Circular SINAP 1-225: National Payments System - Immediate Debit. Update.

"AÑO DE LA DEFENSA DE LA VIDA, LA LIBERTAD Y LA PROPIEDAD" COMUNICACIÓN “A” 8172 30/12/2024 TO FINANCIAL ENTITIES, TO ELECTRONIC COMPENSATION CHAMBERS, TO PAYMENT SERVICE PROVIDERS OFFERING PAYMENT ACCOUNTS:
Ref.: Circular
SINAP 1-225:
National Payments System - Immediate Debit.
Update.
___________________________________________________________________________ We address you to provide you with the pages that, in replacement of those previously provided, must be incorporated into the regulations referenced herein, based on the provisions disseminated through communications A 7514, 7783, 7841, 7905, and 7934. It is noted that on this Institution's website www.bcra.gob.ar, by accessing “Financial System – LEGAL AND REGULATORY FRAMEWORK – Regulation and Summaries – Ordered Texts of General Regulations”, the modifications made with text highlighted in special characters (strikethrough and bold) can be found. We remain, Sincerely, BANCO CENTRAL DE LA REPUBLICA ARGENTINA Matías A. Gutiérrez Girault Luis A. D’Orio Manager of Payment Systems Principal Manager of Payment Systems and Current Accounts

ANNEX

-Index
Section 1. Introduction
1.1. Definitions
1.2. Objective
Section 2. General Characteristics
2.1. Scope
2.2. Participants
2.3. Currency
2.4. Operating Hours and Credit Timelines
2.5. Cost
2.6. Reversal and Chargebacks
2.7. Notifications
2.8. Information to the Client
Section 3. Processes and Functions
3.1. Functionality for Adherence to Recurring DEBIN Operations
3.2. Functionality for Originating Occasional and Recurring DEBIN
3.3. Functionality for Accepting Occasional DEBIN
3.4. Limits
3.5. Administration Module
Section 4. Responsibilities
4.1. Of the Processor/Operator
4.2. Of the Administrator
4.3. Of the Originating Entity
4.4. Of the Receiving Entity
4.5. Of the Payment Service Provider Offering Payment Accounts
Section 5. Surveillance
Section 6. Security and Risk Policy
Correlation Table
B.C.R.A. ORDERED TEXT OF THE REGULATIONS ON
“NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT”
Version: 5th. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 1

1.1. Definitions
1.1.1. Immediate debit (DEBIN) is a mechanism for immediate transfers that debits the client's account, requiring prior authorization. This authorization may be effected only once, at the time of adherence to the recurring DEBIN operation, or on each occasion upon receipt of an occasional DEBIN.
It is implemented through Internet banking, mobile banking, as well as through the interfaces provided by payment service providers offering payment accounts (PSPCP) and in other channels available from the Central Bank of the Argentine Republic (BCRA). The mechanism consists of:
− a debit request entered, through the channels specified, by the ordering client or the financial entity itself; − the online authorization of the debit for the receiving client (unless previously adhered to the operation); and − the online debit in the receiving client's account and the online credit in the ordering client's account.
1.1.2. There are two modalities of DEBIN:
− Spot or occasional: this is a DEBIN originated occasionally for a specific amount, which in each case requires the express authorization of the receiving client.
− Recurring: this is a DEBIN originated for recurring payments and/or frequent relationships, which does not require specific authorization for each debit by the receiving client as they are adhered to the operation. Recurring DEBIN cannot be used to collect any concept related to loans, which may only be processed through the occasional modality.
1.2. Objective
To provide clients with secure and accessible mechanisms that facilitate – through various channels – the execution of a wide range of operations involving online debits and credits, contributing to a more efficient payments system in accordance with international best practices in the matter. It allows clients to generate collection requests destined for other clients, producing an immediate payment – through an online debit and credit – based on an authorization in each operation of the receiving client or by the latter being adhered to the operation. B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 1. Introduction
Version: 5th. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 1

