Brazil’s Central Bank Tightens Rules After Vendor-Targeted Cyberattacks, Says Stability Intact

Overview

• The Financial Stability Report concludes there is no relevant risk to overall stability, with stress tests indicating solid capital and liquidity.
• Recent coordinated attacks on technology service providers connected to the RSFN diverted funds from reserve accounts, while BC and Pix systems were not compromised.
• Measures now in force include smaller PIX and TED transfer limits, stricter requirements for PSTIs, prior approval for new entrants, and confirmation of technical certification to operate.
• The BC reports criminal groups with advanced knowledge of SFN operations have co‑opted insiders and exploited APIs to automate fraud and disperse funds, exposing KYC and access‑control weaknesses.
• Supervision director Ailton Aquino said 68 cyber incidents were recorded through October 2025, up from 59 in 2024 and 24 in 2023, noting lessons from cases such as C&M and Sinqia.