White-Collar Crime 2026

Last Updated October 22, 2026

Brazil

Law and Practice

Authors



Mudrovitsch Advogados is a law firm with outstanding expertise in white-collar crime and compliance, covering both risk assessment and preventive counselling and representation in criminal proceedings. Its team is composed of 12 lawyers, highly specialised partners and associates that have vast experience in white-collar crime and academic credentials that range from constitutional law to criminal law, and from corruption and organised crime to corporate compliance and ethics. The team is well-known for its expertise in providing legal advice and supporting on white-collar cases, and its main work consists of assisting individuals in risk-assessment of leniency agreements, criminal procedures, and election campaign donation agreements. The firm has accumulated several recognition awards. Mudrovitsch Advogados has offices in cities such as Brasília, Rio de Janeiro, São Paulo, Cuiabá, and Porto Velho.

Under Brazilian law, an offence must be typical, unlawful and culpable: the conduct must correspond to a statutory offence, lack a legal justification and be attributable to a criminally responsible person.

Offences are classified as crimes or misdemeanours. Crimes are punishable by imprisonment or detention, alone or together with a fine, while misdemeanours are subject to simple imprisonment and/or a fine.

Criminal liability generally requires intent, meaning that the offender intended the result or assumed the risk of producing it. Negligent liability, arising from recklessness, negligence or lack of skill, applies only where expressly provided by law.

An attempted crime is punishable under Article 14 of the Criminal Code, with a reduction of the prescribed sentence. Attempts to commit misdemeanours are not punishable.

In Brazilian criminal proceedings, the principles of the presumption of innocence and in dubio pro reo apply. Accordingly, the prosecution bears the burden of proving the defendant’s guilt beyond a reasonable doubt, including the existence of the offence, its relevant circumstances and the defendant’s participation. A conviction may only be entered where the evidence is sufficient to overcome the presumption of innocence.

Brazilian law distinguishes between limitation of the right to prosecute before a final conviction, and limitation of the right to enforce a sentence thereafter.

Under Article 109 of the Criminal Code, the limitation period before final judgment is determined by the offence’s maximum statutory sentence: three years where the maximum is less than one year; four years where it is between one and two years; eight years where it exceeds two but not four years; 12 years where it exceeds four but not eight years; 16 years where it exceeds eight but not 12 years; and 20 years where it exceeds 12 years.

As a rule, time runs from completion of the offence; for continuing offences, from the date the conduct ceases. Limitation may be interrupted by events including acceptance of the indictment and publication of a conviction (Article 117).

After a final conviction, the limitation period for enforcement is generally determined by the sentence actually imposed, applying the same periods under Article 109.

Brazilian criminal jurisdiction is primarily territorial. However, Article 7 of the Criminal Code permits the application of Brazilian law to certain offences committed abroad, including where Brazilian interests or nationals are involved or international obligations require it.

International legal co-operation is generally channelled through the Ministry of Justice, acting as Central Authority through the Department of Asset Recovery and International Legal Co-Operation (DRCI). Assistance may include exchange of legal information, service of summonses and notifications, obtaining evidence or testimony, and freezing, forfeiture and recovery of assets. Extradition is not limited to treaty partners: in the absence of a treaty, it may be sought on the basis of reciprocity and subject to Law No 13,445/2017.

Brazil has extensive cross-border enforcement experience. Operation Car Wash, for example, led to a 2016 co-ordinated resolution involving Odebrecht and Braskem and authorities in Brazil, the United States and Switzerland. Brazil also participates in FATF, the OECD Working Group on Bribery and INTERPOL; the INTERPOL National Central Bureau in Brasília forms part of the Federal Police.

In Brazil, legal entities are generally not subject to criminal liability, except for environmental offences. Under Law No 9,605/1998, liability arises where the offence results from a decision of the entity’s legal or contractual representative, or collegiate body, and is committed in its interest or for its benefit. Corporate liability does not exclude individual liability, although the Supreme Court (STF) permits a legal entity to be prosecuted without identifying or prosecuting a natural person. There is no policy preference as to whether an entity or individual should be pursued.

Managers and directors may incur personal liability where their own conduct satisfies the elements of an offence. In environmental cases, this includes people who know of criminal conduct and fail to prevent it when able to do so; Article 13(2) of the Criminal Code more generally recognises liability for omissions where there is a legal duty and ability to prevent the result.

In non-fraudulent mergers, the Superior Court of Justice (STJ) holds that the target’s environmental criminal liability is extinguished because criminal responsibility cannot be transferred to the successor. Likewise, parent companies are not automatically liable for offences committed by subsidiaries or other group companies.

Brazil does not recognise a general corporate “failure to prevent” offence. The omission rules above concern individual liability and do not create autonomous corporate criminal liability.

Article 68 of the Criminal Code establishes a three-stage sentencing process. First, the court sets the base sentence by assessing culpability, criminal record, social behaviour, personality, motives, circumstances and consequences of the offence, and the victim’s conduct. Secondly, statutory mitigating factors, such as confession, and aggravating factors, such as recidivism, are applied. Thirdly, statutory causes of increase or reduction, including continuous offences and attempts, are considered.

The court must also assess whether imprisonment may be replaced by an alternative sanction or whether enforcement may be suspended subject to probation. Fines are calculated in day-fines: the court determines both the number, from ten to 360, and the value of each day-fine within the statutory limits, subject to monetary adjustment.

For deferred prosecution, non-prosecution and plea agreements, see 2.7 Deferred Prosecution and 4.3 Please Agreements, Co-Operation, Self-Disclosure and Leniency.

Brazilian law does not recognise a “corporate culture” doctrine as a specific sentencing factor, consistent with the limited scope of corporate criminal liability.

Under Article 387, IV, of the Criminal Procedure Code (CPP), the judge, when delivering a convicting sentence, will set a minimum amount for the compensation of damages caused by the offence, considering the losses suffered by the victim. The determination of the compensation amount must also consider the principles of reasonableness and proportionality, the intensity of the victim’s suffering, the severity of the harm, the economic condition of the defendant, and the compensation–punishment balance.

In addition, Article 63, sole paragraph of the CPP also states that the amount set in the criminal sentence does not prevent the party from seeking liquidation to determine a higher amount, thereby obtaining full compensation for the damage. Lastly, according to Brazilian Superior Courts (STF and STJ), it is possible to claim compensation for collective moral damages in criminal actions.

