases beyond peer-to-peer transfer into recurring bill-pay and subscription use cases historically served by cards. Mexico's SPEI-over-cards volume crossover, if it materializes as projected during 2026, would mark a significant structural milestone for the country's payments-corridor mix, though the standardized mobile-interface changes published in June 2026 are likely a contributing rather than sole driver of that shift. **Sources and findings (5)** 1. T3 PaymentExpert (IDB year-end estimates) 2. T3 PaymentExpert (Banxico data) 3. T3 PaymentExpert (US IRS) 4. T3 Inter-American Dialogue 5. T3 Thunes ### W6 Industry Structure & Commercial Confirmed confirmed 2026-06-20 LATAM's PSP market is led by Brazilian acquirers and a cohort of large neobanks/wallets. Brazil's acquiring is concentrated among Cielo, Rede (Itaú), Getnet, plus challengers Stone and PagSeguro, with intense price/receivables-advance competition. In Mexico, Mercado Pago is the profit leader (US$602m Q3-2025 fintech profit) alongside Nubank, Spin by Oxxo's 24,000+ store footprint, and incumbents BBVA México and Hey Banco; Mexico now hosts 1,100+ fintechs, second in LATAM. Standing sub-brief · as of 21 June 2026 200 words · last cycle 2026-06-20 #### Industry Structure & Commercial Dynamics The structural competitive dynamics of LATAM acquiring and the maturing of the Mexican non-bank market are the W6 spine this cycle, distinct from the discrete deals carried in W13. In Brazil, Itaú Unibanco escalated the acquiring price war by cutting its receivables-advance rate to zero for Rede clients paid via an Itaú account — an unprecedented escalation against Stone and PagSeguro. Brazil's acquiring market is led by Cielo (historically around 42%), Rede and Getnet, alongside challengers. Receivables-advance pricing is the core acquirer revenue battleground, and Itaú zeroing the rate compresses challenger economics and signals structural consolidation pressure. In Mexico, Mercado Pago leads fintech profitability, reporting US$602m in fintech-division profit in Q3 2025, up 55.6% year-on-year. Mexico now hosts more than 1,100 fintechs, second in LATAM, alongside Nubank, Spin by Oxxo (24,000+ stores), BBVA México and Hey Banco. This cohort's profitability signals the maturing of the IFPE-led non-bank market into sustainable scale. #### Outlook The trajectory is escalating. Receivables-advance pricing in Brazil is a live consolidation pressure that will continue to reshape acquirer economics, while Mexico's scale-profitable wallet and neobank cohort underpins the region's commercial-intelligence momentum. Specific funding rounds and deals are routed to the W13 module. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T3 Statista / iupana 2. T3 Brazil Journal 3. T3 Legal Paradox (Mexican neobanks 2026) 4. T3 Miranda Intelligence (El Universal/EFE) ### W7 Legal & Litigation Probable confirmed 2026-06-20 The dominant live legal matter is the criminal/enforcement fallout from the 2025 Pix-rail breaches: Brazil's Federal Police, activated by the BCB, opened a formal investigation into the C&M Software attack (criminal conspiracy, fraud-related theft, unauthorised intrusion, money laundering), arresting an insider who sold credentials. A parallel international trade dispute is emerging around Pix following US (USTR/WhatsApp/Meta) competition complaints over Brazil's digital-payment infrastructure. Standing sub-brief · as of 21 June 2026 225 words · last cycle 2026-06-20 #### Legal & Litigation The enforcement fallout from the C&M Software Pix breach is the leading W7 development. The Brazilian Federal Police and BCB opened a formal investigation into the breach, covering criminal conspiracy, fraud-related theft, unauthorised intrusion and money laundering; an IT operator was arrested for selling access credentials that enabled roughly R$800m (about US$140m) in theft from six institutions. The criminal and enforcement fallout sets precedent on insider-credential liability and PSTI accountability in instant-rail breaches. This is held at Assessed confidence. The money-laundering dimension is routed to the Financial Integrity Monitor; WPM carries only the enforcement and legal-precedent surface. A second, earlier-stage thread is an emerging trade dispute. The US (via USTR and Meta-WhatsApp) has raised competition complaints over Brazil's digital-payment infrastructure, with Meta alleging that WhatsApp business-to-consumer payments were temporarily blocked to protect Pix from competition; the complaints are proceeding within USTR and WTO frameworks. A US-Brazil dispute over Pix's market position could affect digital-payment-infrastructure access conditions for foreign players. This rests on a single Tier-3 think-tank source and is asserted only as Possible. #### Outlook The enforcement trajectory is escalating: the insider-credential arrest and the broader C&M investigation will set the precedent baseline for PSTI accountability in instant-rail breaches. The Pix trade dispute is early-stage and low-confidence, but a US-Brazil escalation over Pix's competitive position is a watch item for foreign-player access conditions. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T3 Access-Shield technical analysis 2. T3 CyberInsider 3. T3 CITP (Cambridge) ### W8 Merchant Acquiring & Risk limited signal Probable confirmed 2026-06-20 Brazil's nationwide betting prohibition (Provisional Measure 1,394/2026) extends into the acquiring/payments layer: banks and payment institutions are barred from processing fixed-odds betting transactions except to close accounts and refund players, with a R$200,000 daily fine for operators/PSPs failing to secure and report player funds within two days of going offline. Standing sub-brief · as of 21 June 2026 142 words · last cycle 2026-10-04 #### Merchant Acquiring & Risk The Brazilian acquiring market has a distinct chargeback and receivables structure that drives its risk and revenue profile. Card chargeback liability sits merchant-side, while Pix and Boleto push rails carry effectively zero chargeback exposure, anchored to the payer's CPF or CNPJ identifier. The BCB's 2021 receivables-registration regime, operated through CERC and B3, opened the receivables-advance market beyond the incumbent set