Regulation

Stablecoin tax in Brazil: IOF, invoices and CVM scope

Stablecoin tax in Brazil for payment flows: where IOF applies, how the invoice behind a payment works, what DeCripto reports and what stays outside the CVM.

Caio Barbosa

Founder & CO-CEO

Forbes Under 30. One of the leading voices in Fintech & Crypto in Brazil. Writes weekly about stablecoins, payments, and the future of financial infrastructure in Latin America.

Cover image for Lumx blog article: Stablecoin tax in Brazil: IOF, invoices and CVM scope
Cover image for Lumx blog article: Stablecoin tax in Brazil: IOF, invoices and CVM scope

Stablecoin tax in Brazil is not a separate tax in the texts read. IOF, the tax on foreign exchange operations, is set for bank foreign exchange and does not name stablecoins. For a company payment flow the open points are IOF on the conversion, the invoice behind the payment, and whether the asset sits under the Central Bank or the CVM.

Does IOF apply when a company converts reais into a stablecoin?

No text says it does. IOF under Decree 6.306/2007 is charged on foreign exchange operations, and the decree lists rates by type of operation. None of its items describes a conversion between reais and a virtual asset, and the decree never mentions virtual assets.

How IOF reads for four ways a Brazilian company can move value across the border, as of November 6, 2026.

Flow

What happens

What the text says about IOF

Company wires reais abroad through a bank to pay a supplier

A foreign exchange operation: the bank delivers foreign currency

Article 15-B, item XXIV of Decree 6.306/2007, in the wording of Decree 12.499/2025: 3.5% on other outbound foreign exchange transfers. That wording was suspended by Legislative Decree 176/2025 and is under ADC 96, so 3.5% is not settled as the rate

Company receives foreign currency from a foreign customer through a bank

A foreign exchange operation

Article 15-B, 1st item: zero on export proceeds of goods and services. Item XXV: other inbound operations, 0.38% in the 2014 text that Legislative Decree 176/2025 restored

Company converts reais into USDC at a virtual asset provider

A virtual asset operation that Article 76-A, 4th item, of Resolution BCB 277/2022 places in the foreign exchange market, with no foreign currency delivered

No item of Decree 6.306/2007 names it. Lumx's position is that no IOF applies

Company pays a supplier abroad by sending USDC

An international payment with virtual assets (Article 76-A, 1st item)

No item names it. Get a written opinion from tax counsel before volume

The first two rows are the bank route, and their rates are contested. Legislative Decree 176/2025 suspended the wording of Decree 12.499/2025, and ADC 96, the Supreme Federal Court case on the 2025 IOF changes, is pending. The compiled decree stacks both versions and does not settle which rate applies. Ask the bank for the rate and date it applied.

On Lumx, the BRL leg is an on-ramp, and the receipt lists the base rate, the Lumx fee, the partner fee when set, and the final amount. The Brazilian entity handles only reais or stablecoin, never foreign currency.

The tax follows foreign currency changing hands: Decree 6.306/2007 makes the delivery of currency the taxable event (Article 11) and has authorized institutions collect it (Article 13). A dollar stablecoin is not foreign currency under Law 14.478/2022: Article 3, 1st item, excludes national and foreign currency from the definition of virtual asset. That supports the position that converting reais to a stablecoin is not an IOF event, an inference from definitions and not a Receita ruling.

The open point is whether a tax authority reads the whole chain, reais in and dollars delivered abroad, as one foreign exchange operation. The international transfers post covers that side.

Resolution 521 puts stablecoin conversion in the foreign exchange market

Resolution BCB 521 of November 10, 2025 (text via the Central Bank API) adds Article 76-A to Resolution BCB 277/2022. It includes in the foreign exchange market international payments with virtual assets, transfers to or from a self-custodied wallet, and the purchase, sale or exchange of fiat-referenced virtual assets. Paragraph 2 bars buying or selling virtual assets against foreign currency. So the activity sits in the foreign exchange market without being a foreign exchange operation under Decree 6.306/2007: no foreign currency is delivered. The resolution has no word on IOF. What it adds is duties and limits. Article 76-A bars moving funds in a third party's interest through these services, except when the provider serves an authorised foreign exchange institution acting for its own clients (§3). It requires the provider to identify the owner of a self-custodied wallet (§5). Article 76-C requires the provider to collect the purpose of each international payment, and Article 82-A requires reports to the Central Bank by the fifth day of the following month.

