In a move to strengthen the security of PIX, The Central Bank (Bacen) announced on March 6 a series of adjustments to the rules of the instant payment system. Much has already been said about the changes themselves, how the requirement for alignment between the name registered in PIX and the one registered with the Federal Revenue Service. However, there are nuances and practical impacts that deserve special attention. These changes, although mainly aimed at preventing fraud, bring implications that can affect the daily lives of users and companies.
Alex Tabor, CEO ofTuna Payments, leading fintech in orchestration in Brazil, highlights that the changes are an important step to combat increasingly sophisticated scams. "Imagine a scenario where a fraudster hacks into a family member's WhatsApp and requests a payment via PIX". If the name that appears in the transaction is identical to that of your relative, "the chance of you falling for the scam is much greater", explain. The new requirement that the account holder's name must match the one registered with the Federal Revenue aims to reduce this type of fraud. However, Tabor warns: "This means that banks and fintechs will have to do a second check on the registrations. If your name is incomplete or has spelling errors, you will need to correct it with the financial institution.”
Random keys and emails: what changes in practice?
Another change that can directly impact users is theprohibition of changes to information linked to random keys. Now, if a person or company wants to update data associated with a key of this type, it will be necessary to delete it and create a new one. "This measure may seem bureaucratic", but it is essential to prevent fraudsters from exploiting gaps in the system, comment Tabor.
Furthermore, PIX keys of the email type will no longer be able to change ownership. This means that, if you lose access to an email account linked to a PIX key, the recommendation is to exclude it immediately. "This is a preventive measure to prevent deactivated or forgotten emails from being used maliciously", says Tabor.
Irregular registration status: what happens to PIX keys?
One of the least talked about changes, but equally relevant, it is the determination of the BC that PIX keys of individuals and companies with irregular registration status at the Federal Revenue Service be excluded. This includes CPFs with suspended status, canceled or null, and CNPJs with suspended registration status, inapt, lowered or null. However, Tabor clarifies that debts with the Revenue Service will not prevent the use of PIX. Entities with debts will still be able to use their keys normally. The measure aims to block only cases where there are serious registration irregularities.”
A different hook: the evolution of PIX and the role of the user
While the changes reinforce the security of the system, they also highlight the importance of active user participation in the maintenance of their data. "PIX is in constant evolution", and the Central Bank has done an exemplary job of identifying fraud and adjusting the rules, affirms Tabor. But users also need to do their part, regularly checking if your data is updated and aligned with official records.”
For those who have questions about the registration status, the recommendation is to access the websites of theFederal Revenueand check the information of the CPF or CNPJ. "This is a simple practice", but can prevent future troubles, says Tabor.
The new PIX rules represent a significant advance in the fight against fraud, but they also bring additional responsibilities for users and financial institutions. While the Central Bank continues to monitor and adjust the system, the collaboration of all involved will be crucial to keep PIX as a safe and reliable payment method. As Tabor highlights: "Digital security is a collective effort. Each small adjustment contributes to a more robust ecosystem that is less vulnerable to scams.”
