Article Details
Central Bank issues a warning of a new hacker attack the payment institution
Published on September 7, 2025
Financial institutions received on Saturday (6) Central Bank security alert informing the occurrence of a new cyber attack against payment company not authorized to operate by the agency, which is the maximum authority of the national financial system.
The statement advises that companies reinforce transactions monitoring, including those done internally.
According to the text received by the financial system institutions, the BC says it has detected "cyber incident in an unauthorized institution."
"We inform you that an incident of cybercinals was identified at E2 Pay, resulting in the improper subtraction of financial values. Therefore, we recommend the following actions immediately: reinforce the continuous monitoring of all financial transactions, even in book transfer transactions [transfer of values within the institution]."
Sought, the BC did not speak until the publication of this report.Folha failed to contact E2 Pay until the beginning of Saturday night.
The Central Bank announced this week a package of measures aimed at reinforcing the safety of the national financial system after the disclosure of three cyber attacks this year -this Saturday is the fourth.The goal is to close gaps that allowed the infiltration of organized crime into the economy.
If concerned about recent hacker attacks that caused millionaire resource deviations, the BC announced, among other measures, the limitation of R $ 15,000 PIX and TED to unauthorized payment institutions that connect to the National Financial Financial System Network via Information Technology Services (PSI).
The agency has also increased the requirements and controls for the accreditation of the PSTI and announced that no payment institution could start operating without prior authorization.
The monetary authority promises more rigor regarding the value limit of transactions via Pix.The idea is to reduce the amount of each operation to a level that does not make 99% of transactions unfeasible, but facilitates the identification of scams by multiplicity of operations.
Until then I did not enter the scope of BC regulating the way institutions without connectivity infrastructure hire and relate to technology service companies.
The fragility of this relationship has been more evident to the monetary authority with cyber attacks involving the companies C&M Software and Sinqia -the deviation added in both episodes is about $ 1.5 billion.
On Wednesday (3), the Federal Revenue Secretary, Robinson Barreirinhas, said that the Coaf (Financial Activities Control Board) "is not taking care of" tracking the movement of dirty money by means of Fintechs.
The monetary authority assesses whether there is any case that needs the use of a Bolling Account or if this instrument may cease to exist.
The BC also discusses how to discipline the provision of services in the BAAS (Banking as Service) from rules that ensure "safety, solidity and prevention and mitigation of risk to the financial system", as excerpt from public consultation last year.
In April, BC's director of regulation, Gilneu Vivan, said he was expected to complete the work on the subject this year and that an adjustment process would be designed so that existing contracts could adapt to the new normative.(Folhapress/Adriana Fernandes)