BCB Instruction Normative No. 740 of May 29, 2026

Resolution No. 222

INSTRUCTION NORMATIVE BCB No. 740, OF MAY 29, 2026

Establishes the guidelines, conditions, and deadlines for the carrying out of production tests by participating institutions regarding the sharing of the optimized service for initiating payment transactions with data sharing (optimized journey) in Open Finance .

The Heads of the Department of Regulation of the Financial System (Denor), the Department of Supervision of Cooperatives and Non-Bank Institutions (Desuc), and the Department of Banking Supervision (Desup), in the exercise of the powers conferred upon them by art. 23, item I, letter "a", of the Internal Regulations of the Central Bank of Brazil, annexed to Resolution BCB No. 340, of September 21, 2023, having in view the provisions of arts. 44, § 1º, of Joint Resolution No. 1, of May 4, 2020, and 7º of Resolution BCB No. 406, of August 2, 2024,

R E S O L V E:

Art. 1º This Instruction Normative establishes the guidelines, conditions, and deadlines for the carrying out of production tests by participating institutions regarding the sharing of the optimized service for initiating payment transactions with data sharing (optimized journey) in Open Finance .

Art. 2º It is permitted for institutions acting as data receiving institutions and as payment transaction initiating institutions to offer the optimized service for initiating payment transactions with data sharing (optimized journey), according to the rules set forth in the Data and Services Scope Manual of Open Finance .

Art. 3º Institutions acting as data transmitting institutions and as account-holding institutions must make available journeys related to the optimized service for initiating payment transactions with data sharing (optimized journey), according to the scope provided for in the Data and Services Scope Manual of Open Finance .

Art. 4º Institutions that offer the optimized journey in Open Finance must follow the following deadlines:

I - from April 22, 2026, on a limited basis for production tests; and

II - from June 22, 2026, to the general public.

Art. 5º Production tests, during the period referred to in art. 4º, item I, regarding the optimized journey must:

I - be carried out by participating institutions that will implement the service, regardless of whether participation is mandatory or optional;

II - be carried out using the production validation tool developed by the Governance Structure of Open Finance and among the participating institutions that will implement the service;

III - be restricted to a previously selected customer base jointly by the account-holding institution and the payment transaction initiating institution, plus a list of customers informed by the Governance Structure of Open Finance and a list of customers informed by the Central Bank of Brazil; and

IV - cover the functionalities of the API and the customer experience journeys according to what is specified by current regulation and by the documentation of the Governance Structure of Open Finance .

§ 1º In the case of payment transaction initiating institutions, the tests must be carried out by the institutions that will offer the service to the general public from June 22, 2026.

§ 2º Payment transaction initiating institutions that do not yet act as data transmitters may participate in the production tests referred to in this Instruction Normative.

§ 3º The offer of the service to the general public is conditioned by acting as a data transmitter for the entire scope applicable to the institution that falls under the provisions of § 2º.

§ 4º The Central Bank of Brazil may, at its discretion, determine the carrying out of tests between pairs of account-holding institutions and payment transaction initiating institutions.

§ 5º The detailing of the scope of the tests is found in Annexes I and II of this Instruction Normative.

Art. 6º The implementation of the participating institutions referenced must be fully completed and functional:

I - in art. 2º, when they begin production tests; and

II - in art. 3º, within the deadline referred to in art. 4º, item I.

Art. 7º Instruction Normative BCB No. 725, of April 16, 2026, published in the Official Gazette of the Union on April 22, 2026, is revoked.

Art. 8º This Instruction Normative enters into force on the date of its publication.

MARDILSON FERNANDES QUEIROZ ADALBERTO FELINTO DA CRUZ JUNIOR Head of Denor Head of Desuc

RICARDO SIVIERI ZENI Head of Desup

ANNEX I TO INSTRUCTION NORMATIVE BCB No. 740, OF MAY 29, 2026

This Annex details the criteria for production tests regarding the sharing of the optimized service for initiating payment transactions with data sharing (optimized journey) in Open Finance , according to the role played by the participating institutions, whether as account-holding institution and data transmitter or as payment transaction initiating institution and data receiving institution.

Production tests must be in accordance with the regulation of the Central Bank of Brazil and with the policy of production tests of the Governance Structure of Open Finance .

1. General criteria

With a view to guaranteeing adequate quality of production tests, the Governance Structure of Open Finance must evaluate the compliance with the requirements set forth in this Annex by the participating institutions of the production tests of the optimized journey.

This evaluation must be carried out at control points to be performed on the following dates:

I - May 8, 2026;

II - May 22, 2026;

III - June 5, 2026; and

IV - June 22, 2026

1.1 Integration with tools

Participating institutions in the production tests of the optimized journey must guarantee adequate integration with the metrics collection platform (PCM) and have 95% or more of paired calls with status " PAIRED " and 100% of additional data ( additionalInfos ) reported for monitoring purposes regarding the products Smart Transfers and sharing of the payment initiation transaction service without redirection (journey without redirection), as well as for monitoring of consents for data sharing (API Consents).

