Brazil has ordered blocks on 13,241 illegal betting sites, but the payment rails are the real test

The federal government’s crackdown on illegal betting sites in Brazil is not just a website-blocking exercise. For PSPs and acquirers, the harder question is how to spot operators that keep taking bets, receiving money, and resurfacing under new domains after the block list goes live.

1. Since the approval of Law No. 13.756/2018, Brazil has been building the legal framework for fixed-odds betting. The rules were expanded in the following years, and from 2025 the market began operating under a more structured federal authorization regime. The point is not that the legal market suddenly appeared; it is that the state is now trying to separate licensed activity from the rest.
2. Before the ban, federal authorities monitored betting activity end to end, including bets, financial movements, and transaction volumes, using data provided by institutions. After the ban, the problem changed: the government now has to track a market that was already operating illegally before regulation matured.
3. Sílvia Piva, lawyer and researcher at IEA USP, said the challenge after the blocks is to identify operations that may continue outside supervision and to trace how they reach users and which channels receive the money. That is the key operational issue for payment providers: the traffic can change faster than the enforcement playbook.
4. According to Piva, the digital nature of the business makes the problem deeper because there is no governance structure for the segment. Brazil can prohibit online betting, but enforcement depends on other companies and institutions, including some outside the country. In practice, the law sets responsibilities in Brazil, while execution depends on cooperation across the chain.
5. Since the ban came into force, the federal government has requested the blocking of 13,241 illegal betting sites. Piva also notes the obvious catch: blocking does not equal removal from the internet. The same technology that helps operators create new sites, addresses, and domains also helps the state identify suspicious online activity.

For high-risk PSPs, the takeaway is straightforward: URL blocking is only one layer. The enforcement problem sits just as much in onboarding, payment monitoring, and the ability to trace where funds are coming from and where they are going.