Brazil’s Tax Agency Phases Out Legacy e-CAC System, Mandates Gov.br Accounts
Since November 2023, Brazil’s Federal Revenue Service (Receita Federal) has required taxpayers to use Gov.br accounts—with at least silver or gold trust levels—to access restricted services in the Centro Virtual de Atendimento ao Contribuinte (e-CAC). The shift, part of a broader push to modernize digital authentication under Law No. 14.063/2020, replaces outdated password-based access with stronger identity verification. By January 2024, the agency had rolled out the change in stages, initially restricting services like tax compensation requests and pension consultations. Meanwhile, the e-CAC itself remains operational but is being phased out in favor of the Portal de Serviços da Receita Federal, a unified platform launched in 2024 that integrates e-Social and Redesim systems.
Legacy System Limitations and the Transition Timeline
The e-CAC, a 15-year-old system, has long been a target for modernization due to its fragmented architecture and security vulnerabilities. The Instrução Normativa RFB No. 2.320, published in early 2026, formalized the transition, stating that all e-CAC services will eventually migrate to the new Portal de Serviços. However, as of May 2026, the full replacement remains incomplete—some legacy services still function through e-CAC while the new portal undergoes gradual updates.
"The goal is to consolidate all digital interactions in one secure environment," a Receita Federal spokesperson told reporters, emphasizing that the portal’s phased rollout would prevent disruptions. The agency has also introduced digital procurations—allowing taxpayers with Gov.br accounts to grant third-party access via the e-CAC without physical paperwork. This feature, operational since late 2025, automates approvals for certified representatives, reducing bureaucratic delays.
Key deadlines and status as of May 2026:
- November 2023–January 2024: Three-stage rollout of Gov.br authentication for restricted e-CAC services.
- 2024–present: Portal de Serviços launched, but e-CAC still active for legacy services.
- 2026 outlook: No confirmed end date for e-CAC, though IN 2.320 signals its eventual phase-out.
Cybersecurity Enhancements and Digital Procuration Workarounds
The push for Gov.br accounts stems from rising cybersecurity risks. In 2023, the Receita Federal reported hundreds of credential-stuffing attacks targeting e-CAC passwords, exposing sensitive taxpayer data. The new system, aligned with Brazil’s National Digital Identity Framework (e-CPF), requires biometric or two-factor authentication for gold-level accounts—raising the bar for unauthorized access.
"This isn’t just about compliance; it’s about trust," said Marcelo Barbosa, a cybersecurity analyst at Instituto Nacional de Tecnologia da Informação (ITI). "Gov.br’s layered verification reduces the risk of deepfake impersonations, which have surged in Latin America’s digital tax filings."
For taxpayers struggling to upgrade their Gov.br accounts, the Receita Federal offers a workaround: digital procurations. Since late 2025, individuals with silver or gold Gov.br profiles can delegate access to certified representatives—who must also hold a digital certificate (e-CPF or e-CNPJ)—via the e-CAC’s "Procuração Eletrônica" tool. The process, which replaces manual paperwork, is validated in real time.
Requirements for digital procurations (as of May 2026):
- Outorgante (grantor) must have a Gov.br account (silver/gold).
- Outorgado (proxy) must present a valid digital certificate.
- Services granted can be customized (e.g., tax filings only) or set to full access.
- Cancellation is instant via the e-CAC dashboard.
Unified Portal Rollout Challenges and Service Gaps
The Portal de Serviços da Receita Federal, launched in early 2024, was designed to replace e-CAC by unifying 120+ digital services—from tax declarations to social security benefits—under one interface. However, as of May 2026, the transition has faced delays.
"The portal is technically robust, but user adoption is lagging," noted Ana Clara Silva, a public-sector IT consultant. "Many taxpayers still default to e-CAC out of habit, and some services—like the ‘Empresa Cidadã’ program—aren’t fully migrated yet."
- Partial service migration: Some e-CAC functions (e.g., Consulta Pendências) remain inaccessible.
- No new features: All updates are directed to the portal, leaving e-CAC stagnant.
- No hard cutoff: The Receita Federal has not set a date to decommission e-CAC, citing "technical dependencies."
Taxpayer Compliance Deadlines and the Future of e-CAC
- Gov.br Upgrades: Taxpayers using e-CAC’s restricted services must elevate their Gov.br accounts to at least silver by the end of 2026. Those unable to do so can request a digital procuration via the e-CAC.
- Portal Adoption: The Receita Federal is prioritizing small businesses and freelancers for portal training, with webinars scheduled through June 2026.
- e-CAC’s Fate: While no shutdown date is confirmed, IN 2.320’s language suggests a 2027 phase-out—though ITI analysts warn of potential extensions.
"The writing is on the wall," said Barbosa. "The longer e-CAC lingers, the higher the risk of security gaps. The portal’s eventual dominance is inevitable—but the Receita must accelerate training to avoid chaos."
Brazil’s digital tax overhaul reflects a global trend: governments replacing legacy authentication systems with biometric and identity-proofing measures. The Gov.br model, which integrates banking, healthcare, and tax services, has drawn interest from Argentina and Mexico, which are testing similar unified portals. Meanwhile, the digital procuration system—eliminating paper-based delegations—could serve as a blueprint for EU eIDAS 2.0 compliance.
For now, Brazilian taxpayers face a dual reality: use the portal where possible, but keep e-CAC bookmarked for now. The full transition remains a work in progress—one that will define the future of digital governance in Latin America.
