BCB Resolution No. 402 — Establishes Pix Automatic Operating Rules and Adjusts Scheduled Pix Provisions

RESOLUTION
BCB NO. 402, OF JULY 22, 2024

Amends the regulation annexed to BCB Resolution No. 1, of August 12, 2020, which disciplines the operation of the Pix payment arrangement and approves its regulation, to institute the operating rules for Pix Automatic and make adjustments to provisions related to Scheduled Pix.

The Collegiate Board of the Central Bank of Brazil, in a session held on July 17, 2024, based on art. 10, caput, item IV, of Law No. 4.595, of December 31, 1964, art. 10 of Law No. 10.214, of March 27, 2001, arts. 6, 7, 9, 10, 14 and 15 of Law No. 12.865, of October 9, 2013, Resolution No. 4.282, of November 4, 2013, Communication No. 32.927, of December 21, 2018, and Communication No. 34.085, of August 28, 2019,

R E S O L V E:

Art. 1. The regulation annexed to BCB Resolution No. 1, of August 12, 2020, published in the Official Gazette of the Union on August 13, 2020, shall enter into force with the following alterations:

“Art. 3.
.....................................................................................................................

..................................................................................................................................

XXIV - payment transaction initiation service: a service that enables the initiation of a payment transaction, ordered by the end user, regarding a deposit or prepaid payment account, commanded by an institution that does not hold the account to the institution that holds it;

..................................................................................................................................

XXIX - payment instruction: information sent by the receiving user, through its payment service provider, which may be a transactional account provider or a payment transaction initiation service provider, so that the payment service provider of the paying user can initiate a transaction related to the Pix Automatic product; and

XXX - authorization journey: a specific set of procedural routines related to the paying user's experience in the process of granting authorization within the Pix Automatic product.

.........................................................................................................................”
(NR)

“Art. 6.
.....................................................................................................................

§ 1. ...........................................................................................................................

I - the initiation of a Pix transaction in the manner provided for in art. 12, caput, items I, II, III and V, to paying users;

.........................................................................................................................”
(NR)

“Art. 7.
.....................................................................................................................

..................................................................................................................................

§ 4. Regarding the offer of transaction initiations related to the Pix Automatic product, the participants referred to in the caput must follow the provisions of art. 11-S.” (NR)

“Art. 9.
.....................................................................................................................

..................................................................................................................................

§ 4. The participant payment service provider of the paying user must make new attempts to initiate a Scheduled Pix transaction, if the original attempt was not authorized, observing the cases described and the procedures detailed in a specific document to be published by the Central Bank of Brazil.

§ 5. The participant payment service provider of the paying user must, prior to sending for settlement a payment order for a Scheduled Pix, consult the DICT to obtain information about the transactional account of the receiving user linked to that user's Pix key, if the paying user initiated the Scheduled Pix through the mechanism provided for in art. 12, caput, item I.

§ 6. In the consultation referred to in § 5, if the Pix key is not registered in the DICT or if the DICT returns information that does not correspond to the receiving user identified at the time of initiation of the Scheduled Pix by the paying user, the participant payment service provider of the paying user must reject the transaction and communicate the rejection to its client.” (NR)

“Art. 10. ....................................................................................................................

I - the future date limit for scheduling; and

II - the form and conditions for recurring schedules.

Sole Paragraph. Pix participants that offer transactional accounts to end-user natural persons must:

I - make available the recurring schedules referred to in item II of the caput; and

II - observe, at a minimum, the functionalities defined in the Manual of Minimum Requirements for User Experience.” (NR)

“Art. 11-D. ................................................................................................................

Sole Paragraph. In the case of Pix Cobrança related to payments with due dates, Pix participants that are providers of transactional accounts must allow the paying user to schedule a Pix for a specific future date, observing the provisions of art. 9 of this regulation.” (NR)

“Subsection IV

Of Pix Automatic

Art. 11-Q. Pix Automatic consists of the payment service in which the participant payment service provider of the paying user initiates a Pix from that user's transactional account, due to the receipt of periodic payment instructions from the participant payment service provider of the receiving user, observing the need for prior and specific authorization from the paying user for the execution of this service.

