Archetyp Links

Light Mode

Article Details

Pix changes an old rule and has a new limit;Discover news

Published on September 5, 2025

Pix is ​​the instant payment of Brazilian and undergoes change - Photo: Marcello Casal Jr |Brazil agency After the hacker attack reaches a financial institution, linked to the supply of technology between banks and the Central Bank (BC) Pix and diverting $ 710 million, on August 29, the Central Bank imposed new rules to reinforce security, including the return of the payment limit with the instant payment system. The cyber attack aimed at Sinqia impacted HSBC banks, with approximately R $ 670 million diverted, and Fintech Artta, with R $ 41 million.Despite gravity, Sinqia ensures that "the central Pix infrastructure has not been compromised and continues to operate normally."The invasion has reached only the servers of the company that connect to the BC. All about economy firsthand!Enter the WhatsApp channel. Although it did not affect the central structures of the Pix, the BC decided to harden the rules for the new institutions. See the new rules: Limit in Ted and Pix For unauthorized payment institutions and those connecting to the National Financial System Network via Information Technology Service Providers (PSTI) is limited to R $ 15,000 the value of TED and Pix. Limitation can be removed when the participant and their respective PSTI meet the new security control processes.Tractarily, participants who attest to the adoption of information security controls may be exempt from limitation for up to 90 days.The measure comes into force immediately. Prior Operation Authorization No payment institution may start operating without prior authorization.In addition, the deadline for payment institutions not authorized to operate by the BC request authorization for operation is anticipated from December 2029 to May next year. New controls to institutions Only members of segments S1, S2, S3 or S4 who are not cooperatives may act as responsible in the PIX by unauthorized payment institutions.Contracts in force should be adequate within one hundred and eighty days. The BC may request technical certification or evaluation issued by an independent qualified company that attests to compliance with the authorizing requirements.The payment institution that is already providing services and has its rejected authorization request must terminate its activities within 30 days.The term of the measure is immediate. Increases requirements and controls for PSTI accreditation Governance and risk management requirements have been expanded.It is now demanding minimum capital of R $ 15 million.Failure to comply will be subject to the application of precautionary measures or even the disqualification.The standard enters into force immediately and the active PSI have up to four months to suit.