The interesting part of an access rule is where in the sequence it fires. Brazil’s now fires before there is anything to close: in a note published on 20 August, the Finance Ministry described the moment a CPF drawing a social benefit stops being a prospective customer record and becomes a refusal.
The machinery is the Módulo Impedidos — the blocked-persons module — sitting inside Sigap, the regulator’s betting management system, built for the SPA by Serpro, the federal data-processing service. Per the ministry, authorized platforms call its API in real time at two points: when a user registers, and at each user’s first login of the day. A CPF on the relevant rolls fails both.
Those rolls, per the same note, cover recipients of Bolsa Família and of the BPC — the continuous-payment benefit for older and disabled people on low incomes — students financed through Fies, and people who have entered a public debt renegotiation. The ministry attributes the benefit-recipient block to a decision of the Supreme Federal Court.
Three days, and the balance goes back
For accounts that already exist, the ministry gives platforms up to three days to close them, and states that the balance is to be returned in full to the holder. That second clause deserves the second reading. A closure duty without a refund duty would have turned a protective measure into a small confiscation of exactly the people it was written for, and the money leaves by the same cashier rails covered in our read on Pix as market infrastructure.
The reported scale is the other half of the story. Per the 20 August note, the module has blocked access for more than three million people since it entered service in October 2025, and the same note puts Sigap as a whole at around 500 million records a day. A separate ministry item on 13 August put the debt-renegotiation cohort at 827,304 and, adding every route to ineligibility together, placed the barred population at roughly a tenth of the 40 million people recorded as active in Sigap.
One limit is structural rather than administrative, and no deadline fixes it. The API is queried by platforms operating inside the authorized perimeter. A site outside that perimeter queries nothing, notifies nobody and observes no three-day clock — which is why a firmly closed door in one corridor says little about the corridors it does not open onto. Bureaucracy, to its credit, moved faster here than usual; the gap it cannot reach is the one it was never built to.
For anyone inside the authorized market and not on any list, the controls that still answer to the bettor alone are the plainer ones: a deposit ceiling fixed before the first stake, and a self-exclusion request that requires nobody’s approval.