of Rede, Stone, Cielo, SafraPay and PagSeguro. Push-rail zero-chargeback economics and the opened receivables-registration market are the structural drivers of Brazilian merchant-acquiring risk and revenue. This is held at Assessed confidence on a mix of Tier-3 and Tier-4 sources. #### Outlook The structure is stable. The interplay between zero-chargeback push rails and the opened receivables-registration market continues to define where acquiring risk and revenue concentrate, and connects directly to the receivables-advance price war tracked in the Industry Structure module. Periodic update · new data 2026-10-04 #### Merchant Acquiring & Risk Brazil's Provisional Measure 1,394/2026 has produced an immediate and severe merchant-acquiring-layer restriction: banks and payment companies can no longer process betting transactions in Brazil, with the sole exception of closing accounts and returning player funds to those exiting the sector. This converts what was, until this period, an active merchant-acquiring category — processing for licensed fixed-odds betting and online casino operators — into a prohibited one, with no transition period offered to processors beyond the narrow fund-return exception. The restriction carries direct consequences for any bank or payment service provider still processing betting-linked transactions after the measure's effective date; the exposure attaches to the processor independently of the underlying betting operator's own licensing status, meaning a PSP cannot rely on an operator's prior authorisation as cover for continuing to process its transactions. A daily fine of R$200,000 attaches to operators and, by extension, to the processing relationships around them that fail to wind down within the mandated window. This is a merchant-acquiring-specific instance of a broader prohibition originating in gambling-licensing law rather than in payments regulation itself; the restriction on processing is a downstream consequence of PM 1,394/2026's shutdown of the betting sector, not an independent payments-policy decision. Processors servicing Brazil should treat betting-sector merchant relationships as foreclosed for the duration of the measure. #### Outlook The merchant-acquiring restriction will persist for as long as Brazil's underlying betting prohibition remains in force. The Brazilian Congress's pending ratification vote on PM 1,394/2026 is therefore the single development that would reopen or permanently close this merchant category for payment processors; no other mechanism for reopening this segment was identified this period. **Sources and findings (3)** 1. T4 iGaming Payment Solutions (PagSeguro review) 2. T3 TechCrunch 3. T4 PortersFiveForce (StoneCo) / Brazil Journal ### W9 Product Innovation & Market Development Confirmed confirmed 2026-06-20 Brazil's BCB continues expanding Pix into collateralised lending (Pix em Garantia), mandatory NFC tap-to-pay (22 Apr 2026), and mandatory hybrid billing (Nov 2026), extending Pix from a P2P rail into a full commercial payments platform. Horizon · 2026-Q1 (±quarter) Pix Automático (recurring payments) launch_in_force_pending · T1_ Standing sub-brief · as of 21 June 2026 276 words · last cycle 2026-10-18 #### Product Innovation & Market Development Central-bank instant rails are the leading product-innovation surface in LATAM, with Brazil's Pix and Colombia's Bre-B at the front. Pix, operated by the BCB, is the primary payment method, reaching roughly 90% of the population with up to about 290 million transactions per day. It is extending to Pix Automático (recurring payments, early 2026) and to PISP/Open Finance participation, with BCB-regulated payment-initiation by authorised institutions that do not hold the user's account. Pix's reach and its extension to recurring and payment-initiation functions define the addressable A2A product surface and the competitive ceiling for cards in Brazil. The PISP and Pix Automático detail is anchored to Tier-1 BCB material, with adoption metrics from Tier-3 reporting. Colombia's Bre-B, operated by the Banco de la República, became fully operational on 6 October 2025 after a controlled run from 23 September to 5 October 2025 that verified interoperability across five instant systems and 227 participating institutions. It interconnects the Transfiya and Entrecuentas networks via public digital infrastructure under CIPI public-private governance. By early 2026 it had reached roughly 35m registered users, 103m aliases, around 607m transactions and US$25bn in value across 170-plus participants — post-launch adoption metrics carried as a caveat against the Tier-1 BanRep launch anchor. Bre-B replicates the Pix model and signals a second large LATAM A2A market opening. #### Outlook The trajectory is escalating across both markets. Pix Automático's first-quarter 2026 launch and the deepening of PISP participation extend Brazil's A2A surface, while Bre-B's rapid adoption opens Colombia as a second major instant-rail market. Post-launch Bre-B adoption metrics rely on a non-primary source relative to the run date and are flagged for refresh. Periodic update · new data 2026-10-19 #### Product Innovation & Market Development Mexico's payments-market-structure regulators are revising two adjacent frameworks that bear on product innovation and competitive dynamics. The CNBV is revising its Payment Instrument Networks framework, a review that includes reconsideration of the interchange-fee cap, a parameter that directly shapes merchant-acquiring economics and card-network competitive positioning. In parallel, Banxico has drafted an overhaul of the Card Payment Clearinghouse framework, with an emphasis on competition and information security, according to regulatory-research coverage of the draft. Both reviews are at the drafting or consultative stage rather than finalised rule changes, but together they indicate that Mexico's payments-market-structure regulators are actively reconsidering the competitive and infrastructural rules governing card payments, a different regulatory track from the Digital Payments Law's cash-displacement mandate but one that touches the same broad digitisation agenda. #### Outlook The interchange-fee cap review and the Card Payment Clearinghouse