Brazil’s regulated betting market pulled in roughly $3.23 billion in revenue during just the first half of 2025. That kind of number gets every operator’s attention fast.
Then they read the fine print. No credit cards. No crypto. No cash. One payment rail runs almost the entire market, and getting it wrong can cost you your license before you take your first bet.
Setting up an iGaming merchant account in Brazil is not like setting up in the UK or US. The rules are narrower, the regulator is newer, and the payment infrastructure works differently than anywhere else you have launched. Here is how to do it properly, step by step.
Why Brazil’s Payment Rules Change Everything
Brazil’s regulated market launched on January 1, 2025, under Law No. 14,790/2023, known locally as the Lei das Apostas. The Secretariat of Prizes and Bets (SPA), part of the Ministry of Finance, oversees every licensed operator.
The SPA does not treat payments the way US or European regulators do. Operators cannot accept credit cards, cash, or cryptocurrency for deposits or withdrawals. Only Pix, TED bank transfers, and debit cards are permitted, and every transaction must move through an institution authorized by the Central Bank of Brazil.
This single rule is why you cannot simply set up an iGaming merchant account in Brazil the way you would anywhere else. Your payment partner needs to be built around Pix from day one, not adapted to it later.
The scale here is not small. A study by consultancy GMattos, published in Valor and reported by iGaming Today, found that betting sites accounted for 15.3% of all Pix payments from individuals to businesses in the first half of 2025. That is one sector driving a sizable share of the country’s dominant payment rail.
Here’s how to set up an iGaming Merchant Account in Brazil:
Step 1: Register a Brazilian Legal Entity First
You cannot operate a licensed iGaming business in Brazil as a foreign company. The SPA requires operators to be headquartered locally, with a registered CNPJ and a clear ownership structure on file.
This step needs to happen before you touch payment processing. Every account you open, from your operating license to your banking relationships, gets tied to this entity.
Foreign brands typically set up a Brazilian subsidiary and route ownership through it. Get your legal counsel involved early, since the SPA reviews beneficial ownership closely during licensing.
Step 2: Apply for Your SPA Operating License
Once your entity exists, you apply to the SPA under Ordinance SPA/MF No. 827/2024. This is the procedure that governs how operators request authorization to run fixed-odds betting or online casino products, or both, under one federal license.
The license is not cheap. It runs BRL 30 million, close to $6.1 million, and covers a five-year term, according to Sumsub’s regulatory breakdown. That figure alone filters out operators who are not serious about the market.
Your application needs technical system certification under Ordinance 722, proof of financial capacity, and detailed documentation of your data infrastructure. Data centers can sit outside Brazil only under specific legal cooperation agreements, so confirm this with your provider before you commit to a build.
Step 3: Partner With a Pix-Ready Payment Provider
This is the step that trips up most new entrants. You cannot bolt a generic payment gateway onto your platform and call it done. Your provider needs direct Pix integration, TED support, and debit card processing built for the betting sector specifically.
What You Can and Cannot Accept
Accepted methods are limited to Pix, TED transfers, and debit cards linked to a bank account with available funds. Everything else, including credit cards, cash, boletos, and any postpaid instrument, is banned under Ordinance No. 615.
That ban extends further than most operators expect. Pix Crédito, a credit-linked version of Pix that lets banks front funds against a credit line, is explicitly prohibited as a deposit method too, since regulators classify it as a postpaid product in disguise.
Reviewing the accepted payment methods for iGaming platforms before you shortlist providers saves you from signing with a partner who cannot actually support your Brazilian rollout.
Step 4: Build CPF Matching Into Every Transaction
Brazil requires that the person placing a bet and the person funding the account are the same individual. Every deposit and withdrawal gets checked against the bettor’s CPF, the national taxpayer ID.
Your payment flow needs to reject any transfer where the sending account does not match the registered bettor’s name and CPF. This closes the door on third-party funding, a common laundering technique in unregulated markets.