White-collar offences are investigated principally by the Civil Police and Federal Police and prosecuted by the Public Prosecution Office, before state or federal courts. Specialised police units, prosecutors and courts may exist depending on the subject matter and jurisdiction.

Under Article 144 of the Constitution, the Civil Police investigates state offences, while the Federal Police investigates, among other matters, offences affecting federal interests and offences with interstate or international implications. The Public Prosecution Office brings criminal prosecutions through federal or state prosecutors, as applicable.

Administrative and civil enforcement may proceed in parallel. COAF performs financial-intelligence and administrative functions under the Anti-Money Laundering Law; the CGU and TCU may act in matters involving public officials or public funds; the Central Bank and CVM conduct administrative enforcement in the financial and securities markets; and CADE investigates competition infringements.

Public policy may influence enforcement priorities, resources and senior appointments, but the Public Prosecution Office and judiciary have constitutional independence. Accordingly, political influence should not lawfully determine the outcome of individual investigations or prosecutions, although concerns regarding institutional pressure continue to form part of the broader public debate.

White-collar crime investigations can be initiated based on complaints or reports made by individuals, companies or other entities. These reports can be submitted to authorities such as the Federal Police, the Public Prosecution Office, or regulatory agencies. Also, they can be initiated throughout routine audits and inspections by regulatory agencies, like the Brazilian Securities and Exchange Commission, the Federal Revenue Service, and the Central Bank, which conduct routine audits and inspections that might uncover irregularities or signs of white-collar crimes.

Moreover, the Federal Police can initiate investigations into white-collar crimes based on intelligence, ongoing operations, or referrals from other agencies. The Public Prosecution Office may also initiate investigations, and, according to the Supreme Court, it requires: (i) immediate notification to the competent judge regarding the initiation and conclusion of the investigative procedure, with proper registration and distribution; (ii) adherence to the same deadlines and rules established for the completion of police inquiries; and (iii) the need for judicial authorisation for any extensions of deadlines.

Under Brazilian criminal law, a judge must be presented with probable cause to authorise dawn raids and search warrants. When the investigating authority deems that a search and seizure are necessary, it must request a search warrant from a competent judge, providing justified reasons for the need to employ this measure.

It is important to note that, according to the Supreme Court, generic search and seizure warrants, without individualisation, can constitute a form of fishing expedition; a tactic that is prohibited.

The court’s decision to authorise a raid must detail the scope of the measure, specifying which papers, documents or objects are to be searched and seized. The court order must also include the reasons for the investigation and its objectives.

With regard to questioning employees, officers, directors, or third parties, the authorities may issue subpoenas requiring them to provide testimony or information. The questioning must be conducted following legal procedures to ensure that the rights of the individuals are protected, such as the presence of a lawyer and the right to remain silent.

Moreover, Brazilian law enforcement authorities have the power to trace, freeze and seize digital assets in the course of criminal investigations, subject to prior judicial authorisation. According to the Code of Criminal Procedure, courts may order precautionary measures over assets connected with criminal activity. In money laundering cases, for example, Law No 9,613/1998 authorises a judge, where there is sufficient evidence of a criminal offence, to impose precautionary measures over assets, rights or values belonging to the investigated or accused person, or held in the name of third parties, where they constitute an instrument, product or proceeds of money laundering or of the underlying offence.

Brazilian enforcement authorities are increasingly using AI and other advanced digital tools in criminal investigations. However, there is still no general legislation specifically governing the use of AI for investigative purposes. Ordinance MJSP No 961 of 24 June 2025, issued by the Ministry of Justice and Public Security, is the first instrument to specifically regulate the use of AI in criminal investigations. It requires such technologies to be used in accordance with the principles of legality, adequacy, necessity and proportionality, and requires the preservation and verification of the chain of custody to safeguard the authenticity and integrity of evidential material. The Ordinance also prohibits the indiscriminate use of technological solutions without a defined and declared purpose and provides that access to data protected by legal secrecy requires a specific judicial order.

Internal investigations are not considered necessary nor mandatory in Brazil. Therefore, their conduct is governed by a fragmented body of rules which, although relevant, do not directly address the specific features of this type of inquiry. In addition to the Anti-Corruption Law, which establishes the strict administrative and civil liability of legal entities for unlawful acts against the public administration, there is the State-Owned Enterprises Law (Law No 13,303/2016), which sets out guidelines on corporate governance and compliance, and the General Data Protection Law (Law No 13,709/2018), which imposes restrictions on the processing of personal data and therefore directly affects the collection of information during internal investigations. In addition, guidance issued by public authorities, such as the Office of the Comptroller General and the Public Prosecution Service, provides recommendations on best practices, although such guidance does not have binding legal force.

Generally, there is no legal obligation for a company to voluntarily provide enforcement authorities with the findings or final report of an internal investigation.

Once an investigation is concluded, the Public Prosecution Office assesses whether there is sufficient evidence to bring charges. If so, it files a formal indictment with the competent court, which then determines whether the statutory requirements for the prosecution to proceed have been met.

The Public Prosecution Office has discretion to assess whether the evidential and legal basis for prosecution is sufficient, but that discretion is subject to statutory requirements. It may decline to prosecute where, for example, the facts do not constitute a criminal offence or there is insufficient basis for criminal liability. Where the legal requirements for prosecution are satisfied and no statutory ground for dismissal or alternative resolution applies, criminal proceedings must be pursued.

Article 89 of Law No 9,099/1995 provides for the conditional suspension of criminal proceedings where the minimum statutory penalty is one year or less. When filing the indictment, the Public Prosecution Office may propose suspension for a period of two to four years, provided that the defendant is not being prosecuted for, and has not been convicted of, another criminal offence. During the probationary period, the defendant is generally required to compensate the damage, where possible; refrain from attending certain places; obtain judicial authorisation before leaving the jurisdiction; and report to the court monthly to provide information on their activities.

Article 76 of the same Law provides for a further alternative resolution mechanism for misdemeanours and offences punishable by a maximum sentence of up to two years. In such cases, the Public Prosecution Office may propose the immediate imposition of non-custodial sanctions or a fine, thereby avoiding the commencement of criminal proceedings. The benefit is generally unavailable where the defendant has a final conviction resulting in imprisonment, has received the same benefit within the previous five years, or does not present favourable personal and case-specific circumstances.

