Ouça este artigo
In the latest Pix fraud landscape, banks face new court rulings over security failures. The article centers on a ruling that Nubank and Banco Inter must compensate an elderly woman who lost funds in a Pix scam, a case that sharpens scrutiny of how these institutions protect customers. The decision makes clear that banks cannot dodge liability by blaming the victim and it underscores the duty of financial institutions to monitor for fraud and improve defenses. It also explains the Central Bank’s MED process to block and recover funds and what victims should do if they fall prey to a Pix scam.
- Banks must refund victims if security failures helped the Pix scam
- The STJ ruling says banks cannot dodge liability by blaming the victim
- Acting fast after a fraud improves chances of recovery or compensation
- The MED process lets you block and get refunds within eighty days
- If banks refuse, contact consumer protection or file a legal action with a lawyer
Banks face new Pix security rulings in 2026
What happened in the Nubank and Banco Inter case
In 2026, the Superior Court of Justice ordered Nubank and Banco Inter to compensate an elderly woman who lost R$51,700 through a PIX fraud scheme known as the winning ticket. The ruling reinforces that banks can be held liable when a security failure or a flaw in service enables a scam. It also states that banks cannot dodge responsibility by claiming the transfer was initiated by the victim. The decision signals a stronger responsibility for security and fraud prevention in financial services.
The ruling’s scope and implications
The decision clarifies that in PIX scams, liability can rest with banks if there is a security lapse or a flaw in the service. Simply showing that the transfer came from the victim is not enough to exclude the banks from responsibility. Banks are expected to monitor activity and implement protective measures to prevent fraud.
MED and fraud handling procedures
Brazil’s Central Bank maintains a procedure known as MED that allows banks to block and return funds in cases of fraud, human error, or system faults within a window of up to 80 days after a transaction. Victims are encouraged to use this mechanism promptly to recover funds. In the 2026 case, the courts noted the banks’ responsibilities to act quickly and effectively when unusual transfers are detected.
Criticisms of the banks in the 2026 ruling
The ruling criticized Nubank for not detecting unusual, high-value movements in the victim’s account. It also questioned Banco Inter for not proving the legitimacy of the account used by the scammers and for not showing the security steps taken to prevent such access. These points highlight gaps in security controls and account verification.
Conclusion
The latest Pix security rulings solidify that banks bear greater responsibility for security failures and must not dismiss liability by blaming the victim. In the Nubank and Banco Inter case, the Superior Court of Justice affirmed that an elderly Pix scam victim deserves compensation when security gaps enable fraud, signaling a shift toward stronger fraud prevention and accountability in financial services. The decision clarifies that banks must monitor for unusual activity, implement effective security controls, and demonstrate that transfers were not improperly authorized. The Central Bank’s MED process remains a critical tool, offering a window of up to 80 days to block and recover funds; victims should act promptly to maximize their likelihood of refund. When banks refuse, victims may pursue consumer protection channels or legal action to safeguard their rights, reinforcing that prompt reporting and thorough record-keeping are essential. Collectively, the rulings strengthen trust in digital payments and set a clear expectation: financial institutions must prioritize protection of customers and swift remediation when fraud occurs.
Frequently asked questions
- What happened in the 2026 STJ ruling about Nubank and Banco Inter? The STJ ordered Nubank and Banco Inter to compensate an elderly Pix scam victim. The amount was R$51,700. Banks cannot dodge liability by saying the transfer was done by the victim. They must show security measures were in place and acted properly.
- When can banks owe a refund in Pix scams? Banks owe a refund when there is a proven failure in security or in the service. The fact that the victim initiated the transfer does not automatically grant a refund.
- What is MED and how does it help Pix cases? MED is a Central Bank process to block or return money in Pix fraud or errors. It should be used within 80 days after the transfer.
- What did the STJ criticize Nubank and Inter for? Nubank was criticized for not spotting the high-value, unusual transfer. Inter was questioned for not proving the account opening was proper and for not showing security steps used.
- What should a Pix scam victim do next? Act fast and report to the bank. Try to use MED within 80 days if possible. If the bank refuses, contact Procon or seek a lawyer. Keep all records.