KYC Requirements for Betting in Brazil
How licensed Brazilian betting operators verify bettors under SPA rules: CPF validation, facial recognition with liveness, re-authentication, AML duties and the national self-exclusion platform.
On this page
- What must Brazilian operators verify at registration?
- What happens after registration?
- What does a Brazilian registration process look like?
- What AML duties apply in Brazil?
- How does Brazil compare with other markets?
- Worked example: a Brazilian registration
- What mistakes do operators commonly make?
- Checklist
- Frequently asked questions
- Sources
- More guides
Licensed Brazilian betting operators must validate each bettor’s CPF and confirm identity with facial recognition and liveness at registration under SPA Ordinance 722/2024, and only accept payments from and to accounts in the bettor’s name under Ordinance 615/2024. AML duties, including PEP and sanctions screening and reporting to Coaf, sit in Ordinance 1,143/2024. Bettors must be 18, and operators must honour the national self-exclusion platform.
Key takeaways
- CPF must be valid, active and match the bettor’s name [1].
- Facial recognition with liveness is required; static selfies are not enough, according to a KYC vendor summary of the rules [1].
- Payments only between the bettor’s registered account and the operator’s account [2].
- AML programmes under Ordinance 1,143/2024 include screening and Coaf reporting [3].
- A centralized self-exclusion platform run by the SPA blocks access to all authorised betting platforms [4].
What must Brazilian operators verify at registration?
| Check | Requirement | Source |
|---|---|---|
| CPF | Valid format, active with Receita Federal, name match | [1] |
| Identity document | Accepted Brazilian documents or passport | [1] |
| Facial recognition | Liveness-tested face match | [1] |
| Age | 18 or older | [1] |
| Self-exclusion | Check the national platform | [4] |
What happens after registration?
A KYC vendor’s summary of Ordinance 722/2024 describes periodic re-authentication (for example after periods of inactivity) before bets or financial transactions [1]. Payments are tied to identity: deposits and payouts can only use the bettor’s registered own-name account [2]. AML monitoring, PEP and sanctions screening continue throughout the relationship [3].
What does a Brazilian registration process look like?
- Collect CPFThe player’s CPF is the core identifier [1].
- Verify identity and ageAge 18 or over, with liveness or facial checks described in vendor summaries of SPA rules [1].
- Check self-exclusionCheck the centralized self-exclusion platform [4].
- Screen for prohibited playersBrazilian rules prohibit some groups from betting, such as people linked to sports events.
- Link payment accountsDeposits and withdrawals must use accounts in the player’s name and CPF [2].
What AML duties apply in Brazil?
Brazil’s AML ordinance for betting operators sets due diligence, monitoring and reporting duties [3]. Operators must report suspicious activity to COAF, Brazil’s financial intelligence unit, and keep records.
How does Brazil compare with other markets?
| Topic | Brazil | Sweden | Germany | Source |
|---|---|---|---|---|
| National identifier | CPF | Personal identity number via BankID | Identity documents or eID | [1] |
| Biometrics | Facial recognition with liveness | BankID authentication | Video or eID methods common | [1] |
| Own-name payments | Required | Expected | Required by GwG section 16 | [2] [5] |
Worked example: a Brazilian registration
-
Bettor enters CPF, name and date of birth.
-
CPF validated as active and name matched.
-
Selfie with liveness matched to document photo.
-
Self-exclusion platform checked; no block.
-
Pix deposit from own-name account; account active.
What mistakes do operators commonly make?
Vendors describe exact name matching as the standard [1].
Liveness is expected.
Breach Ordinance 615/2024 [2].
Checklist
- CPF validation with name match.
- Liveness-tested facial recognition.
- Re-authentication rules applied.
- Own-name payment accounts only.
- Self-exclusion platform checked.
- PEP and sanctions screening ongoing.
- CPF matched to payment accounts.
- Prohibited player screening.
Frequently asked questions
Do Brazilian betting sites check my CPF?
Yes. CPF validation is part of registration for licensed operators.
Why do I need a selfie?
Facial recognition with liveness is required to confirm you are the account holder.
Can I use someone else’s account to deposit?
No. Payments must use your registered own-name account.
What is the minimum betting age?
18.
Can I self-exclude from all betting sites?
Yes, through the SPA’s centralized platform.
Who regulates betting in Brazil?
The Secretariat of Prizes and Betting (SPA) at the Ministry of Finance.
Why was I asked to log in again?
Rules require periodic re-authentication before betting or transactions.
Do operators report to Coaf?
Yes, suspicious transactions under Ordinance 1,143/2024.
What is COAF?
Brazil’s financial intelligence unit.
Can I register with someone else’s CPF?
No. The CPF must be your own and match your payment account.
Sources
More guides
KYC rules by market
When identity and age must be verified in eight regulated markets, and which registers apply.
Casino withdrawals in Brazil
Own-name accounts, Pix payouts, income tax withholding and SPA payment rules.
Pix for betting in Brazil
How Pix works for licensed bets: own-name accounts, payout rules, blocking orders and support.
Brazil
Payments, KYC, responsible gambling and marketing rules in Brazil.
Self-exclusion schemes
GAMSTOP, Spelpaus, OASIS, Cruks, BetGuard, Brazil’s platform and US state lists compared.
Further reading elsewhere
- Cutting KYC drop-off without weakening compliance (igaming.cx)
- KYC support guide (igamingsupportai.com)
- How to automate KYC for online casinos (www.cevro.ai)