Skip to content
SecurityPublished 5 min read

Pix MED 2.0 has been mandatory since February 2: what changes in recovering money lost to scams

Since February 2, 2026, every institution that operates Pix must follow the new Special Refund Mechanism. Scam money is now tracked beyond the first account, but recovery still depends on balance and speed.

Historical reference: February 10, 2026. Published on this site on November 2, 2026. Dates in the text identify the period covered.

Smartphone on a wooden table displaying a security padlock icon, next to a small succulent
Photo: Dan Nelson / Unsplash
In this article

Key points

  • Since 2/2/2026, MED 2.0 has been mandatory for all financial and payment institutions that operate Pix.
  • Fraud money is now tracked through the following accounts, not just the first account that received it.
  • The Central Bank of Brazil (BCB) speaks of a refund within 11 days of the dispute, when the fraud is confirmed and a balance remains. Some of the press cites 7 days; the resolution leaves the deadlines to the Pix manual.
  • The MED covers fraud and operational failure, not typing errors or commercial disputes. Disputing quickly, through the app, is still what matters most.

São Paulo, February 10, 2026 — Since Monday, February 2, every financial and payment institution that operates Pix, Brazil's instant payment system, must follow the second version of the Special Refund Mechanism (MED), known as MED 2.0. The rule is in BCB Resolution No. 493, of August 28, 2025. In practice, anyone who falls for a scam and disputes the transfer now has the money's path followed across more than one account, which raises the chance that a balance is still there to freeze.

Start of the requirement for all Pix institutions
02/02/2026
Deadline to refund the amount after the dispute, when the fraud is confirmed (BCB, via Agência Brasil)
11 days
Average recovery under the previous model, according to the BCB, cited by Forbes Brasil
about 7%

What the MED is and why it got a second version

The MED has existed since 2021. When customers noticed the fraud, they asked the bank to trigger the mechanism. The recipient's institution checked the destination account and froze whatever was still in it. The limit was speed: scammers empty the pass-through account within minutes, moving the money to other accounts, and by the time the freeze arrived there was nothing left to freeze. According to the Central Bank, average recovery under the old model was around 7%.

The new version addresses that point. BCB Resolution 493 created the funds recovery feature, described in the text as a procedure for tracing, freezing and refunding. Use was optional from November 23, 2025 and became mandatory on February 2, 2026.

What changes in practice for scam victims

TracingThe money's pathThe system identifies the paths the money took after the fraud. If the amount was passed on to other accounts, the refund can come from them, not just from the first account that received the Pix.
FreezeImmediate, up to the disputed amountThe institution that receives the fraud notification must immediately freeze the account balance, up to the requested amount or whatever is available, according to BCB Resolution 493.
DisputeThrough the app, no agent neededSince October 1, 2025, banks must offer a 100% digital dispute, in the Pix area of the app. Customers do not need to speak to anyone to open the request.
CooperationData between institutionsInformation about the notification and the transactions circulates among institutions through the DICT, the Pix directory. The maximum deadlines for freezing and refunding are in the DICT Operational Manual.

The deadlines: dispute, review and refund

  1. Day 0The customer identifies the fraud and opens the dispute in the bank's app. The earlier, the greater the chance of a balance in the destination account.
  2. Right afterThe recipient's institution freezes the balance on receiving the notification, and the institutions involved review the case.
  3. Up to 11 daysThe amount is refunded to the payer, if the fraud is confirmed and there is a frozen balance.

BCB Resolution 493 does not set a number of days: it leaves the maximum deadlines for freezing and refunding to the DICT Operational Manual. When it published the rule, the Central Bank said, according to Agência Brasil, that the refund could occur within 11 days of the dispute. InfoMoney and Forbes Brasil cite a deadline of up to 7 days to complete the refund. For the scam victim, the practical conclusion is the same: what decides it is whether a balance remains when the freeze arrives.

A refund depends on balance

The MED is not insurance or a guarantee. If the scammer has already spent or withdrawn the money, there is nothing to freeze or refund. That is why the first minute matters more than the first day.

