Brazil’s CVM Gets Court-Backed Mandate to Police Digital Assets

Brazil’s securities regulator has a new president, a Supreme Court-backed restructuring mandate, and a publicly stated goal of supervising tokenized securities in real time. That combination is not routine leadership churn. It is a structural shift in how one of Latin America’s largest capital markets will be policed from late 2026 onward.

The Comissão de Valores Mobiliários (CVM) formally presented its new leadership board at a ceremony in Rio de Janeiro on 18 September 2026. President Otto Eduardo Fonseca de Albuquerque Lobo used the platform to set out an institutional agenda built around artificial intelligence-driven supervision, asset tokenization oversight, and a 22-measure Emergency Restructuring Plan already homologated by Brazil’s Supreme Federal Court.

For investors and issuers operating in or targeting Brazilian capital markets, digital asset regulation in Brazil is no longer a theoretical debate. This piece maps the decisions already in motion, the regulatory boundaries being drawn between the CVM and Brazil’s central bank, and the enforcement and financing consequences that capital-intensive sectors need to factor into their Brazil strategy.

New CVM leadership takes the stage with a clear institutional mandate

The CVM’s new leadership board is now confirmed and operating. President Otto Lobo secured Senate approval on 20 May 2026, assumed office on 5 June 2026, and holds a mandate running to 14 July 2027. He is joined by directors João Accioly and Igor Muniz, with Muniz also approved by the Senate on 20 May 2026 and his appointment published in the Diário Oficial da União on 3 June 2026.

• Otto Lobo (President): Senate-approved 20 May 2026, assumed office 5 June 2026, mandate to 14 July 2027
• João Accioly (Director): confirmed sitting member of the leadership board
• Igor Muniz (Director): Senate-approved 20 May 2026, appointment published in the Diário Oficial da União on 3 June 2026

One editorial note before proceeding. An earlier source listed a fourth director, Marina Copola, but official CVM Gov.br pages updated on 20-21 September 2026 confirm only Lobo, Accioly, and Muniz. Treat the three-member board as the verified position.

At the Rio ceremony, Lobo framed the administration’s ambition around building what he called a “nova CVM”, an institution rebuilt on technology-driven supervision and artificial intelligence. That is the language of a directed project, not a caretaker appointment.

The mandate window is where the pressure sits. Lobo has fewer than 13 months on his current term to show results on the agenda he articulated publicly. That timeline compresses the pace at which the tokenization sandbox and enforcement reforms must move if they are to be claimed as achievements rather than intentions, and it is the first variable issuers should price into their planning.

The three-pillar agenda and what the tokenization sandbox will actually test

The agenda Lobo inherited is not aspirational. It has dates, working groups, and draft instruments already attached. Three pillars structure the whole programme:

• Technological innovation in how the regulator supervises markets
• Asset tokenization oversight for securities issued on distributed ledgers
• Strengthened enforcement capacity backed by new resources

Each pillar has moving parts, but tokenization is where the near-term deliverables are clearest.

How the GTT and the DLT pilot fit together

On 17 July 2026, the CVM instituted the Grupo de Trabalho de Tokenização (GTT), a tokenization working group, with a 120-day mandate to study and propose normative rules for the registration, custody, trading, and settlement of securities on distributed ledger technology, the shared digital record-keeping systems that underpin most tokenized assets.

By mid-September, CVM technical staff had completed a draft resolution to launch the Programa Piloto DLT CVM, a regulatory sandbox. A regulatory sandbox is a controlled environment where firms test products under supervision before full rules apply. The pilot will simulate the full life cycle of a tokenized security, with tests slated to last 60 days, extendable by a further 30 days.

Resolução CVM 67 status: anticipated to advance in fast-track mode. Not yet formally promulgated as of 21 September 2026.

The 120-day GTT mandate expires in mid-November 2026. That means normative proposals will land before year-end, alongside the enforcement targets covered below, creating a concentrated regulatory output window that issuers should be tracking actively rather than waiting to read about.

The classification question sits underneath all of this. Parecer de Orientação 40/2022 remains the existing framework for determining when a cryptoasset qualifies as a security, and the sandbox parameters will define which tokenized instruments get first-mover clarity. If you are structuring tokenized debentures or fund units, the practical question is whether your proposed structure falls inside the pilot’s scope before you commit to an on-chain raise.

For investors exploring how fund vehicles intersect with the CVM’s tokenization framework, our dedicated guide to Brazil’s critical minerals fund structures examines the specific FIDC and equity fund formats that are most likely to fall within the CVM’s DLT pilot scope.

How ANBIMA’s private-sector pilot intersects with CVM’s sandbox

The CVM is not building in isolation. ANBIMA, the Brazilian Financial and Capital Markets Association, launched its Jornada de Tokenização in April 2026, including a closed DLT pilot environment featuring up to 20 selected projects testing tokenized debentures and fund quotas.

This is a domestic precedent the regulator is actively benchmarking, not a rival initiative. Outcomes from the ANBIMA environment will likely feed into the normative proposals the GTT produces before mid-November, which means the private-sector tests running now are effectively shaping the public rulebook that follows.

The Emergency Restructuring Plan: what 22 measures and a Supreme Court order mean in practice

The agenda is only as credible as the institution delivering it, and this is where the CVM is being rebuilt rather than rebranded. Following an initial order by STF Minister Flávio Dino on 5 May 2026, the Supreme Federal Court homologated the Emergency Restructuring Plan on 2-3 July 2026.