§ 1. The authorization referred to in the caput:

I - must be granted by the paying user to its payment service provider only once, prior to sending the first payment instruction, without the need for authentication of that user for each transaction;

II - corresponds to the consent stage referred to in Joint Resolution No. 1, of May 4, 2020, in the case where the payment service provider of the receiving user is providing a payment transaction initiation service;

III - implies the granting of permission for the receiving user to periodically send the corresponding payment instructions;

IV - may be cancelled or, to the extent admitted, unilaterally altered by the paying user at any time;

V - must be cancelled by the payment service provider of the paying user, if the receiving user requests the cancellation of the corresponding permission to send payment instructions within the scope of Pix Automatic;

VI - must have a specific purpose, possibly encompassing payment for the provision of multiple products or services provided by the receiving user, provided that the billing is done in a single manner;

VII - may be granted through the adoption of the following journeys:

a) the paying user chooses Pix Automatic as a form of payment through a direct relationship with the receiving user, without using Pix components or infrastructures, and grants authorization to its payment service provider after sending, by the payment service provider of the receiving user, the information of the requested permission;

b) the paying user reads a QR Code containing the information of the requested permission and grants authorization;

c) the paying user reads a QR Code containing the information of the requested permission and the information related to the immediate payment of the first charge and grants authorization at the same time as initiating the immediate payment; or

d) the paying user accepts a proposal after making a payment through a QR Code containing the payment information and the requested permission and grants authorization;

VIII - may be granted in accordance with the rules set forth in the normative framework of Open Finance; and

IX - must observe the parameters established by the Central Bank of Brazil, in accordance with art. 11-U, caput, item V.

§ 2. The participant payment service provider of the receiving user may be a provider of transactional accounts or a participant that can provide a payment transaction initiation service.

§ 3. The journeys for granting the authorization, referred to in item VII, letters “a” to “d”, of § 1, and for cancelling and altering the authorization, referred to in item IV of § 1, will be detailed in the Manual of Flows of the Pix Effectiveness Process and in the Manual of Minimum Requirements for User Experience.” (NR)

“Art. 11-R. The adoption of any journey provided for in art. 11-Q, § 1, related to the paying user's experience, for granting, cancelling or altering Pix Automatic authorization, does not dispense the Pix participants involved in the execution of this payment service from observing all other rules provided for in this regulation, the manuals that integrate it, and the normative instructions that guide its application.” (NR)

“Art. 11-S. All participants that are providers of transactional accounts must make Pix Automatic available to their clients, in cases where they are acting as service providers to the paying user.

§ 1. Pix participants that offer transactional accounts to end-user legal entities, in cases where they are acting as service providers to the paying user, may request the Central Bank of Brazil for dispensation from making Pix Automatic available to these clients.

§ 2. The form to request the dispensation referred to in § 1 will be published in a specific document by the Central Bank of Brazil.

§ 3. The journeys adopted for granting the authorization provided for in art. 11-Q, § 1, item VII, letters “a” to “d”, must be made available by the participant referred to in the caput to all paying users.

§ 4. The journey adopted for granting the authorization provided for in art. 11-Q, § 1, item VII, letter “e”, must be made available in accordance with the rules set forth in the normative framework of Open Finance.” (NR)

“Art. 11-T. The offer of Pix Automatic for a receiving user is optional.

§ 1. Pix Automatic may only be offered to a legal entity receiving user whose CNPJ registration number is active.

§ 2. The exchange of information between the transactional account provider participant and the receiving user must be done through:

I - the Pix API; or

II - a standardized file.

§ 3. The Pix transactional account provider participant, if it offers Pix Automatic for a receiving user, must offer at least one of the forms of information exchange with the receiving user provided for in § 2.