Finally, Article 28-A of the Criminal Procedure Code provides for non-prosecution agreements where the minimum statutory sentence is less than four years and the offence was committed without violence or serious threat. Among other requirements, the defendant must formally and substantially confess to the offence, compensate the damage where possible, surrender assets or proceeds connected with the offence, and comply with any other proportionate condition imposed by the Public Prosecution Office.

Criminal company law and corporate fraud offences are primarily governed by Law No 7,492/1986.

Article 4 of the law criminalises fraudulently managing a financial institution, which is defined by unlawful acts performed by those responsible for managing a financial institution, involving deceitful practices and deliberate fraud. The penalty for this crime is imprisonment for a period ranging from three to 12 years, and a fine. Moreover, the sole paragraph of this Article typifies reckless management, which is characterised by the impetuousness with which business is conducted, which increases the risk that business activities may end up causing harm to third parties or misusing the money invested in the company. The penalty provided is imprisonment for two to eight years, and a fine.

Misappropriation and embezzlement of funds is dealt with in Article 5. This crime involves administrators of a financial institution appropriating or diverting funds, money, or movable property for personal benefit or that of others. The penalty is imprisonment for a period ranging from two to six years, and a fine.

Article 9 provides a penalty of imprisonment for a period ranging from one to five years and a fine for those who defraud regulatory authorities or investors, inserting a false or differing statement in a document evidencing investment in securities or financial assets. Finally, Article 11 provides the same penalty for those who maintain or handle resources or values in parallel to the accounting required by law.

The principal bribery offences are active and passive corruption under the Criminal Code.

Active corruption (Article 333) consists of offering or promising an undue advantage to a public official to induce the performance, omission or delay of an official act. It is punishable by two to 12 years’ imprisonment and a fine, increased by one-third if the official consequently delays, omits or improperly performs the act.

Passive corruption (Article 317) consists of a public official requesting or receiving, for themselves or another, an undue advantage connected with their office, or accepting its promise. The basic penalty is also two to 12 years’ imprisonment and a fine. A lesser form applies where the official improperly acts or refrains from acting in response to another person’s request or influence, punishable by three months to one year’s detention or a fine.

Extortion by a public official (Article 316) differs in that the official demands, rather than merely requests, an undue advantage because of their position. It carries the same basic penalty of two to 12 years’ imprisonment and a fine.

Influence peddling (Article 332) consists of requesting, demanding, charging or obtaining an advantage, or its promise, on the pretext of influencing a public official. The penalty is two to five years’ imprisonment and a fine.

The Criminal Code also criminalises active bribery of a foreign public official (Article 337-B), punishable by one to eight years’ imprisonment and a fine, and influence peddling in international business transactions (Article 337-C), punishable by two to five years and a fine, increased where the offender represents that the advantage is also intended for the foreign official.

In addition to the Criminal Code, Law No 12,846/2013 (the Anti-Corruption Law) establishes strict administrative and civil liability of legal entities for harmful acts against Brazilian or foreign public administrations.

Such acts include offering or giving undue advantages to public officials; financing unlawful conduct; using intermediaries to conceal the parties or beneficiaries involved; fraud or interference in public procurement and government contracts; and obstruction of investigations or supervisory activities.

Related legislation includes Law No 8,429/1992 on misconduct involving public officials and Law No 14,133/2021 on public procurement.

Compliance programmes are not generally mandatory. However, Decree No 11,129/2022 provides that an effective compliance programme may be taken into account when sanctions under the Anti-Corruption Law are assessed.

There is also no general obligation on private companies or individuals to report suspected bribery merely because they become aware of it. Specific reporting duties may nevertheless arise under sectoral legislation, including anti-money laundering rules.

Article 27-C of Law No 6,385/1976 criminalises market manipulation, defined as carrying out simulated transactions or other fraudulent manoeuvres intended to raise, maintain or lower the price, quotation or trading volume of a security, with the purpose of obtaining an undue advantage or profit for oneself or another person, or causing loss to a third party. The offence is punishable by one to eight years’ imprisonment and a fine of up to three times the amount of the unlawful advantage obtained.

Article 27-D criminalises insider dealing, which consists of trading securities on the basis of material information that is known to the offender, has not yet been disclosed to the market and is capable of providing an undue advantage to the offender or another person. The penalty is one to five years’ imprisonment and a fine of up to three times the unlawful advantage obtained.

The same penalty applies to anyone who discloses material confidential information obtained by reason of their position or role within a securities issuer, or through a commercial, professional or fiduciary relationship with the issuer. The sentence for insider dealing is increased by one-third where the offender was under a duty to keep the information confidential.

Tax offences are principally governed by Law No 8,137/1990.

Article 1 criminalises suppressing or reducing taxes or social contributions through conduct including false or omitted information to tax authorities; fraudulent entries or omissions in mandatory books and records; forged or altered invoices or other tax documents; use of documents known to be false or inaccurate; and failure to issue a legally required invoice or equivalent document. The penalty is two to five years’ imprisonment and a fine.

Article 2 criminalises related conduct including fraudulent declarations or omissions intended to evade tax; failure to remit taxes or contributions withheld or collected from third parties; unlawful dealings involving tax incentives; misuse of fiscal incentives; and use or disclosure of software designed to maintain accounting information different from that supplied to tax authorities. The penalty is six months to two years’ detention and a fine.

Brazil does not recognise a general criminal offence of “failure to prevent tax evasion”. Liability depends on the individual’s own participation in conduct satisfying the statutory elements, while companies and responsible persons may also be subject to separate tax and administrative consequences.

Article 10 of Law No 7,492/1986 criminalises the act of inserting false elements or omitting required elements in the financial statements of specific entities, including financial institutions, insurance companies and institutions involved in the securities distribution system. The penalty for this offence is imprisonment for a period ranging from one to five years, and a fine.

Cartel conduct is both a criminal offence and an administrative competition infringement in Brazil.

Article 4 of Law No 8,137/1990 criminalises abuse of economic power through agreements intended to dominate the market or eliminate competition, and agreements among suppliers aimed at fixing prices or quantities, allocating markets, or controlling distribution networks or suppliers to the detriment of competition. The penalty is two to five years’ imprisonment and a fine.

Article 337-F of the Criminal Code separately criminalises agreements or other conduct intended to frustrate or defraud competition in public procurement in order to obtain an advantage arising from the award. The penalty is four to eight years’ imprisonment and a fine.

