Skip to content
Digital banks · Real-time fraud and AML

Detect fraud in real time, before the money leaves the account.

Device, behavior and transaction signals read together to catch account takeover, APP scams and mule accounts before the money leaves.

One customer, five moments of risk

  1. Account opening

    New account, ID and selfie sent

    Partial match on a PEP list

    Medium Enhanced due diligence opened
    Screening & Due Diligence
  2. Login and device

    Login from a new device

    Password reset minutes before login

    High Step-up authentication
    Fraud Prevention
  3. Instant transfer

    Transfer US$ 4,800 to a new payee

    Amount and time outside usual pattern

    High Paused with a scam warning
    Behavioral Risk
  4. Incoming funds

    US$ 9,200 in from unrelated senders

    Money leaves within minutes

    High Flagged as a possible mule
    Transaction Monitoring
  5. Cash-out

    Cash-out of US$ 8,900 requested

    Linked to the mule alert

    High Held, case sent to an analyst
    Explainable AI & Cases

Payments became instant. So did fraud.

The customer sends the money

In an APP scam, the real customer logs in and authorizes the payment. Password and token are correct. Only behavior shows something is wrong.

Mule accounts open as fast as real ones

Digital onboarding is quick for everyone, including the person renting out an account to move stolen money.

Every block needs a reason

Holding a transfer is a decision about a customer's money. Compliance needs the reason on record, not a score nobody can explain.

Every alert says why.

A score alone does not hold up with an auditor or with an upset customer. Safefy shows the signals behind each alert. Your analyst makes the call, and the decision is recorded.

Explainable AI & Cases

Why it fired

Risk score 87/100

Possible mule account

  • Account opened recently
  • Funds in from unrelated senders
  • Most of the balance leaves within minutes
  • Same device as a flagged account
Decision Hold the cash-out and open a case

Regulation

Rules by country

Each market has its own regulator and its own rules on fraud and money laundering. See what applies where you operate.

Since Provisional Measure (MP) No. 1,394 of September 25, 2026, fixed-odds betting is banned in Brazil and banks must block payments to bet operators; Congress has yet to vote on it. Pix and digital accounts remain under BCB anti-money laundering and fraud rules.

  • Lei nº 9.613/1998

    COAF

    Obliged sectors, such as banks, payment firms, betting and luxury-goods sellers, must identify clients, keep records and report suspicious transactions to COAF.

    Official source
  • Medida Provisória nº 1.394/2026

    SPA/MF · BCB

    Bans fixed-odds betting and revokes existing licenses; banks and payment institutions may not process or settle transactions meant for such bets.

    Official source
  • Lei nº 14.790/2023

    BCB · SPA/MF

    Arts. 21-A and 24-A to 24-C, added by Lei nº 15.358/2026

    Financial and payment institutions must block accounts of unlicensed bet operators, share fraud signals, apply enhanced due diligence and report to COAF.

    Official source
  • Circular BCB nº 3.978/2020

    BCB

    BCB-authorized institutions must run a risk-based AML/CFT policy: internal risk assessment, know-your-customer, monitoring and reports to COAF.

    Official source
  • Resolução BCB nº 1/2020 (Regulamento do Pix)

    BCB

    The payee's institution must hold incoming Pix funds for up to 72 hours when fraud is suspected; confirmed fraud is returned through the Special Return Mechanism (MED).

    Official source
  • Lei nº 13.709/2018 (LGPD)

    ANPD

    Any personal data processing, including for fraud prevention, needs a legal basis, security measures and respect for data subject rights, overseen by ANPD.

    Official source

Gaming still rests on a 1947 law and SEGOB permits, while the 2025 reform of the anti-money laundering law tightened duties for vulnerable activities such as betting, with beneficial ownership and automated monitoring.

  • Disposiciones de carácter general a que se refiere el artículo 115 de la Ley de Instituciones de Crédito

    SHCP · CNBV

    Banks must apply a risk-based customer identification policy and report relevant, unusual and internal concerning transactions to the SHCP through the CNBV.

    Official source

Colombia treats online gaming as a state monopoly granted by Coljuegos, and each sector answers to its own anti-money laundering system: SARLAFT in finance, SIPLAFT in gaming and SAGRILAFT in companies.

  • Circular Básica Jurídica (C.E. 029 de 2014), Parte I, Título IV, Capítulo IV (SARLAFT)

    SFC

    Supervised financial entities must run SARLAFT: risk-based customer due diligence, transaction monitoring and suspicious transaction reports to the UIAF.

    Official source
  • Ley 526 de 1999

    UIAF

    Creates the UIAF, the financial intelligence unit that receives the suspicious transaction reports obliged sectors must file and analyzes ML/TF.

    Official source

Peru regulates remote gaming and sports betting under MINCETUR authorization since 2024, and since October 2025 operators follow a specific anti-money laundering rule from the SBS.

  • Ley N° 27693

    UIF-Perú

    Creates UIF-Perú and lists the obliged subjects, which must keep a prevention system, record transactions and report suspicious ones to the UIF.

