NORMATIVE INSTRUCTION BCB NO. 661, OF SEPTEMBER 11, 2025

Establishes operational procedures necessary for the functioning of the communication system for contracting restrictions in the National Financial System (SRC), which is governed by BCB Resolution No. 475, of May 26, 2025, named BC Protege +.

The Head of the Institutional Service Department, using the powers conferred by Articles 23, item I, letter "a", and 124, item VI, letter b, of the Internal Regulations of the Central Bank of Brazil, annexed to BCB Resolution No. 340, of September 21, 2023, based on Art. 4 of BCB Resolution No. 475, of May 26, 2025,

RESOLVES:

Art. 1 This Normative Instruction establishes the operational procedures necessary for the functioning of the communication system for contracting restrictions in the National Financial System (SRC), governed by BCB Resolution No. 475, of May 26, 2025, hereinafter referred to as BC Protege +.

Art. 2 The provisions of this Normative Instruction apply to institutions authorized to operate by the Central Bank of Brazil, regarding the products governed by CMN Resolution No. 4.753, of September 26, 2019, and BCB Resolution No. 96, of May 19, 2021, amended from December 1, 2025, respectively, by CMN Resolution No. 5.218 and BCB Resolution No. 476, both of May 26, 2025.

Art. 3 The consultation of BC Protege + by the institutions referred to in Art. 2 must be carried out prior to the opening of checking deposit accounts, savings deposit accounts, and prepaid payment accounts, as well as prior to the inclusion of holders or representatives in these accounts.

§ 1 In the case of an account whose holder is a legal entity, the requirement set forth in the caput applies both to the consultation of the National Registry of Legal Entities (CNPJ) number and to the Individual Taxpayer Registry (CPF) number of all its holders and representatives, observing the procedures described in this Normative Instruction and in the current regulation.

§ 2 The consultation referred to in the caput must be carried out exclusively in a motivated manner by the institutions, in accordance with current regulation.

Art. 4 The consultation of BC Protege + will be carried out through integration with the Central Bank of Brazil via MQ messaging, for institutions participating in the Network of the National Financial System (RSFN), or the File Transfer System (STA), for institutions that do not have access to the RSFN.

§ 1 The response from BC Protege + to the consultation referred to in the caput will contain, clearly and unequivocally, the indication of the contracting restriction or its non-existence in the system, for the CPF or CNPJ and the product or service consulted.

§ 2 The Central Bank of Brazil is exclusively responsible for the transmission of the data and information consulted through the integration described in the caput.

Art. 5 The communication between the institutions referred to in Art. 4 and the Central Bank of Brazil must observe the technical standards established in the Catalog of Services of the National Financial System (SFN), according to the method of connection used:

I - for institutions with access to the RSFN, the standards defined in the SFN Network Manual and the SFN Security Manual must be observed; or

II - for institutions without access to the RSFN, communication must occur through the STA, in accordance with the instructions provided in the STA Web Usage Manual and the STA Web Services Usage Manual.

Art. 6 The supporting documentation regarding the realization of the consultation to the BC Protege + system, governed by § 4 of Art. 2-A of CMN Resolution No. 4.753, of September 26, 2019, and § 4 of Art. 4-A of BCB Resolution No. 96, of May 19, 2021, must cover the following evidence of the consultations carried out:

I - the structure of the consultation, containing:

a) CPF or CNPJ to be consulted;

b) product or service contracted, if opening an account or including a holder or representative;

c) identification of the institution; and

d) information of the date and time of the consultation.

II - the response related to the consultation, containing:

a) status of the permission for contracting, if 'yes - allowed' or 'no - not allowed';

b) consultation code; and

c) identification of the request.

Sole Paragraph. The information and evidence referred to in the caput must be available for presentation to the Central Bank of Brazil, when requested.

Art. 7 The institutions referred to in Art. 2 must indicate to the Central Bank of Brazil:

I - the director responsible for compliance with the requirements set forth in the Resolutions cited in that article; and

II - the contact data of the employee designated to provide clarifications to the Central Bank of Brazil, including their phone and e-mail, in accordance with this Normative Instruction.

Art. 8 Institutions must treat the data received with the exclusive purposes determined in BCB Resolution No. 475, of May 26, 2025, securely performing the reception, processing, and elimination of the personal data made available, in accordance with the regulation and legislation in force.

Art. 9 The detailing of the parameters regarding service level agreements in the execution of the functionalities of BC Protege +, governed by Art. 4 of BCB Resolution No. 475, of 2025, contemplates availability for access to consultations by institutions of 24 (twenty-four) hours per day, 7 (seven) days a week, except for situations of interruption due to scheduled or emergency maintenance carried out by the Central Bank of Brazil.

Art. 10 Any temporary unavailability of BC Protege +, whether due to instability or scheduled maintenance, will not constitute an exceptional situation for the opening of the account or alteration of holder or representative, in accordance with § 1 of Art. 2-A of CMN Resolution No. 4.753, of September 26, 2019, and § 1 of Art. 4-A of BCB Resolution No. 96, of May 19, 2021, and the institution must postpone the conclusion of the process until the system is restored and arrange for the reprocessing of the requests.

Art. 11 In accordance with its legal duties, it is the responsibility of the Central Bank of Brazil to supervise the observance of the provisions of this Normative Instruction, including regarding the correct use of BC Protege + and the retention of information.

Art. 12 This Normative Instruction enters into force on December 1, 2025.

CARLOS EDUARDO RODRIGUES DA CUNHA GOMES

NOTE

1. This Normative Instruction, whose normative basis is BCB Resolution No. 475, of May 26, 2025, regulates the creation of the communication system for contracting restrictions in the National Financial System (SRC).

2. The communication system for contracting restrictions in the National Financial System will be publicly identified as BC Protege +.

3. BC Protege + is an electronic system developed and administered by the Central Bank, through which natural and legal persons may register the request, optionally, so that accounts are not opened in their name and so that they are not included as holders or representatives in third-party accounts.

4. Financial institutions and other regulated institutions are obliged to consult the information contained in the system prior to the opening of checking and savings deposit accounts, and prepaid payment accounts, as well as the inclusion of holders or representatives of these accounts.

5. The proposed Normative Instruction is exempt from conducting a Regulatory Impact Analysis (AIR), as provided for in Art. 4, item V, letters "b" and "c" of Decree No. 10.411, of June 30, 2020, which allows the exemption from AIR when the normative act aims to preserve the liquidity, solvency, or soundness of the financial, capital, foreign exchange markets, or payment systems, provided there is a reasoned decision by the competent authority. In this case, this Normative Instruction aims to discipline the operational procedures within the scope of BCB Resolution No. 475, of 2025, which aims to preserve the soundness of the financial markets, especially in light of the damages caused by frauds in the contracting of financial products and services, which compromise the integrity of the National Financial System.