For more than half a decade, Brazil has been the world's most-watched laboratory for fintech-led financial inclusion. Nubank passed 100 million customers across Latin America. Mercado Pago turned an e-commerce checkout into a regional banking franchise. PicPay rode the Pix wave from a small wallet into a mass-market platform. And Pix itself, the Banco Central do Brasil's instant payment rail launched in November 2020, has become a global reference point cited by central banks from London to Delhi.
That growth, however, has changed what fintech is in Brazil. It is no longer a fringe of small startups nibbling at incumbents — it is, increasingly, systemic infrastructure. And the Banco Central do Brasil (BCB) is regulating accordingly. Through Resolution BCB No. 197/2022 and its successor instruments, the central bank is phasing in stricter capital, governance, and consolidated-reporting requirements for payment institutions and prudential conglomerates, with the heaviest obligations landing between 2025 and 2028. The direction of travel is unmistakable: the largest fintech groups will be supervised on terms much closer to those facing traditional banks.
What Resolution 197 Actually Does
Resolution 197 reorganised the BCB's prudential framework for non-bank payment institutions and the conglomerates that contain them. In broad strokes, it does three things. First, it raises and recalibrates minimum capital requirements, with the steepest tiers reserved for the largest, most diversified groups — those that combine payments, credit, and investment activity at scale. Second, it moves supervision from an entity-by-entity view to a consolidated view: the BCB now looks through the corporate structure of groups like Nubank's holding company, PicPay's parent, and Mercado Libre's Brazilian financial arm, evaluating risk across the whole perimeter rather than one licence at a time. Third, it tightens governance, risk-management, and reporting obligations, with implementation phased through 2025–2028 to give institutions time to adapt.
This is, in important respects, exactly the kind of supervision that critics of light-touch fintech regulation have been calling for since the collapse of crypto-adjacent payment platforms in other jurisdictions. A fintech holding tens of millions of customer balances, originating credit at scale, and processing a meaningful share of national payments is not the same risk object as a 2018-vintage wallet startup. Treating it as such would be its own kind of regulatory failure.
Pix Keeps Expanding — Including Into Recurring Payments
What makes Brazil's case interesting is that the prudential tightening is happening alongside, not instead of, continued public-rail innovation. The BCB rolled out Pix Automático in 2025, allowing recurring payments — subscriptions, utility bills, gym memberships, streaming services — to be debited via Pix with user consent. That is a direct competitive shot at credit-card interchange and at legacy direct-debit systems, and it is a state-built rail doing the disrupting.
Pix volumes already dwarf those of cards on a transaction-count basis in Brazil, and Pix Automático extends that footprint into the most economically valuable category cards still dominate: predictable, high-margin recurring billing. For fintechs, this is a double-edged sword. Pix lowered their cost of customer acquisition by making bank-account-like utility free and instantaneous. Pix Automático raises the bar again — but it also commoditises a revenue stream that some fintechs and card networks were counting on.
The Pro-Innovation Case for Getting This Right
The risk is not that Brazil is regulating systemic fintechs more strictly — that is appropriate and overdue. The risks are subtler:
- Calibration creep. Rules designed for the Nubank-scale conglomerate must not cascade onto a 200-employee fintech with a single niche product. Proportionality has to be defended at every implementation phase, not just promised in the preamble.
- Reporting burden as a moat. Heavy consolidated reporting, when applied uniformly, becomes a barrier to entry that benefits the very incumbents it was designed to discipline. The marginal compliance hire is trivial for Itaú; it is existential for a Series A challenger.
- Innovation arbitrage. If BCB rules become materially heavier than equivalent regimes in Mexico, Colombia, or the EU, capital and product launches will route elsewhere. Brazil's edge has been the combination of a sophisticated central bank, a vast domestic market, and a regulatory culture willing to build infrastructure (Pix, Open Finance) rather than only restrict it. Losing the third leg would matter.
- State-rail dominance. Pix is a remarkable public good, but a payments landscape where one state-run rail keeps absorbing new use cases needs honest debate about competition, resilience, and single points of failure. A cyber incident on Pix would be a national-scale event.
A Reasonable Frame
The defensible position is straightforward. Apply bank-like prudential rules to fintechs that have, in substance, become banks — Resolution 197's consolidated approach is the right instrument. Keep proportionality real for the long tail of smaller licensees. Continue building open, neutral public rails like Pix, including Pix Automático, but pair that with transparent governance and competition safeguards. And resist the temptation to treat regulatory convergence as a finish line. Brazil's fintech sector is globally competitive precisely because the BCB has, so far, regulated outcomes rather than business models. The 2025–2028 phase-in is the moment to prove that commitment still holds.
Get the calibration right, and Brazil cements its position as the emerging-market template for how to supervise platform finance without strangling it. Get it wrong — by over-extending bank-grade requirements down the size curve, or by letting Pix's expansion crowd out private innovation — and the country risks turning a generational advantage into a cautionary tale.