Detekta × Bybit · Confidential · June 2026
Hi, Bybit
English

The compliance brain built for Brazil · and ready for Latin America. KYC, screening and investigation with the local depth global tools cannot reach.

Run Detekta as your full platform, or alongside the stack you already have. Brazilian data, entity and team on the ground; the same orchestration scales across the region when you are.

Prepared by Ricardo Maifrino, CEO For Bybit Compliance LeadershipConfidential
São Paulo
Brazil
What we are seeing in Brazil

Brazil is the hardest VASP market in the region. The window is now.

A pattern shows up across the Brazilian fintech, crypto and payments segment. These are the signals we have observed. We would like to hear which ones match your reality.

From Bybit's public announcement · 12 May 2026

Passport-only KYC needs re-verification.

Every Brazilian user onboarded by passport must re-submit RG or CNH by 25 June. A passport shows citizenship origin, not fiscal residence. In Brazil the tax ID is the only enforceable key.

From conversations with peers in the market

False positives at high cost.

Global watchlists publish around 4 million records worldwide · less than half of São Paulo city alone. Brazilian users frequently trigger false positives that local data resolves in seconds. The manual review backlog grows.

Pattern across Brazilian fintechs and payments

No agile lookup by tax ID alone.

Re-screening millions of existing users requires querying by CPF or CNPJ alone, without a fresh document ceremony. Most KYC tools were built for onboarding, not the long tail of ongoing review at scale.

What Brazilian compliance officers ask for

Local depth that global tools cannot reach.

PEPs from the federal CGU registry, judicial process via CNJ, negative media in Portuguese, UBO mapping from official sources. Global tools treat Brazil as one of 200 countries.

The window for Bybit

Your compliance stack needs more depth, faster · without a five-vendor patchwork.

Authority-grade evidence in Brazil, continuous review by tax ID, local sanctions and PEP, investigation depth. All auditable. All ahead of the BCB authorization window.

Oct 2026BCB 519/2025 · authorization deadline (in force since Feb 2026)
The new Brazilian rulebook

Built for BCB 519/2025 · and how it just changed.

Brazil moved virtual-asset providers into the financial system. The new rules reward exactly the model we run: continuous monitoring over periodic reviews, tax-ID-bound diligence, and beneficial-owner depth.

In force

2 Feb 2026

BCB 519/2025 is live. VASPs (SPSAVs) are now part of the Sistema Financeiro Nacional, supervised by the Banco Central.

The shift

Continuous, not periodic

The norm replaces periodic reviews with active, continuous monitoring. That is OCDD · exactly what Model A delivers.

Deadline

Oct 2026

Authorization must be filed by end of October 2026. After 30 Oct, authorized firms cannot transact with unregulated entities.

What the rulebook requires · how Detekta delivers it
The obligationHow Detekta delivers
Continuous active monitoringreplaces periodic reviews OCDD: re-screening of the existing base by CPF / CNPJ, in real time, with no fresh document ceremony.
PEP · sanctions · adverse media BR (CGU, Lei 13.810) plus OFAC / UN / EU, and Portuguese named-source media, namesake-excluded.
Beneficial owner (UBO)natural person over 25% for PJ Corporate-tree mapping to the controlling person, kept current as part of ongoing diligence.
Risk-based approach (ABR)documented and auditable Risk scoring per subject with a full, examiner-ready audit trail behind every decision.
CPF-bound attributionthe namesake control that fails today Court data (CNJ) is not CPF-indexed by law · our engine binds every finding to the tax ID and excludes namesakes.
STR to COAF / UIFwithin 24h of detection Flagged subjects packaged with the investigation dossier, ready to file.
Sources: Resolução BCB 519/2025 and companion norms · Lei 9.613/98 · COAF / UIF. We track the rulebook as it evolves, so your screening keeps pace.
Our approach

Orchestration with local depth.

Detekta is an orchestration layer, not a single-provider KYC tool. It runs as a parallel layer to your existing flow and routes every check to the right source by jurisdiction, document type and risk. Global vendors handle global. Local sources handle local. The platform decides.

  • Your existing primary KYC stays in place. We add the Brazilian depth around it, we do not rip it out.
  • Query by CPF / CNPJ alone for the long tail of ongoing re-screening at scale.
  • One decision, one audit trail · every source behind a verdict, examiner-ready.
the Brazilian stack we orchestrate live
Global layer
Your existing primary KYC stays in place
Identity (official)
Serpro Datavalid (CPF + CNH)Receita Federal
Watchlists
CGU Federal PEPLei 13.810 sanctionsOFAC · UN · EU
Judicial
CNJ DataJud (all courts)
UBO + KYB depth
BigDataCorpExato Digital
Local KYC
IdwallUnico biometrics
The orchestration brain

One brain. Every source. One decision.

Detekta routes each check to the best source by jurisdiction, document type and risk, fires them in parallel, and resolves one verdict with one audit trail. Your existing KYC stays in the loop.

