SPA-MF puts SIGAP under scrutiny in June 2026, warning betting operators over data gaps

Brazil’s Secretaria de Prêmios e Apostas do Ministério da Fazenda (SPA/MF) spent June 2026 sending notices to sports betting operators about failures in data submission to the Sistema de Gestão de Apostas (SIGAP). For high-risk PSPs, the important part is simple: the regulator is no longer checking whether files were sent, but whether the data reconcile across the board.

1. Two types of letters are in circulation. Some are technical-administrative notices asking for fixes within a set deadline. Others are formal notifications with explicit language about what happens if the operator does not comply, including the opening of administrative sanction proceedings and penalties provided for under current legislation.
2. The trigger is not a missing file, but inconsistent files. SIGAP does not take a single report; it receives multiple file types that need to match each other. A prize payout, for example, must appear both in the bet record and in the player wallet movement. When those records do not line up, the reported GGR (gross gaming revenue) stops reflecting the actual operation.
3. That matters because GGR is not just a commercial metric. Under Law 14.790/2023, it is the basis for mandatory legal transfers due to sport, health, and social security. If the GGR is distorted by mismatched data, the transfers are calculated on a figure that does not match reality, and the issue moves from operations into tax and regulatory exposure, with room for assessments and retroactive revisions.
4. The legal basis is not new. The notices cite SPA/MF Ordinance No. 722/2024, which governs the submission of operational data, and Ordinance No. 1.231/2024, which requires integrity, consistency, and availability of information. The change is enforcement: the regulator is actively checking what the rules already required.
5. The retroactive reach is what makes this uncomfortable for operators. SIGAP cross-checks the entire dataset sent since January 2025, so the regulator can audit not only recent submissions but the full history already transmitted to the government. Operators that met filing deadlines but never validated internal consistency across files may now be exposed to problems they did not see at the time.

For PSPs, acquirers, and partners serving Brazilian betting operators, the practical takeaway is clear: transport-level compliance is not enough. If the files arrive but do not reconcile, SIGAP turns that into a regulatory problem, and in Brazil’s betting stack, regulatory problems have a way of becoming financial ones.