When the counterparty is not an institution authorised in the foreign exchange market, an international payment with virtual assets is capped at US$100,000 for a SPSAV and US$500,000 for the other institutions acting as virtual asset providers under item II of Article 29. Article 76-A applies from February 2, 2026, and Articles 76-C and 82-A from May 4, 2026. The provider's side is in the Brazil regulation guide and the licence post.

On Lumx, the Brazilian entity is Lumx Sociedade Prestadora de Serviços de Ativos Virtuais Ltda. SPSAV is the company type that holds a PSAV (Prestadora de Serviços de Ativos Virtuais, Brazil's virtual asset service provider authorization). Lumx filed its application, operates under the Article 88 transition regime of Resolution BCB 520 of November 10, 2025, and is not a bank.

Invoices: the payment method does not change the service invoice

No text regulates invoicing when the payer settles in a stablecoin, so the invoice follows the underlying transaction. For services sold abroad, Complementary Law 116/2003, Article 2, 1st item, says the municipal services tax (ISS) does not apply to exports of services. The sole paragraph limits that: services whose result is verified in Brazil are not exports, even if a resident abroad pays.

The invoice needs a match to the payment. Picture an auditor who picks ten USDC payments from the year and asks which invoice each settled and at which rate. A team with only a wallet statement answers from memory. The reconciliation post walks through the matching, and receiving USD payments covers inbound.

On Lumx, every on-ramp and off-ramp takes a required purpose, and TRADE_TRANSACTIONS is the value for supplier invoices and import or export settlement. Both transaction types accept a metadata object that appears on the transaction and in every webhook payload, so the invoice number travels with the payment. For finance, the transactions export as CSV, which helps match payments to invoices. The off-ramp memo comes back in the API response and the webhook. The nested payments rule asks that invoices and contracts name the customer that sends the funds. That lines up with Article 76-A, §3: the funds must be the paying customer's own, and the paperwork shows it.

What to keep for each payment. Keep six things per payment: the invoice number, the purpose code, the quoted base rate and the final rate, the transaction hash and the receipt. With Lumx they sit on one transaction. For a bank-route payment, add the IOF rate the bank applied.

Is each stablecoin payment a taxable sale for a company?

The Receita pages read speak to individuals. Its capital gains FAQ defines a capital gain as the positive difference between the sale value of a good or right and its purchase cost. Its income tax manual lists "Stablecoins" as a crypto asset type and says to declare at original acquisition cost, not current value. So an individual declares stablecoins at cost and is taxed on a positive difference at sale. Neither page speaks to a business paying a supplier in USDC.

A dollar stablecoin such as USDC (how USDC works) holds its peg, but in reais a move in the BRL/USD rate can produce a gain or a loss on it.

I recommend that a company ask tax counsel for one page, in writing, before it routes meaningful volume: whether each conversion is treated as a sale, at which rate it is measured, and whether IOF is expected on the route. I would rather have that page on file than reconstruct the position during an audit.

On Lumx, each on-ramp and off-ramp carries a receipt with the source and target amounts, the base and final exchange rates, the fees by layer and the transaction hash, so every conversion is its own dated record. The corporate treasury post shows the setup.

Is tax withheld on a payment to a supplier abroad?

Possibly, depending on what is bought. Law 9.779/1999, Article 7, subjects income from services paid, credited or remitted to a resident abroad to income tax withheld at source at 25%. The article does not say who withholds.

What was read and what stays open for a payment abroad, as of November 6, 2026.