Administratively, Article 36 of Law No 12,529/2011 prohibits agreements between competitors concerning prices, output, market allocation or bidding conditions. Companies may be fined between 0.1% and 20% of gross revenue; other individuals or entities may face fines from BRL50,000 to BRL2 billion.

Article 195 of Law No 9,279/1996 also criminalises specified unfair competition practices involving fraudulent or otherwise unlawful means to divert customers, punishable by three months to one year’s imprisonment or a fine.

Article 7 of Law No 8,137/1990 establishes the principal criminal offences against consumer relations. It criminalises, among other conduct:

  • unjustifiably favouring one buyer or customer over another;
  • selling goods that do not comply with legal requirements or their official classification;
  • adulterating or mixing goods and presenting them as having a different nature or quality;
  • fraudulently altering the price or presentation of goods or services;
  • imposing unlawful charges in instalment sales;
  • withholding goods or refusing sales under publicly offered conditions for speculative purposes;
  • misleading consumers as to the nature or quality of goods or services, including through advertising;
  • destroying or wasting goods to cause price increases; and
  • selling or supplying products unfit for consumption.

These offences are punishable by two to five years’ detention or a fine.

Article 154-A of the Criminal Code criminalises unauthorised access to computer devices, with the intent to obtain, alter or destroy data or information without the authorisation of the device’s user, or to install vulnerabilities to obtain an illicit advantage. The penalty for this offence is imprisonment for a period ranging from one to four years, and a fine. The same penalty applies to anyone who produces, offers, distributes, sells or disseminates a device or computer program with the intent of enabling the conduct defined above.

If the invasion results in the obtaining of content from private electronic communications, trade or industrial secrets, confidential information, or unauthorised remote control of the invaded device, the penalty is increased to imprisonment for a period ranging from two to five years, and a fine.

Moreover, Article 154 criminalises the unjustified disclosure of a secret learned by reason of a person’s function, ministry, occupation or profession where the disclosure is capable of causing harm to another person. The penalty is detention for three months to one year or a fine. This provision may be relevant, for example, where confidential corporate information becomes known to an individual because of their professional role and is subsequently disclosed without justification.

Article 154-A of the Criminal Code criminalises unauthorised access to computer devices, with the intent to obtain, alter, or destroy data or information without the authorisation of the device’s user, or to install vulnerabilities to obtain an illicit advantage. The penalty for this offence is imprisonment for a period ranging from one to four years, and a fine. The same penalty applies to anyone who produces, offers, distributes, sells, or disseminates a device or computer program with the intent of enabling the conduct defined above.

If the invasion results in the obtaining of content from private electronic communications, trade or industrial secrets, confidential information, or unauthorised remote control of the invaded device, the penalty is increased to imprisonment for a period ranging from two to five years, and a fine.

Moreover, Article 154 criminalises the unjustified disclosure of a secret learned by reason of a person’s function, ministry, occupation or profession where the disclosure is capable of causing harm to another person. The penalty is detention for three months to one year or a fine. This provision may be relevant, for example, where confidential corporate information becomes known to an individual because of their professional role and is subsequently disclosed without justification.

Concealment is criminalised as handling or receiving goods of illicit origin under Article 180 of the Criminal Code, which can consist of concealing, for one’s own benefit or that of another, property known to be the proceeds of a criminal offence or influencing an innocent third party to conceal such property. The basic offence is punishable by one to four years’ imprisonment and a fine. More severe penalties apply where the conduct occurs in the course of commercial or industrial activities.

Brazil’s Criminal Code determines that anyone who, in any way, contributes to a crime is subject to its prescribed penalties, according to their level of involvement (Article 29). In case the assistance is of minor importance, the penalty may be reduced by one-sixth to one-third. Also, if any of the participants intended to commit a less serious crime, they will be subject to the penalty for that crime; this penalty will be increased by up to half if a more serious outcome was foreseeable.

Article 1 of Law No 9,613/1998 criminalises concealing or disguising the nature, origin, location, disposition, movement or ownership of assets, rights or values derived directly or indirectly from a criminal offence. Since Law No 12,683/2012, any criminal offence capable of generating illicit assets may serve as a predicate offence. The penalty is three to ten years’ imprisonment and a fine.

The same penalty applies to specified conduct intended to conceal or disguise criminal proceeds, including converting them into lawful assets; acquiring, receiving, exchanging, negotiating, storing, moving or transferring them; importing or exporting goods at false values; using criminal proceeds in economic or financial activities; or knowingly participating in an organisation whose activities include money laundering.

People and entities listed in Article 9 are subject to AML obligations, including customer identification and record-keeping, transaction records, proportionate internal policies and controls, regulatory registration and compliance with COAF requests. Failure to comply may result in administrative sanctions including a warning, fine, temporary disqualification of managers for up to ten years, and suspension or revocation of authorisation to operate.

Brazil does not have a specific “ESG offence”, but a significant range of conduct falling within the environmental, social and governance sphere is criminalised under existing legislation.

The Environmental Crimes Law (Law No 9,605/1998), for example, criminalises pollution, damage to protected vegetation and conservation areas, unlawful mineral extraction, and the unlawful handling, storage, transport or disposal of hazardous substances and waste, among other conducts.

In the social sphere, Article 149 of the Criminal Code criminalises reducing a person to a condition analogous to slavery. The offence includes subjecting a person to forced labour, excessive working hours, degrading working conditions or restricting their freedom of movement because of a debt owed to the employer or its representative. The penalty is two to eight years’ imprisonment and a fine, in addition to any penalty arising from violence, and is increased by one-half where the victim is a child or adolescent or where the offence is motivated by racial, ethnic, religious or origin-based prejudice.

Human trafficking may also arise in supply-chain and labour exploitation cases. Article 149-A criminalises recruiting, enticing, transporting, transferring, purchasing, harbouring or receiving a person through serious threat, violence, coercion, fraud or abuse for specified exploitative purposes, including subjecting the victim to conditions analogous to slavery or servitude. The penalty is four to eight years’ imprisonment and a fine, subject to statutory increases in certain circumstances.

Other ESG-related conduct may also fall within specific legislation concerning discrimination, consumer protection and the capital markets.

Brazil does not currently have a general criminal offence specifically addressing the misuse of artificial intelligence, algorithmic trading or automated decision-making in financial or commercial activities. The use of AI or an algorithm is generally treated as the means by which an existing offence is committed. Accordingly, liability depends on whether the underlying conduct satisfies the constituent elements of an existing criminal provision.

