BR v13.3.0

Brazil (BR) · Module Detail

Brazil: Consumer Protection & APP Fraud

#

The Pix Special Return Mechanism (MED), created Nov 2021, is the core consumer-redress tool for fraud/scams/operational failure: victims register within 80 days, receiving-institution funds are blocked, both institutions review within 7 days and refunds (full or partial, subject to available balance) follow. Recovery has historically been low (~9% in 2023) because fraudsters move funds onward, prompting MED 2.0 (BCB Res. 493/2025) to trace and block across up to five 'cascading' account hops (optional Nov 2025, mandatory 2 Feb 2026; sanctioning grace via Res. 546 to 10 May 2026). A self-service MED button was mandated (Res. 589, by Oct 2025) and Res. 501/2025 requires rejecting transfers to fraud-flagged accounts. Consumer-protection law (CDC) also applies, including to crypto operations.

Horizon · 2026-05-10 (± a quarter)MED 2.0 cascading-block sanctioning grace expiry (Res. 546)Adopted, not yet in force · Tier 3 source
Standing sub-brief · as of 23 June 2026218 words · last cycle 2026-10-04

Consumer Protection & APP Fraud

Brazil's consumer-redress regime for instant payments centres on the Pix Special Return Mechanism (MED), introduced in November 2021, which provides an 80-day registration period, 7-day review and full or partial refund. The regime is being upgraded substantially. MED 2.0, under BCB Resolution 493/2025, traces and blocks funds across cascading account hops; it became optional on 23 November 2025 and mandatory on 2 February 2026, with a sanctioning grace period to 10 May 2026 under Resolution 546. A self-service MED button was mandated under Resolution 589 by October 2025, and Resolution 501/2025 requires institutions to reject transfers to fraud-flagged accounts.

Periodic update · new data 2026-10-04

Consumer Protection & APP Fraud

Deepfake-enabled financial fraud has risen sharply in Brazil through 2026: synthetic and deepfake content now accounts for roughly 1 in 15, or 6.5 percent, of detected financial-fraud cases, up from 0.1 percent in March 2025, an increase reported at 830 percent, drawing on data from Febraban, the Federal Police and VU. This is the direct driver behind the new Pix fraud-flag accountability duty introduced in Resolução BCB nº 587/2026: whoever registers a Pix fraud-suspicion marking must now inform the affected user, offer a review channel, and respond within seven days. A fraud-suspicion marking can attach to a customer's CPF or CNPJ and to a specific Pix key for up to five years, giving the marking a materially longer practical consequence than a single transaction dispute.

The pairing of these two developments, a sharply rising fraud typology and a new accountability duty tied directly to it, positions Brazil's response as a direct regulatory reaction to a measured and recent threat trend rather than a general scheme-hygiene update.

Outlook

The key indicator to watch is whether the 6.5 percent deepfake-fraud share stabilises, continues rising, or falls once the fraud-flag accountability duty has had time to change institutional behaviour around fraud-marking decisions. The five-year marking duration itself may become a point of contention if false-positive markings prove to carry disproportionate consequence for affected customers.

2 earlier distinct update(s)
Periodic update · new data 2026-09-21

Consumer Protection & APP Fraud

Febraban reported that Pix-enabled fraud and scam disbursement losses rose 43 percent to R$2.7 billion, an industry-body figure cited as the direct driver behind a package of new consumer-protection rules introduced this cycle. In direct response, financial institutions, specifically Nubank, Itaú Unibanco and Caixa Econômica Federal as named in reporting, are now authorised to hold incoming transfers for up to 72 hours where fraud is suspected, with funds remaining visible in the recipient's account but unavailable for use pending review. This hold mechanism operates alongside the device-recognition-based transfer limits described under Operational Resilience, capping transfers from unrecognised devices at R$200 per transaction and R$1,000 per day.

The scale of the reported fraud-loss increase, a 43 percent year-on-year rise to R$2.7 billion, frames these new consumer-protection measures as a direct regulatory and industry response to a documented and escalating harm, rather than a precautionary or anticipatory rule. The named institutions' authorisation to apply the hold is confirmed only for those three entities in the reporting reviewed this cycle; broader applicability across the Pix participant base is plausible but not independently confirmed.

Outlook

The clearest indicator to track next cycle is whether the Febraban-reported fraud-loss figure declines following the introduction of the hold mechanism and device-based limits, and whether the 72-hour hold authorisation is extended to a wider set of Pix-participating institutions beyond the three currently named.

Periodic update · new data 2026-08-11

Consumer Protection & APP Fraud

Brazil's central bank moved on two fronts to address Pix-related fraud this cycle. BCB Resolution 493/2025 restructured Pix Forum governance and strengthened the Special Return Mechanism, the scheme's dedicated fraud fund-recovery process, making fund recovery mandatory from 2 February 2026 rather than discretionary. Separately, new transfer limits of approximately BRL200 (roughly USD40) now apply to transactions initiated from unrecognised devices, paired with a seventy-two-hour precautionary hold, both aimed squarely at account-takeover fraud, a pattern in which a compromised device is used to authorise unauthorised Pix transfers before the legitimate account holder can intervene.

Outlook

The mandatory fund-recovery requirement under the strengthened Special Return Mechanism is the clearer consumer-facing protection to monitor, since it converts what was previously a best-efforts recovery process into an enforceable obligation from February 2026. The device-recognition limits and holding period will be tested by how effectively they reduce account-takeover losses without materially degrading the user experience that has driven Pix's adoption.

Sources and findings (4)
  1. T1https://www.bcb.gov.br/en/financialstability/pixfaqenretrieved
  2. T3https://www.qedinvestors.com/blog/the-frontlines-of-fraud-how-brazil-is-becoming-a-global-testbed-for-financial-crime-preventionretrieved
  3. T3https://en.clickpetroleoegas.com.br/amidst-the-anti-fraud-package-for-the-brazilian-payment-system-the-central-bank-publishes-a-resolution-that-temporarily-suspends-sanctioning-btl96/retrieved
  4. T3https://www.commercegate.com/central-bank-of-brazil-and-febraban-to-change-pix-refund-mechanism-for-fraud-victims/retrieved