Brazil Requires Total Ticket Prices and Barriers Against Bots

Brazil’s federal government established new nationwide rules for ticket sales, resale and access on August 31, 2026. The decree covers box offices, websites, apps and other channels, while excluding sporting events governed by the country’s General Sports Law. According to the Ministry of Justice and Public Security, most provisions took effect upon publication; Articles 4, 5, 13 and 15 through 18 take effect 20 days later. The most important change is not a single prohibition. It turns steps previously treated as interface conveniences into verifiable duties.

The full price must appear before checkout

A primary seller must present the total ticket price from the first contact and itemize fees throughout the journey, from advertising to payment. Duplicate charges, fees without an actual service and inadequately disclosed charges may be treated as abusive. Extra services may not be added to the cart automatically without the customer’s prior, express consent.

This design addresses a familiar digital-commerce tactic: attract someone with an incomplete figure and reveal the real cost only after abandoning the transaction already carries a time cost. Rota42 has explained how dark patterns use incomplete information and friction to steer choices. The decree applies that logic to ticketing and makes the opening price an auditable product feature rather than a visual preference.

Bot defenses without one universal purchase cap

Platforms must deploy mechanisms against bulk acquisitions made for abusive or speculative purposes, including purchases performed by automated systems. Reuters noted that the government did not set a single numerical threshold that automatically makes every purchase improper. That distinction matters: a rigid cap could block legitimate groups while distributed scalping operations route orders around it.

In practice, the requirement moves the problem beyond a basic CAPTCHA toward detecting behavior, preserving evidence and explaining decisions. The decree says protection should reflect an event’s size, demand and purpose, with stronger safeguards where speculation is more likely. Its effectiveness will therefore be measured less by a “bot protection” label than by whether tickets remain available to people, how often real customers are blocked and whether enforcement agencies can inspect reliable records.

Resale must show provenance and markup

Intermediaries must clearly state that they are not the official sales channel. When a ticket is listed above face value, the difference must be highlighted before confirmation, along with whether the seller is an individual or a legal entity. Primary sellers must also provide free transfer of ticket ownership through their platform or system, updating the holder while preserving authenticity and the transaction history.

The combination targets two separate problems: counterfeit tickets and hidden markups. It does not abolish the secondary market, but creates a trail connecting issuance, transfer and resale. That traceability also creates responsibility. Detailed sales data must be retained for at least two years and may be requested, with justification, by consumer-protection authorities. Platforms will have to reconcile auditability, security and data protection.

The virtual queue is no longer a black box

Once a ticket is selected during pre-purchase, it must be reserved long enough for the buyer to enter information and complete payment, with no price or fee changes during that period. A virtual queue must display the customer’s position, the estimated number of people ahead and an approximate waiting time. Those estimates are imperfect by nature, but displaying them creates a reference that customers and inspectors can compare with observed behavior.

What changes for buyers and operators

Online purchases remain subject to Brazil’s cooling-off right and must include a clear cancellation channel. If an event is cancelled, postponed or materially changed, the customer may choose the new date, credit for later use or a full refund including fees, without a penalty for a change the customer did not cause.

For audiences, the intended result is a process in which cost, wait and ticket origin are understandable before payment. For companies, compliance will require more than rewriting terms: checkout, queues, abuse prevention, transfers, record retention and support will all need work. The decree supplies a minimum architecture. Enforcement and outcomes during high-demand events will show whether it reduces the advantage of digital scalping without treating legitimate buyers as suspects.