Enforcement against unlicensed betting in Brazil has spent two years chasing domains, and domains move. A site blocked on Monday reappears on Tuesday under a new suffix, with the same cashier behind it. What does not move as cheaply is the money route — the account that receives the deposit and the institution that services it. Resolução BCB nº 569, of 19 May 2026, points the fraud data-sharing machinery at that route. It is the most structurally interesting thing the regulator of the rail, rather than the regulator of the game, has done on this beat.
The file
What it actually changes
Read the amendment rather than the headlines and the mechanism is narrow and precise. Resolução BCB 343 already obliges institutions to register and share indicators of fraud across a defined list of activities; 569 does not build a new system, it adds a row to an existing one. The new art. 2º, inciso VI names the provision of financial and payment services to persons identified as unauthorized betting operators, and a new § 4º in art. 3º says the identification required there must refer to those operators specifically. The transition rule, art. 13-A as redrafted, sets the two dates: até 30 de outubro de 2026 for the virtual-asset activity and até 1º de dezembro de 2026 for the payments activity. Both texts sit on the Banco Central’s normativo page for Resolução BCB nº 569.
The design choice worth reviewing is the target. Blocking attacks the storefront. This attacks the settlement — and an operator can rebrand a domain far more easily than it can re-paper a merchant relationship at a licensed payment institution.
Where it stops, as of this writing
Three limits, and none of them are small.
Nothing has changed for a bettor yet. As of 6 September 2026 neither implementation date has arrived. The norm is in force; the obligations it creates are not yet due. Institutions are inside the window — a legal-tech bulletin walking through the adaptation work notes that the full cycle has to be tested, not just the submission of the record, which is the correct reading of a staged deadline. Anyone reporting that banks “now share” this data is describing December.
Indício is not a finding. The word the norm uses throughout is indício — an indicator. The regime shares suspicion between institutions so that diligence can start, and the text does not convert a shared indicator into proof of anything. It is also not a blocking order: 569 is about compartilhamento, and in the material we could open there is no requirement to notify the person a share concerns.
A shared indicator is not a licence check. Nothing here tells a bettor whether the operator taking their Pix holds a federal licence. That question is settled by the register the Ministério da Fazenda’s SPA maintains; the amended text does not create a parallel licence check on the banking side.
Verdict
Set this beside the other enforcement route: a juvenile court, not the regulator, ordered a nationwide operator block — courts move fast and narrowly, the payments rail moves slowly and broadly, and the register moves not at all until someone applies. None of the three is a substitute for the check that costs nothing before the deposit. Look up the licence, set the deposit and time limits at signup, and use the self-exclusion tools the rules require. Jogo responsável is the only part of this file that works on the day you need it.