Real-time fraud agent scores incoming/outgoing instant-payment transactions on device, behavioral, and network signals; orchestrates step-up authentication; on confirmed fraud, hands off to a dispute-resolution agent that opens the ticket, assembles evidence, and routes to the correct queue with an SLA-bound response. Pix processes more transactions than any other instant-payment system globally; BCB Normative #491 (effective 2025) requires device-registration controls, real-time intelligence sharing, and adaptive defenses.
Buyer · Head of Fraud + COO + Chief Risk Officer.
Provenance tiered explicitly. Audited > Operator-disclosed > Vendor-published. Treat all vendor-tier figures as directional.
Rules cannot reason about novel social-engineering scripts. Classifiers cannot draft a regulator-compliant dispute response. The agent loop wins because it orchestrates: real-time scoring + step-up + intervention + dispute drafting + audit. Nubank's composite-tool / ReAct pattern is the published reference.
Sub-50ms SLAs constrain architecture choices. BCB Normative #491 control-mapping is not optional. Brazilian-Portuguese voice and chat fluency is a real differentiator over global vendors trained on Iberian Spanish or English.
SPEI is not Pix. Faster than ACH but not as instant or as volume-dense, with a different fraud surface (more authorized-push-payment, less account-takeover at scale). The pattern still extends; the rules and regulator (Banxico) differ. SPEI-CoDi for QR-driven retail flows is the highest-growth fraud surface in Mexico.
Each node maps to a regulatory anchor.
- 01Transaction ingress: Pix / SPEI / SPEI-CoDi rail
- 02Device + behavioral + network signal extraction
- 03Real-time risk score with policy citation
- 04Step-up authentication or pass-through decision
- 05On confirmed fraud → dispute agent assembles evidence pack
- 06Routing to fraud queue with SLA + customer notification
- 07Audit log mapped to BCB Normative #491 / Banxico controls
Not A chatbot. A "fraud AI." A system that auto-blocks then sends a customer to a help center.
But Production infrastructure on the rail: terminals, APIs, observability, audit logs, human escalation by SLA.
The Klarna reversal is the design constraint. Early deployments fail when borderline cases are auto-blocked without an SLA-bound human path; CSAT collapses, the regulator reads the social-media complaints. The handoff to a human is itself a first-class metric.
A working session, not a sales call.
Two hours with a partner. Your incumbent stack, your data posture, and the regulatory surface against a sovereign reference architecture for banking.
Request a working session →A working session, not a sales call.
Two hours with a partner. We map your AI spend, data exposure, and governance posture against a sovereign reference architecture. You leave with a memo. We leave with a decision.