2.1. Scope
DEBIN may be ordered by natural and legal persons, holders of checking accounts in financial entities or payment accounts in PSPCP that, according to these regulations, are authorized to issue debit orders to account, or on their own behalf by financial entities.
2.2. Participants
− Ordering clients: natural or legal persons, holders of checking or payment accounts, who request the originating entity or PSPCP to issue the DEBIN.
− Receiving clients: natural or legal persons, holders of checking or payment accounts, who receive the DEBIN and are debited if they are adhered to the operation or expressly authorize it, as applicable. − Operators: financial entities or third parties designated by the entities or PSPCP that originate or receive DEBIN to link with clients. − Originating entities: financial entities in which the ordering client's account is located, or the current account of the PSPCP where the ordering client's payment account is located. They may originate DEBIN and, in that case, credit the accounts when applicable. They may act on behalf and order of third parties or on their own behalf. − Receiving entities: financial entities in which the receiving client's account is located, or the current account of the PSPCP where the receiving client's payment account is located. They receive debit requests for their clients and must provide their clients with mechanisms to accept or reject them. Furthermore, they must allow their clients to request adherence to the recurring DEBIN operation. − Originating PSPCP: PSPCP that may allow its clients to order DEBIN and, in that case, credits the payment accounts when applicable. It participates through an originating entity. − Receiving PSPCP: PSPCP that must allow its clients to receive DEBIN and provide them with mechanisms to accept or reject them. It must allow its clients to request adherence to the recurring DEBIN operation. It participates through a receiving entity. − Processors: financial entities or third parties designated by them to communicate with the administrator. They link the entities and PSPCP that originate or receive DEBIN with the administrator. − Administrator: low-value electronic clearing chamber (CEC-BV). It compensates debits and credits of the operation, liquidating net balances at the BCRA. − The high-value electronic clearing chamber (CEC-AV) may participate as an operator and/or processor of DEBIN. B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 2. General Characteristics
Version: 4th. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 1

2.3. Currency
The operation will be available for debits in pesos and US dollars, between accounts of the same currency.
2.4. Operating Hours and Credit Timelines
The DEBIN operation will be enabled every day, 24 hours a day, with immediate credit.
2.5. Cost
Debits in the receiving client's account for DEBIN will be free of charge.
Credits resulting from the DEBIN operation cannot be subject to charges and/or commissions by the entity or PSPCP receiving them. Only the originating entity or PSPCP may apply charges and/or commissions on these operations for the service provided; these must be informed to the ordering client, prior to the confirmation of the operation, when dealing with users of financial services. For operations involving recurring DEBIN, the entities or PSPCP receiving the DEBIN may charge the originating financial entities or PSPCP an interchange rate of up to 0.3% per operation, with a cap of 0.12 units of purchasing value (UVA).
2.6. Reversal and Chargebacks
The receiving client will have a period of 30 days to dispute the debit corresponding to a recurring DEBIN; they may file a claim with the entity or PSPCP that received it or through the ordering client. Once the dispute is made, the debited amount will be automatically returned to the client within 72 business hours of the claim being made. In turn, the entity or PSPCP that received the claim will effect an automatic chargeback against the entity or PSPCP originating the DEBIN. This situation must be explicitly stated in the conditions signed by the ordering and receiving clients.
2.7. Notifications
Financial entities and PSPCP must make available to their clients, through specific notifications and immediately, information on the DEBIN received – both recurring and occasional –. These notifications must be made through one of the electronic communication means used to communicate with their clients, such as email, text message, or any application that generates notifications on the receiving client's mobile device – cell phone or other –. Furthermore, the notification of occasional DEBIN must include the following legend in a prominent manner – in terms of visibility and size: “By accepting this transaction FUNDS WILL BE EXTRACTED FROM YOUR ACCOUNT for the indicated amount, which will be sent to who issued the extraction order. Keep in mind that it is NEVER necessary to give authorization to RECEIVE electronic payments.” The confirmation of adherence to recurring DEBIN must contain the following legend in a prominent manner – in terms of visibility and size: “By accepting this adherence request FUNDS WILL BE EXTRACTED FROM YOUR ACCOUNT periodically, which will be sent to XXXXXXX [name of the ordering client]. Keep in mind that it is NEVER necessary to give authorization to RECEIVE electronic payments.”
2.8. Information to the Client
The minimum data that financial entities and PSPCP must inform the receiving client, for each operation, through the various enabled channels, will be:
− The DEBIN description, followed by the name of the account holder to be credited. In the case of holders who do not have the status of users of financial services, the trade name will be recorded instead of the account holder's name. − Concept or a reference that uniquely identifies the operation for its use as a payment receipt. − Amount. − Date. B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 2. General Characteristics
Version: 1st. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 3

