> Detect account takeover, scams and mule accounts as payments happen, with explainable alerts your compliance team can defend. url: https://www.safefy.com.br/industries/digital-banks formato: markdown gerado do HTML publicado, sem apresentação versao_html: https://www.safefy.com.br/industries/digital-banks --- Digital banks · Real-time fraud and AML # Detect fraud in real time, before the money leaves the account. Device, behavior and transaction signals read together to catch account takeover, APP scams and mule accounts before the money leaves. [Talk to an expert](#contato)[See the regulation](#regulacao) ## Payments became instant. So did fraud. The customer sends the money In an APP scam, the real customer logs in and authorizes the payment. Password and token are correct. Only behavior shows something is wrong. Mule accounts open as fast as real ones Digital onboarding is quick for everyone, including the person renting out an account to move stolen money. Every block needs a reason Holding a transfer is a decision about a customer's money. Compliance needs the reason on record, not a score nobody can explain. [ACCOUNT TAKEOVER ### Someone else is inside the account New device, recent password reset, a transfer right after login. Device and session signals catch the takeover at login, before the money moves. Fraud Prevention](https://www.safefy.com.br/platform/fraud-prevention)[APP SCAMS ### The customer is paying a scammer A payee they never paid, an amount and time of day outside their pattern. Behavioral risk spots the scam while there is still time to pause and warn. Behavioral Risk](https://www.safefy.com.br/platform/behavioral-risk)[MULE ACCOUNTS ### Your bank is moving someone else's money Funds arrive from unrelated senders and leave within minutes. Transaction monitoring finds the pass-through pattern and builds the AML case. Transaction Monitoring](https://www.safefy.com.br/platform/transaction-monitoring) ## Every alert says why. A score alone does not hold up with an auditor or with an upset customer. Safefy shows the signals behind each alert. Your analyst makes the call, and the decision is recorded. [Explainable AI & Cases](https://www.safefy.com.br/platform/explainable-ai) Regulation ## Rules by country Each market has its own regulator and its own rules on fraud and money laundering. See what applies where you operate. Since Provisional Measure (MP) No. 1,394 of September 25, 2026, fixed-odds betting is banned in Brazil and banks must block payments to bet operators; Congress has yet to vote on it. Pix and digital accounts remain under BCB anti-money laundering and fraud rules. - Lei nº 9.613/1998 COAF Obliged sectors, such as banks, payment firms, betting and luxury-goods sellers, must identify clients, keep records and report suspicious transactions to COAF. [Official source](https://www.planalto.gov.br/ccivil_03/leis/l9613.htm) - Medida Provisória nº 1.394/2026 SPA/MF · BCB Bans fixed-odds betting and revokes existing licenses; banks and payment institutions may not process or settle transactions meant for such bets. [Official source](https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2026/mpv/mpv1394.htm) - Lei nº 14.790/2023 BCB · SPA/MF Arts. 21-A and 24-A to 24-C, added by Lei nº 15.358/2026 Financial and payment institutions must block accounts of unlicensed bet operators, share fraud signals, apply enhanced due diligence and report to COAF. [Official source](https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2023/lei/l14790.htm) - Circular BCB nº 3.978/2020 BCB BCB-authorized institutions must run a risk-based AML/CFT policy: internal risk assessment, know-your-customer, monitoring and reports to COAF. [Official source](https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?tipo=Circular&numero=3978) - Resolução BCB nº 1/2020 (Regulamento do Pix) BCB The payee's institution must hold incoming Pix funds for up to 72 hours when fraud is suspected; confirmed fraud is returned through the Special Return Mechanism (MED). [Official source](https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?tipo=Resolu%C3%A7%C3%A3o%20BCB&numero=1) - Lei nº 13.709/2018 (LGPD) ANPD Any personal data processing, including for fraud prevention, needs a legal basis, security measures and