In a move to strengthen PIX security, The Central Bank (Bacen) announced on March 6 a series of adjustments to the rules of the instant payment system. Much has already been said about the changes themselves, such as the requirement for alignment between the name registered in PIX and the one registered with the Federal Revenue Service. However, there are nuances and practical impacts that deserve special attention. These changes, although mainly aimed at making fraud more difficult, have implications that can affect the daily lives of users and companies.
Alex Tabor, CEO of Tuna Payments, a leading fintech in orchestration in Brazil, emphasizes that the changes are an important step in combating increasingly sophisticated scams. “Imagine a scenario in which a fraudster invades the WhatsApp of a relative of yours and asks for a payment via PIX. If the name that appears in the transaction is identical to that of your relative, the chance of you falling for the scam is much greater”, he explains. The new requirement that the name of the account holder be the same as that registered with the Federal Revenue Service aims precisely to reduce this type of fraud. However, Tabor warns: “This means that banks and fintechs will have to do a second check on the records. If your name is incomplete or misspelled, you will need to correct it with your financial institution.. "
Random keys and emails: what changes in practice?
Another change that can directly impact users is the prohibition of changes to information linked to random keys. Now, if a person or company wants to update data associated with a key of this type, it will be necessary to delete it and create a new one. “This measure may seem bureaucratic, but it is essential to prevent fraudsters from exploiting loopholes in the system,” comments Tabor.
Additionally, email-type PIX keys will no longer be able to change ownership. This means that, If you lose access to an email account linked to a PIX key, it is recommended that you delete it immediately.. “This is a preventative measure to prevent deactivated or forgotten emails from being used maliciously,” says Tabor.
Irregular registration status: what happens to the PIX keys?
One of the least talked about but equally relevant changes is the Central Bank’s determination that PIX keys of individuals and companies with irregular registration status with the Federal Revenue Service be excluded. This includes CPFs with suspended, canceled or null status, and CNPJs with suspended, unfit, canceled or null registration status. However, Tabor clarifies that debts with the IRS will not prevent the use of PIX. “Entities with debts will continue to be able to use their keys normally. The measure aims to block only cases where there are serious registration irregularities. "
A different hook: the evolution of PIX and the role of the user
While the changes strengthen the system’s security, they also highlight the importance of users actively participating in maintaining their data. “PIX is constantly evolving, and the Central Bank has done an exemplary job of identifying fraud and adjusting the rules,” says Tabor. “But users also need to do their part by regularly checking that their data is up to date and aligned with official records.”
For those who have questions about their registration status, we recommend accessing the websites of IRS and check the CPF or CNPJ information. “This is a simple practice, but it can avoid future problems,” says Tabor.
The new PIX rules represent a significant step forward in the fight against fraud, but they also bring additional responsibilities for users and financial institutions. While the Central Bank continues to monitor and adjust the system, the collaboration of all involved will be crucial to maintaining PIX as a safe and reliable payment method. As Tabor emphasizes: “Digital security is a collective effort. Every small adjustment contributes to a more robust ecosystem that is less vulnerable to scams.”