framework overhaul are both still in draft or consultative stages; their eventual finalisation would be a material development for card-acquiring economics and clearinghouse competition in Mexico and is a marker to track into subsequent reporting periods. **5 earlier distinct update(s)** Periodic update · new data 2026-10-04 #### Product Innovation & Market Development Open Finance infrastructure across Latin America is developing unevenly, with Brazil the most advanced implementation in the region and Colombia's mandatory Open Finance regime, paired with the advancing Bre-B instant-payment system driven by Banco de la República, positioning the country as the next most developed market. Bre-B is explicitly framed as Colombia's equivalent to Brazil's Pix and Mexico's SPEI, suggesting convergence toward a common regional instant-payments product model even as individual markets remain at different stages of build-out. Mexico's product-innovation trajectory this cycle is centred on the proposed Fintech Law 2.0, an industry-drafted set of amendments that would introduce a licensed Digital Asset Custodian category with defined capital and audit rules, together with open-finance APIs tied to the Llave MX digital-identity platform. This would represent a substantive product-development milestone for Mexico's digital-asset and open-finance ecosystem, but the proposal remains at the industry-drafted stage and had not been enacted as of this cycle; it should be treated as a pending development rather than a settled market feature. Taken together, these three national trajectories describe a region-wide product-innovation pattern in which open banking and instant payments are maturing at different speeds -- Brazil most advanced, Colombia following with mandatory Open Finance and an advancing Bre-B, and Mexico dependent on a reform that has not yet cleared the legislative process. #### Outlook The most consequential near-term product-innovation event to watch is whether Mexico's Fintech Law 2.0 is enacted as scheduled toward the end of 2026; enactment would introduce the Digital Asset Custodian licence and open-finance API mandate and would materially close the gap between Mexico's product infrastructure and Brazil's and Colombia's more mature open-finance regimes. In Colombia, continued Bre-B rollout under Banco de la República is the key indicator of whether the country closes further ground on Brazil's instant-payments maturity over the coming cycles. Periodic update · new data 2026-09-21 #### Product Innovation & Market Development Pix Parcelado, the installment-payment product built on top of Brazil's Pix instant-payment rails, is advancing through a defined two-phase standardisation timeline this cycle. The first phase carries a March 2026 Banco Central adaptation window, during which market participants are expected to adjust to initial standardisation requirements. A second phase, planned for December 2026, will address user-experience and operational standards specifically, representing a further layer of standardisation beyond the initial adaptation period. This is a clear instance of product innovation layered directly on top of existing payments infrastructure rather than a new payment rail in its own right. Pix Parcelado uses the underlying Pix instant-payment mechanism to offer installment-style, buy-now-pay-later-adjacent functionality, extending the use case of an infrastructure that was originally built for single, instant, real-time transfers. The standardisation effort BCB is pursuing across these two phases is aimed at bringing consistency to what would otherwise likely be a fragmented landscape of differently-implemented installment products built by different participants on the same underlying rail, each with potentially different user experiences and operational mechanics. The distinction between this product-innovation reading and a possible regulatory-conduct reading is worth drawing explicitly. Pix Parcelado's standardisation is a market-development and product-standards exercise, concerned with consistency of implementation and user experience across the ecosystem, rather than a consumer-protection or financial-promotions intervention in the conduct sense. The March 2026 and December 2026 phases both concern how the product functions and is presented operationally, not whether it should be permitted or how it should be marketed, keeping this development within the product-innovation frame rather than crossing into conduct or consumer-protection territory. The broader significance of Pix Parcelado's standardisation lies in what it signals about the Pix ecosystem's maturation. A payment rail moving from a single dominant use case, instant peer-to-peer and person-to-business transfers, toward a diversified set of standardised product variants including installment payments, is a sign of an instant-payment scheme evolving toward the kind of product breadth more typically associated with card networks, but built on account-to-account rails rather than card infrastructure. #### Outlook The December 2026 second-phase rule on user-experience and operational standards is the concrete date to watch for this domain; its content, once available, will indicate how prescriptive BCB intends to be regarding the specific mechanics of Pix Parcelado implementation across different providers. Whether further Pix-based product variants emerge following the same standardisation-after-launch pattern seen with Pix Parcelado is also worth monitoring, as it would indicate a repeatable regulatory approach to product innovation on the Pix rail. Periodic update · new data 2026-09-08 #### Product Innovation & Market Development Brazil's Central Bank is expanding Pix's functional scope well beyond its original person-to-person instant-payment design this cycle, through three distinct product and mandate developments. First, "Pix em Garantia" allows individuals and small businesses to use future Pix receivables as loan collateral, a product explicitly targeting freelancers and gig workers who may lack conventional collateral for credit access; this is held at uncertain confidence from a single tier-4 fintech trade-press source. Second, the BCB has mandated that all participating