Increasing controls is healthy, but it has a cost.
When Washington designates a criminal organization as a terrorist entity, the consequences do not stop at borders — they travel through every wire transfer, every correspondent relationship, every dollar-denominated transaction that connects the global financial system. The United States has now applied that designation to Brazil's PCC and CV, two of the hemisphere's most powerful criminal networks, setting in motion a compliance reckoning that Brazilian banks and fintechs did not choose but cannot avoid. The move reframes not just legal risk but the very meaning of due diligence: institutions must no longer simply avoid wrongdoing, they must prove they searched for it. Brazil's place in the international financial order has quietly, consequentially shifted.
- American extraterritorial law now reaches into routine Brazilian banking operations — any dollar-denominated transaction could expose a local institution to federal prosecution thousands of miles away.
- The burden of proof has inverted: banks can no longer claim ignorance as a defense and must instead document exhaustive efforts to detect hidden links to designated terrorist organizations.
- Smaller fintechs, already squeezed by capital and cybersecurity mandates, face the sharpest exposure — if entangled in an investigation, their customers may have no guaranteed path to recover frozen assets.
- American investors and correspondent banks are recalibrating their risk appetite for Brazil, demanding stronger safeguards and moving more slowly toward commitments in a market now carrying a terrorism-financing designation.
- The specter of Mexico-style disconnections from the U.S. financial system haunts the conversation, even as the precise scope of enforcement — targeted or sweeping — remains unresolved.
The United States has designated the PCC and CV — Brazil's most powerful criminal organizations — as terrorist entities, a decision that fundamentally alters the compliance landscape for every Brazilian bank and fintech with exposure to the American financial system. Under U.S. law, providing material support to a designated terrorist group carries penalties of up to twenty years in prison, and the rules apply extraterritorially: any transaction routed through a U.S. bank, in any currency, can trigger investigation and asset seizure.
The reclassification matters because it changes the entire regulatory apparatus. Previously treated as criminal organizations under Brazilian law, the PCC and CV now fall under a framework that demands far more from financial institutions. Compliance specialists explain that banks must now conduct deeper customer due diligence and maintain documentation proving they actively searched for hidden connections — not merely that they found none. The burden has shifted from innocence to demonstrated vigilance.
The impact will be uneven but broadly felt. Institutions already under scrutiny for organized crime ties face the most immediate pressure, but the ripple effects will reach further. American correspondent banks operate with near-zero tolerance for terrorism financing, treating it as categorically distinct from money laundering. As Brazilian institutions deepen those relationships, they will inherit stricter risk standards — contracts reviewed, partnerships terminated, risk appetites narrowed.
Smaller fintechs are especially exposed. Thinner compliance infrastructure, tighter margins, and the absence of deposit guarantee funds leave them vulnerable if an investigation freezes their assets and their customers have no recourse. Meanwhile, the designation sends a chilling signal to American investors weighing commitments in Brazil, who will now demand greater safeguards and move with more caution.
The precedent from Mexico — where local banks were severed from the American financial system entirely — casts a long shadow. Whether enforcement will be targeted or sweeping remains unclear, and some observers read political motives into the timing. But the legal machinery is already in motion, and Brazilian financial institutions face a more restrictive, more costly, and more uncertain operating environment regardless of how the politics resolve.
The United States has designated two of Brazil's most powerful criminal organizations—the PCC and the CV—as terrorist entities, a move that will ripple through the country's banking system in ways both immediate and uncertain. The decision, announced in late May, fundamentally changes how Brazilian banks and financial technology companies must think about their compliance obligations, their exposure to American law, and their ability to do business across borders.
Under American law, providing "material support" to a designated terrorist organization carries penalties up to twenty years in prison, regardless of whether a company knew its client or partner had ties to the group. More consequentially, the rules have extraterritorial reach: any transaction touching the American financial system—a wire in dollars, a payment through a U.S. bank—can trigger investigation and asset seizure. This means a Brazilian bank processing what it believed was a routine transaction could find itself in the crosshairs of federal prosecutors thousands of miles away.
The shift is significant because the PCC and CV were previously classified only as criminal organizations under Brazilian law. Once the United States reframes them as terrorist entities, the entire regulatory apparatus changes. Hítalo Silva, a compliance partner at WFaria Advogados, explains that financial institutions now face an expanded mandate: they must know their customers more thoroughly, conduct deeper due diligence, and maintain documentation proving they did everything possible to identify hidden connections to these groups. The burden of proof has shifted. A bank can no longer simply say it didn't know; it must prove it looked.