Participating institutions in the production tests of the optimized journey must guarantee adequate quality of the information reported to the PCM.

No quality ticket from the PCM related to payments must be open at the control points defined in section 1.

1.2 Bilateral behavior

Participating institutions in the production tests of the optimized journey must guarantee that no ticket bilateral related to the tests is open during the control points defined in section 1.

2. Specific criteria

2.1 Engagement

The engagement of institutions participating in the production tests of the optimized journey is a fundamental step to test their maturity. In this way, institutions must guarantee minimum quantity of volume for the creation of consents and for the settlement of payments for each of the products tested in the optimized journey and the data regarding these consents and payments must be identified through the PCM.

In order to guarantee that the minimum total quantity of volume for the creation of consents and for the settlement of payments will be reached, there will be intermediate monitoring of the volume according to the control points defined in section 1, at percentages of 30, 50, 80 and 100, respectively.

2.1.1 Account-holding institutions and data transmitters

Account-holding institutions and data transmitters must guarantee that, at minimum:

I - one hundred consents for Smart Transfers are authorized, of which at least twenty are related to legal entities, when applicable;

II - one hundred account links (journey without redirection) are authorized, of which at least twenty are related to legal entities, when applicable;

III - forty payments for Smart Transfers are settled, of which at least ten are related to legal entities, when applicable; and

IV - forty payments for journey without redirection are settled, of which at least ten are related to legal entities, when applicable.

The institutions referred to in this subsection must guarantee that:

I - a consent is authorized and that a payment for Smart Transfers is settled, with at least 50% of the payment transaction initiating institutions and data receiving institutions participating in the production tests of the optimized journey; and

II - an account link is authorized and that a payment for the journey without redirection is settled, with at least 50% of the payment transaction initiating institutions and data receiving institutions participating in the production tests of the optimized journey.

2.1.2 Payment transaction initiating institutions and data receiving institutions

Payment transaction initiating institutions and data receiving institutions must guarantee that, at minimum:

I - one hundred consents for Smart Transfers are authorized, of which at least twenty are related to legal entities, when applicable;

II - one hundred account links (journey without redirection) are authorized, of which at least twenty are related to legal entities, when applicable;

III - forty payments for Smart Transfers are settled, of which at least ten are related to legal entities, when applicable; and

IV - forty payments for journey without redirection are settled, of which at least twenty payments are immediate payments and ten payments are related to legal entities, when applicable.

The institutions referred to in this subsection must guarantee that:

I - a consent is authorized and that a payment for Smart Transfers is settled with:

a) at least 50% of the account-holding institutions participating in the production tests of the optimized journey; and

b) all the main brands of the account-holding institutions listed in Annex II; and

II - an account link is authorized and that a payment for the journey without redirection is settled with:

a) at least 50% of the account-holding institutions participating in the production tests of the optimized journey; and

b) all the main brands of the account-holding institutions, as defined in Annex II.

2.2 Functional and security behavior

Account-holding institutions and data transmitters must carry out functional and security tests, and must obtain success in all tests of the production validation tool (FVP) Manual, per server, for natural and legal person users, when applicable:

I - for Smart Transfers, in five short-duration tests;

II - for journey without redirection, in five short-duration tests; and

III - for other scenarios, in three short-duration tests.

The institutions in which the provider of the Governance Structure of Open Finance does not have an account are responsible for their own obtaining of success. The other institutions will have their tests executed by the contracted provider.

The tests will be executed varying the environments between mobile Android, mobile IOS and desktop .

Having in view what is established in art. 5º, and considering that, according to Resolution BCB No. 463, of April 22, 2025, the maximum deadlines for attending to the tickets related to the production tests of the optimized journey may be reduced by the Central Bank of Brazil, the maximum deadline of two business days must be assigned for attending to the tickets generated within the scope of this subsection.

2.3 Journey implementation

The implementation of the journey according to what is defined in the regulation and in the User Experience Guide of Open Finance is a fundamental aspect to guarantee standardization in the customer experience in the different participating institutions.

To evaluate the degree of adherence of the participating institutions in the production tests of the optimized journey, the Governance Structure of Open Finance will apply a questionnaire based on the User Experience Guide in force.

2.3.1 Account-holding institutions and data transmitters

The tests will be carried out via mobile , with natural person users, on the main brands of the institutions referred to in this subsection listed in Annex II, regarding the following scenarios:

I - creation and cancellation of consent for Smart Transfers; and

II - creation, editing and cancellation of consent for journey without redirection.