DetektaOrchestration brain
Your global KYC
stays in place
🇧🇷 Serpro Datavalid
Identity · CPF+CNH
🇧🇷 Receita Federal
Authority
🇧🇷 CGU
PEP · sanctions
OFAC · UN · EU
Global lists
🇧🇷 CNJ DataJud
Judicial · all courts
🇧🇷 BigDataCorp
UBO · KYB
🇧🇷 Exato Digital
UBO depth
🇧🇷 Idwall
KYC
🇧🇷 Unico
Biometrics
Inside the platform

What your compliance team actually sees.

One workspace. One decision per case, every source behind it, every step auditable.

Case · BYB-BR-00482
Carlos A. Ribeiro
Individual onboarding · São Paulo, BR · Enhanced
Approved · 38s
CPF match
Serpro Datavalid
Liveness + face
98.7% · Unico
Sanctions / PEP
Clear · CGU + OFAC
Judicial (CNJ)
No active case
UBO / KYB
Resolved
Decision
Auto-approve
DatavalidReceitaCGUCNJUnicoBigDataCorp
Monitor · 24h
Transaction monitoring
3 alerts
Layering pattern · user BYB-BR-004829 inbound PIX of R$ 8,900 in 47 min from 9 distinct origins. Recommended: freeze and EDD.

Smart routing, live decision

The cheapest valid path for one onboarding, on your policy.
1
CPF authority lookup

Validated vs Receita in 1.2s.

Serpro Datavalid
2
Document + biometric

Liveness 98.7%, face 96.4%.

Unico
3
Sanctions + PEP

CGU plus OFAC / UN / EU. No hit, namesake excluded.

CGU · global lists
4
Judicial screen

CNJ DataJud, all courts. No active case.

CNJ DataJud
Decision delivered

Approve. 38s end to end. Full trail captured.

Detekta
Beyond an automated screen

We go deeper than anyone.

A name-only watchlist hit is noise. Real Brazilian compliance separates the signal: it binds findings to the tax ID, verifies them on official court portals, and excludes namesakes. Here is a real Detekta due-diligence report · redacted · on a high-risk subject.

"We do not dump unfiltered name-hits. Every item is CPF-bound or named-source-confirmed. That separation of signal from name-noise is the exact control most tooling lacks."
  • CPF-confirmed attribution across ~11 cases, isolating the subject from a namesake
  • Official court-portal depth · TJSP e-SAJ and TJRJ docket, verified directly
  • Asset / laundering tracing · front company and BRL 1,513,000 over 252 transactions
  • Named-source adverse media, network reconstruction, live sanctions screen with namesake exclusion
Download the redacted DD report
ConfidentialDTK-DD-2026-0001

Due Diligence Report

Subject A · CPF [redacted] · 08 Jun 2026
● High risk
ConfirmedActive criminal proceeding · TJRJ, organised crime + laundering (Lei 9.613/98)
ConfirmedBRL 1,513,000 laundered via front company · 252 transactions
ConfirmedNamed in national press as a hacker nucleus · fugitive since 2019
Confirmed~11 cases bound to CPF · namesake isolated and excluded
Screened · clearInternational + CGU CEIS/CNEP/CEPIM sanctions · no match
10 pages · verification-rated findingsOpen full report →
A precedent in a market just as regulated

Australia is our blueprint.

AUSTRAC holds Australian identity and beneficial-ownership data the way Receita, CGU and CNJ hold it in Brazil. Most global vendors skip that depth. We did the work. Figures below are from a regulated payment facilitator across five markets.

−59%
Lower annual KYC / KYB spend
AUD 197K → AUD 80K
60→95%
Straight-through onboarding
+65 pp automation
−40%
Manual reviews required
cases needing input
2 days
Time to live
no setup fee, 0 downtime

The story

Before: 4 KYC/KYB vendors, 2 transaction-monitoring engagements, outsourced AML training. AUD 197K annual spend, fragmented data, 30% straight-through.

After: one Detekta workflow orchestrating 10 providers incl. direct government-registry integrations. Multi-market residency built in.

Why it matters for Brazil

Australia and Brazil share the same dynamic: the regulator holds the data, direct integration is required, and global vendors skip the depth.

AU sources: AUSTRAC, ABR, ASIC, OAIC. BR sources: Receita Federal, CGU, CNJ, COAF. The orchestration architecture is what made it possible.

Built around you

We adapt to Bybit. Not the other way around.

Most vendors hand you their flow and ask you to retrofit. Detekta runs as a parallel layer that mirrors your journey, on your policy.

01

Your onboarding flow. Our backend.

Users see Bybit, never Detekta. We mirror your screens, tone and decisioning order on a smarter backend.

02

Your risk policy. Our routing engine.

You write the rules, we execute them. Smart routing is configurable, transparent and auditable end to end. One toggle per policy decision.

03

Your stack. We integrate.

Webhooks into your event bus, cases into your ticketing, decisions into your warehouse. We connect, we do not replace.

04

Your team. Our embedded squad.

A dedicated implementation engineer from day one. Direct channel, same timezone. No tier-1 ticket queue.