3.1. Functionality for Adherence to Recurring DEBIN Operations
3.1.1. A client – who will be the receiving client of the DEBIN – may request adherence to each service they wish to incorporate into the operation through:
a. the ordering client; or b. the financial entity or PSPCP where they hold the account that will be debited by the recurring DEBIN.
The following minimum data of the receiving client will be requested:
− Name and surname, or corporate name.
− Uniform Bank Key (CBU) or CBU alias, Uniform Virtual Key (CVU) or CVU alias, of the account to be debited.
3.1.1.1. When the receiving client requests adherence to the ordering client – subsection a) of point 3.1.1.–, the express authorization of the receiving client will be required, at the financial entity or PSPCP that receives the debit request – where the receiving client holds the account to be debited – prior to the first DEBIN requested by that ordering client being processed. This authorization will give this adherence immediate effect, being authorized from that same moment the debit of their account upon receiving a recurring DEBIN ordered by that ordering client.
3.1.1.2. Financial entities or PSPCP may resolve the development of the adherence functionality provided in subsection b) of point 3.1.1. directly or through third parties (operators).
3.1.2. The adherence may be cancelled by the receiving client through the ordering client or the entity or PSPCP that received the DEBIN, interchangeably.
3.1.3. Receiving and originating entities and PSPCP will interact with the administration module to perform the relevant validations and register in the reservoir the adherence of the CBU, CVU and/or aliases that the client integrated into the recurring DEBIN operation, as well as their cancellations.
3.2. Functionality for Originating Occasional and Recurring DEBIN
Financial entities and PSPCP may resolve the development of this functionality directly or through third parties (operators). This functionality:
3.2.1. Will allow the ordering client to originate DEBIN every day, 24 hours a day. For this purpose, the functionality must allow entering all of the following data, considering the provisions referred to regarding the entry of aliases included in point 6.1.:
− Alias, CBU or CVU of the ordering client.
B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 3. Processes and Functions
Version: 4th. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 1

− Alias, CBU or CVU of the receiving client.
− Concept: the reference by which the client uniquely identifies the DEBIN to be issued can be selected using one of the following concepts: Rents (ALQ), Installments (CUO), Condominium Fees (EXP), Bills (FAC), Loans (PRE), Insurance (SEG), Fees (HON), Benefits (HAB), Others (VAR). − Description up to 100 characters. − Amount to transfer. − Validity of an occasional DEBIN: will allow the ordering client to define its validity in a value in minutes between 10 and 4,320 (equivalent to 3 days). The expiration time will be controlled until acceptance or rejection. Once the deadline has expired, the DEBIN in question will become void. When the entity or PSPCP has indicated the acceptance and debit of the received DEBIN by sending the message to the administrator before the date/time of its expiration, the DEBIN will continue its execution regardless of when its expiration occurs from that moment onward.
3.2.2. Will not allow issuing recurring DEBIN to clients who have the status of users of financial services.
3.2.3. Will generate the DEBIN order recording all of the following minimum data:
− Date/time of the operation.
− Financial entity or PSPCP to be debited.
− Branch to be debited.
− Alias of the receiving client.
− CBU/CVU of the receiving client's account.
− Name of the receiving client.
− CUIT/CUIL/CDI/DNI of the receiving client.
− Amount.
− Concept – according to typification of point 3.2.1.–.
B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 3. Processes and Functions
Version: 3rd. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 2