§ 4. The rules and operational systems for the exchange of information between the receiving user and the Pix participant that holds its transactional account will be described in the Manual of Standards for Pix Initiation.

§ 5. The rules and operational systems for the exchange of information between the receiving user and the Pix participant providing a payment transaction initiation service will be set forth in the normative framework of Open Finance.

§ 6. The payment service provider of the receiving user that holds its account may choose which of the journeys provided for in art. 11-Q, § 1, related to the paying user's experience for granting Pix Automatic authorization, will be offered by it.” (NR)

“Art. 11-U. The operational procedures related to Pix Automatic will be detailed in the Manual of Flows of the Pix Effectiveness Process, the Manual of Minimum Requirements for User Experience, and in a specific document to be published by the Central Bank of Brazil, which will provide, at least, on:

I - the cases in which a Pix Automatic payment instruction may be rejected by the payment service provider of the paying user;

II - the rules related to subsequent attempts to send the payment order related to a Pix Automatic, in cases of rejection of the transaction due to insufficient funds in the paying user's transactional account;

III - the rules related to the days and deadlines for sending and settling the payment order related to Pix Automatic;

IV - the procedures that must be observed by the participants involved in a transaction related to Pix Automatic for sending the payment instruction and the payment order, including aspects related to its scheduling; and

V - the parameters of the authorization granted by the paying user to its payment service provider, which encompass, at a minimum:

a) the identification of the receiving user to whom permission was granted to send payment instructions within the scope of Pix Automatic;

b) the maximum authorized value for debit in the paying user's transactional account for each transaction, at the discretion of the paying user, respecting the floor for the maximum value to be authorized, which may be defined by the receiving user;

c) the possibility of using pre-approved credit, in cases where the available balance in the paying user's transactional account is lower than the value of the Pix Automatic product transaction;

d) the validity period, if any;

e) the periodicity of the payments; and

f) the date scheduled for the first payment.” (NR)

“Art. 11-V. The availability of Pix Automatic by the participant, by any means provided for in this regulation, implies unconditional acceptance of the obligations, responsibilities, and procedures provided for in the Special Refund Mechanism, referred to in Chapter XI, Section II, including with respect to the need to refund the Pix to the paying user through own resources, regardless of whether there are sufficient funds in the receiving user's transactional account for subsequent reimbursement.” (NR)

“Art. 12. ....................................................................................................................

..................................................................................................................................

III - static QR Code;

IV - payment transaction initiation service, in cases where the participant has all the information of the receiving user; and

V - sending, to the payment service provider of the paying user, by the payment service provider of the receiving user, of payment instructions related to the Pix Automatic product.” (NR)

“Art. 15. The rules and operational systems for the generation and use of QR Codes are described in the Manual of Standards for Pix Initiation.

Sole Paragraph. The rules and operational systems for the use of QR Codes for initiating a Pix and, where applicable, for authorizing Pix Automatic apply exclusively to the initiating participant.” (NR)

“Art. 15-B. ................................................................................................................

..................................................................................................................................

§ 2. The provisions in the caput do not apply to cases in which:

I - the offer of functionalities provided for in the Pix API is made available directly through other means in which there is no automation of the end user's interaction with the Pix participant that provides it with a payment service; or

II - the participant makes available to the receiving user the exchange of information through a standardized file in transactions related to Pix Automatic.” (NR)

“Art. 15-C. ................................................................................................................

§ 1. ...........................................................................................................................

I - in art. 5, § 1, in transactions initiated by the procedures provided for in art. 5, caput, item I, and in art. 5, caput, item II, for the mechanism provided for in art. 12, caput, item V; and

II - in art. 5, § 1, added with the information related to the Pix key of the receiving user, in transactions initiated by the procedures provided for in art. 5, caput, item II, for the mechanisms provided for in art. 12, caput, items I, II, III and IV.

