← Articles and guides on fraud, cybersecurity, privacy and AML
Flash kidnappings and Pix in Brazil: how to limit the damage
Brazil's night-time Pix caps, new-device limits and Celular Seguro: simple steps that cut losses in a flash kidnapping, and what to do right after one.
Before Pix, Brazil's instant payment system, a flash kidnapping (sequestro relâmpago) usually ended at an ATM. Today it often ends inside a car, with the victim forced to unlock a phone and send money in minutes. Several safeguards, many set by the Central Bank, sharply limit how much can leave an account in that situation.
Did Pix change flash kidnappings?
São Paulo state intelligence data obtained by Folha and republished by Banda B counted 202 flash kidnappings and robberies with victim retention involving Pix between December 2020 and July 2021. In Ceará, state data cited by O Povo show 1,380 extortion cases in 2023, up from 779 in 2021; the head of the anti-kidnapping unit said Pix appears in most cases involving restriction of liberty. There is no updated national series that isolates these crimes.
Which Pix limits protect you?
| Safeguard | How it works | Since |
|---|---|---|
| Night cap | R$1,000 between 8 p.m. and 6 a.m. (10 p.m.–6 a.m. if the bank offers it) | Oct 2021 |
| Delayed increases | Take effect 24–48 hours after the request | Jan 2023 |
| Instant decreases | Banks must apply them immediately | Jan 2023 |
| New device | R$200 per transfer and R$1,000 per day until registered | Nov 2024 |
Sources: Forbes Brasil, Mais Retorno, Olhar Digital.
How do you prepare?
- Lower day and night limits to what you actually use; request one-off increases in advance.
- Keep savings in an account or investment not accessible from the phone you carry.
- Turn on transaction alerts and, if possible, share them with a trusted person.
- Register with the federal Celular Seguro service; see our phone theft data piece and anti-theft settings guide.
What should you do afterwards?
- Do not resist. Once safe, call 190 (military police).
- Call your bank through an official channel, block accounts and dispute the transfers; ask about the MED refund mechanism (MED 2.0 explained).
- Block the phone via Celular Seguro and your carrier.
- File a police report with times, amounts and destination Pix keys.
Why do the delays matter so much?
The design logic is simple: criminals want money now, while the victim is under their control. A cap that cannot be lifted on the spot, plus a 24-to-48-hour wait before any increase takes effect, means that even a cooperating victim cannot release large sums during the crime. Lowering your limits, on the other hand, takes effect immediately, so it is worth doing today rather than after something happens. The new-device rule adds a second barrier: if criminals try to move money from their own phone using your stolen credentials, they are held to R$200 per transfer and R$1,000 per day until that device is registered with your bank.
Is there anything else worth setting up?
Experts heard by Folha and O Povo also suggest using a random key or an email address as your Pix key, so your tax ID and phone number are not exposed, and keeping high-value transfers on a device that stays at home or at the office. None of this replaces personal safety: the priority during any robbery is to stay alive and unhurt.
Source
- Banda B / Folhapress — sequestros-relâmpago com Pix em SP (2021)
- O Povo — extorsões no Ceará, dados SSPDS/Supesp (2024)
- Forbes Brasil — limite noturno de R$ 1 mil no Pix
- Mais Retorno — BC aprimora regras de limites do Pix (2022)
- Olhar Digital — novas regras do Pix para aparelhos novos (2024)