That judicial backing is the signal to take seriously. This is not a self-declared reform but a court-supervised rebuild, which raises the probability that the enforcement targets attached to it will be pursued under genuine accountability pressure.

The STF homologation of the CVM restructuring plan, confirmed by Minister Flávio Dino, covers four central axes: repressive enforcement action, human capital recomposition, interinstitutional intelligence, and preventive supervision, giving the 22-measure programme binding judicial authority rather than ministerial discretion.

The plan runs on 22 measures and channels new resources into four priority areas.

Enforcement milestone: a 20% reduction in the stock of administrative proceedings by 31 December 2026.

One caveat on the money. The budget reinforcement is confirmed, but no exact figure or detailed funding schedule appears in accessible public documents as of the reporting date, so treat the scale of resourcing as directional rather than quantified.

The AI-powered market-abuse detection layer is the change with the most immediate read-through for you as a listed company or fund manager. Opaque or structurally complex tokenized instruments will face automated scrutiny the moment they interact with the CVM’s integrated data platform, which shifts the enforcement burden toward transparent, well-documented structures.

What CVM’s regulatory boundary with the Banco Central means for tokenized capital raises

Knowing who regulates what is the difference between a clean raise and a compliance rebuild mid-transaction. Under Law 14.478/2022, the Marco Legal das Criptomoedas, and Decree 11.563/2023, the Banco Central do Brasil (BCB) regulates virtual asset service providers (VASPs). The CVM retains jurisdiction over any token that qualifies as a security, regardless of its digital representation.

Lei 14.478/2022, the Marco Legal das Criptomoedas, establishes the foundational statutory framework assigning VASP oversight to the Banco Central do Brasil, with the CVM retaining jurisdiction over any token that meets the criteria for a security under existing securities law.

The CVM has also clarified the edges. In April 2026 it issued Ato Declaratório CVM 25.300, stating that ordinary brokerage and trading of non-security cryptoassets such as Bitcoin and Ethereum fall outside its scope. That finding is not independently confirmed in accessible public sources, so weight it with appropriate caution.

For capital-intensive sectors, the practical map looks like this.

Mining and energy issuers lean heavily on debentures, project finance vehicles, and receivables-backed funds (FIDCs). Because those instruments qualify as securities, they sit under CVM oversight even when issued on-chain, not under the BCB VASP regime.

Brazil’s critical minerals regulation is evolving in parallel with the CVM reforms, and mining issuers structuring project-finance debentures or FIDC vehicles will need to map compliance obligations across both frameworks before committing to an on-chain capital raise.

The lastro dimension is where scrutiny concentrates. The restructuring plan targets systemic audits of underlying assets in FIDCs and single-quota funds, so for tokenized instruments the verifiability of physical contracts, off-take agreements, royalty streams, and power-purchase contracts, becomes a live compliance pressure point rather than a back-office formality.

Gold traceability requirements under Project Law 3025/2023 add a further compliance layer for mining issuers, because on-chain tokenized instruments referencing gold production must satisfy both the CVM’s lastro verifiability standards and the statutory chain-of-custody documentation the traceability framework demands.

For a mining or energy company weighing a tokenized raise, the question is not whether digital assets are regulated. It is which regulator applies to your specific structure, and getting that wrong at the design stage means either an unauthorized offering or a rebuild mid-raise.

A two-step due diligence sequence keeps that risk contained:

1. Determine whether the token qualifies as a security under the Parecer de Orientação 40/2022 criteria.
2. Map the settlement architecture to identify where BCB VASP oversight overlaps with CVM securities requirements.

Issuers whose instruments touch payment settlement systems will face both regimes simultaneously, which is why early legal mapping matters before any on-chain distribution architecture is locked in.

What the CVM’s agenda signals for Brazil’s capital markets over the next 12 months

The near-term calendar clusters tightly. Three deadlines converge in the fourth quarter, which makes Q4 2026 the highest-density regulatory output period on the CVM’s horizon:

• GTT normative proposals due mid-November 2026
• 20% enforcement backlog reduction due 31 December 2026
• Resolução CVM 67 advancing in fast-track mode, not yet promulgated as of 21 September 2026

Whether that output holds up depends on technical questions still being argued. These are live variables, not footnotes:

• Public versus permissioned blockchains for regulated issuance
• Interoperability between networks
• Cyber resilience and settlement finality

Brazil is not setting the global standard here. The EU’s MiCA framework and Portugal’s CMVM 2026 priorities on crypto-asset service providers show that Brazil’s fast-track approach is competing with, not leading, a global wave of real-world asset tokenization regulation. What distinguishes Brazil is pace within a defined judicial accountability structure, which makes the Q4 output more likely to stick than to be quietly shelved.

Brazil’s appetite for fast-track regulatory reform extends beyond the CVM, with the National Mining Agency pursuing accelerated licensing changes that carry their own compliance timelines for issuers whose underlying assets are mineral extraction projects.

The practical decision point is clear. If you have active or planned exposure to Brazilian capital markets, you need to determine before Q4 2026 whether your instrument structures fall inside or outside the CVM DLT pilot scope, because the pilot’s normative output will set the compliance baseline for tokenized securities issuance in Brazil for years ahead.

This article is for informational purposes only and should not be considered financial advice. Investors should conduct their own research and consult with financial professionals before making investment decisions. These statements are speculative and subject to change based on regulatory developments and market conditions.