respect for data subject rights, overseen by ANPD. [Official source](https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm) Gaming still rests on a 1947 law and SEGOB permits, while the 2025 reform of the anti-money laundering law tightened duties for vulnerable activities such as betting, with beneficial ownership and automated monitoring. - Disposiciones de carácter general a que se refiere el artículo 115 de la Ley de Instituciones de Crédito SHCP · CNBV Banks must apply a risk-based customer identification policy and report relevant, unusual and internal concerning transactions to the SHCP through the CNBV. [Official source](https://dof.gob.mx/nota_detalle.php?codigo=5087613&fecha=20/04/2009) Colombia treats online gaming as a state monopoly granted by Coljuegos, and each sector answers to its own anti-money laundering system: SARLAFT in finance, SIPLAFT in gaming and SAGRILAFT in companies. - Circular Básica Jurídica (C.E. 029 de 2014), Parte I, Título IV, Capítulo IV (SARLAFT) SFC Supervised financial entities must run SARLAFT: risk-based customer due diligence, transaction monitoring and suspicious transaction reports to the UIAF. [Official source](https://www.superfinanciera.gov.co/publicaciones/10083444/normativanormativa-generalcircular-basica-juridica-ce-parte-i-instrucciones-generales-aplicables-a-las-entidades-vigiladas-10083444/) - Ley 526 de 1999 UIAF Creates the UIAF, the financial intelligence unit that receives the suspicious transaction reports obliged sectors must file and analyzes ML/TF. [Official source](http://www.secretariasenado.gov.co/senado/basedoc/ley_0526_1999.html) Peru regulates remote gaming and sports betting under MINCETUR authorization since 2024, and since October 2025 operators follow a specific anti-money laundering rule from the SBS. - Ley N° 27693 UIF-Perú Creates UIF-Perú and lists the obliged subjects, which must keep a prevention system, record transactions and report suspicious ones to the UIF. [Official source](https://www.smv.gob.pe/uploads/LEY%2027693_Ley%20que%20crea%20la%20UIF_PERU.pdf) - Resolución SBS N° 2660-2015 (Reglamento de Gestión de Riesgos de LA/FT) SBS Banks and other SBS-supervised firms must manage ML/TF risk with a compliance officer, risk-based know-your-customer, monitoring and reporting. [Official source](https://contralaft.gob.pe/Portals/0/Normas/SO%20del%20sector%20financiero/Resolucio%CC%81n%20SBS%20N%C2%BA%202660-2015%20%E2%80%93%20Aprueba%20Reglamento%20de%20Gestio%CC%81n%20de%20Riesgos%20de%20LA.FT.pdf) Chile has no licensing regime for online betting yet: the bill to regulate it is still in the Senate. Anti-money laundering and payment fraud duties fall on banks, card issuers and fintechs. - Ley N° 19.913 UAF Banks, card issuers, casinos, car dealers and jewelers, among others, must report suspicious transactions to the UAF, the financial analysis unit. [Official source](https://www.bcn.cl/leychile/navegar?idNorma=219119) - Ley N° 20.009 CMF Amended by Ley N° 21.234 Card and electronic payment issuers must monitor for unusual transactions, manage fraud alerts and refund reported fraud within the legal thresholds. [Official source](https://www.bcn.cl/leychile/navegar?idNorma=236736) Argentina has no national online gaming law: each jurisdiction licenses it, as LOTBA does in Buenos Aires City and IPLyC in Buenos Aires Province, while the UIF sets anti-money laundering duties nationwide. - Ley N° 25.246 UIF Obliged subjects, such as banks, payment and virtual asset providers and gambling operators, must know their clients and report suspicious transactions to the UIF. [Official source](https://servicios.infoleg.gob.ar/infolegInternet/anexos/60000-64999/62977/texact.htm) The EU is moving to a single anti-money laundering rulebook that applies from July 2027, overseen by a new authority (AMLA), while gambling licensing stays national, as in Malta and Great Britain. - Regulation (EU) 2024/1624 (AMLR) EU From July 10, 2027, obliged entities, including banks, payment firms, gambling providers and high-value goods traders, follow single EU due diligence rules. [Official source](https://eur-lex.europa.eu/eli/reg/2024/1624/oj/eng) - Directive (EU) 2024/1640 (AMLD6) EU Member States must set up national supervision, FIUs and beneficial ownership registers, and