🚨 Effective March 18, 2026FELCA ComplianceAPI Solution

Brazil FELCA Compliance: Age Verification API for Gaming & Digital Platforms

Brazil's FELCA law (Lei nº 15.100/2025 / ECA Digital) requires all digital platforms operating in Brazil to verify user age starting March 2026. Riot Games is blocking LoL and other titles for under-18s on March 18, 2026. Non-compliance means fines up to R$ 50 million per infraction. FlagCheck's API makes compliance fast and frictionless.

March 16, 2026•7 min read•FlagCheck Engineering

Gaming platforms in Brazil — FELCA age verification compliance — Gaming platforms operating in Brazil must comply with FELCA (Lei 15.100/2025) by verifying user age starting March 2026.

⏰ 2 days to mandatory compliance

March 18, 2026: Brazil's FELCA enforcement begins. Riot Games is the first major implementer. Epic, Valve, and Activision are next. Get your integration live before the deadline.

What Is Brazil's FELCA Law?

FELCA (also called ECA Digital) is Brazil's federal law Lei nº 15.100/2025, signed by President Lula in January 2025. It extends Brazil's Child and Adolescent Statute (ECA) to cover digital platforms — effectively becoming Brazil's equivalent of the EU's Age Appropriate Design Code or the US COPPA, but stricter.

🚫

Under 14

Blocked from social media and age-restricted digital services. No exceptions without parental consent flow.

✅

14–17 years

Parental consent required. Platforms must verify the parent's identity and obtain explicit consent.

🎮

18+ years

Full access to age-appropriate content. Verified via CPF against Receita Federal (Federal Revenue).

For gaming specifically, FELCA enforces the existing age rating system (classificação indicativa) — meaning +18 games must block all minors, +16 games require parental consent for under-16, and so on.

Which Companies Are Affected?

Any digital product with Brazilian users must comply. This is not limited to large companies:

🎮

Gaming companies

Riot Games, Epic Games (Fortnite), Valve (Steam), Activision (CoD), EA (FC25)

📱

Social media platforms

TikTok, Instagram, Snapchat, X (Twitter), Discord

🎬

Streaming services

Netflix (for adult content), Max, Prime Video — parental controls required

🛒

E-commerce & fintech

Any platform with age-restricted products (alcohol, firearms, gambling)

📲

Mobile apps

Any app with +12, +14, +16, or +18 rating in Brazil's Play Store/App Store

Penalties for Non-Compliance

Violation	Penalty
No age verification implemented	Up to 2% of annual Brazil revenue, max R$ 50M per infraction
Allowing minors access to +18 content	Fine + potential service suspension in Brazil
No parental consent flow for 14–17 users	Fine + mandatory remediation order
Repeat violations	Platform blocked in Brazil by court order

FlagCheck Age Verification API — How It Works

FlagCheck's API uses Brazil's CPF (Cadastro de Pessoas Físicas — the national tax ID) to verify age directly against the Receita Federal database. No document uploads, no selfies — just a CPF number and a real-time age response.

User submits CPF

Your platform collects the user's Brazilian CPF during registration or age gate.

API call to FlagCheck

One POST request to our endpoint with the CPF. Response in under 500ms.

Verified age returned

FlagCheck returns the verified birth date from Receita Federal — no PII stored.

Platform enforces rules

Your platform grants or restricts access based on verified age. FELCA compliant.

# FlagCheck FELCA Age Verification — Example Request

POST https://api.flagcheck.com.br/api/felca/age-check
Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

{
  "cpf": "123.456.789-00"
}

# Response — adult user (is_adult: true)
{
  "data": {
    "is_adult": true,
    "age": 22,
    "date_of_birth": "2003-11-14",
    "document": { "valid": true }
  },
  "meta": {
    "request_id": "req_abc123xyz",
    "timestamp": "2026-03-16T10:30:00Z"
  }
}

# Response — minor (is_adult: false — age/dob omitted for LGPD)
{
  "data": {
    "is_adult": false,
    "document": { "valid": true }
  },
  "meta": {
    "request_id": "req_def456uvw",
    "timestamp": "2026-03-16T10:30:01Z"
  }
}

See full documentation and live examples at flagcheck.com.br/blog/felca-api-demo

Why FlagCheck for FELCA Compliance?

⚡

Sub-500ms response

Real-time verification — no UX degradation for your users.

🇧🇷

Official Brazilian data

Directly connected to Receita Federal — authoritative source for FELCA compliance.

🔒

No PII storage

We verify and return the result. No CPF data retained after the API call.

📋

Audit trail included

Every verification logged with timestamp — ready for regulatory inspection.

🔗

REST API — 1-day integration

Simple JSON API. SDKs for Node.js, Python, PHP. Most teams go live in under 24 hours.

👨‍👩‍👧

Parental consent flow

Full parental consent verification available — required for 14–17 user base under FELCA.

Pricing & Licensing

FlagCheck offers monthly API plans and enterprise licensing for companies with high verification volume. Custom pricing available for gaming companies with millions of Brazilian users.

Get FELCA Compliant Before March 18

FlagCheck's Age Verification API is production-ready today. See the live demo, read the docs, and reach out for an enterprise proposal.

Gaming companies, platforms, and apps operating in Brazil — we're here to help you stay compliant and protect your users.

Live API Demo →api@flagcheck.com.br

FAQ — Brazil FELCA & Age Verification API

What is Brazil's FELCA law?▼

FELCA (Lei nº 15.100/2025), also known as ECA Digital, is a Brazilian federal law signed in January 2025 that extends the Child and Adolescent Statute (ECA) to the digital environment. It mandates age verification for all digital platforms operating in Brazil — including games, social media, and apps — requiring companies to verify user age, block minors from age-restricted content, and obtain parental consent for users under 17.

Which companies are affected by FELCA in Brazil?▼

All digital platforms operating in Brazil are subject to FELCA. This includes gaming companies (Riot Games, Epic Games, Valve, Activision, EA), social media platforms (TikTok, Instagram, YouTube), streaming services, e-commerce, and any app with age-restricted content. Riot Games is one of the first major implementers, blocking LoL and other titles for users under 18 starting March 18, 2026.

What are the FELCA penalties for non-compliance?▼

Companies that fail to comply with Brazil's FELCA law face fines of up to 2% of their annual revenue in Brazil, capped at R$ 50 million (approximately USD 10 million) per infraction. Repeat violations can result in suspension of services in Brazil.

How does FlagCheck's age verification API work for FELCA compliance?▼

FlagCheck's API verifies a user's CPF (Brazilian tax ID) against the Receita Federal (Federal Revenue) database to confirm their date of birth in real time. The API returns a verified age result — no sensitive data is stored or exposed. Integration takes under a day with our REST API. See live examples at flagcheck.com.br/blog/felca-api-demo or contact api@flagcheck.com.br.

What is the difference between CPF verification and document/selfie verification for FELCA?▼

CPF verification is the fastest and lowest-friction method — it requires only the user's Brazilian tax ID number and verifies age server-side without any UI friction. Document + selfie (KYC) is more robust for high-risk scenarios. FlagCheck offers both: instant CPF age check for casual games/apps and full KYC (document + facial recognition) for platforms with stricter compliance requirements.

Does FlagCheck's API handle parental consent for FELCA?▼

Yes. For platforms targeting users aged 12–17, FELCA requires parental consent. FlagCheck's API can verify both the minor's CPF and the parent's CPF, confirming that the guardian is of legal age and providing an audit trail for compliance. Contact api@flagcheck.com.br for a custom implementation proposal.