institutions offer NFC tap-to-pay Pix by 22 April 2026, a development assessed at probable confidence, which converts Pix into a full contactless-card substitute at the point of sale and materially narrows the functional gap between Pix and international card schemes for in-person transactions. Third, a mandate requiring all Brazilian banks to offer hybrid billing, allowing either QR code or boleto to settle the same invoice, becomes mandatory from November 2026; this rests on a single tier-4 source and is held at uncertain confidence. The confirmed-confidence judgment supporting this domain is that these three developments, taken together with the W1a authorisation-tightening findings, describe the BCB systematically converting Pix from a P2P instant-payment rail into a full commercial-payments and credit platform, while simultaneously tightening institutional oversight through activity-tied capital rules and the eFX consultation. This is a high-impact structural finding: it is not that any single product feature is individually transformative, but that the accumulation of receivables-backed lending, universal contactless acceptance, and mandatory flexible billing collectively repositions Pix as infrastructure for commercial payments and credit access, not merely peer-to-peer transfers. The gig-economy and small-business targeting of Pix em Garantia is a notable product-innovation signal in its own right: it represents an attempt to use payment-rail transaction history as a substitute for traditional credit-underwriting collateral, a pattern with implications for financial inclusion among Brazil's large informal and gig-economy workforce, albeit one this cycle's evidence base characterises only at uncertain confidence pending stronger sourcing. #### Outlook Watch for adoption metrics on Pix em Garantia once implemented, and for merchant and consumer uptake of NFC Pix following the April 2026 mandate deadline. The hybrid-billing mandate's November 2026 effective date is a further near-term marker; watch for whether compliance is broad or uneven across smaller banks. This is analytical orientation on emerging product and market-development trends, not investment or compliance advice. Periodic update · new data 2026-08-25 #### Product Innovation & Market Development Brazil's central bank has carved out a new regulated payments product channel alongside its eFX tightening. BCB Resolution 561, in addition to restricting stablecoin and crypto settlement in the regulated cross-border channel, expands eFX scope to permit transfers tied to financial and capital-market investments, subject to a cap of $10,000 per transaction equivalent. This product-innovation carve-out sits within the same instrument that otherwise tightens market access, illustrating that Brazil's current payments-regulatory posture is not uniformly restrictive: it is narrowing certain channels while simultaneously opening a new, capped product lane for investment-linked cross-border transfers. This development should be read alongside the continuing rollout of Pix Automático, Brazil's recurring-payments extension to the Pix scheme introduced in 2025, which continues to expand the domestic instant-payment product suite even as the cross-border side of Brazil's payments regulation is being restructured. #### Outlook The $10,000-per-transaction cap on the new investment-linked eFX channel is a specific, testable parameter that should be tracked for any future adjustment. Continued monitoring of Pix Automático's adoption trajectory, alongside the new investment-linked eFX channel's uptake once Resolution 561 takes effect on 1 October 2026, will clarify whether Brazil's product-innovation pipeline is accelerating in parallel with its market-access tightening. Periodic update · new data 2026-08-11 #### Product Innovation & Market Development Mexico's instant-payments infrastructure is approaching a structurally significant milestone this cycle: Banco de México's Director General for Payment Systems stated that SPEI transfer volume is expected to surpass card-payment volume in Mexico during 2026, with adoption skewed toward younger demographics. This is an assessed finding sourced to a Banxico official's public statement as reported in Mexican trade press, rather than to a Banxico data publication directly, and it signals a broader product-development and market-adoption shift in the country's retail-payments mix toward account-to-account instant transfers and away from card-based rails. This projected crossover is consistent with, and likely reinforced by, the standardization of SPEI, CoDi and DiMo mobile-transfer interfaces tracked separately under this cycle's payment-corridor developments; a more consistent user experience across previously fragmented instant-payment interfaces is a plausible contributing factor to continued adoption growth, though the Banxico statement itself frames the volume crossover as an independent, ongoing demographic-adoption trend rather than as a direct consequence of the interface-standardization instrument. #### Outlook If the projected 2026 crossover materializes, it would mark a first-of-its-kind milestone for Mexico's retail-payments market structure, with material implications for card-network volume and merchant-acquiring economics in the country. The demographic skew toward younger users suggests the shift is being driven by generational adoption patterns rather than by a single regulatory or product intervention, which implies the trend is likely to continue independent of any single forthcoming rule change. This is analytical framing based on a single official statement reported in trade press and should be read as an emerging, not yet confirmed, market-development trend. **Sources and findings (5)** 1. T3 CITP (Cambridge) 2. T1 Banco de la República (BanRep blog) 3. T1 Banco de la República 4. T1 BCB press detail / Boku-Paypers 5. T3 Chambers / Legal 500 Mexico ### W10 Consumer Protection & APP Fraud limited signal Confirmed confirmed 2026-06-20 Brazil's flagship consumer-protection instrument is the Pix Special Return Mechanism (MED), a BCB-mandated refund channel for fraud/scam/operational-failure cases (created 2021). On user trigger, funds are blocked at the