BCB Instruction No. 594 of March 19, 2025 — Amends BCB Instruction No. 491 of July 23, 2024, regarding Pix access device registration and transaction initiation rules

BCB INSTRUCTION NO. 594, OF MARCH 19, 2025

Amends BCB Instruction No. 491, of July 23, 2024, which establishes guidelines for the registration of access devices for initiating Pix transactions and for the management of Pix keys and defines the maximum value allowed to initiate Pix transactions on an unregistered access device, to adjust rules related to the registration of access devices.

The Head of the Department of Competition and Financial Market Structure (Decem) and the Head of the Information Technology Department (Deinf), in the exercise of the powers conferred upon them by art. 23, item I, letter “a”, and respectively by art. 94, item IX, and art. 70, item VII, of the Internal Regulations of the Central Bank of Brazil, annexed to BCB Resolution No. 340, of September 21, 2023, and having in view the provisions of art. 89, §§ 7 and 9, of the Regulation annexed to BCB Resolution No. 1, of August 12, 2020,

RESOLVE:

Art. 1 BCB Instruction No. 491, of July 23, 2024, shall enter into force with the following alterations:

“Art. 1 .....................................................................................................................

..................................................................................................................................

Sole paragraph. The provisions of this instruction do not apply to the Pix Automatic product, as provided for in Subsection IV, Section II, Chapter V, of the Regulation Annexed to BCB Resolution No. 1, of August 12, 2020.” (NR)

“Art. 2 This Instruction applies to Pix participants in the transactional account provider modality.

Sole paragraph. The Pix participants referred to in the caput must observe the guidelines for the registration of access devices, including for Pix transactions initiated through a payment transaction initiation service, whenever there are stages in which the user is redirected to the environment of the institution holding the account.” (NR)

“Art. 4 .....................................................................................................................

I - confirm the identity of the user who is the account holder; and

..................................................................................................................................

§ 1 For the purpose of complying with item I of the caput, the Pix participant must:

I - confirm the following personal information of the user:

a) name;

b) CPF;

c) phone number;

d) e-mail;

e) transactional account number; and

f) agency number linked to the transactional account; or

II - use secure mechanisms such as:

a) smartcards;

b) cryptographic tokens;

c) one-time password tokens, or OTP; or

d) biometric access.

§ 2 Participants are responsible for failures in the implementation of mechanisms for identifying the user who is the account holder.” (NR)

“Art. 6 .....................................................................................................................

§ 1 ...........................................................................................................................

I - inclusion of device; and

II - exclusion of device.

..................................................................................................................................

§ 3 The Pix participant may make available the functionalities:

I - device blocking; and

II - device unlocking.” (NR)

“Art. 7 ....................................................................................................................

..................................................................................................................................

VI - has not been used to access the Pix participant’s application for twelve months.

Sole paragraph. A device excluded for the reasons listed in the caput shall not perform any of the functionalities provided for in art. 1, caput, item I, nor even within the limits provided for in art. 9, until the device is re-registered.” (NR)

“Art. 8 .....................................................................................................................

..................................................................................................................................

Sole paragraph. The Pix participant may, additionally, allow the user to perform the actions cited in the caput on an unregistered device, provided that each action is validated individually through another device that is registered for the same user and for the same account.” (NR)

“Art. 9 The maximum value allowed for Pix transactions to be initiated on access devices that are not registered, except for transactions validated in the manner of art. 8, sole paragraph, is:

..................................................................................................................................

§ 1 The limit referred to in item II of the caput applies to the set of transactions initiated from unregistered devices.

§ 2 The limits set forth in the caput do not apply to transactions initiated through a payment transaction initiation service without redirection to other environments or electronic systems, as provided for in art. 9, sole paragraph, of Joint Resolution No. 1, of May 4, 2020, when the account linking stage, as provided for in art. 2, caput, item I, of BCB Resolution No. 406, of August 2, 2024, has been carried out from a device registered with the Pix participant holding the account.” (NR)

Art. 2 The following provisions of BCB Instruction No. 491, of 2024, are hereby repealed:

I - art. 4, caput, item I, letters “a”, “b”, “c”, “d”, “e” and “f”; and

II - art. 6, § 1, item III.

Art. 3 This Instruction enters into force:

I - from July 1, 2025, for the provisions that alter the following:

a) art. 7, sole paragraph; and

b) art. 9, § 2.

II - on the date of its publication, for the remaining provisions.

RICARDO TEIXEIRA LEITE
MOURÃO CAIO MOREIRA FERNANDES
Head of Decem Head of Deinf

NOTE

Decree No. 10,411, of June 30, 2020, provides for the mandatory conduct of a regulatory impact analysis (AIR) for the issuance of normative acts of general interest produced by the direct and indirect federal public administration bodies and entities.

However, as defined in paragraph 8 of Vote 280/2021–BCB, of November 10, 2021, the Pix Regulation, including other documents that integrate, detail, or complement it, do not constitute a regulatory act of binding force, but rather have an eminently contractual nature. Thus, modifications made to said regulation and to other documents that integrate, detail, or complement it are not subject to the prior production of an AIR.

Ricardo
Teixeira Leite Mourão