Brazil Fintechs required to share financial data

Brazil now requires fintechs, including U.S. firms, to report customer data and comply with the same financial reporting rules as banks.

On August 29, 2025, Brazil’s tax authority (Receita Federal) issued Normative Instruction No. 2,278/2025, requiring fintechs and digital payment companies to report customers’ financial data, such as account balances and transactions, through the e-Financeira system. This system improves tax compliance by cross-checking data against income tax filings and monitoring transactions via secure digital reporting. The rule places fintechs under the same transparency and oversight obligations as banks and applies retroactively to data from January 2025.  

Foreign fintechs, including U.S. companies operating in or entering Brazil, must comply with the new reporting rules and securely manage customer data under local laws such as the LGPD (Lei Geral de Proteção de Dados Pessoais), which regulates personal data protection. The regulation aims to strengthen financial crime monitoring and align fintechs with anti–money laundering frameworks, requiring companies to adopt internal controls, flag suspicious activity, and keep records available to Receita Federal to avoid fines or market restrictions.

For further details on these data reporting requirements, please contact the US Embassy in Brazil, Rio de Janeiro Office, Patrick Levy, Financial Services Commercial Specialist at patrick.levy@trade.gov.