    Official source
  • Resolución SBS N° 2660-2015 (Reglamento de Gestión de Riesgos de LA/FT)

    SBS

    Banks and other SBS-supervised firms must manage ML/TF risk with a compliance officer, risk-based know-your-customer, monitoring and reporting.

    Official source

Chile has no licensing regime for online betting yet: the bill to regulate it is still in the Senate. Anti-money laundering and payment fraud duties fall on banks, card issuers and fintechs.

  • Ley N° 19.913

    UAF

    Banks, card issuers, casinos, car dealers and jewelers, among others, must report suspicious transactions to the UAF, the financial analysis unit.

    Official source
  • Ley N° 20.009

    CMF

    Amended by Ley N° 21.234

    Card and electronic payment issuers must monitor for unusual transactions, manage fraud alerts and refund reported fraud within the legal thresholds.

    Official source

Argentina has no national online gaming law: each jurisdiction licenses it, as LOTBA does in Buenos Aires City and IPLyC in Buenos Aires Province, while the UIF sets anti-money laundering duties nationwide.

  • Ley N° 25.246

    UIF

    Obliged subjects, such as banks, payment and virtual asset providers and gambling operators, must know their clients and report suspicious transactions to the UIF.

    Official source

The EU is moving to a single anti-money laundering rulebook that applies from July 2027, overseen by a new authority (AMLA), while gambling licensing stays national, as in Malta and Great Britain.

  • Regulation (EU) 2024/1624 (AMLR)

    EU

    From July 10, 2027, obliged entities, including banks, payment firms, gambling providers and high-value goods traders, follow single EU due diligence rules.

    Official source
  • Directive (EU) 2024/1640 (AMLD6)

    EU

    Member States must set up national supervision, FIUs and beneficial ownership registers, and sanction obliged entities, mostly by July 10, 2027.

    Official source
  • Regulation (EU) 2024/1620 (AMLA)

    AMLA

    Creates AMLA, which coordinates national supervisors and will directly supervise selected cross-border financial entities with high ML/TF risk.

    Official source
  • Directive (EU) 2015/2366 (PSD2)

    EU · EBA

    With Delegated Regulation (EU) 2018/389 (SCA)

    Payment service providers must apply strong customer authentication for online account access and electronic payments, dynamically linked to amount and payee.

    Official source
See every rule, market by market

Proof

Forged in Brazil's regulated iGaming market

Betting operators see what a bank sees, only faster: money in and out within minutes, accounts opened to move other people's money, organized fraud rings. Our engine was built and proven there, in Brazil's regulated betting market. The same engine is now available to digital banks.

  • Proven in production with licensed operators in Brazil's regulated betting market, where it monitored every deposit, bet and withdrawal.
  • Catches bots, bonus abuse and colluding accounts: coordinated fraud, the same kind behind mule rings.
  • Two awards at CGS-Recife 2025: Technological Advancement in Digital Security and Rising Star · AML Innovation.
See iGaming Brazil (in Portuguese)
Technological Advancement in Digital Security

Technological Advancement in Digital Security

Where and when

CGS-Recife · 2025

Rising Star · AML Innovation

Rising Star · AML Innovation

Where and when

CGS-Recife · 2025

Digital Banks · Questions

What buyers ask.

What is real-time fraud detection for digital banks?

It means checking each login, transfer and cash-out as it happens, before the money settles. Safefy combines device and behavioral signals with the transaction itself to score the risk. Low-risk activity goes through, and risky activity is paused or sent to review with the reasons attached.

How does Safefy detect account takeover?

Account takeover leaves traces before the transfer: a new device, a recent password reset, a transfer to a new payee right after login. Safefy reads these signals from session and transaction data and asks for extra authentication when they stack up.

Can Safefy help stop APP scams?

In an APP scam the customer authorizes the payment, so credentials alone do not help. Safefy looks at behavior: a new payee, an amount and time of day outside the customer's pattern. When the signs add up, the transfer can be paused and the customer warned before the money leaves.

How do you find mule accounts with transaction monitoring?

Mule accounts follow a pass-through pattern: money in from unrelated senders, money out within minutes. Transaction monitoring for AML combines rules and AI models to find that pattern and opens a case with the evidence your compliance team needs.

How does Safefy's fraud detection for digital banks connect to our systems?

Through an API that receives logins, transfers and cash-outs as they happen and returns the risk with the reasons attached. We start from the data you already have, on the same engine proven in production with licensed betting operators in Brazil. Talk to an expert to map your case.

In English, Portuguese or Spanish

Bring us your hardest fraud case.

Thirty minutes with our team on your volume, your market and the account takeover, scam and mule patterns you are chasing.

Option 1

Pick a time now.

Straight into our calendar, with instant confirmation.

  • 30 minutes, no commitment
  • Video call with someone who knows the subject
  • Instant confirmation by email

Prefer email?

Write to us and a specialist will reply.

atendimento@safefy.com.br

We speak English, Portuguese and Spanish.

Option 2

Prefer that we reach out?

Leave your details and we will get back to you.

Main interest (one or more) *

Your data is used only to get back to you. See our privacy policy.