If your onboarding takes seven steps today, Detekta delivers a seven-step Bybit flow tomorrow. Not a vendor template. A Bybit flow, on a smarter compliance backbone.

Local now, regional when you are

Your Brazilian vendor that grows with you.

This is a Brazil proposal. We earn the right in Brazil first, with a local entity, team and data. The same platform expands to Latin America and the world the moment Bybit does · no new vendor, no new procurement cycle.

Global · when you scale
Latin America · Q4 2026+
Brazil · live now
🇧🇷BrazilLive now
🇲🇽 Mexico
🇦🇷 Argentina
🇨🇴 Colombia
🇨🇱 Chile · 🇵🇪 Peru
🌎 Global registries

One platform, one contract, one implementation team. We are not flying in to sell and disappearing · our Latin American posture is permanent.

Operating posture in Brazil

A Brazilian permanent footprint. Not opportunistic.

Detekta was founded by Brazilians, headquartered in Australia, built for global delivery. The Brazilian commitment is already in place: infrastructure, team and entity.

DB

Local database

Brazilian client data hosted in AWS São Paulo. ANPD Standard Contractual Clauses in place. LGPD aligned with BCB Resolution 4658 posture.

EN

Local engineering

Engineering team in Brazil supporting deployments. Direct line to product for integration questions and field-level customization.

CS

Client support

Local account management for Brazilian and Latin American clients. Same-timezone support for Brazilian operations.

BR

Brazilian entity

Detekta Brasil entity in operation. Local contracting, billing in BRL, tax residency in country. Direct contracts with Brazilian providers.

"Detekta is founded by Brazilians. Our Latin American posture is permanent, not opportunistic. We are not flying in to sell and disappearing."

The investment · indicative

Two ways Detekta can engage. An idea of cost by volume.

Two distinct models, exactly as we framed them with you. Model A, a specialist depth layer alongside your stack, or Model B, Detekta as your primary compliance platform. Either one scales across Latin America when you are.

This is an indicative view to frame the conversation · not a final proposal. Drag the volumes below to see the shape of the numbers. Once we have refined volumes and requirements, we send a firm proposal.
01

Deep PEP · Sanctions · Adverse Media

Brazilian judicial proceedings, regional Portuguese media, consolidated COAF / UN / OFAC / EU lists, and PEP family-tree analysis · the depth a global-only stack misses in Brazil.

02

Investigation · DD reports

CPF-bound, court-verified due-diligence dossiers on flagged subjects · the redacted DD report you already have, on demand.

03

KYB / KYC completion

For cases your stack flags incomplete or fails. Run directly against Datavalid, Receita, BigDataCorp and Serasa · returned fully resolved.

04

OCDD on the existing base · optional

Periodic re-screening of your Brazilian base by CPF / CNPJ, if in scope. Continuous, with no fresh document ceremony.

Build your Model A investment
Annual checks 1,000,000
Detekta rate · fixed

Our rates are fixed and step down with volume. Set your scenario above · the figures update on the right.

Model A · US$ 2.50 to 1.50 per check (500K to 2M). Completion billed only when actioned.

Detekta Model A · Specialist Depth Layer
US$2.00 / check
US$ 2.0M per year · 1,000,000 checks
+ US$ 15,000 one-time implementation
KYB / KYC completion is billed only when you route an incomplete or failed case to us, at prevailing market rates (US$ 0.90 / US$ 1.50 per resolved case). Returned fully resolved, and not forecast in the figure above.
Replace it all · market
US$ 9.60
a full onboarding to swap out your stack
Model A · on top
US$ 2.00
add the missing Brazilian depth, keep your stack
Indicative, to frame the conversation · not a final proposal. Model A: each check is a CPF-bound screen with investigation-grade output; KYB / KYC completion billed only when actioned. Model B: one all-inclusive bundle per onboarding, below the market full-onboarding price. Implementation is one-time. Prices in USD; BRL shown at the current FX rate. Final figures follow once volumes and requirements are refined.
Where we could go from here

A few paths forward.

We do not want to push for a specific commitment today. Here are options that might fit, depending on what makes sense after this conversation.

1

Continue the conversation

Another working session on the specific pain points or use cases that came up here. Useful if there is more discovery before specifics.

2

Tailored demo

A walkthrough of the orchestration layer on a real Brazilian KYC or KYB scenario you describe. Roughly 30 minutes. We prepare sample data on your use case.

3

Technical session

A meeting with your KYC engineering team to map fields, latency and integration. Outcome: a draft integration spec within 48 hours and sandbox access.

Ricardo Maifrino
CEO · Detekta
Brazilian-born, Australia-based. Built Detekta into the compliance platform that orchestrates global vendors and local Latin American authority data on a single contract. Detekta Brasil entity, engineering and support already operating in country.
Email · ricardo@detekta.ai
Web · detekta.ai
Region · LatAm + APAC
© 2026 Detekta. Confidential · prepared for Bybit. Not a binding commercial offer. BR · EU · AU residency · LGPD & GDPR aligned