RIO DE JANEIRO, BRAZIL – Procon-SP consumer defense agency has notified some 11 banks following security breaches in companies’ apps. The information was released on Friday, June 18. According to the notification, gangs are stealing mobile devices to perform bank transfers through Pix.
This being the case, companies should submit a technical report to demonstrate the security of their apps and also prove the validation mechanisms for remote access by the bank account holder. Procon has requested three further technical analyses.
“Specifically regarding Pix transactions, the institutions are required to provide the security policy in place for the implementation of this payment method,” the agency said.
Should it be confirmed that fraud was involved in transactions, financial institutions will be required to return the funds to their clients.
The banks notified were BMG, Inter, Pan, C6, Bradesco, Banco do Brasil, Itaú, Caixa Econômica Federal, Neon Pagamentos, Nubank, and Santander Brasil.