Leg

What was read

Status

Income tax withheld at source on services

Law 9.779/1999, Article 7: 25% on services income remitted abroad

Read. Whether it applies to your service, and whether a tax treaty changes it, is for counsel

CIDE, PIS and Cofins on imports

Not read

Open question for counsel

On Lumx, the off-ramp registers the supplier as a destination with a holder relationship such as SUPPLIER, and the purpose and invoice metadata give counsel the facts. Lumx withholds no tax on a payout abroad.

Reporting to Receita: DeCripto replaced IN RFB 1.888 in July 2026

Receita's notice on IN RFB 2.291 of November 14, 2025 says the crypto-asset declaration, DeCripto, replaces the 2019 model from July 2026.

Brazilian crypto-asset service providers file every month, whatever the amount. Individuals and companies file only if they operate without a Brazilian provider and exceed R$35,000 in the month, up from R$30,000. Providers abroad that serve Brazil are now covered, under Law 14.754/2023.

A company paying through a Brazilian provider is therefore mostly not the filer. Ask the provider what it reports to the Central Bank under Article 82-A and what it files in DeCripto. The self-custody reporting post covers the separate COAF report.

On Lumx, the reporting is Lumx's: it reports under IN RFB 1.888/2019, IN RFB 2.291/2025 (DeCripto) and the Annex II-A report to the Central Bank (Article 82-A of Resolution BCB 521/2025). Each customer has a custodial wallet on each network, held with BitGo, with no pooled account, so a Lumx balance is not a self-custodied wallet.

Where the CVM stops and the Central Bank starts

The securities regulator, the CVM, is not the regulator of a payment stablecoin. Law 14.478/2022 draws the line twice. Article 1, sole paragraph, says the law does not apply to securities under Law 6.385/1976 and changes no competence of the CVM. Article 3, 4th item, removes from the virtual asset definition assets whose issuance or trading is already set by law or regulation, such as securities.

So the test is what the token represents. A dollar stablecoin used to pay an invoice is a payment instrument and falls under the virtual asset regime, which the Central Bank regulates under Article 7 of Law 14.478/2022 and Article 1 of Decree 11.563/2023, as the preamble of Resolution BCB 521 cites them. A token that carries rights over a business, a fund or a revenue stream is a candidate for the securities regime, and that analysis belongs to counsel. The CVM's Parecer de Orientação 40 is cited by name and number only.

On Lumx, the assets are USDC and USDT, delivered to the customer's custodial wallet as the settlement leg of a payment. Lumx issues no token that carries rights over a business or a fund.

When not to rely on this post

Do not use it to price a deal or file a return. It reads what the Presidency, the Central Bank and Receita published, not your facts, and covers a company's payment flow, not funds or company income tax. For cards, see the card tax post.

What a BRL to USDC flow looks like with Lumx

Lumx is stablecoin payments infrastructure for businesses that move money between Latin America and the rest of the world: one API to collect, hold, convert, and pay out in BRL, MXN, COP, USD, EUR, and GBP or in USDC and USDT, over local rails such as PIX, SPEI, PSE, Bre-B, ACH, FEDWIRE, SEPA, and Faster Payments, with SWIFT and on-behalf-of payments and collections (POBO and COBO) in USD, EUR, and GBP, plus named virtual accounts, custodial wallets, and KYB/KYC built in.

For a Brazilian company, the collection leg is a Pix (Brazil's instant payment system, run by the Central Bank) payment into a named BRL account in the company's own name. The deposit converts to USDC or USDT and lands in the company's custodial wallet. Payouts run the other way, as an off-ramp to a verified, registered destination. See BRL to USDC and USDC to BRL.

On the tax side, Lumx's position is that no IOF applies to the conversion between reais and a stablecoin, because a stablecoin is not foreign currency and the Brazilian entity never handles foreign currency. The operator map shows each entity's legs.

Methodology and sources

Every claim above comes from a text read on November 6, 2026: the decrees and laws on planalto.gov.br, Resolutions BCB 520 and 521 through the Central Bank's normative API, the Receita pages on gov.br, and the Lumx docs on transactions, webhooks, purpose codes and nested payments. The reporting instruments are named, not described: IN RFB 1.888/2019 and the Annex II-A report are cited by number only.