2.3.2 Payment transaction initiating institutions and data receiving institutions

The tests will be divided into two groups in the following way:

I - test 1: carried out via mobile with natural person users; and

II - test 2: carried out preferably via desktop with legal person users, when applicable.

The institutions referred to in this subsection must obtain success:

I - in the creation and cancellation of the payment consent linked to Smart Transfers (test 1);

II - in the creation and cancellation of the data consent linked to Smart Transfers (test 2);

III - in the creation, editing and cancellation of the account link linked to the journey without redirection (test 1); and

IV - in the creation and cancellation of the data consent linked to the journey without redirection (test 2).

ANNEX II TO INSTRUCTION NORMATIVE BCB No. 740, OF MAY 29, 2026

The account-holding institutions and their main brands, referenced in Annex I, are the following:

I - Banco do Brasil (brand "Banco do Brasil" for natural and legal person clients);

II - Banco PAN (brand "Banco PAN" for natural person clients);

III - Bradesco (brand "Bradesco Pessoa Física" for natural person clients and brand "Bradesco Pessoa Jurídica" for legal person clients);

IV - BTG Pactual (brand "BTG Banking" for natural person clients and brand "BTG Empresas" for legal person clients);

V - C6 (brand "C6 Bank" for natural and legal person clients);

VI - Caixa Econômica Federal (brand "CAIXA" for natural and legal person clients);

VII - Digio (brand "Banco Digio" for natural person clients);

VIII - Itaú (brand "Itaú" for natural person clients and brand "Itaú Empresas" for legal person clients);

IX - Mercado Pago (brand "Mercado Pago" for natural and legal person clients);

X - Neon Pagamentos (brand "Neon" for natural person clients);

XI - Nu Pagamentos (brand "Nubank" for natural and legal person clients);

XII - Pagseguro (brand "PagBank" for natural and legal person clients);

XIII - PicPay (brand "PicPay" for natural person clients and brand "PicPay Negócios" for legal person clients);

XIV - Santander (brand "Banco Santander Pessoa Física" for natural person clients and brand "Banco Santander Pessoa Jurídica" for legal person clients);

XV - Sicredi (brand "Sicredi" for natural and legal person clients); and

XVI - Sicoob (brand "Sicoob" for natural and legal person clients).

NOTE 444/2026-BCB/DENOR, OF MAY 22, 2026

Justifies proposal for the issuance of an instruction normative that establishes the guidelines, conditions, and deadlines for the carrying out of production tests by participating institutions regarding the sharing of the optimized service for initiating payment transactions with data sharing (optimized journey) in Open Finance .

Gentlemen Heads of Denor, Desuc, and Desup,

This Note justifies the proposal for the issuance of an instruction normative by the Department of Regulation of the Financial System (Denor), by the Department of Supervision of Cooperatives and Non-Bank Institutions (Desuc) and by the Department of Banking Supervision (Desup), in the exercise of the power provided for in art. 23, item I, letter "a", of the Internal Regulations of the Central Bank of Brazil, annexed to Resolution BCB No. 340, of September 21, 2023, based on art. 44, §1º, of Joint Resolution No. 1, of May 4, 2020, and on Resolution BCB No. 406, of August 2, 2024,

2. Regarding this, the proposal deals with the issuance of an instruction normative that establishes the guidelines, conditions, and deadlines for the carrying out of production tests by participating institutions regarding the sharing of the service optimized for initiating payment transactions with data sharing (optimized journey) in Open Finance .

3. In compliance with the provision of art. 5º of Law No. 13.874, of September 20, 2019, Decree No. 10.411, of June 30, 2020, determines that proposals for normative acts of general interest of economic agents formulated by bodies and entities of the direct, autarchic, and foundation federal public administration, as well as by collegial bodies through the body or entity responsible for providing administrative support, must be preceded by a Regulatory Impact Analysis (RIA).

4. However, the proposal in question publishes the detailing of the production tests to be carried out by participating institutions regarding the optimized journey, a step that is fundamental to guarantee adequate functioning of this new journey, both in terms of functionality and security, so that I consider that such proposal falls under the possibility of exemption from RIA established in art. 4º, item V, letters "b" and "c", of the Decree No. 10.411, of 2020, as it aims to preserve the integrity of the financial markets and payment systems.

For your consideration.

JANAÍNA PIMENTA ATTIE IVENS ARUA NEVES DE MIRANDA Consultant of Denor Deputy Head of Desuc

MARCO ANTONIO GUIMARÃES VERRONE Deputy Head of Desup

Agreed.

MARDILSON FERNANDES QUEIROZ ADALBERTO FELINTO DA CRUZ JUNIOR Head of Denor Head of Desuc

RICARDO SIVIERI ZENI Head of Desup