sanction obliged entities, mostly by July 10, 2027. [Official source](https://eur-lex.europa.eu/eli/dir/2024/1640/oj/eng) - Regulation (EU) 2024/1620 (AMLA) AMLA Creates AMLA, which coordinates national supervisors and will directly supervise selected cross-border financial entities with high ML/TF risk. [Official source](https://eur-lex.europa.eu/eli/reg/2024/1620/oj/eng) - Directive (EU) 2015/2366 (PSD2) EU · EBA With Delegated Regulation (EU) 2018/389 (SCA) Payment service providers must apply strong customer authentication for online account access and electronic payments, dynamically linked to amount and payee. [Official source](https://eur-lex.europa.eu/eli/dir/2015/2366/oj/eng) [See every rule, market by market](https://www.safefy.com.br/regulation) Proof ## Forged in Brazil's regulated iGaming market Betting operators see what a bank sees, only faster: money in and out within minutes, accounts opened to move other people's money, organized fraud rings. Our engine was built and proven there, in Brazil's regulated betting market. The same engine is now available to digital banks. - Proven in production with licensed operators in Brazil's regulated betting market, where it monitored every deposit, bet and withdrawal. - Catches bots, bonus abuse and colluding accounts: coordinated fraud, the same kind behind mule rings. - Two awards at CGS-Recife 2025: Technological Advancement in Digital Security and Rising Star · AML Innovation. [See iGaming Brazil (in Portuguese)](https://www.safefy.com.br/pt/industrias/igaming/brasil)  ### Technological Advancement in Digital Security Where and when CGS-Recife · 2025  ### Rising Star · AML Innovation Where and when CGS-Recife · 2025 Digital Banks · Questions ## What buyers ask. What is real-time fraud detection for digital banks? It means checking each login, transfer and cash-out as it happens, before the money settles. Safefy combines device and behavioral signals with the transaction itself to score the risk. Low-risk activity goes through, and risky activity is paused or sent to review with the reasons attached. How does Safefy detect account takeover? Account takeover leaves traces before the transfer: a new device, a recent password reset, a transfer to a new payee right after login. Safefy reads these signals from session and transaction data and asks for extra authentication when they stack up. Can Safefy help stop APP scams? In an APP scam the customer authorizes the payment, so credentials alone do not help. Safefy looks at behavior: a new payee, an amount and time of day outside the customer's pattern. When the signs add up, the transfer can be paused and the customer warned before the money leaves. How do you find mule accounts with transaction monitoring? Mule accounts follow a pass-through pattern: money in from unrelated senders, money out within minutes. Transaction monitoring for AML combines rules and AI models to find that pattern and opens a case with the evidence your compliance team needs. How does Safefy's fraud detection for digital banks connect to our systems? Through an API that receives logins, transfers and cash-outs as they happen and returns the risk with the reasons attached. We start from the data you already have, on the same engine proven in production with licensed betting operators in Brazil. Talk to an expert to map your case. In English, Portuguese or Spanish ## Bring us your hardest fraud case. Thirty minutes with our team on your volume, your market and the account takeover, scam and mule patterns you are chasing. Option 1 ### Pick a time now. Straight into our calendar, with instant confirmation. - 30 minutes, no commitment - Video call with someone who knows the subject - Instant confirmation by email [See available times](https://calendly.com/eduardo-safefy/safefy-meetings) [Open in a new tab](https://calendly.com/eduardo-safefy/safefy-meetings) ### Prefer email? Write to us and a specialist will reply. [atendimento@safefy.com.br](mailto:atendimento@safefy.com.br) We speak English, Portuguese and Spanish. Option 2 ### Prefer that we reach out? Leave your details and we will get back to you. Received. Thank you! Our team will get back to you. To speed things up, write to [atendimento@safefy.com.br](mailto:atendimento@safefy.com.br).