Not read: IN RFB 2.291/2025 itself, which sits behind a script-only portal, so the notice stands in for it; CVM Parecer de Orientação 40; Resolution BCB 277/2022 as a whole; Receita's treatment of companies; CIDE, PIS and Cofins on imports; and any act after Decree 12.499/2025 that changed the IOF rates. The compiled decree stacks the 12.499 wording and the text restored by Legislative Decree 176/2025, and the text read does not settle which rate applies.

Verified on November 6, 2026. Operational context, not legal, tax, or investment advice. Decree 6.306/2007 checked against planalto.gov.br on November 6, 2026. Decree 12.499/2025 checked against planalto.gov.br on November 6, 2026. Law 14.478/2022 checked against planalto.gov.br on November 6, 2026. Law 9.779/1999 checked against planalto.gov.br on November 6, 2026. Complementary Law 116/2003 checked against planalto.gov.br on November 6, 2026. BCB Resolutions 520 and 521/2025 checked on the Central Bank norms API on November 6, 2026.

Cover photo: Clarisse Croset on Unsplash.

  • What is the stablecoin tax in Brazil, and does IOF apply?

    No tax specific to stablecoins exists. IOF applies to foreign exchange operations under Decree 6.306/2007, and the decree does not list a conversion between reais and a virtual asset. Law 14.478/2022 excludes foreign currency from the virtual asset definition, which supports the position that no IOF applies, though it is not a Receita ruling. On Lumx, the BRL leg is an on-ramp and the receipt shows the rate and fees.

  • Does a stablecoin payment need an invoice in Brazil?

    The invoice follows the underlying sale, not the payment method. Complementary Law 116/2003 exempts service exports from the municipal services tax, except services whose result is verified in Brazil. On Lumx, each transaction takes a purpose, with TRADE_TRANSACTIONS for supplier invoices, and the metadata object carries the invoice number into every webhook.

  • Does the CVM regulate stablecoins used for payments in Brazil?

    Not as a payment instrument. Law 14.478/2022 leaves securities with the CVM, so the test is what the token represents. A token carrying rights over a business or fund is for counsel. On Lumx, the assets are USDC and USDT, and it issues no token carrying rights over a business or fund.

  • Must a company report stablecoin payments to Receita?

    Brazilian providers file in DeCripto every month. A company files only if it operates without a Brazilian provider and exceeds R$35,000 in the month. On Lumx, wallets are custodial and Lumx does the reporting.

  • Is a stablecoin conversion a taxable sale for a company?

    The Receita pages read speak to individuals and do not settle it for a company, so the answer comes from the accountant under the company's tax regime. What helps is one dated record per conversion. On Lumx, each on-ramp and off-ramp has a receipt with the amounts, the base and final rates and the fees.

Stay up to date with what Lumx is developing.

Sign up to receive them by email.

Share on socials:

stablecoin-tax-brazil-iof

A

stablecoin-tax-brazil-iof

Stablecoin tax in Brazil: IOF, invoices and CVM scope

Copy link

Copied!

stablecoin-tax-brazil-iof

TALK TO OUR TEAM

Ready to transform your business with stablecoins?

Discover how our infrastructure can seamlessly integrate stablecoins into your financial operations quickly, securely, and efficiently.

Regulation

In this page

©2026. All rights reserved.

Lumx US OP LLC ("Lumx") is a financial technology and payments infrastructure company. Lumx US OP LLC is a Money Service Business (MSB) registered with the Financial Crimes Enforcement Network (FinCEN) (MSB #31000316459619). Lumx is not a state-licensed money transmitter and does not, in its own capacity, engage in the provision of regulated money transmission services. All such regulated activities are conducted exclusively through, and under the licenses of, duly authorized financial-institution partners.


Lumx is not a bank, financial institution, payment institution, or custodian of client funds. Certain services made available through the Platform may be provided by duly authorized and regulated third-party partners, in accordance with applicable laws and regulations.

Please refer to Lumx’s Terms of Use and Privacy Notice for further information regarding the conditions governing the use of the Platform and the processing of your personal data.