§ 2. The technical requirements and operational procedures necessary for the participant to initiate a Pix through a payment transaction initiation service must follow the provisions of BCB Resolution No. 32, of October 29, 2020, and the normative acts that complement it, including with respect to the initiation of a transaction related to Pix Automatic.

.........................................................................................................................”
(NR)

“Art. 32. ....................................................................................................................

..................................................................................................................................

VII - use the information linked to Pix keys for Pix security, referred to in art. 59, §§ 1 and 2, as one of the factors to be considered for purposes of authorization and rejection of transactions within the scope of Pix;

VIII - notify the holders of transactional accounts provided by the participant who are natural persons of the occurrence of a security incident involving personal data related to a database associated with a component or infrastructure of Pix, even if the account provider participant is not responsible for the incident and even if the security incident cannot entail relevant risk or damage to the holders, as defined by the Central Bank of Brazil in a specific document; and

IX - have monitoring and action mechanisms against receiving users who send improper payment instructions within the scope of the Pix Automatic product or who send excessive offers requesting authorization to include transactions in Pix Automatic.

§ 1. ...........................................................................................................................

§ 2. For the purposes of the provision in item IX of the caput, the sending of an offer requesting authorization to include transactions in Pix Automatic is considered excessive:

I - to a natural or legal person who has no active relationship of any kind with the receiving user, whether as a user of products or services provided or as a debtor indicated on an invoice or other billing document; or

II - to the same paying user who has not authorized a previous offer requesting authorization to include transactions in Pix Automatic related to the identical proposal for the provision of a product or service sent at least thirty calendar days ago.” (NR)

“Art. 38. ....................................................................................................................

..................................................................................................................................

V - involve movement of resources originating from paying users sanctioned by resolutions of the United Nations Security Council, in the manner provided for in Law No. 13.810, of March 8, 2019, and according to its own discipline issued by the Central Bank of Brazil;

VI - there is inconsistency between the transaction and the parameters assigned to transactions with the purpose of withdrawal or change, including with respect to the value limits established by the Central Bank of Brazil in a specific document, the legal nature of the receiving user, and the participants who can initiate transactions with these purposes; or

VII - there is inconsistency between the payment instructions sent by the payment service provider of the receiving user and the parameters of the authorization granted by the paying user, in a transaction related to the Pix Automatic product.

.........................................................................................................................”
(NR)

“Art. 39. ....................................................................................................................

..................................................................................................................................

II - there are problems in identifying the receiving user;

III - the withdrawal agent, in transactions with the purpose of withdrawal or change, has not been enabled to facilitate the withdrawal service, as defined by the Central Bank of Brazil in a specific document; or

IV - there is inconsistency between the payment order sent by the payment service provider of the paying user and the parameters assigned to the charge that originated it in a transaction related to Pix Automatic.” (NR)

“Art. 41-A. ................................................................................................................

..................................................................................................................................

§ 1. The provision in item I of the caput does not apply to the cases provided for in art. 41-B, caput, item III.

§ 2. In the cases provided for in art. 41-B, caput, item III, the payment service provider of the paying user:

I - must refund the total resources to the paying user, using own resources, within a deadline to be defined by the Central Bank of Brazil in a specific document; and

II - may request the refund of the values to the participant payment service provider of the receiving user through the DICT functionality provided for in Chapter XIII, Section III, Subsection X, which shall be refunded only if there are sufficient funds in the receiving user's transactional account.” (NR)

“Art. 41-B. The Special Refund Mechanism is the set of rules and operational procedures intended to enable the refund of a Pix in cases where:

I - there is a well-founded suspicion of the use of the arrangement for the practice of fraud;

II - an operational failure occurs in the information technology system of any of the participants involved in the transaction, except as provided for in item III; or

III - the participant payment service provider of the paying user authorized the initiation of a transaction related to the Pix Automatic product:

a) when there is inconsistency between the payment instructions sent by the payment service provider of the receiving user and the parameters of the authorization granted by the paying user;

b) when there is no valid authorization granted by the paying user; or

c) improperly, due to an operational failure of the payment service provider – PSP of the payer.