− Description – according to specification of point 3.2.1.–.
− Beneficiary entity or PSPCP – receiver of the credit –.
− Beneficiary branch – receiver of the credit –.
− Alias of the ordering client.
− CBU/CVU of the ordering client's account.
− Name of the ordering client.
− CUIT/CUIL/CDI/DNI of the ordering client.
3.2.4. Once the operation is completed, the functionalities of the intervening entities or PSPCP will confirm to their respective clients – receiving and ordering – that the DEBIN was effected, through screen information and confirmation via messaging. All transactions will be replicated in the administration module for inclusion in the reservoir or for recording the activity.
3.3. Functionality for Accepting Occasional DEBIN
Financial entities and PSPCP may resolve the development of this requirement directly or through third parties (operators). This functionality:
3.3.1. Will allow the receiving client to authorize every day, 24 hours a day, the DEBIN request issued by the ordering client. For this purpose, the application must display on screen the DEBIN request registered for the account, including the following minimum data:
− Date/time of the operation.
− Entity or PSPCP to be debited.
− Branch to be debited.
− Alias of the receiving client.
− CBU/CVU of the receiving client's account.
− Name of the receiving client.
− CUIT/CUIL/CDI/DNI of the receiving client.
− Amount.
− Concept – according to typification of point 3.2.1.–.
− Description – according to specification of point 3.2.1.–.
− Entity or PSPCP beneficiary – receiver of the credit –.
− Beneficiary branch – receiver of the credit –.
− Alias of the ordering client.
B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 3. Processes and Functions
Version: 5th. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 3

− CBU/CVU of the ordering client's account.
− Name of the ordering client.
− CUIT/CUIL/CDI/DNI of the ordering client.
The notification for the authorization of pending debits for occasional DEBIN must be located in a prominent place in the enabled channel and must include the legend detailed in point 2.7.
3.3.2. The receiving client will confirm, reject, or dismiss the operation. When the DEBIN request is confirmed, the balance will be verified and the debit will be effected. To this end, interaction with the administration module will occur to verify and administer the coverage scheme and, if applicable, confirm the generation of the DEBIN, emitting information to the receiving and originating entities – and these, if applicable, to the respective PSPCP – for the completion of the online credit in the ordering client's account.
If the operation is not confirmed or rejected within the period indicated in point 3.2.1 subsection “Validity of an Occasional DEBIN”, it will become void.
3.4. Limits
3.4.1. The financial entity or PSPCP receiving DEBIN cannot establish amount limits, in any of the DEBIN modalities.
3.4.2. The originating financial entity or PSPCP may define, for each ordering client, a maximum DEBIN amount to be generated for a specific period.
3.4.3. There will be a single DEBIN limit defined by each originating financial entity or PSPCP for clients who originate DEBIN. This limit will be affected with each generation of recurring and/or occasional DEBIN.
3.5. Administration Module
The administration module, whose development and management will be the responsibility of the administrator, will have the function of processing debits and credits.
The module must execute the following actions:
3.5.1. Administration Module Functionality
The product will consist of the following modules: DEBIN, guarantees, adherences, and financial entities and PSPCP.
B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 3. Processes and Functions
Version: 5th. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 4

3.5.1.1. DEBIN
It will contain the main functionality of the product, managing all operations related to its operation, namely:
− New DEBIN: the originating entity or PSPCP must send this message at the moment a new DEBIN operation is generated.
− The administrator will validate whether it corresponds to a recurring or occasional DEBIN and will identify it in the messaging so that the entity or PSPCP receiving it processes it immediately or leaves it pending approval for the receiving client. − Debit confirmation: the entity or PSPCP receiving the DEBIN will send the debit confirmation once the receiving client accepts the operation and the debit has been effected in their account for the amount informed in the operation. The administrator will perform the guarantee control for the DEBIN product and inform the entity or PSPCP whether to continue with the operation or if it must reverse the debit due to insufficient guarantees or other reasons. − Delete a DEBIN: the originating entity or PSPCP may delete it as long as the DEBIN has not yet been debited from the receiving client's account. − Query DEBIN: the receiving client and the ordering client, through their respective financial entities or PSPCP, may request information on a DEBIN and its status. − List DEBIN: both the ordering client and the receiving client may request a list of DEBIN through their entity or PSPCP. The data of the ordering and receiving clients will be required exclusively. This list will show exclusively the operations originated and received by the client. − Set the entity status: online (“on line”) or offline (“off line”).
3.5.1.2. Guarantees
It must allow performing the following operations:
− Liquidations: the entity or PSPCP may consult the status of the last closed liquidation. The administrator will return the amount of each of the currencies operating in the product, indicating in each case whether they have already been paid or are pending payment. − Movements: the entity or PSPCP may consult the totals of debit and credit movements by currency. B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 3. Processes and Functions
Version: 5th. COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 5

