Portuguese 
English 
Spanish 
4 min of reading 
0 comments 
STJ And Central Bank Confirm: Banks Must Reimburse Fraudulent Amounts in Pix, Unless They Prove Client’s Guilt. Understand Your Rights.
Since its launch in 2020, Pix has established itself as the most widely used payment method in Brazil. According to the Central Bank, by 2025 there will be more than 165 million active users and around R$ 2.1 trillion transacted per month. The convenience is undeniable: transfers in seconds, no fees, 24 hours a day. But along with its popularity came a problem: the rise in banking fraud. Social engineering scams, account cloning, and unauthorized transfers have skyrocketed, leaving customers at a loss. Many believe that in these cases, the consumer bears the loss alone.
The truth, however, is different: the law and jurisprudence of the Superior Court of Justice (STJ) confirm that banks are responsible for funds taken in frauds, unless they prove the client’s exclusive guilt.
What the Law and the Consumer Defense Code Say
The Consumer Defense Code (Law 8.078/1990) establishes that financial institutions are liable for service delivery failures. Article 14 states:
-
The noise law will no longer be in effect at 10 PM starting in June with a new rule valid during the 2026 World Cup.
-
The Chamber opens a debate on driver’s licenses at 16 years old as part of a reform that includes around 270 proposals to change the Brazilian Traffic Code and may redesign rules for licensing, enforcement, and circulation in the country.
-
The new Civil Code could revolutionize marriages in Brazil with “express divorce” and changes that could exclude spouses from inheritance.
-
Banco do Brasil sues famous influencer for million-dollar debt and intensifies debate on delinquency, risks of seizure, and direct impact on Gkay’s credibility.
“The service provider is liable, regardless of fault, for compensating consumers for damages caused by defects related to the service provision.”
In practice, this means that the bank is objectively liable for losses resulting from fraud, unless it can prove that the client acted with intent or gross negligence (for example, providing their password to third parties).
The STJ has consolidated this understanding in Summary 479:
“Financial institutions are objectively liable for damages resulting from internal fortuitous events related to frauds and crimes committed by third parties in the context of banking operations.”
In other words: frauds are part of the risks of banking activity, and the client cannot be penalized for security failures in the system.
STJ Jurisprudence: Landmark Cases
The STJ has judged dozens of cases in which banks were ordered to refund customers for losses incurred due to fraud. A notable case is REsp 1992474/SP (2022), in which the Court reaffirmed that:
- The bank must reimburse the consumer in cases of bank transfer fraud, including Pix;
- The only exception is if there is clear proof of the exclusive fault of the account holder;
- It is up to the financial institution to demonstrate that the customer acted imprudently or contributed to the fraud.
Thus, judicial decisions reinforce that the burden of proof lies with the bank, not with the consumer.
The Role of the Central Bank and Pix Rules
The Central Bank has also created protective mechanisms for Pix users:
- Special Reimbursement Mechanism (MED): since 2021, allows blocking and reimbursement of amounts in cases of fraud or operational failures, at the victim’s request.
- New rules for 2025: expanded deadlines and obligations for banks to monitor suspicious transactions, with the possibility of immediate precautionary blocking.
- Joint liability: the receiving institution of fraudulent amounts may also be held liable, as it must monitor accounts used for scams.
These rules reinforce that security is the banks’ duty and that the client should not be left unprotected.
When the Bank Can Exempt Itself from Responsibility
Despite the legal protection, there are situations in which the bank can evade the obligation to reimburse amounts. This occurs when it proves:
- Exclusive fault of the client: providing passwords to third parties, sharing security codes, or evident negligence.
- Fraud outside the banking environment: when the client voluntarily transfers funds after falling for a WhatsApp scam or fake customer service centers, and there was no security failure by the bank.
- Express authorization of the user: if the transfer was validated by biometrics or token, it will be more difficult to claim institutional failure.
Even so, many courts have considered that, in cases of highly sophisticated frauds, the consumer cannot be held solely responsible.
Impact on Consumers and the Banking System
The recognition of banks’ responsibility has two direct effects:
Consumer Protection: ensures that retirees, workers, and businesses are not at the mercy of gangs specialized in digital fraud.
Pressure on Banks: forces institutions to invest more in security systems, artificial intelligence, and fraud prevention.
According to experts, this measure strengthens trust in the financial system, essential for Pix to continue growing without becoming synonymous with risk.
What the Account Holder Should Do in Case of Fraud
If the client notices a fraudulent transfer in their account, they should:
- Immediately notify the bank and file a police report;
- Request activation of the Special Reimbursement Mechanism (MED);
- File a complaint with the Central Bank and with Procon;
- If there is no reimbursement, file a lawsuit seeking reimbursement and, in some cases, compensation for moral damages.
Jurisprudence is on the consumer’s side, but it is essential to act quickly and gather evidence (screenshots, protocols, reports).
Pix has revolutionized payments in Brazil, but it has also opened the door to a wave of frauds. What almost no one knows is that, in these cases, the bank cannot simply exempt itself from responsibility.
The STJ and the Central Bank have made it clear: the risk of the activity lies with financial institutions, not the account holder. Thus, the injured consumer has the right to reimbursement, unless their exclusive guilt is proven.
This is a powerful message: in the digital world, security is not a favor, it is an obligation. And those who profit from the banking system must also be accountable for the risks.
-
-
-
-
-
-
60 pessoas reagiram a isso.