receiving institution and both banks have ~7 days to review, with refunds within ~11 days; claims can be filed up to 80 days after the transfer. BCB Resolution 589 required self-service in-app MED for all Pix participants by Oct 2025, and BCB Resolution 493 added in-app appeals plus multi-layer fund tracing (MED 2.0, ~Feb 2026 across up to five account layers). A structural limitation: only ~9% of 2023 requests were refunded, mostly due to insufficient funds. Horizon · 2026-02 (±quarter) MED 2.0 multi-layer fund tracing (up to five account layers)_in_force_pending · T3_ Horizon · 2026-02 (±quarter) MED 2.0 multi-layer fund tracing (up to five account layers)_in_force_pending · T3_ Standing sub-brief · as of 21 June 2026 172 words · last cycle 2026-10-04 #### Consumer Protection & APP Fraud Brazil's MED refund channel is LATAM's flagship instant-rail consumer-redress regime. Created in 2021, the Mecanismo Especial de Devolução operates as follows: on trigger, funds are blocked at the recipient institution, both banks have around seven days to review, refunds occur within roughly 11 days, and claims can be raised up to 80 days after the transfer. Resolution 589 mandated self-service in-app MED by October 2025, and Resolution 493 added in-app appeals. MED 2.0, arriving around February 2026, traces funds across up to five account layers. Notably, only around 9% of 2023 requests were refunded, chiefly due to insufficient funds — the structural limitation that operators and regulators must address. This is held at Confirmed confidence on convergent specialist reporting from VIXIO, QED, Demarest and CommerceGate. #### Outlook The trajectory is escalating. The October 2025 self-service mandate and the MED 2.0 five-layer tracing capability around February 2026 materially expand the redress toolkit, but the persistently low refund-success rate remains the defining structural limitation of instant-rail consumer redress in Brazil. Periodic update · new data 2026-10-04 #### Consumer Protection & APP Fraud Brazil's Resolucao BCB no. 587, dated 18 September 2026, reallocates responsibility for fraud markings within the Pix instant-payment system onto the institution making the report, introduces a mandatory review-response window, and sets a maximum attachment period of five years for a fraud marking. This is a substantive consumer-protection and authorised-push-payment fraud rule change: shifting the liability burden onto reporting institutions creates a direct incentive for those institutions to ensure fraud markings are accurate and substantiated before they are made, rather than defaulting to precautionary reporting that could otherwise leave affected account holders in an extended limbo. The resolution also permits institutions with more than 500,000 active accounts to seek exemption from mandatory Pix participation, a provision whose practical effect on consumer protection outcomes will depend on how many large institutions take up the exemption and what alternative arrangements, if any, apply to their customers as a result. This consumer-protection development sits alongside, but is a distinct instrument from, the licensing tightening addressed under market access; both originate from Banco Central do Brasil in the same period and together describe a regulator narrowing both entry conditions and conduct standards for payment institutions operating in Brazil. #### Outlook The practical effectiveness of the new fraud-marking liability regime will become clearer once institutions have operated under the seven-day review-response window and five-year attachment cap for a full reporting cycle; a reduction in disputed or erroneous fraud markings would indicate the reallocated liability is functioning as intended, while continued high dispute volumes would suggest the review window may be insufficient. Whether large institutions exercise the new exemption pathway from mandatory Pix participation, and what that means for their customers' access to the fraud-marking protections under Resolution 587, is a specific development to watch in subsequent cycles. **Sources and findings (4)** 1. T3 VIXIO 2. T3 QED Investors 3. T3 Demarest / CPG 4. T3 CommerceGate ### W11 AML/CFT & Financial Crime (Sentinel.gi-fed) [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/latin-america/#sec-dom-D7) Confirmed confirmed 2026-06-20 sentinel. Carrying Sentinel.gi position only (no original FIM analysis). LATAM's payments AML/CFT posture is anchored in the GAFILAT/FATF framework: Brazil's 2023 FATF/GAFILAT MER found BCB to be the key, effective risk-based supervisor for the most material institutions while other supervisors lag; the 2022 Virtual Assets Law positioned the BCB as the AML/CFT authority for crypto, with Res. 520/2025 extending AML/CFT and Travel Rule obligations to VASPs. Mexico (whose 2018 MER placed it in enhanced follow-up) has been re-rated on technical-compliance deficiencies, with SHCP leading AML/CFT regulation. Standing sub-brief · as of 21 June 2026 222 words · last cycle 2026-06-20 #### AML/CFT & Financial Crime This module is sourced from the Sentinel feed; WPM carries only the payments-relevant supervisory surface and does not re-analyse illicit finance, which is routed to the Financial Integrity Monitor. Per the Sentinel feed citing Brazil's 2023 FATF/GAFILAT mutual evaluation, the BCB was found to be the key supervisor for the most material institutions, whose risk-based activities significantly improved money-laundering and terrorist-financing detection, while other supervisors had not yet ensured sufficient implementation. Resolution 520/2025 extends AML/CFT and Travel Rule obligations to VASPs. The bank-versus-non-bank supervision gap flagged by FATF is the AML risk variable for non-bank PSPs and VASPs operating in Brazil, and the Travel Rule extension is a direct compliance obligation. Further detail is available via the Sentinel feed. For Mexico, the Sentinel feed reports that the country made progress addressing most technical-compliance deficiencies from its 2016 mutual evaluation and was re-rated on two recommendations, with SHCP leading AML/CFT regulation. Mexico's follow-up status conditions correspondent-banking risk perception on the US-Mexico corridor. Both items