3.5.1.3. Adhesions
The following operations must be allowed:

• Registration of the receiving client: Both the originating financial entity or PSPCP and the receiving entity may request the client's adhesion by calling the DEBIN interface, indicating the necessary data to perform the adhesion.
• Cancellation of the receiving client: Both the originating and receiving entity or PSPCP may request the cancellation of the adhesion to the operation.
• Online update of adhesion and cancellation of recurring DEBIN.
• The adhesion by a client through their financial entity or PSPCP takes immediate effect, becoming enabled –from that same moment– for the debit of their account upon receipt of a DEBIN. In the case of adhesion by the ordering client, the effect occurs after the acceptance described in point 3.1.

3.5.1.4. Financial entities and PSPCP
Each of the financial entities and PSPCP, through their enabled channels, must have a service that allows them to receive notifications from the administrator via invocations to said services. It must allow the following operations to be performed:

• Notification of a new DEBIN: The administrator will notify the entity or PSPCP receiving the DEBIN, which must respond to this notification so that the administrator confirms receipt.
• Notification of DEBIN completion: This notification will indicate that a DEBIN has ended correctly, executing the corresponding debit and credit operations.
• Credit: The administrator will request the originating entity or PSPCP to perform the credit in the ordering client's account previously informed. This message must be responded to synchronously, indicating whether the credit could be performed or not.
• Debit: The administrator will request the entity or PSPCP that received the DEBIN to debit the receiving client's account. This message must be responded to synchronously, indicating whether the debit could be performed or not.

3.5.2. Coverage Scheme
The operation will have a specific coverage scheme to ensure the viability of debits and credits.

B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 3. Processes and functions
Version: 5th COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 6

The administration module will verify and manage coverage through the online compensation of debits and credits, backed by the guarantees constituted by each entity for the operation, according to point 9.2.4 of the consolidated text (TO) on National Payments System - Electronic Clearing Chambers. Likewise, it will settle the net compensation balances in the LBTR system “Electronic Payment Medium” (MEP). The administrator will establish an operational cutoff schedule, and DEBIN orders made after said schedule will be considered in the compensation of the next business day.

3.5.3. Storage
The reservoir will contain the adhered CBU, CVU, and aliases. On the other hand, it will safeguard the DEBIN orders entered and the debit and credit transactions of the registered DEBIN. Likewise, it will maintain the record of activity preserving the other transactions entered in the operation. It will allow the exploitation of data for the purposes of evolutionary analysis inherent to the exercise of BCRA surveillance. Additionally, it will provide the information necessary for financial entities, PSPCP, and other bodies to carry out controls related to money laundering, terrorist financing, and other illicit activities, and/or perform other verifications, as appropriate.

B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 3. Processes and functions
Version: 1st COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 7

4.1 Of the processor/operator
4.1.1. Assume responsibility for the correct processing of electronic information transmitted to the actors/processes involved in the operation.
4.1.2. Manage communications between its computer center, other processors/operators, the administration module, and the participating entities and PSPCP.
4.1.3. Keep functionalities available and operational during the daily operational cycle in the established schedule.
4.1.4. Interact with the administration module, other processors/operators, and participating entities and PSPCP, guaranteeing the update and flow of information for the purpose of carrying out the DEBIN operation.
4.1.5. Implement and maintain the necessary mechanisms and processes to guarantee the security of the operation.

