Brazil ransomware and cyber extortion policy

Brazil's Crypto-Freeze Fraud Bill Targets the Cash-Out Layer, Not the Scam Itself

PL 5819/25 lets Brazilian judges freeze crypto wallets and raises digital fraud sentences to 6-10 years, but drops victim restitution and leans on penalties over forensic capacity.

Brazil's Digital Fraud Crackdown, By the Numbers People of Internet Research · Brazil 6-10 yrs New digital fraud penalty Up from 4-8 years under PL 5819/25… R$10.1bi 2024 fraud losses, Brazil Up 17% from R$8.6bi in 2023, per F… $820M Global ransomware payments 2025 Down 8% year-on-year despite a 50%… ~28% Ransomware victim payment rate An all-time low, per Chainalysis's… peopleofinternet.com
Brazil's Digital Fraud Crackdown, By t… People of Internet Research · Brazil 6-10 yrs New digital fraud penalty R$10.1bi 2024 fraud losses, Brazil $820M Global ransomware payments 2025 ~28% Ransomware victim payment rate peopleofinternet.com

Key Takeaways

Brazil's Chamber of Deputies took a real swing at digital fraud on June 11, 2026, when its Finance and Taxation Committee approved PL 5819/25, a bill authored by Deputy Coronel Chrisóstomo (PL-RO) and reported favorably by Deputy Kim Kataguiri (Missão-SP). The text raises prison terms for fraud committed via social media, phone, email, or other digital means from 4-8 years to 6-10 years, adds a one-third sentencing bump when a criminal organization is involved, and — most notably — lets judges freeze bank accounts and cryptocurrency holdings as a precautionary measure against suspects, alongside barring contact with victims and restricting access to social media and payment systems.

The Case For It

The strongest argument for this bill is straightforward: Brazil has a fraud problem of genuine scale, and current tools don't match it. Febraban, the national banking federation, put 2024 fraud losses at R$10.1 billion, up 17% from R$8.6 billion in 2023 — with Pix-specific fraud alone up 43%. When scammers move stolen funds into crypto within minutes of a Pix transfer, a bank-only asset freeze arrives too late; the money has already left the regulated banking perimeter the freeze was designed to reach. Extending precautionary freezes to wallets held at Brazilian virtual asset providers closes a jurisdictional gap that has nothing to do with ideology — it is a straightforward response to how money actually moves today.

That gap is not hypothetical. A Central Bank of Brazil analysis of cryptocurrency mixers — tools like Tornado Cash that deliberately sever the transaction trail blockchain analytics normally provide — ties the problem directly to Federal Police operations against organized crime, including Operação Carbono Oculto. Mixers work precisely because value can hop from a traceable bank rail to a much harder-to-trace crypto rail before authorities can act. A statute that lets a judge freeze the crypto side of that hop, not just the bank side, is targeting a real chokepoint.

Where the Bill Overreaches

But precautionary freezing of assets — before conviction, based on a criminal complaint — is also where due process gets thin. Brazil's courts have a documented history of aggressive pre-trial asset freezes producing years-long entanglement for people never convicted of anything. Applying that same discretion to crypto wallets, which can represent an individual's entire liquid net worth with none of the practical unwinding mechanisms banks offer, raises the stakes of getting the initial probable-cause finding wrong. The bill's one-third sentencing enhancer for "criminal organization or professionalized structure" is also vaguely drafted; without a tighter definition, prosecutors gain discretion to charge routine fraud as organized crime, which is precisely the kind of charge-stacking proportionate-regulation advocates should flag regardless of how sympathetic the underlying conduct is.

It's also worth being precise about what this bill actually targets. Reporting on PL 5819/25 — including Livecoins' coverage of the committee vote — frames it around consumer-facing estelionato (Pix scams, social-engineering fraud), not ransomware or extortion by name. The connection to ransomware is structural, not textual: any extortion payment routed through crypto to a Brazilian-linked wallet falls within the same freeze mechanism, because the law doesn't care what crime generated the funds. That's a reasonable design choice, but the bill's proponents are selling it as an anti-scam measure, and outlets covering ransomware policy should not overstate legislative intent that isn't in the text.

The Missing Piece

The more revealing detail is what Kataguiri's committee draft removed: a proposed national victim-restitution fund, cut on the stated grounds that existing government assistance programs already cover it. That's a legislature choosing to invest in punishment over recovery. Globally, the payoff from punitive escalation alone is already uncertain — Chainalysis's 2026 Crypto Crime Report found on-chain ransomware payments fell 8% to $820 million in 2025 even as claimed attacks rose 50%, with the victim payment rate hitting an all-time low of roughly 28%. That decline tracks with better incident response and law enforcement pressure on laundering infrastructure — not with any single country's sentencing math.

Brazil's own November 2025 Central Bank resolutions creating a licensing regime for virtual asset providers, requiring KYC and AML controls by October 2026, will likely do more to choke off the cash-out channel than a four-year jump in maximum sentences. Traceable, licensed exchanges make asset freezes executable in the first place; harsher penalties on a suspect who has already moved funds through an unlicensed mixer accomplish little. PL 5819/25 still needs approval from the Constitutional and Justice Committee, a floor vote, and Senate passage before it's law — plenty of runway to narrow the organized-crime enhancer and restore a restitution mechanism, without weakening the freeze power that is the bill's actual innovation.

Sources & Citations

  1. Câmara dos Deputados — committee approval notice
  2. Banco Central do Brasil — Revista PGBC on crypto mixers
  3. Chainalysis 2026 Crypto Crime Report — Ransomware
  4. Poder360 — Febraban fraud loss data
  5. Livecoins — PL 5819/25 committee coverage