The practical impact will be uneven. José Carlos de Souza, a banking law specialist, believes the most direct consequences will fall on institutions already under investigation for ties to organized crime. Other banks without apparent connections may escape immediate scrutiny. But Vicente Piccoli Braga, a partner at FAS Advogados, sees a broader reckoning coming. American banks operate with far stricter risk appetites when it comes to terrorism financing than Brazilian institutions do. They treat money laundering and terrorism support as distinct categories, with the latter triggering near-total avoidance. As Brazilian banks deepen their ties to American counterparts, they will inherit those same restrictions. Contracts will be reviewed. Relationships will be terminated. Risk appetites will shrink.
The compliance costs are real and mounting. Raphael Soré of Machado Meyer notes that Brazilian financial institutions already have robust compliance frameworks, but they will need to revisit policies constantly. The challenge is contextual: when the U.S. sanctioned a single individual—Supreme Court Justice Alexandre de Moraes, under the Magnitsky Act—banks knew exactly who to screen for. Now they must prove they investigated whether any business partner of any client might be connected to a sprawling criminal organization. The work is endless, expensive, and necessary. "Increasing controls is healthy," Soré says, "but it has a cost."
Smaller fintechs face particular vulnerability. Many are less mature, with thinner compliance infrastructure and smaller margins. Renata Cardoso of Lefosse notes that the sector is already burdened by capital adequacy requirements, cybersecurity mandates, and regulatory compliance. This new obligation will demand fresh technology investments at a moment when the industry is already squeezed. Worse, if a fintech lacks a deposit guarantee fund and becomes entangled in an investigation, its customers may have no recourse to recover frozen assets.
The designation also sends a signal to American companies considering investment in Brazil. The country now carries elevated regulatory risk in the eyes of U.S. firms, who will demand greater safeguards from local partners before committing capital. One banking executive noted the irony: Brazil is competing globally for investment, yet it now hosts what may be the only terrorist organization operating within a G10 economy. American investors will think twice. They will demand more guarantees. They will move more slowly. The cost of doing business in Brazil has risen, not because of Brazilian policy, but because of American law applied with extraterritorial force.
Asset freezes and financial disconnections are coming. The examples from Mexico—where local banks were cut off from the American financial system entirely—loom large. Whether the U.S. will impose broad sanctions or target specific institutions remains unclear. Some observers suspect the designation itself may be partly political, a response to pressure from the Bolsonaro family aimed at complicating the Lula administration's economic agenda. But the legal machinery is now in motion, and Brazilian financial institutions have no choice but to prepare for a more restrictive, more costly, more uncertain operating environment.
Citações Notáveis
The moment the U.S. designates the PCC as terrorist rather than merely criminal, the scope of enforcement expands significantly.— Hítalo Silva, compliance partner, WFaria Advogados
American banks have far stricter risk appetites and more rigid rules around terrorism financing than Brazilian institutions do.— Vicente Piccoli Braga, partner, FAS Advogados
A Conversa do Hearth Outra perspectiva sobre a história
Why does it matter that the U.S. called them terrorists instead of just criminals?
Because American law treats terrorism financing as categorically different from ordinary crime. The penalties are harsher, the enforcement is extraterritorial, and the compliance burden falls on any institution that touches the dollar system. A Brazilian bank processing a transaction in reais might suddenly find itself liable under U.S. law.
So Brazilian banks could be punished for something they didn't know about?
Yes. The law doesn't require knowledge. If you provided material support—money, services, logistics—to a designated terrorist organization, you're liable even if you didn't know the connection existed. That's why banks are now scrambling to prove they looked hard enough.
Who gets hurt most by this?
Smaller fintechs without deposit insurance, and any institution that has clients or partners with murky backgrounds. But also American companies thinking about investing in Brazil—the regulatory risk just went up, so they'll demand more safeguards or go elsewhere.
Is this actually going to result in sanctions, or is it mostly theater?
No one knows yet. Some see it as political pressure on the Lula government. But the legal framework is real, and the examples from Mexico show how quickly things can escalate. Banks are preparing for the worst.
What does a bank actually have to do differently?
Deeper customer due diligence, constant review of business relationships, documentation of everything they investigated. They have to prove they did everything possible to find hidden connections. It's not a one-time check—it's ongoing, expensive, and never finished.
And if they get it wrong?
Asset freezes, disconnection from the American financial system, criminal liability for executives. For a fintech customer, it could mean losing access to their money with no guarantee fund to protect them.