4.2. Of the administrator
4.2.1. Assume responsibility for the correct processing of electronic information transmitted to the other actors/processes involved in the operation.
4.2.2. Implement applications that allow the validation and registration of the CBU, CVU, and alias that the client integrated into the DEBIN operation, the validation and verification of DEBIN orders, the compensation of approved DEBIN transactions, and the management of the coverage scheme, registering the DEBIN in the reservoir.
4.2.3. Keep functionalities available and operational during the daily operational cycle in the established schedule.
4.2.4. Interact with the processor(s), entities, and PSPCP, guaranteeing the update and information flow for the purpose of carrying out the DEBIN operation.
4.2.5. Register the replicated information including the different instances of operations (adhered CBU, CVU, and alias, DEBIN orders, their status –fulfilled or rejected–, and, if applicable, the registered DEBIN), and administer the DEBIN reservoir, generating query modules that allow control of the evolution of the operation.
4.2.6. Implement and maintain the necessary mechanisms and processes to guarantee the security of the operation.
4.2.7. Manage communications between its computer center, the processor(s), financial entities, and PSPCP.
4.2.8. The administrator must maintain an updated permanent record of DEBIN adhesion and cancellation, in order to contribute to the efficiency of the system.
4.2.9. Perform systemic controls and transaction “scoring”.

B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 4. Responsibilities
Version: 4th COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 1

4.3. Of the originating entity
4.3.1. Assume responsibility for the correct processing of electronic information transmitted to the actors/processes involved in the operation.
4.3.2. Manage communications between its computer center, the administration module, and operators.
4.3.3. Keep functionalities available and operational during the daily operational cycle in the established schedule.
4.3.4. Interact with the administration module, processors, operators, and entities and PSPCP that receive DEBIN, guaranteeing the update and flow of information for the purpose of carrying out the DEBIN operation.
4.3.5. Implement and maintain the necessary mechanisms and processes to guarantee the security of the operation.
4.3.6. Assume responsibility for all debit orders generated by its ordering clients, within the framework of the “know your customer” policy and as a consequence of having previously authorized them for the DEBIN operation, in accordance with point 3.1.
4.3.7. Incorporate an identifier that allows distinguishing DEBIN that aim to constitute a fixed-term deposit with debit in a checking account opened in another financial entity in accordance with the TO on Fixed-Term Deposits and Investments.
4.3.8. Define –within the framework of its policy– the methodology for acceptance/rejection of companies requesting recurring DEBIN.
4.3.9. Manage the information of recurring payments adhered through the ordering client.

4.4. Of the receiving entity
4.4.1. Assume responsibility for the correct processing of electronic information transmitted to the actors/processes involved in the operation.
4.4.2. Manage communications between its computer center, the administration module, and operators.
4.4.3. Keep functionalities available and operational during the daily operational cycle in the established schedule.
4.4.4. Interact with the administration module, processors, operators, and originating entities and PSPCP, guaranteeing the update and flow of information for the purpose of carrying out the DEBIN operation.
4.4.5. Implement and maintain the necessary mechanisms and processes to guarantee the security of the operation.

B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 5. Responsibilities
Version: 4th COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 2

4.4.6. Request the client to adhere to the operation (in the case of recurring DEBIN) or their authorization (in the case of occasional DEBIN).

4.5. Of the PSPCP
4.5.1. Comply with the responsibilities defined for the originating entity and receiving entity, except for what is established in points 4.3.2., 4.3.4., 4.3.7., 4.4.2. and 4.4.4.
4.5.2. Interact with the originating/receiving entity, guaranteeing the update and flow of information for the purpose of carrying out the DEBIN operation.

B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 5. Responsibilities
Version: 2nd COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 3

The DEBIN subject to this regulation must be individualized by modality of origin of the operation and must comply with the surveillance mechanisms to be defined at the appropriate time.

