What is Pix?
Since the Central Bank of Brazil launched Pix in November 2020, the instant payment system has radically transformed how Brazilians transfer money. In less than six years, it became the most used payment method in the country, surpassing debit card, TED and DOC in transaction volume. If you still have doubts about how it works, what the limits are, or how to protect yourself from scams, this guide was made for you.
Pix is not a standalone app: it is a payment infrastructure created and regulated by the Central Bank, integrated into banks, fintechs and authorized payment institutions. This means you use Pix within your own bank app or digital wallet, without needing to download any extra software. Available 24 hours a day, seven days a week, including holidays, it transfers values in up to ten seconds — something traditional TED, for example, was never able to offer.
But with speed comes responsibility. The same pix that landed in your account in seconds can, if sent to the wrong recipient or captured by a scammer, be very difficult to recover. That’s why understanding how the system works and how to use it safely is just as important as knowing how to make your first transfer.
How Pix Works in Practice
Pix uses addressing keys — shortcuts registered by the user — to identify the destination account without needing to enter branch and account number. There are four types of keys:
- CPF or CNPJ — links the key to the holder’s document
- Mobile phone number — the number must be active and registered at the bank
- Email — email address registered with the financial institution
- Random key — sequence of characters automatically generated by the bank, useful for those who don’t want to share personal data
Each individual can register up to five keys per financial institution, and businesses can have up to twenty. The same key cannot be registered at two banks at the same time — if you want to change, you need to port the key to the new institution.
What Happens When You Make a Pix
- You open your bank’s app and choose the Pix option.
- Enter the Pix key, QR Code or recipient’s banking details.
- Confirm the amount and review the recipient’s data (name and partial CPF/CNPJ appear on screen).
- Authorize the transaction with password, biometrics or another authentication factor.
- The money is debited from your account and credited to the recipient’s account in seconds.
The generated receipt has an identification code called E2E ID (end-to-end ID), which is the unique transaction tracking number in the Central Bank system.
Pix Limits and Modalities
Pix has value limits that vary according to the financial institution and time of day. In general, the Central Bank establishes two operating windows:
| Period | Default Limit |
|---|---|
| Daytime (6am to 8pm) | Set by each bank |
| Nighttime (8pm to 6am) | Mandatory reduced limit |
The nighttime limit was created in 2021 specifically to reduce losses in cases of cell phone theft or coercion. Each bank sets the exact amount, but the nighttime ceiling is usually significantly lower than the daytime one. You can check and adjust your own limits directly in the app — increasing, however, usually has a 24 to 48 hour waiting period for security reasons.
Beyond common transfers, there are specific modalities:
- Pix Withdrawal: allows you to withdraw money at accredited commercial establishments, without needing an ATM
- Pix Change: when making a purchase, you pay a higher amount and receive the difference in cash
- Pix Billing: generates a receipt with a dynamic QR Code, with expiration and interest, mainly used by companies
- Pix Automatic: modality aimed at recurring charges, such as subscriptions and monthly payments, without needing to authorize each charge individually
Main Scams Involving Pix and How to Recognize Them
The speed and irreversibility of Pix are exploited by criminals. Knowing the most common scams is the best way to avoid them.
Fake Bank Employee Scam
The criminal calls impersonating a financial institution employee, warns about supposed “suspicious activity” on your account and asks you to make a Pix transfer to a “safe” account or to install a remote access app. Banks never ask you to transfer money over the phone.
Tampered QR Code Scam
In physical establishments, stickers with fake QR Codes are pasted over the originals. When scanned, the payment goes to the scammer’s account. Always check the recipient’s name before confirming.
Fake Social Media Profile Scam
The criminal clones a friend’s or family member’s profile on social media and asks for money, claiming an emergency. Call the person before making any transfer.
Wrong Pix Scam
Someone claims to have made a Pix to your key “by mistake” and asks for immediate refund — but the amount was never actually transferred, or the receipt is fake. Check directly in your bank statement before returning any amount.
How to Use Pix Safely: Practical Checklist
Adopting good habits makes all the difference. See what you can do right now:
- Activate the reduced nighttime limit in your bank app — this limits losses in case of theft
- Use strong screen lock on your phone: long password, biometrics or PIN, no obvious patterns
- Never share passwords or authentication codes received via SMS or email with anyone
- Always check the name and CPF/CNPJ of the recipient before confirming the transaction
- Beware of urgency and pressure: scammers often create fictitious emergency situations so you act without thinking
- Enable transaction notifications in your bank app to receive real-time alerts
- Don’t make Pix on public Wi-Fi — prefer your mobile data plan
- Keep your bank app always updated to ensure the latest security fixes
- Register a random key when you want to receive payments from people you don’t know well, avoiding exposing CPF or phone number
What to Do If You’re a Fraud Victim
If you realize you’ve sent money to a scammer, the situation is delicate, but it’s not necessarily hopeless. See the recommended steps:
- File a police report at a physical or online police station — the report is essential for any further proceedings.
- Contact your bank immediately and report that you were a fraud victim. The institution can activate the Special Reimbursement Mechanism (MED), created by the Central Bank for fraud and error cases.
- Note the E2E ID from the transaction receipt — it is the official operation identifier.
- Keep all evidence: screenshots of conversations, emails, calls and receipts.
The MED allows the bank to block resources in the recipient’s account and, if still available, perform the refund. The timeline and success of the process depend on several factors, including how quickly the mechanism is activated and whether the money is still in the fraudulent account.
Pix for Businesses: What Entrepreneurs Need to Know
For those with a business — whether a physical store, autonomous service or e-commerce — Pix represents real savings. Most financial institutions don’t charge fees for individuals and offer advantageous conditions for micro and small businesses.
When receiving via Pix, the amount lands in your account immediately, which improves cash flow. The static QR Code (a single code for varying amounts) is ideal for in-person billing. The dynamic QR Code, generated individually for each charge, is more suitable for those selling online, as it allows including data such as exact amount, payer’s CPF and validity period.
If you’re structuring the financial and digital part of your business, it may be useful to also understand what digital marketing is and where to start, since fast payments and online presence go hand in hand for those who want to grow in 2026.
Conclusion
Pix is here to stay — and in 2026, it’s already hard to imagine a Brazilian’s financial life without it. The combination of free service (for individuals), speed and permanent availability has made it a pillar of everyday life, both for buying groceries and getting paid for work.
The good news is that using Pix safely doesn’t require advanced technical knowledge. Just understand how the system works, adopt simple protection habits and maintain healthy skepticism toward any urgent transfer requests. Information and attention are, to this day, the best defenses against scams — and now you have both.
