Brazil's central bank published Resolução BCB nº 587 on September 18, 2026, revising the rulebook for Pix, the country's instant payment system. The resolution lets institutions flag accounts suspected of fraud and requires them to reject related payments. It also allows a single bill that carries both a boleto barcode and a Pix QR code, and opens salary accounts to Pix Automático, Pix's recurring-payment feature.
Flagged accounts will have Pix payments rejected
Institutions will be able to flag the tax IDs of individuals and companies involved in suspicious transactions. Transactions tied to a flag must be rejected, except for refunds. The flagged user must be notified and can ask for a review, which the institution must answer within seven days. If the review does not confirm the signs of fraud, the flag is removed and the decision must be explained.
The flags add to the MED (Mecanismo Especial de Devolução), the special refund mechanism Brazil created after a wave of instant payment scams. The fight against fraud shifts from refunding victims after the fact to blocking the account that receives the money.
One bill can carry a boleto barcode and a Pix QR code
The second change brings together two payment methods that until now ran side by side. A single payment slip will be able to carry both the barcode of the boleto, Brazil's traditional bill payment instrument, and a Pix QR code. The option covers standard and dynamic boletos. The institution that issues the boleto must also be the one that collects the payment, and offering hybrid bills is optional for institutions. If a customer pays twice, the full amount must be refunded within 24 hours.
Salary accounts open to Pix Automático
The third change affects the conta-salário, a tightly restricted account used only to receive wages. Pix Automático, which works much like a direct debit mandate, becomes the only way to send money out of these accounts by Pix. They still cannot receive other Pix payments, except transfers from the National Treasury and refunds.
Participation rules change right away
- some institutions can be exempted from mandatory participation if their business model does not warrant it
- authorizations obtained through false statements can be revoked
- an institution placed in liquidation is suspended immediately
- exclusions for breaches take effect with no notice period
The package follows a path that is becoming familiar for public payment rails. Adoption is won on simplicity; maturity is decided on fraud and governance. Brazil's central bank keeps control of both, and that remains the fundamental difference from a privately run scheme.