rest on FATF Tier-1 material via the Sentinel feed. #### Outlook The trajectory is stable. The Brazilian bank-versus-non-bank supervision gap and the Travel Rule extension to VASPs are the standing AML-relevant variables for non-bank operators, while Mexico's technical-compliance follow-up conditions correspondent-banking risk perception. The illicit-finance significance of both threads is routed to the Financial Integrity Monitor. no periodic updates on record for this sub-brief ** Sources and findings (9)** 1. T1 FATF (Mexico country page) 2. T? FIM (sentinel.gi) per-JID baseline profile — Latin America (regional bloc — LATAM) — GAFILAT (FATF-style regional body) coordinates AML/CFT/CPF standards across ~17 member states with sharply uneven implementation. Bolivia, Haiti and Venezuela remain on the FATF grey list; Panama, Jamaica and others exited the EU/FATF lists 2023-2025. Brazil and Argentina are advancing crypto-asset and BO reforms; Venezuela shows state-linked TF/NPO-oversight and BO deficiencies. 3. T2 FIM (sentinel.gi) regulatory_horizon_register (issue FIM-BASE-HRZ-001) — Brazil VASP (SPSAV) full authorization licensing deadline 4. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-005) — Gap: sourcing-thinness 5. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-006) — Enforcement: OFAC — Two Brazilian nationals and four companies (Primeiro Comando da Capital, PCC) 6. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-005) — Enforcement: OFAC — Mexican citizens and companies (nine entities) linked to cartel fuel-smuggling scheme 7. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-004) — Sanctions: OFSI divergence 8. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: regulatory-failure 9. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: legal-gap ### W12 Correspondent Banking, Settlement & Access Confirmed confirmed 2026-06-20 LATAM has been among the regions hardest hit by correspondent-banking de-risking — BIS data show roughly a 30% decline in active correspondent activity in Latin America over the prior decade, with smaller/Caribbean jurisdictions worst affected. The Jan/Feb-2025 US designation of eight transnational criminal organisations as FTOs/SDGTs (most operating across Mexico and LATAM) raises fresh civil/criminal exposure for US banks holding Latin American correspondent accounts, risking renewed de-risking pressure. Settlement access at member-state level runs through central-bank systems (e.g. Brazil's STR/SPI with BCB liquidity windows). Standing sub-brief · as of 21 June 2026 260 words · last cycle 2026-09-05 #### Correspondent Banking, Settlement & Access The analytical spine of this module is the bank versus non-bank access asymmetry. BIS data show roughly a 30% decline in active correspondent activity in Latin America over the prior decade, with smaller and Caribbean jurisdictions worst hit. The February 2025 US FTO/SDGT designation of eight transnational criminal organisations operating across Mexico and LATAM raises civil and criminal exposure for US banks holding Latin American correspondent accounts, risking renewed de-risking. De-risking and the cartel designations directly constrain settlement and access for LATAM banks and lengthen payment chains — the structural backdrop for non-bank PSP corridor demand. This is anchored to BIS, FSB and World Bank Tier-1 material on the de-risking trend, with Covington Tier-3 on the FTO/SDGT exposure. The illicit-finance use dimension of the designations is routed to the Financial Integrity Monitor. Against that bank-side contraction sits a non-bank advantage in Brazil. The BCB provides settlement liquidity supporting PI access via STR working hours and a dedicated Pix window (18:30-19:00) using reserve-requirement balances, plus a Selic-linked repo facility. Direct PI access to central-bank settlement liquidity is a structural advantage for Brazilian non-bank PSPs over peers reliant on bank-sponsored access. This is held at Confirmed confidence on a Tier-1 World Bank case study. #### Outlook The trajectory is escalating on the correspondent-contraction side: the decade-long decline plus the February 2025 cartel designations risk renewed de-risking that lengthens payment chains and sustains demand for non-bank corridor alternatives. Brazil's direct PI settlement access remains a structural counterweight, illustrating the bank versus non-bank asymmetry at the heart of the module. Periodic update · new data 2026-09-08 #### Correspondent Banking, Settlement & Access The defining correspondent-banking dynamic for LATAM this cycle is the bank-versus-non-bank access asymmetry now visible across three distinct developments centred on Brazil's payments infrastructure. The Central Bank of Brazil's Public Consultation 124/2025 proposes that eFX international-payment providers, entities currently offering cross-border payment services outside formal BCB payment-institution authorisation, obtain that authorisation directly; this is assessed at probable confidence, and the market expects enactment during 2026. The gap this closes is structural: non-bank eFX providers have operated a cross-border settlement channel adjacent to, but not directly supervised within, Brazil's formal payment-institution perimeter, and this consultation would bring that channel inside the same authorisation regime that already governs domestic Pix-offering payment institutions. Separately, and more directly evidencing correspondent-banking disintermediation, Banco do Brasil launched Pix in Argentina in March 2026, the rail's first international deployment, with Pix now usable across Argentina, Uruguay, Colombia, Chile and Paraguay. This is assessed at probable confidence and represents a genuine expansion of a domestically-designed instant-payment rail into a cross-border settlement role traditionally occupied by correspondent-banking relationships. The analytical significance, foregrounded as this module's spine, is the asymmetry this creates: bank-PSP correspondent relationships built over decades now face direct competition from a state-backed instant-payment rail extending across borders, while non-bank payment institutions in the destination markets face a choice of connecting to Pix directly or continuing