Brazil has a specific statutory and regulatory framework for crypto-assets, principally established by Law No 14,478/2022 (the “Virtual Assets Law”) and supplemented by regulations issued by the Central Bank of Brazil (BCB). Crypto-assets are not treated as a single legal category; their classification depends on their characteristics and economic function.

Virtual assets are defined by Law No 14,478/2022 as digital representations of value that may be electronically traded or transferred and used for payment or investment purposes. These assets generally fall within the regulatory jurisdiction of the BCB.

Where a crypto-asset qualifies as a security – for example, because it represents a collective investment contract or other instrument within Law No 6,385/1976 – it is instead subject to the securities regime and supervision by the Brazilian Securities and Exchange Commission (CVM).

For civil and tax purposes, crypto-assets may also be treated as intangible assets, including for capital gains taxation and reporting obligations before the Federal Revenue Service.

Article 171-A of the Criminal Code specifically criminalises fraud involving virtual assets, securities and other financial assets. The offence consists of organising, managing, offering or distributing portfolios, or intermediating transactions involving such assets, with the purpose of obtaining an unlawful advantage, causing loss to another person and inducing or maintaining that person in error through fraudulent means. The penalty is four to eight years’ imprisonment and a fine.

Crypto-assets may also constitute the proceeds, object or instrument of money laundering under Law No 9,613/1998. Where the statutory elements of laundering are satisfied, the ordinary money laundering penalties apply.

Virtual-asset service providers are expressly subject to Brazil’s anti-money laundering framework. They must comply with the customer identification, record-keeping, internal control and suspicious transaction reporting obligations set out in Articles 10 and 11 of Law No 9,613/1998, together with the applicable BCB regulations. They are also subject to the authorisation and supervisory requirements established under the Virtual Assets Law and BCB regulations. Failure to comply with these obligations may result in sanctions.

In Brazil, the main defences used in cases involving white-collar offences are:

  • lack of intent – where the offence requires intent, the defence may argue that the defendant did not knowingly or deliberately engage in the prohibited conduct;
  • lack of evidence – the defence may argue that the prosecution has failed to prove the offence or the defendant’s participation beyond a reasonable doubt;
  • procedural violations – evidence or proceedings may be challenged where constitutional or procedural safeguards have been breached, including rules governing searches, seizures, access to evidence and due process; and
  • statute of limitations – the defence may argue that the state’s right to prosecute or enforce the sentence is time-barred.

It is important to note that an effective compliance programme is not a criminal defence, however it plays a crucial role in mitigating criminal corporate liability and influencing penalties, especially under the crimes set forth by the Anti-Corruption Law (Law No 12,846/2013).

Brazilian law does not provide a general statutory de minimis exception for white-collar offences, nor are any industries or sectors generally exempt from criminal liability.

However, the Superior Court of Justice recognises the de minimis principle in federal and state tax offences and smuggling, holding that criminal liability may be excluded on the grounds of material atypicality where the total amount of unpaid tax does not exceed BRL20,000, provided that there is no habitual tax evasion.

Law No 12,850/2013, as amended by Law No 13,964/2019, provides for plea agreements (colaboração premiada) based on a suspect’s effective co-operation. The collaborator, assisted by counsel, waives the right to remain silent in their statements, must tell the truth and must cease the unlawful conduct covered by the agreement.

Effective co-operation must produce at least one statutory result: identification of other participants and offences; disclosure of the criminal organisation’s structure and division of tasks; prevention of further offences; recovery of criminal proceeds or benefits; or location of a victim with physical integrity preserved. Depending on the timing and effectiveness of the assistance, benefits may include judicial pardon, a sentence reduction of up to two-thirds, substitution of imprisonment with a restrictive penalty, procedural immunity in the circumstances set out in Article 4(4), a reduction of up to half for post-sentence co-operation, or progression to a less restrictive prison regime.

Legal entities may also enter into leniency agreements in competition and anti-corruption matters. Under Law No 12,529/2011, CADE may terminate administrative punitive action or reduce the penalty by one to two-thirds where effective co-operation identifies other participants and produces evidence of the infringement. The applicant must, among other requirements, be the first to qualify, cease participation, confess and co-operate fully; CADE’s General Superintendence must not already possess sufficient evidence to secure conviction.

For harmful acts against the Public Administration, an Anti-Corruption Law leniency agreement may exempt the company from specified sanctions, including publication of the adverse decision, and reduce the applicable fine by up to two-thirds.

In Brazil, Law No 13,608/2018, which deals with telephone service for receiving complaints and rewards for information that aids in police investigations, established the concept of the so-called whistle-blower within the public sector. In this regard, there has been recognition of some important components of whistle-blowing policy for the prevention, suppression, or investigation of crimes or administrative violations:

  • guarantee of anonymity (Article 1, Item II);
  • confidentiality of the informant’s data (Article 3); and
  • reward (Article 4).

In 2019, additional enhancements to this policy in the public sphere were introduced with the enactment of Law No 13,964/2019, including:

  • an institutionalised channel for receiving reports;
  • full protection against retaliation and exemption from civil or criminal liability for the reporter regarding the report;
  • disclosure of the reporter’s identity will only occur with prior notification and formal consent from them;
  • dismissal for the public good in cases of severe disciplinary misconduct by the individual who retaliated;
  • double compensation to the reporter for any material damages caused by actions or omissions related to the retaliation, without prejudice to moral damages; and
  • a reward for the reporter of up to 5% of the recovered amount.

However, there is still no mandatory regulation requiring private companies to implement reporting channels. Among private companies, adopting reporting channels as part of a broader integrity system is a decision made:

  • as a strategy to add value to their activities;
  • to enhance their capacity to conduct business, and/or
  • to obtain benefits provided by law in the event of an investigation and accountability for any illegal activities conducted within the company.

White-collar investigations involving more than one jurisdiction can materially affect defence strategy in Brazil. A company or individual may face parallel investigations, prosecutions, regulatory proceedings, asset-freezing measures or settlement negotiations in different countries arising from the same underlying conduct. Defence counsel must therefore consider not only Brazilian criminal procedure, but also how statements, documents and settlements made in one jurisdiction may be obtained or used by authorities in another. There is no formal Brazilian mechanism for a “co-ordinated defence” across jurisdictions. In practice, however, defendants and companies commonly instruct counsel in the relevant countries and co-ordinate strategy.

