Methodology

How VASP Tracker collects, matches and labels the data. Every statement on the site has a source: BCB data or a dated public link.

Sources

• BCB · Authorisation processes (OData): open authorisation processes per monthly reference date. We collect every reference date since Jan 2024 (32 collections; failed: 2024-08).
• BCB · SituacaoProcessosAutorizacao: status of each process, queried on every daily run.
• BCB · Institutions in operation: authorised SPSAVs (currently 0) and other authorisations held by group companies.
• BCB · Pix participants: context only; Pix participation is not SPSAV authorisation.
• Receita Federal · CNPJ open data (company register, October 2026 load): legal name and CNPJ root of each entity.
• Public statements: the company's own announcements, help centre, terms of use or licence page; press only when no company source exists.

Source Hierarchy

Every CNPJ and every statement shows its source type:

1. official Central Bank of Brazil (open data, register of institutions, Pix, rules), the Official Gazette (DOU), BCB notices and the Receita Federal CNPJ register.
2. company The company's official announcement, blog or help centre, verified account, or terms of use / legal page naming the legal entity and CNPJ.
3. press · secondary News report or aggregator, used only when we found no official or company source. Replaced as soon as a higher source is found.

BCB status always comes from an official source. Where we found no public statement we record "No public statement found": this describes our search, not the company's conduct.

Matching and Labels

• In BCB process: an entity of the platform, identified by CNPJ root (8 digits), appears in an open process in the SPSAV segment or with no segment stated. Not authorisation.
• Not in dataset: no SPSAV process found for the identified entities. Does not indicate wrongdoing.
• Denied: a denial published in the Official Gazette (DOU; official source, linked to the DOU page). If BCB's status query still shows a different status, we show both.
• Open processes: we count processes in the SPSAV segment (7) separately from those with no segment stated and a crypto-related name (1), always written as “7 open SPSAV processes (+1 with no segment stated)”. Total on the open list: 8.
• Public statement: a separate field with what the company or press published. BCB does not confirm this field. The date shown is the statement date or, where unclear, the date recorded at the source.
• Major brand: an editorial selection of global and Brazilian exchanges, banks, fintechs and infrastructure with significant retail crypto offerings in Brazil (22 of 170 platforms).

Limitations

• The dataset is monthly. The latest reference date is 30/09/2026; later filings appear only in the next one.
• Only open processes are listed; concluded processes drop off. The filing-date field is empty for SPSAV processes.
• Banks and other already-authorised institutions follow a notification route (Res. BCB 520, art. 22) that is not in this dataset.
• Some CNPJs come from secondary sources (aggregators, press); these are marked on each platform page.

Corrections Policy

We correct factual errors as soon as they are confirmed. Content corrections are logged with a date in the changelog; raw data versions are never deleted.

To report an error, write to press@vasptracker.com with the page link, the passage and the source that supports the correction. Companies listed may send official documents (for example a BCB filing receipt or the responsible entity's CNPJ).

Corrections published up to 2026-10-22: none.