---”

“Art. 41-C. ................................................................................................................

..................................................................................................................................

II - at the request of the participant payment service provider of the payer user, through the DICT, in cases where:

a) the requesting payment service provider identifies allegedly fraudulent conduct or receives a complaint from the payer user;

b) an operational failure has occurred in the systems of the payer user’s payment service provider; or

c) the hypotheses provided for in Art. 41-B, caput, item III are configured.

.........................................................................................................................” (NR)

“Art. 78-I. The return request may be made by the participant payment service provider of the payer user, on its own initiative or at the user’s request, in accordance with Chapter XI, Section II, in cases where:

I - there is a well-founded suspicion of the use of the arrangement for the practice of fraud;

II - an operational failure occurs in its information technology system, subject to the provisions of item III; or

III - the participant payment service provider of the payer user has authorized the initiation of a transaction regarding the Pix Automatic product:

a) when there is an inconsistency between the payment instructions sent by the payee user’s payment service provider and the parameters of the authorization granted by the payer user;

b) when there is no valid authorization granted by the payer user; or

c) improperly, due to an operational failure of the payer’s PSP.” (NR)

“Art. 86. ....................................................................................................................

..................................................................................................................................

Sole Paragraph. .......................................................................................................

..................................................................................................................................

VIII - claim of possession of a Pix key in the DICT; and

IX - functionalities related to Pix Automatic and Pix Scheduled.” (NR)

“Art. 87-B. ................................................................................................................

..................................................................................................................................

II - ............................................................................................................................

a) the payer user is a natural person;

b) the payer user, a legal entity, initiates the transaction through:

..................................................................................................................................

2. Static QR Code, dynamic QR code, or other initiation form associated with Pix Cobrança; or

c) it is a transaction regarding Pix Automatic.” (NR)

“Art. 96. The charging of tariffs or other forms of remuneration, directly or indirectly, between participants who are payment service providers of the payee user and participants who are payment service providers of the payer user is prohibited, including with respect to transactions related to the Pix Automatic product.” (NR)

“Section X

On the Availability of Pix Automatic

Art. 120. In cases where the offer of Pix Automatic to end users is not optional, as provided in Chapter V, Section II, Subsection IV, of this regulation, the participant is subject to the application of a fine per day of delay, in cases where, by June 16, 2025, for any reason:

I - it does not obtain approval from the Central Bank of Brazil in the Pix Automatic homologation stage, in accordance with Art. 114 of this regulation; or

II - it does not effectively make the initiation of this product available to its customers, after approval by the Central Bank of Brazil in the homologation stage.

§ 1º The counting of days of delay, for the purposes of the caput, shall cease on the date when Pix Automatic initiation is made available, after approval by the Central Bank of Brazil in the homologation stage.

§ 2º The fine provided for in the caput shall be limited to sixty days.” (NR)

Art. 2º Pix participants shall make available, observing the provisions of the regulation annexed to BCB Resolution No. 1, of August 12, 2020:

I - the initiation of payment transactions related to the Pix Automatic product and its other functionalities starting from June 16, 2025; and

II - the recurring scheduling of payment transactions related to the Pix Scheduled product starting from October 28, 2024.

Art. 3º The following are revoked:

I - Art. 10, caput, item III, of the regulation annexed to BCB Resolution No. 1, of August 12, 2020, published in the Official Gazette of the Union on August 13, 2020; and

II - BCB Resolution No. 360, of December 7, 2023, published in the Official Gazette of the Union on December 11, 2023.

Art. 4º This Resolution enters into force on the date of its publication.

RENATO
DIAS DE BRITO GOMES

Director of Organization of the Financial System and Resolution