Cross-border evidence-sharing is extensive, but it is not unlimited. Requests for criminal legal assistance are ordinarily channelled through the relevant Central Authorities. In Brazil, the Ministry of Justice and Public Security performs this role through the Department of Asset Recovery and International Legal Co-operation (DRCI), which assesses incoming and outgoing requests for compatibility with Brazilian law and the applicable bilateral or multilateral treaty. The precise limits on co-operation depend on the applicable treaty and the type of assistance sought.

White-collar investigations involving more than one jurisdiction can materially affect defence strategy in Brazil. A company or individual may face parallel investigations, prosecutions, regulatory proceedings, asset-freezing measures or settlement negotiations in different countries arising from the same underlying conduct. Defence counsel must therefore consider not only Brazilian criminal procedure, but also how statements, documents and settlements made in one jurisdiction may be obtained or used by authorities in another. There is no formal Brazilian mechanism for a “co-ordinated defence” across jurisdictions. In practice, however, defendants and companies commonly instruct counsel in the relevant countries and co-ordinate strategy.

Cross-border evidence-sharing is extensive, but it is not unlimited. Requests for criminal legal assistance are ordinarily channelled through the relevant Central Authorities. In Brazil, the Ministry of Justice and Public Security performs this role through the Department of Asset Recovery and International Legal Co-Operation (DRCI), which assesses incoming and outgoing requests for compatibility with Brazilian law and the applicable bilateral or multilateral treaty. The precise limits on co-operation depend on the applicable treaty and the type of assistance sought.

Mudrovitsch Advogados

St. of Individual Housing South
IQ 3 Set 06 House 25
Lago Sul Brasília/DF
71605-260
Brazil

+55 61 3366 8000

recepcao@mudrovitsch.adv.br www.mudrovitsch.adv.br
Author Business Card

Trends and Developments


Authors



Mattos Filho has a white-collar crime department that advises companies, executives and board members on a wide array of criminal matters. The firm’s team has a deep understanding of the various aspects of criminal law and criminal prosecution, as well as of other legal areas related to such cases. A world-class information security structure ensures that clients’ privacy and data remain protected at all times.

Introduction

Brazil is undergoing a simultaneous reconfiguration of its enforcement architecture across legislative, judicial, and regulatory dimensions. The year of 2026 has brought landmark legislation targeting organised crime, renewed international sanctions pressure, high-profile co-operation agreements, and an evolving anti-corruption leniency agreements framework. Together, these developments demand that companies, financial institutions, and their advisers adopt an integrated and anticipatory approach to white-collar risk.

The Anti-Faction Law: A New Framework for Combating Organised Crime

Law No 15,358/2026 (also known as the “Anti-Faction Law”), enacted on 24 March 2026, establishes Brazil’s new legal framework for combating organised crime. It introduces two new criminal offences: “structured social dominance” (domínio social estruturado) and “aiding structured social dominance” (favorecimento ao domínio social estruturado). The offences target ultra-violent criminal organisations, paramilitary groups and private militias that use violence or serious threats to impose control over geographic areas, communities or territories.

The penalties are severe. Structured social dominance carries imprisonment of 20 to 40 years, with aggravating factors, such as leadership, financing, use of restricted firearms, transnational connections, or use of advanced encryption and drones, that can increase the sentence by two thirds to double. Aiding such organisations is punishable by 12 to 20 years’ imprisonment, and both offences are classified as heinous crimes (crimes hediondos), making them ineligible for amnesty, pardon, bail or parole.

The Law also creates a broad asset-recovery and restraint regime. Courts may order seizure, freezing or blocking of assets, including digital assets, cryptocurrency holdings, corporate shares, investment fund interests and luxury goods, held in Brazil or abroad, including through nominees. The Law also authorises blocks on access to financial systems, payment platforms, digital domains and electronic communications networks linked to criminal organisations. It prohibits issuance or use of credit and debit instruments, electronic transfers, including Pix – the Brazil’s central-bak-operated instant electronic payment system –, and transactions through crypto-asset exchanges, except with express judicial authorisation.

A particularly significant feature is Article 9(8), which provides for extraordinary asset forfeiture without a prior criminal conviction where the illicit origin of the asset is deemed evident. Article 10 adds a corporate remedy: when there are concrete indications that a legal entity is being economically benefited by an ultra-violent criminal organisation, a court may order the immediate removal of shareholders and appoint a judicial administrator for renewable six-month periods. These mechanisms move enforcement beyond the punishment of individuals and into the ownership, governance and liquidity of businesses.

For the private sector, the law requires a substantive reading of commercial relationships rather than a narrow check of formal documentation. Identifying hidden ultimate beneficial owners, nominee arrangements, opaque structures and economically incoherent links has shifted from recommended caution to an indispensable line of defence. The sectors expressly referenced in or affected by the law include financial services, insurance, logistics and sports betting, but the risk is not limited to those industries. A company in any sector may face exposure if its suppliers, customers, distributors or investors provide channels for organised crime.

The central compliance question is therefore not only whether a counterparty appears on a sanctions or watch list. It is whether the company can explain who ultimately benefits from a relationship, why the commercial terms make economic sense, and how concerns were escalated when the information did not fit together. A weak answer may be treated as evidence that warning signs were ignored, particularly where a business model depends on cash-intensive activity, complex intermediaries or the rapid movement of funds. Conversely, a well-documented process can demonstrate that the company identified vulnerability points and acted before authorities intervened.

The practical response should be risk-based and documented. It should be capable of being understood by compliance teams, senior management and external investigators. The following four priorities are especially important.

  • Map beneficial ownership beyond direct registry information. This includes identifying nominees, tracing control rights and testing whether ownership chains are consistent with the business purpose.
  • Link customer and vendor due diligence to transaction monitoring. Sudden changes in payment routes, unusual use of intermediaries, unexplained related-party flows or payments involving high-risk regions should trigger escalation.
  • Preserve an audit trail for decisions. Records should show what information was reviewed, who approved exceptions and why a relationship was continued, restricted or terminated.
  • Extend controls to acquisitions, joint ventures and outsourcing. A company can inherit exposure through a portfolio company or service provider even when no employee participated in the underlying misconduct.

