In a move to strengthen PIX security,The Central Bank (Bacen) announced on March 6 a series of adjustments to the rules of the instant payment systemMuch has already been said about the changes themselves, such as the requirement for alignment between the name registered in PIX and the one registered with the Federal Revenue. However, there are nuances and practical impacts that deserve special attention. These changes, although mainly aimed at preventing fraud, have implications that can affect the daily lives of users and businesses.
Alex Tabor, CEO ofTuna Payments, leading fintech in orchestration in Brazil, emphasizes that these changes are an important step to combat increasingly sophisticated scams. "Imagine a scenario where a fraudster hacks into a family member's WhatsApp and requests a payment via PIX. If the name that appears on the transaction is identical to your relative's, the chances of you falling for the scam are much higher," he explains. The new requirement that the account holder's name be the same as registered with the Federal Revenue aims precisely to reduce this type of fraud. However, Tabor warns: "This means that banks and fintechs will have to perform a second check on the registrations."If your name is incomplete or misspelled, you will need to correct it with the financial institution..”
Random keys and emails: what changes in practice?
Another change that can directly impact users is theprohibition of changes to information linked to random keysNow, if a person or company wants to update data associated with a key of this type, it will be necessary to delete it and create a new one. "This measure may seem bureaucratic, but it is essential to prevent fraudsters from exploiting system loopholes," comments Tabor.
Additionally, email-type PIX keys can no longer change ownership. This means that,If you lose access to an email account linked to a PIX key, it is recommended to delete it immediately."This is a preventive measure to prevent deactivated or forgotten emails from being used maliciously," says Tabor.
Irregular registration status: what happens to PIX keys?
One of the less discussed but equally important changes is the BC's determination that PIX keys from individuals and companies with irregular registration status with the Federal Revenue Service be excluded. This includes CPFs with suspended, canceled, or null status, and CNPJs with suspended, inactive, deregistered, or null registration status. However, Tabor clarifies that debts with the Revenue will not prevent the use of PIX. Entities with debts will continue to be able to use their keys normally.The measure aims to block only cases where there are serious registration irregularities.”
A different hook: the evolution of PIX and the role of the user
While the changes reinforce the system's security, they also highlight the importance of active user participation in maintaining their data. "PIX is constantly evolving, and the Central Bank has done an exemplary job of identifying fraud and adjusting the rules," says Tabor. But users also need to do their part by regularly checking if their data is up to date and aligned with official records.
For those with questions about their registration status, the recommendation is to access the websites of theFederal Revenueand verify the information of the CPF or CNPJ. "This is a simple practice, but it can prevent future troubles," says Tabor.
The new PIX rules represent a significant advance in the fight against fraud, but also bring additional responsibilities for users and financial institutions. While the Central Bank continues to monitor and adjust the system, the collaboration of all involved will be crucial to maintaining PIX as a safe and reliable payment method. As Tabor emphasizes: "Digital security is a collective effort. Every small adjustment contributes to a more robust ecosystem and less vulnerable to scams."
