Article Details
BC issues alert of a new hacker attack the payment institution
Published on September 6, 2025
BRASILIA, DF (Folhapress) - Financial institutions received on Saturday (6/9) Central Bank security alert informing the occurrence of a new cyber attack against payment company unauthorized to operate by the agency, which is the maximum authority of the national financial system.
The statement guides companies to strengthen the monitoring of transactions, including those done internally.
According to the text received by financial system institutions, the BC says it has detected "cyber incident in an unauthorized institution.
"We inform you that an incident of cybercinals was identified at E2 Pay, resulting in the improper subtraction of financial values. Therefore, we recommend the following actions immediately: reinforce the continuous monitoring of all financial transactions, even in book transfer transactions [transfer of values within the institution]."
Sought, the BC did not speak until the publication of this report.Folha failed to contact E2 Pay.
The Central Bank announced this week a package of measures to reinforce the safety of the national financial system after the disclosure of three cyber attacks this year - this Saturday is the fourth.The goal is to close gaps that allowed the infiltration of organized crime into the economy.
If concerned about recent hacker attacks that caused millionaire resource deviations, the BC announced, among other measures, the limitation of R $ 15,000 PIX and TED to unauthorized payment institutions that connect to the National Financial Financial System Network via Information Technology Services (PSI).
The agency has also increased the requirements and controls for the accreditation of the PSTI and announced that no payment institution could start operating without prior authorization.
The monetary authority promises more rigor regarding the value limit of transactions via Pix.The idea is to reduce the amount of each operation to a level that does not make 99% of transactions unfeasible, but facilitates the identification of scams by multiplicity of operations.
Until then I did not enter the scope of BC regulating the way institutions without connectivity infrastructure hire and relate to technology service companies.
The fragility of this relationship has been more evident for the monetary authority with cyber attacks involving the companies C&M Software and Sinqia - the deviation added in both episodes is about $ 1.5 billion.
On Wednesday (3/9), the Secretary of the IRS, Robinson Barreirinhas, said that the Coaf (Financial Activities Control Board) "is not taking care of" tracking the movement of dirty money through the Bolling accounts used by fintechs.
The monetary authority assesses whether there is any case that needs the use of a Bolling Account or if this instrument may cease to exist.
The BC also discusses how to discipline the provision of services in the BAAS (Banking as Service) from rules that ensure "safety, solidity and prevention and mitigation of risk to the financial system", as excerpt from public consultation last year.
Follow our channel on WhatsApp and receive relevant news for your day
In April, BC's director of regulation, Gilneu Vivan, said he was expected to complete the work on the subject this year and that an adjustment process would be designed so that existing contracts could adapt to the new normative.