The Anti-Faction Law also addresses the intersection of organised crime and the regulated gambling sector. It requires financial institutions and payment service providers to integrate into interoperable information-sharing systems to detect and report indicia of unlicensed betting operators. Funds seized in connection with unauthorised sports betting operations are earmarked for the National Public Security Fund. These provisions complement the regulatory framework established by Law No 14,790/2023 and the Ministry of Finance’s AML/CFT ordinances for the sports betting industry, but the Anti-Faction Law adds an enforcement dimension specifically linked to organised crime.

US Sanctions Designations Against PCC and Comando Vermelho

In 2024 and 2025, the US Department of State and the US Department of the Treasury’s Office of Foreign Assets Control (OFAC) designated Brazil’s two largest criminal organisations — the Primeiro Comando da Capital (PCC) and the Comando Vermelho (CV) — as Foreign Terrorist Organizations (FTO) and Specially Designated Global Terrorists (SGDT). The designations subject the organisations and their members to US financial sanctions, blocking property and interests in property within US jurisdiction and prohibiting US persons from engaging in transactions with them. For Brazilian businesses, the key point is that an organisation can create sanctions exposure even when the underlying activity occurs outside the United States.

For Brazilian companies and financial institutions with international exposure, the designations carry concrete compliance implications. Banks, fintechs, payment institutions and crypto-asset exchanges must screen counterparties, beneficial owners and transactions against OFAC’s Specially Designated Nationals (SDN) List and understand how their correspondent banks apply those controls. Failures may lead to enforcement risk, secondary-sanctions consequences, correspondent-banking restrictions, frozen transactions or reputational harm in international markets.

The consequences are not confined to regulated financial institutions. Exporters, logistics providers, insurers, technology companies and professional-services firms may encounter a sanctioned person through a customer, supplier, distributor, investor or intermediary. Screening should therefore be calibrated to the company’s exposure to US persons, US-dollar clearing, US financial institutions and cross-border payment rails, rather than treated as a generic database exercise. The same review should consider ownership and control, because a listed organisation may operate through affiliates, nominees or apparently independent businesses.

The convergence between these international designations and Brazil’s new domestic regime under the Anti-Faction Law is particularly noteworthy. Both frameworks target the financial infrastructure of organised crime, although they operate through different legal mechanisms. The Anti-Faction Law relies on judicial asset freezes, payment-system blocks and possible intervention in companies, while OFAC relies on SDN List blocking and transaction prohibitions. Companies operating across both jurisdictions must navigate parallel and, in some respects, overlapping compliance obligations.

An effective cross-border programme should be designed around clear escalation rules. It should also ensure that senior decision-makers are aware that a “no match” in a screening tool does not eliminate risk. In practice, this means:

  • screen legal entities and individuals at onboarding, on a risk-sensitive periodic basis and before material payments or ownership changes;
  • examine indirect ownership and control, including relationships that are not captured by a simple name search;
  • define when a potential match requires payment suspension, legal review, disclosure or exit; and
  • align Brazilian AML controls with global sanctions procedures so that local teams understand when an issue must be escalated to a US or international compliance function.

Plea Deals/Collaboration Agreements Under Pressure: Consolidation and New Tests

Brazil’s criminal co-operation agreements framework (colaboração premiada), established by Law No 12,850/2013, has returned to the centre of political and legal debate. Major investigations in 2025 and 2026, including those related to Banco Master (banking fraud and corruption), the Instituto Nacional do Seguro Social (INSS) social-security fraud and the Carbono Oculto (financial crimes and money laundering linked to violent organised crime) probe, have again placed the instrument in the spotlight. For non-lawyers, the basic idea is a negotiated agreement in which a participant provides useful information or evidence in exchange for defined procedural or sentencing benefits.

The evolution of those deals since the Lava Jato era is significant. Lava Jato was Brazil’s principal laboratory for co-operation agreements, but it also generated controversy, including concerns about prosecutorial overreach, uneven negotiation practices and the use of pre-trial detention as undue leverage. The 2019 Anti-Crime Law (Law No 13,964/2019) introduced important guardrails, including requirements for prior judicial authorisation, stricter corroboration standards, prohibitions on unilateral rescission and clearer rules on defence counsel’s role. These changes sought to ensure that a co-operator’s account is a starting point for investigation, not a substitute for independent evidence.

The institutional practice has also become more demanding. The Federal Police and the Office of the Prosecutor General have adopted more rigorous criteria for accepting co-operators, testing the internal consistency of their accounts and validating the facts they disclose. Courts have repeatedly emphasised that a co-operation agreement is a means of obtaining evidence and does not, by itself, prove the allegations against a third party. This distinction matters for companies and executives because a name mentioned in a statement does not automatically establish liability, but it can trigger investigative steps, document requests and reputational consequences.

At the same time, the legal foundations of the instrument have come under renewed constitutional scrutiny. In April 2026, the Supreme Federal Tribunal resumed proceedings in ADPF 919/2021, a constitutional challenge to aspects of the co-operation framework agreement under Law No 12,850/2013. The action raises questions about the limits of state power, voluntariness, due process and the protection of fundamental rights, while seeking to preserve the legitimate use of co-operation where it is properly supervised. Its timing, coinciding with reports of potential co-operation by a key figure in the Banco Master investigation, has attracted political attention and criticism.

Bill No 4,372/2016, often described as the “anti-co-operation bill”, would prohibit co-operation agreements with detained defendants. Supporters view that restriction as a safeguard against coercion, while critics argue that a categorical ban would disregard the different circumstances of individual cases and could undermine legitimate investigations and the right to a defence from the defendant’s perspective. The Bill remains under consideration in Congress and faces significant constitutional objections. Its progress will be a useful indicator of whether the next phase of reform favours additional statutory limits or case-by-case judicial control.

The current cases will test whether the post-Lava Jato rigour is sustained in practice. Prosecutors will need to show that benefits are tied to concrete, verifiable contributions, while defence counsel will need to assess whether the proposed bargain is voluntary, proportionate and sufficiently precise. Judges, in turn, will be asked to protect both the integrity of the investigation and the rights of people who are not parties to the agreement. The relevance of plea bargaining as an investigative tool and defence strategy is well established, but its legitimacy depends on balance, transparency and respect for fundamental guarantees.

