How Payments Work at Licensed Betting and Gaming Sites in Brazil: Pix, 120-Minute Payouts and Blocked Accounts

Under Portaria Normativa SPA/MF nº 615 (April 2024), money moving between a player and an authorised operator must travel as an electronic transfer between the player’s registered account and the operator’s dedicated transactional account, and both accounts must be held at institutions authorised by the Central Bank of Brazil. In practice that means Pix, TED bank transfers, and debit or prepaid cards, along with transfers between accounts at the same institution. The money has to come from an account registered to the player, and prizes and withdrawals go back to that same registered account.

The same framework rules out cash, boletos, cheques, crypto-assets, credit cards and payments made by third parties. Operators are also barred from advancing credit or granting an advance or prior benefit to enable a bet, and from partnering with third parties to help players obtain credit. Companies that are not authorised by the Central Bank, such as independent payment agents or collection agents, cannot take part in the flow of funds at all. A checkout that asks you to pay in crypto, by boleto or credit card, or to a personal or unrelated company account is therefore not following the payment rules that apply to authorised operators. That is a strong reason to stop and check the operator, though it is not a substitute for checking the official authorisation list.

Portaria 615 sets two separate 120-minute obligations, and they are easy to confuse. The first, in Article 6, paragraph 2, says an operator may not restrict the withdrawal of a player’s available balance, and that the money must be in the player’s registered payment account within 120 minutes of the withdrawal request. The second, in Article 7, paragraph 4, says prizes must be paid to winners within 120 minutes of the end of the sporting event or of the online game session. One clock starts when you ask for your money; the other starts when the event or session ends, whether or not you have asked for anything.

Brazilian legal-press reporting in September 2026 noted that, more than a year and a half after the rules took effect, withholding of funds remains the main source of complaints between players and platforms. Authorised operators are required to be registered on the federal Consumidor.gov.br complaints platform, so the complaint data reflects conflict inside the regulated market only — operators without authorisation are not registered there, which means disputes with them have no equivalent channel. A 120-minute rule is a legal deadline, not a guarantee that every payout arrives on time.

The payment rules also aim to keep player money safe on the operator’s side. Players’ funds must be kept segregated from the operator’s own money, operators must maintain a minimum guarantee of R$5 million to cover prizes and amounts owed to players, and if the money collected after open bets are settled is not enough to pay winners, the operator has to cover the shortfall from its own account. These protections apply to authorised operators; they say nothing about a site that is operating outside the framework.

Brazil now uses the payment system itself to enforce the licensing rules. Under Law 14.790/2023, financial institutions, payment institutions and payment-arrangement operators may not maintain transactional accounts for illegal operators or carry out deposit and prize-payment operations for them, and only institutions authorised by the Central Bank may offer the transactional accounts used for betting at all. On 14 September 2026, the Secretariat of Prizes and Bets published Portaria SPA/MF nº 2.750/2026, which took effect the same day and replaces the earlier Portaria 566/2025. It requires banks, payment institutions and payment-arrangement operators to put controls in place to identify payments aimed directly or indirectly at illegal operators, including intermediaries and gateways used to hide who is really receiving the money. Signals institutions are told to look for include atypical movements and the repeated use of different Pix keys, QR codes and receiving accounts, and after notification from the Secretariat they have up to 24 hours to block the accounts of irregular operators. One practical consequence is that payments to unauthorised operators can be disrupted at the bank or payment-institution level, independently of any action against the website itself.

1. Confirm the operator appears on the Ministry of Finance’s current list of authorised companies and uses a .bet.br domain, as explained in our Brazil licensing guide.
2. Pay only from an account in your own name. Third-party payments are outside the licensed framework, so a request to send money to someone else’s Pix key, a personal account or an unrelated company is a warning sign.
3. Treat crypto, boleto and credit-card options as a red flag for a licensed-market site, given the restrictions above.
4. If a withdrawal is delayed, first check whether the operator is still waiting on verification documents. If it is not, raise the issue with the operator, then use Consumidor.gov.br for authorised operators.

Because payment methods are part of how authorised operators are supervised and how unauthorised ones are disrupted, we are not recommending any specific site or payment arrangement. This page explains the framework so you can judge for yourself what you are being asked to do, and it is general information rather than legal or financial advice.