to rely on traditional correspondent-banking access, which is often less available to non-bank entities than to licensed banks. A third development touches settlement risk management rather than access architecture directly: a rule effective 1 January 2027 will require virtual-asset service providers to hold outbound transfers above US$10,000 for up to 24 hours for fraud review. This is held at uncertain confidence from a single tier-4 trade-press source. Its correspondent-banking and settlement relevance lies in the friction it introduces to VASP-mediated cross-border settlement flows above the stated threshold; its AML/CFT financial-crime dimension is covered separately under this monitor's subscribed W11 surface rather than being re-analysed here. #### Outlook Watch for the eFX consultation's enactment during 2026 as the key near-term marker for whether Brazil's non-bank cross-border payment sector is brought fully inside the BCB's authorisation perimeter. Watch also for whether Pix's cross-border footprint expands beyond its current five destination markets, which would further sharpen the bank-versus-non-bank correspondent-access asymmetry this module tracks as its analytical spine. This is analytical orientation on the operating environment, not compliance instruction. **Sources and findings (4)** 1. T2 Covington (citing BIS Quarterly Review March 2020) 2. T3 Covington & Burling 3. T1 FSB Correspondent Banking Data Report / World Bank 4. T1 World Bank FPS Brazil/Pix case study ### W13 Commercial Intelligence (M&A, Investment & Product) Probable confirmed 2026-06-20 LatAm fintech Q3 2026 capital flows show debt outpacing equity ($1.7bn debt vs $589m equity, per one consolidator), with Tether continuing direct strategic investment (Mercado Bitcoin, Plenti) and license-driven consolidation ahead of Brazil's 30 October 2026 VASP authorisation deadline evidenced by Bitso's move of Brazilian retail accounts to Mercado Bitcoin. Standing sub-brief · as of 21 June 2026 244 words · last cycle 2026-10-18 #### Commercial Intelligence (M&A, Investment & Product) LATAM fintech funding rebounded in 2025, led by Mexico. In Q3 2025, investment reached US$572m across 40 completed deals, up 82% in funding and 33% in deal count year-on-year — an aggregate datapoint signalling renewed investor confidence in LATAM payments and fintech as a leading indicator of competitive entry. At the company level, Plata (Mexico) raised a US$160m Series A in March 2025 at a roughly US$1.5bn valuation, then a US$250m Series B around October 2025 that more than doubled its valuation to US$3.1bn — the largest step-up of the cohort and a marker of Mexico as the leading LATAM fintech-capital destination in 2025. Klar (Mexico) raised a US$170m Series C around late June 2025 valuing it at US$800m, and also acquired Bineo, an amount not publicly disclosed, exemplifying the consolidation wave as digital-first players absorb traditional-bank assets. In Colombia, Amazon invested US$25m in the platform Rappi on 15 September 2025, with an option to acquire up to 12%, providing capital to expand Rappi Pay (RappiCuenta, RappiCard) — a signal of big-tech entry into LATAM embedded payments. All four events are dashboard-tier dated entries held at High confidence on quality-journalism sources. #### Outlook The trajectory is escalating. Mexico's position as the region's leading fintech-capital destination, combined with strategic consolidation (Klar-Bineo) and big-tech entry (Amazon-Rappi), points to continued competitive-entry pressure into the LATAM payments market. Discrete deals remain distinct from the structural competitive dynamics tracked in the Industry Structure module. Periodic update · new data 2026-10-19 #### Commercial Intelligence & Fintech Two venture-funding events this cycle point to continued investor appetite for LATAM payments and stablecoin infrastructure. Jeeves raised $110 million in a round led by CoinFund, with participation from a16z, Coinbase Ventures, Y Combinator and GIC; the company reports stablecoin transaction volume at $1.5 billion annualised and plans to open a Buenos Aires office targeting more than 100 Argentine corporate clients, extending its corporate-payments footprint into Argentina. Separately, Tether invested an undisclosed amount in the seed round of EFY Finance, announced 13 October 2026; EFY holds a Digital Asset Service Provider licence in El Salvador, serves more than 25,000 accounts, and settles to local accounts in 17 countries, giving Tether a stake in a licensed stablecoin-infrastructure and cross-border-payments provider with an established multi-country settlement footprint. Neither disclosed the round's valuation; EFY Finance's round size itself was not publicly disclosed, while Jeeves' $110 million figure was reported. #### Outlook Both transactions reinforce a pattern of stablecoin-native payments infrastructure attracting capital in LATAM even as Brazil tightens its regulatory stablecoin-settlement perimeter elsewhere in the bloc; Jeeves' planned Argentine office expansion and EFY Finance's multi-country settlement network are both markers to watch for follow-on commercial activity in subsequent cycles. **3 earlier distinct update(s)** Periodic update · new data 2026-10-11 #### Commercial Intelligence & Fintech Three discrete commercial events mark an active quarter for LatAm fintech capital flows. Bitso moved its Brazilian retail crypto accounts to Mercado Bitcoin effective 1 October 2026, one month ahead of Brazil's Central Bank VASP authorisation deadline of 30 October 2026, in a move described as a licence-cost consolidation decision; the financial terms of the arrangement have not been publicly disclosed. Jeeves disclosed $1.5 billion in annualised stablecoin-settled volume, a sharp rise from near-zero eight months earlier, on a platform that now runs above $5 billion a year in total settled volume. Separately, Plata raised a $405 million Series C round at a $5 billion valuation in the second quarter of 2026, led by Bicycle Capital, with the Qatar Investment Authority, BTG Pactual and Valor Capital Group participating as investors. Together these three events -- a consolidation driven by regulatory deadline pressure, a stablecoin-settlement volume