Anti-Corruption Leniency Agreements: Renegotiation and Institutional Coordination

Brazil’s corporate anti-corruption leniency framework, centred on the Clean Company Act (Law No 12,846/2013), continues to mature. The Office of the Comptroller General (CGU) holds exclusive authority to negotiate leniency agreements involving federal executive-branch entities and foreign public administration. As of July 2026, the CGU reports that 37 agreements have been concluded, 16 negotiations are underway and BRL20.12 billion has been agreed in total, of which BRL11.29 billion has been paid. These figures show both the scale of corporate misconduct under investigation and the financial importance of negotiated resolution.

The post-Lava Jato environment has, however, brought significant recalibration. Supreme Court decisions since 2023-2024 allowing the renegotiation of certain Lava Jato-era agreements – notably those involving JBS and Odebrecht, now known as Novonor – have highlighted tensions between finality and flexibility in settlement design. The Odebrecht leniency agreement, concluded in July 2018, covers BRL2.73 billion and addresses 49 public contracts, as well as a BRL40 million advance payment relating to transnational bribery. Multinational settlement negotiations with six countries – Guatemala, Panama, the Dominican Republic, Ecuador, Peru and Mozambique – have resulted in concluded agreements, with further negotiations ongoing.

For companies, renegotiation is not merely a question of reducing a payment schedule. It can affect the scope of released conduct, the treatment of future information, the allocation of responsibility among group companies and the interaction with foreign authorities. It can also change how a settlement is viewed by investors, lenders, regulators and commercial counterparties. A company considering leniency therefore needs a clear map of the facts, the jurisdictions involved and the protections that each authority can actually provide.

A persistent structural challenge is the overlap among institutions with competing or complementary interests in leniency proceedings. The Public Prosecutor’s Office, the Federal Court of Accounts (TCU) and the affected public entities each have distinct mandates, and the absence of clear co-ordination rules has at times impeded predictable and efficient outcomes. A settlement with one authority may not, in itself, resolve administrative, civil or audit exposure before another. This is one reason why companies should not treat the first agreement reached as the end of the matter.

Efforts to address the problem include the Technical Cooperation Agreement between the CGU, the Attorney General’s Office (AGU), the Ministry of Justice and Public Security and the TCU, as well as the more recent agreement between the CGU, AGU and the Federal Public Prosecutor’s Office (MPF) of April 2025. These initiatives encourage information sharing, dialogue and a more co-ordinated approach without eliminating the separate legal mandates of the participating institutions. The Supreme Court has likewise stressed the importance of legal certainty, legitimate expectations and co-ordination in the operation of Brazil’s anti-corruption framework. Full institutional alignment, however, remains a work in progress.

The result is a more sophisticated but less automatic settlement environment. The commercial objective is not simply to sign an agreement, but to obtain a resolution that is workable across the relevant enforcement landscape. Before opening negotiations, management should ask the following questions.

  • Which authority has power to grant the specific protection the company needs, and which authorities remain outside the proposed settlement?
  • What conduct, entities and individuals will be covered, and how will later-discovered facts be treated?
  • How will information be shared with domestic and foreign authorities, and what confidentiality protections are realistic?
  • What operational changes, governance measures and payment obligations must be implemented after signing?

Conclusion/Looking Ahead

Brazil’s white-collar enforcement landscape is being reshaped from multiple directions simultaneously. The Anti-Faction Law introduces a paradigm shift by targeting the economic infrastructure of organised crime and imposing new obligations on the private sector, while international sanctions designations add a layer of cross-border compliance complexity. Criminal co-operation deals, though more mature and better regulated than in the Lava Jato era, face renewed political and constitutional tests. The anti-corruption leniency framework, while generating substantial financial recoveries, still requires further institutional co-ordination to achieve its full potential.

Indeed, the reach of enforcement scrutiny has extended to the very apex of Brazil's institutional architecture — and even the Supreme Court itself has lately been subject to public scrutiny in connection with allegations of improper relationships with the private sector, in the wake of the Banco Master probe. This episode underscores that no institution is beyond the perimeter of accountability in the current environment, and it reinforces the imperative for all market participants to maintain the highest standards of transparency and governance.

For companies operating in or with exposure to Brazil, these developments call for a proactive, integrated approach to compliance and risk management. A mature programme should connect beneficial-ownership due diligence, sanctions screening, anti-money-laundering controls, investigation protocols, crisis communications and board oversight rather than treating them as separate workstreams. It should also be capable of moving quickly when an issue arises, preserving evidence and making defensible decisions before an authority demands an explanation.

The ability to anticipate enforcement trends, understand the interaction between domestic and international frameworks and navigate the institutional complexity of Brazil’s multi-agency system is essential. The strongest organisations will not wait for a designation, raid, co-operation proposal or regulatory inquiry to expose gaps in their controls. They will use the developments of 2025 and 2026 as a prompt to test their structures now, document the rationale for their decisions and build resilience for the next stage of Brazil’s enforcement cycle.

Mattos Filho

Al Joaquim Eugênio de Lima
447, São Paulo
SP 01403-001
Brazil

+55 11 3147 7600

+55 11 3147 7700

mattosfilho@mattosfilho.com.br www.mattosfilho.com.br
Author Business Card

Law and Practice

Authors



Mudrovitsch Advogados is a law firm with outstanding expertise in white-collar crime and compliance, covering both risk assessment and preventive counselling and representation in criminal proceedings. Its team is composed of 12 lawyers, highly specialised partners and associates that have vast experience in white-collar crime and academic credentials that range from constitutional law to criminal law, and from corruption and organised crime to corporate compliance and ethics. The team is well-known for its expertise in providing legal advice and supporting on white-collar cases, and its main work consists of assisting individuals in risk-assessment of leniency agreements, criminal procedures, and election campaign donation agreements. The firm has accumulated several recognition awards. Mudrovitsch Advogados has offices in cities such as Brasília, Rio de Janeiro, São Paulo, Cuiabá, and Porto Velho.

Trends and Developments

Authors



Mattos Filho has a white-collar crime department that advises companies, executives and board members on a wide array of criminal matters. The firm’s team has a deep understanding of the various aspects of criminal law and criminal prosecution, as well as of other legal areas related to such cases. A world-class information security structure ensures that clients’ privacy and data remain protected at all times.

Compare law and practice by selecting locations and topic(s)

{{searchBoxHeader}}

Select Topic(s)

loading ...
{{topic.title}}

Please select at least one chapter and one topic to use the compare functionality.