New rules on procedures and controls for the prevention of fraud in the provision of payment services

The Central Bank has published Resolution BCB n° 142 of 23/9/2021, bringing procedures and controls to prevent fraud in the provision of payment services.

The measures must be adopted by FIs, other institutions authorised to operate by Bacen and IPs that are members of the SPB, including IPs that are not authorised but are participants in the PIX.

Among the main measures are:

  • The establishment of:
    • a maximum limit of R$1,000.00 (one thousand reais), including scheduled payment transactions, by deposit or prepaid payment account, in the period from midnight to 6 a.m. between different PF clients, except individual entrepreneurs; and
    • a minimum period of 24 hours for the increase of limits for payment transactions to be carried out at the customer's request, duly formalised.
  • The increase in the value of the limits set must be compatible with the client's risk profile;
  • PIs should keep daily records detailing incidents of fraud or attempted fraud in the provision of payment services, including details of corrective measures taken.
  • The PIs must prepare a report with a consolidated monthly assessment of the occurrences and the preventive and corrective measures adopted, based on the daily records, which must be forwarded to the following parties for acknowledgement, if any: audit committee; internal audit; risk committee; Executive Board; and/or Board of Directors.
  • These measures should be implemented by:
    • 4 October 2021, for the establishment of a limit of R $ 1,000.00 (one thousand Reais), a minimum period of 24 hours for the increase of limits, and the establishment of specific limits in accordance with the period during which payment transactions are carried out, as well as the prior registration of deposit or prepaid payment accounts authorised to receive amounts above the established limits;
    • 16 November 2021, the other requirements of the Resolution.