B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 5. Surveillance
Version: 3rd COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 1

6.1. The functionalities must have an appropriate level of security so that the client is not exposed to the improper use of their account, the genuineness of operations is guaranteed, and the pertinent record of transactions is generated.
Likewise, both the operation defined in this regulation and the following system participants: originating entities and PSPCP, entities and PSPCP that receive the DEBIN, processors, DEBIN operators, and the administrator of the DEBIN operation, must contemplate the requirements established in the TO on Minimum Requirements for the Management of Technology and Information Security Risks associated with Digital Financial Services. Applications in which it is required that the client enter the alias of a CBU or CVU must present the client with a confirmation screen, which will have at minimum the following data: account type, CBU/CVU, alias, holder's name, account number, financial entity or PSPCP, and CUIT/CUIL/CDI/DNI. The user can cancel the operation, which can only be confirmed when they effectively select the corresponding option. Additionally, the mechanisms established in this regulation must comply with the technical security provisions established by the BCRA.

6.2. At the request of participating financial entities or PSPCP, the administrator may develop systems that monitor the reversal levels of the different ordering clients, as well as any other indicator considered relevant, and that allows, in those cases that exceed the prudential reversal levels considered, to notify the financial entity or PSPCP so that it determines the course of action to follow, in such a way as to preserve the confidence and efficiency of the operation.
Likewise, the administrator may develop systems that in real time allow identifying suspicious transactions, information that will be immediately made available to the entity or PSPCP that receives the DEBIN, which must arbitrate the necessary means of communication with its client to avoid fraud.

B.C.R.A. NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT
Section 6. Security and risk policy
Version: 3rd COMMUNICATION “A” 8172 Validity:
31/12/2024 Page 1

B.C.R.A. ORIGIN OF THE PROVISIONS CONTAINED IN THE REGULATIONS ON “NATIONAL PAYMENTS SYSTEM – IMMEDIATE DEBIT” CONSOLIDATED TEXT ORIGIN REGULATION OBSERVATIONS Sec. Point Para. Com. Annex Chap. Sec. Point Para. 1.
1.1. “A” 6099 S/Com. “A” 6285, 6423, 6698,
6909, 7514 and 8172.
1.2. “A” 6099 S/Com. “A” 6285, 6423, 6698 and
8172.
2.
2.1. “A” 6099 S/Com. “A” 6285, 6423, 6698,
7514 and 8172.
2.2. “A” 6099 S/Com. “A” 6234, 6285, 6698,
7514 and 8172.
2.3. “A” 6099
2.4. “A” 6099 S/Com. “A” 8172.
2.5 “A” 6234 S/Com. “A” 6285, 6420, 6698,
7514, 7841 and 8172.
2.6. “A” 6423 S/Com. “A” 6698 and 8172.
2.7. “A” 6423 S/Com. “A” 6698, 7326, 7350,
7514, 7841, 7905, 7934 and
8172. Includes regulatory clarification.
2.8. “A” 6698 S/Com. “A” 7326, 7514 and 8172.
3.
3.1. “A” 6099 S/Com. “A” 6234, 6285, 6423,
6698, 7514 and 8172.
3.2. “A” 6099 S/Com. “A” 6285, 6698, 7514 and
8172.
3.3. “A” 6099 S/Com. “A” 6285, 6423, 6698,
7326, 7350, 7514 and 8172. Includes regulatory clarification.
3.4. “A” 6698 S/Com. “A” 7514 and 8172
3.5. “A” 6099 S/Com. “A” 6285, 6423, 6698,
7514 and 8172.
4.
4.1. “A” 6099 S/Com. “A” 6285 and 8172.
4.2. “A” 6099 S/Com. “A” 6285, 6423, 6698,
7514 and 8172.
4.3. “A” 6099 S/Com. “A” 6285, 6423, 6698 and
8172.
4.4. “A” 6099 S/Com. “A” 6285, 6698 and 8172.
4.5. “A” 7514 5. S/Com. “A” 8172.
5. “A” 6099 S/Com. “A” 8172.
6.
6.1. “A” 6099 S/Com. “A” 6285, 6698, 7783 and
8172.
6.2. “A” 6698 S/Com. “A” 8172.