# Brazil tightens Pix rules, adds crypto retention rule > Live situation record from CLSTR: https://clstr.news/situations/brazil-pix-data-leak-in-maranho > Updated: 2026-08-06T20:40:50.000Z. Sources: 41. Developments: 7. After a June 2026 breach of the Maranhão civil‑police database exposed Pix key details, Brazil’s Central Bank issued a 400‑item cybersecurity questionnaire and drafted stricter standards for instant‑payment providers. In July it announced caps on transfers from unregistered devices (R$ 200 per transaction, R$ 1,000 per day) and a tiered sanction regime that can suspend the Pix function for non‑compliant firms. Implementation began in August 2026: banks must supply detailed traceability data for each Pix transfer and a new monitoring tool flags “orange accounts” linked to fraud. On 1 September the Special Refund Mechanism (MED) was expanded, allowing contestations up to 80 days. A further regulation takes effect on 1 January 2027, requiring virtual‑asset service providers to retain cryptocurrency transfers exceeding US$10,000 for up to 24 hours for additional risk analysis, targeting stablecoins used to move fraud proceeds. The regulator also faces an internal staffing challenge dubbed “PixExit,” as senior technical personnel depart for other public agencies, prompting discussions of a shared, federated fraud‑data platform to preserve continuity of security and innovation across the payment ecosystem. ## Timeline ### 2026-08-06: Brazil's Central Bank rolls out crypto retention rule and Pix security upgrades Brazil's Central Bank introduced extended Pix contestation periods, new orange‑account tracking, and a 24‑hour crypto‑transfer hold for amounts over US$10,000, while also warning of a staff exodus affecting Pix 12 sources. https://clstr.news/cluster/brazil-central-bank-revamps-pix-rules-to-curb-fraud ### 2026-07-30: Brazil central bank to strengthen Pix oversight with 2026 rule changes Brazil's central bank will roll out new Pix rules in August and September 2026 to boost transfer tracking and improve the Special Refund Mechanism, targeting fraud and improving investigative tools. 8 sources. https://clstr.news/cluster/brazil-central-bank-to-strengthen-pix-oversight-with-2026-rule-changes ### 2026-07-12: Brazil central bank tightens Pix rules and caps transfers on unregistered devices Brazil's central bank is tightening Pix security: banks that miss new cyber‑security standards may lose Pix access, and transfers on unregistered devices are capped at R$200 per operation, R$1,000 daily. 9 sources. https://clstr.news/cluster/brazils-central-bank-warns-banks-they-may-lose-pix-access-if-security-rules-not-met ### 2026-07-09: Brazil Central Bank to Tighten Pix Rules Amid Security Breaches Brazil's Central Bank plans stricter Pix rules, including limits and possible exclusion of banks and fintechs that fail cybersecurity standards after attacks causing over R$1.5 bn losses. 3 sources. https://clstr.news/cluster/brazils-central-bank-to-tighten-pix-rules-as-splitpayment-tax-system-is-introduced ### 2026-07-06: Brazil's Central Bank moves to tighten Pix security and consider constitutional protection Brazil's central bank proposes tighter security rules for Pix, limits access for vulnerable institutions, and backs a constitutional amendment to protect the payment system, while also tightening crypto‑asset监管 7 sources. https://clstr.news/cluster/brazils-central-bank-to-restrict-pix-access-for-banks-lacking-cybersecurity ### 2026-06-14: Maranhão police uncover unauthorized access to 828 Pix keys Maranhão’s Civil Police discovered unauthorized access to data of 828 Pix keys, exposing personal details but not financial information; investigators have blocked access, informed the Central Bank, and warned 2 sources. https://clstr.news/cluster/maranho-police-uncover-unauthorized-access-to-828-pix-keys ### 2026-06-13: Brazil's Central Bank Reports Pix Data Leak in Maranhão Police System Brazil's Central Bank revealed that unauthorized access to the Maranhão Police system exposed cadastral data for about 828 Pix keys, without compromising passwords or balances, and warned of possible scams. 2 sources. https://clstr.news/cluster/brazils-central-bank-reports-pix-data-leak-in-maranho-police-system --- Cite as: Brazil tightens Pix rules, adds crypto retention rule. CLSTR, https://clstr.news/situations/brazil-pix-data-leak-in-maranho