disclosure, and a large late-stage equity round -- illustrate the range of commercial activity underway in the region's fintech sector this quarter. #### Outlook Watch for further exchange consolidation moves ahead of Brazil's 30 October 2026 VASP deadline, for disclosure of the Bitso/Mercado Bitcoin transaction terms, and for whether Jeeves' stablecoin-settlement growth trajectory continues at a similar pace in subsequent quarters. Periodic update · new data 2026-09-21 #### Commercial Intelligence & Fintech Bitso remains the dominant commercial player filling the gap left by Mexican banks' restrictions on crypto-related activity, according to the single source reaching this monitor this cycle. This is a market-structure observation about which commercial entity is capturing a particular market opportunity, distinct from any regulatory instrument or policy development; it concerns the competitive positioning of a named firm rather than a change in the rules governing that firm's activity. The underlying dynamic worth surfacing here is structural rather than incident-specific: Mexican banks' continued restrictions on crypto-related activity create a persistent gap in the market for crypto-adjacent financial services that regulated banks are not filling, and Bitso's continued dominance in that space reflects the durability of that gap rather than a one-off commercial event this cycle. This finding is assessed at Probable confidence, resting on a single Tier 3 source without further corroboration reaching this monitor this cycle. This is properly a W13 commercial-intelligence finding rather than a W6 structural market-analysis finding or a W1a licensing finding, because it concerns a specific named commercial player's competitive position in an existing market gap, not a structural trend across the market as a whole and not a licensing or regulatory-perimeter development. No specific transaction, funding round, product launch, or M&A event involving Bitso was identified in the material reaching this monitor this cycle; the finding is limited to Bitso's continued market position rather than any discrete commercial event. #### Outlook Whether Mexican banks' restrictions on crypto-related activity persist, ease, or tighten further, potentially in connection with the CNBV's Fintech Law 2.0 push tracked separately under W1a, would directly affect whether the gap Bitso currently fills remains as durable going forward. Any discrete commercial event involving Bitso or a competing player seeking to contest this market position would be the next concrete development to watch for in this domain. Periodic update · new data 2026-08-11 #### Commercial Intelligence & Fintech LATAM fintech commercial activity was unusually dense this cycle, with discrete events spanning a public listing, large-scale capital-investment announcements, and a product launch. PicPay completed a USD 434 million Nasdaq IPO on January 29, 2026, trading under the ticker PICS — the first major Brazilian fintech listing since Nubank's 2021 debut. At listing, PicPay reported approximately 66 million customers, roughly 87 million Pix keys, and approximately 11 percent of all Pix transactions flowing through its platform, underscoring the scale a non-bank PSP has achieved within Brazil's dominant instant-payments rail. Nubank announced a Brazil investment plan of approximately BRL 45 billion (USD 8.2 billion) for 2026, and a separately reported commitment of USD 4.2 billion to expand its Mexico operations through 2030. Both figures were disclosed as reported in trade press, though the two commitments were reported through separate sources and should be read as distinct announcements — a domestic Brazil investment plan and a longer-horizon Mexico expansion commitment — rather than a single consolidated capital plan. Nubank's Mexico expansion commitment lands against a market where open-finance data-sharing rules remain only partially implemented, a regulatory backdrop against which its growth ambitions in that market will play out. Mercado Pago's product launch this cycle took a different form: rather than a new licensing or funding event, the company integrated a GBM money-market fund directly into its wallet app, offering approximately 10.5 percent yield with instant liquidity. The stated commercial rationale was to work around Mexico's prohibition on interest-bearing wallet balances — structuring yield exposure through a money-market-fund product wrapper rather than through direct wallet interest. The specific investment amount behind this product integration was not publicly disclosed. Each of these three events differs in disclosure completeness and event stage: PicPay's IPO is a completed, fully disclosed growth-stage capital event; Nubank's Brazil investment is an announced, fully disclosed strategic capital commitment rather than a completed transaction; and Mercado Pago's product integration is a completed product release with an undisclosed investment amount behind it. This spread across event types illustrates the breadth of commercial-intelligence signal the region's leading PSPs are generating in parallel, rather than a single dominant transaction type driving the cycle's commercial narrative. #### Outlook PicPay's IPO and Nubank's capital commitments together suggest investor confidence in Brazilian and Mexican fintech infrastructure is proceeding at a scale not seen since Nubank's own 2021 listing, a signal worth tracking against Brazil's concurrent regulatory tightening to see whether commercial confidence and regulatory cost converge or diverge over coming cycles. Mercado Pago's money-market-fund wrapper is likely to be watched by other regional wallet providers as a template for offering yield-like features within markets that restrict direct wallet interest, and further product launches following this pattern would be a signal worth surfacing in future tracking. **Sources and findings (5)** 1. T3 FinTech Global 2. T3 Crunchbase News 3. T3 Crunchbase News 4. T3 Legal Paradox 5. T3 Miranda Intelligence **No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Latin America| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 66 finding(s), 134 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).