Most licensed operators pair this with biometric verification at onboarding, usually facial recognition matched against government ID. Build this into your KYC flow before launch, not after your first compliance review.
Step 5: Get Your Compliance Documentation in Order
Brazilian regulators expect organized paperwork, and incomplete files are one of the fastest ways to stall an application. Before you finalize your iGaming merchant account in Brazil, have these ready:
- Certificate of incorporation and CNPJ registration
- Beneficial ownership disclosure for all directors
- System certification records under Ordinance 722
- Your AML and KYC policy, including CPF matching procedures
- Responsible gambling protocols and self-exclusion database integration
Checking the documents required for a gaming merchant account gives you a useful baseline, though Brazil layers on extra CPF and biometric requirements most other jurisdictions do not ask for.
Step 6: Put Fraud and AML Controls in Place
Money laundering risk is the reason Brazil restricts payments so tightly. Deposits and withdrawals must run through the bettor’s own registered account, and no institution outside the Central Bank’s authorization list can act as an intermediary.
Set up real-time monitoring that flags mismatched sender names, unusual deposit spikes, and transfers from accounts you have not verified. Regulators have shown they act fast on violations, with fines reaching up to R$2 billion for accepting prohibited payment methods.
Keep detailed transaction logs, including CPF verification records and biometric match results. If the SPA audits your platform, this documentation is what proves your compliance was real, not just a policy on paper.
Step 7: Track Regulatory Changes After You Launch
Brazil’s framework keeps evolving, and rules that applied at launch in January 2025 have already shifted. The Pix Crédito restriction under Ordinance 615 arrived after banks found workarounds that let players fund bets with credit.
Assign someone on your compliance team to monitor SPA ordinances and Central Bank guidance monthly. Several tier-one banks kept credit-linked Pix features active for betting deposits even after the ban took effect, which shows how fast enforcement gaps can open up.
Staying current here protects the license you spent BRL 30 million to secure.
Common Mistakes to Avoid
- Assuming card processing experience transfers. Payment expertise from the US or European gaming markets does not carry over cleanly, since Brazil bans the payment methods most operators rely on elsewhere.
- Underestimating the CPF matching requirement. Operators who treat this as a minor KYC detail end up rebuilding their payment logic mid-launch.
- Ignoring data localization rules. Confirm your hosting setup qualifies under the legal cooperation exception before you sign infrastructure contracts.
- Skipping ongoing regulatory monitoring. Ordinances change the rules faster than most compliance calendars account for.
Final Word
Setting up an iGaming merchant account in Brazil takes more preparation than most other regulated markets demand. The entity registration, the SPA license, and the Pix-only payment structure all need to align before you process a single real transaction.
Get your legal entity right first, choose a payment partner who already understands Pix and CPF matching, and build your compliance documentation before the SPA asks for it.
Operators who treat these steps as sequential, not optional, are the ones still processing payments a year later.
If you want help structuring the right payment setup for your Brazilian iGaming license, talk to a payment specialist who works in this market regularly.
FAQs
How long does it take to set up an iGaming merchant account in Brazil?
Between the SPA license review and payment provider onboarding, most operators budget three to six months, longer if documentation is incomplete or ownership structures need restructuring.
Can a foreign company hold a Brazilian iGaming license directly?
No. The SPA requires operators to be headquartered in Brazil through a registered local entity, though foreign companies can own that entity.
Why can’t Brazilian operators accept credit cards?
Regulators banned credit cards to prevent players from betting with borrowed money, a pattern they linked to rising household debt and gambling harm.
Is cryptocurrency ever permitted for Brazilian betting deposits?
No. Crypto is banned under the same ordinance that excludes credit cards, largely because anonymous transactions make CPF and AML verification impossible.
What happens if an operator accepts a prohibited payment method?
Penalties can reach up to R$2 billion, along with potential license suspension, so most operators build automated filters that block non-compliant transactions before they process.