What the MED does not cover

  • The payer's own mistake, such as typing the wrong key: the mechanism does not apply; you have to try a friendly refund with the recipient.
  • Commercial disputes between buyer and seller, such as a product different from the one advertised, which follow the rules of the Consumer Protection Code.
  • Fraud with no balance left to trace: if the money has already left the financial system, recovery drops to almost zero.

Typical scams the MED handles include the fake bank agent, the tampered QR Code and the nonexistent seller. For companies, the costlier risk is usually a different one: the fake supplier who asks to change accounts. The topic appears in the fake supplier scam and bank detail changes, and the logic applies to Pix: confirm the change through a second channel before paying.

Mandatory, but with an adaptation period

The requirement began on February 2, but the Central Bank gave institutions some breathing room. BCB Resolution No. 546, of January 22, 2026, waives the opening of a noncompliance proceeding tied to the rollout of funds recovery for failures that occur between February 2 and May 10, 2026. It works as a regulatory grace period: MED 2.0 applies now, but full enforcement comes later. In the meantime, performance may vary from one bank to another.

What to do now: a checklist for individuals and companies

  1. Open the Pix dispute in the app as soon as you notice the scam, from the transaction screen in your statement.
  2. Keep screenshots of the conversation, the receipt, the ad and the scammer's profile.
  3. File a police report (boletim de ocorrência). It helps the investigation and any action against the recipient.
  4. Notify finance and the accountant, if the payment was the company's, and review who has permission to approve Pix.
  5. Set an internal protocol: a supplier's account change is only valid after confirmation by a known phone number or another independent channel.

The change also fits the recent history of scams that used the Pix system itself. In 2025, the wave of misinformation about the fake Pix tax and the attack on C&M Software showed that the instant payment channel is a constant target. MED 2.0 is a response to the speed of crime, but it does not replace prevention.

Frequently asked questions

Does MED 2.0 guarantee I will get my money back?

No. A refund only happens if the fraud is confirmed and there is a frozen balance in the accounts involved. If the scammer has already spent or withdrawn the amount, there is nothing to refund. Disputing quickly increases the chance.

How do I dispute a Pix with MED 2.0?

Through the bank's app: open the transaction in your statement and choose the option to dispute or report fraud. Since October 2025, banks must offer this digital path, without requiring human support.

Does the MED apply to a Pix sent to the wrong key?

No. The mechanism covers fraud, suspected fraud and operational failures by institutions. The payer's typing errors and commercial disputes are left out.

What is the refund deadline under MED 2.0?

According to the Central Bank, cited by Agência Brasil, the refund can occur within 11 days of the dispute, if the fraud is confirmed and a balance remains. Some of the press says up to 7 days. The resolution leaves the maximum deadlines to the DICT Operational Manual, and institutions have regulatory tolerance until May 10, 2026.

  • Pix
  • Scams
  • Central Bank
  • Cybersecurity
  • Social engineering
  • Compliance

Found it useful? Share it with anyone who pays suppliers abroad.

Sources

  1. Resolução BCB nº 493, de 28 de agosto de 2025 (altera o regulamento do Pix e o MED) · Banco Central do Brasil, Aug 28, 2025
  2. MED 2.0 do BC entra em vigor e permite bloqueio de Pix fraudulento; entenda as regras · Forbes Brasil, Feb 2, 2026
  3. MED 2.0 passa a ser obrigatório em todas as plataformas que oferecem Pix · InfoMoney, Feb 2, 2026
  4. Novo MED do Pix passa a ser obrigatório, mas instituições terão um “respiro” · Finsiders Brasil, Jan 27, 2026
  5. Resolução BCB nº 546, de 22 de janeiro de 2026 (dispensa temporária de apuração de descumprimento) · Banco Central do Brasil, Jan 22, 2026
  6. Pix: novas regras vão facilitar devolução de valores em casos de golpe · Agência Brasil, republicado por Bem Paraná, Aug 28, 2025

For information only, not investment advice. Third-party brands mentioned belong to their owners; the mention is journalistic and does not indicate a partnership or relationship with Swapo Finance.

For importers

International payments with the speed of Pix and Central Bank rules.

Convert reais into USDT and send it to your supplier on the TRON network. One fee shown upfront, asset segregation policy, human support. Virtual assets have no FGC coverage; authorization application filed with the BCB.