How PIX Works – Complete Guide to Brazil's Payment System
Everything about Brazil's instant payment system: PIX keys, EMV QR payload, CRC16 checksum, supported banks and real-world usage.
What is PIX?
PIX is Brazil's national instant payment system, created and regulated by the Banco Central do Brasil (BCB). Launched on November 16, 2020, PIX achieved the fastest mass adoption of any payment system in history — reaching 100 million users in just 5 months and surpassing credit cards in transaction volume within its first year. PIX operates 24 hours a day, 7 days a week, 365 days a year — including weekends and public holidays. Transfers complete in under 10 seconds. For consumers, PIX is completely free. Over 700 financial institutions are legally required by the BCB to participate. As of 2026, PIX processes more than 3 billion transactions per month, making it one of the most active real-time payment networks on the planet. Unlike traditional bank transfers (TED/DOC) that required account numbers, branch codes, and could take hours or days, PIX is built around the Chave PIX (PIX key) — a simple identifier linked to a bank account.
How PIX Works – Step by Step
- 1
Recipient shares PIX key or QR code
The payee provides their PIX key (CPF, CNPJ, phone, email or random UUID) or displays a PIX QR code. Static QR codes work for any amount; dynamic QR codes include a pre-set amount.
- 2
Payer opens any Brazilian banking app
All 700+ participating banks and fintechs are fully interoperable. A payment from Nubank arrives instantly in a Bradesco account — no lock-in to any specific institution.
- 3
Payer enters PIX key or scans QR code
The app activates the camera. PIX QR codes can be scanned from a printed receipt, phone screen, PDF or any surface. Alternatively, the PIX key is typed directly.
- 4
Amount and recipient confirmed on screen
The payee's name and bank are displayed automatically. If a dynamic QR is used, the amount is pre-filled. Static QR requires the payer to enter the amount manually.
- 5
Payer authenticates (biometric or PIN)
The authentication credential never leaves the banking app. The PIX QR code itself contains no sensitive data — only the recipient identification and optional amount.
- 6
Transfer completes in seconds
The BCB infrastructure (via SPI – Sistema de Pagamentos Instantâneos) processes the transfer in real time. Funds move directly between bank accounts.
- 7
Both parties receive confirmation
Sender and recipient both receive instant push notifications and SMS alerts. A transaction receipt (comprovante) is available in the banking app.
PIX Keys Explained
A Chave PIX (PIX key) is an alias registered in the BCB's DICT (Diretório de Identificadores de Contas Transacionais) that maps to a specific bank account. Instead of sharing branch and account numbers, you share your PIX key. Individuals can register up to 5 keys per bank account; companies up to 20. The random key (chave aleatória) is the privacy-preserving option — a UUID that reveals nothing about your identity, ideal for sharing publicly on social media or printed materials.
| Key Type | Format | Example | Best For |
|---|---|---|---|
| CPF | 11 digits | 123.456.789-09 | Individuals (pessoas físicas) |
| CNPJ | 14 digits | 12.345.678/0001-90 | Companies (pessoas jurídicas) |
| Phone | +55 + number | +5511987654321 | Easy to share verbally |
| Standard email | nome@email.com | Digital-savvy users | |
| Random Key | UUID v4 | 123e4567-e89b-12d3-… | Maximum privacy |
The PIX QR Payload – EMV Format
PIX QR codes follow the EMV Merchant Presented QR Code (MPM) specification — the same international standard used by Thailand's PromptPay and India's BharatQR. The BCB adapted this standard for Brazil via the Manual de Padrões para Iniciação do Pix. The payload is a continuous string of TLV (Tag-Length-Value) fields. Each field begins with a 2-digit tag ID, followed by a 2-digit length, then the value. Fields are concatenated without separators.
000201 ← Tag 00: Payload Format Indicator
010212 ← Tag 01: Dynamic QR (12)
2658 ← Tag 26: Merchant Account (length 58)
0014BR.GOV.BCB.PIX ← Sub-tag 00: PIX identifier
0136123e4567-e89b-12d3- ← Sub-tag 01: PIX key (UUID)
a456-426614174000
52040000 ← Tag 52: Merchant Category Code
5303986 ← Tag 53: Currency (BRL = 986)
5406100.00 ← Tag 54: Amount
5802BR ← Tag 58: Country Code
5913Max Mustermann ← Tag 59: Merchant Name (≤25 chars)
6009Sao Paulo ← Tag 60: Merchant City
62140510*** ← Tag 62: Additional Data (Tx ref)
6304ABCD ← Tag 63: CRC16 Checksum| Tag | Example Value | Description |
|---|---|---|
| 00 | 01 | Payload Format Indicator – always 01 |
| 01 | 12 | Point of Initiation: 11 = static, 12 = dynamic |
| 26 | … | Merchant Account Information (PIX sub-fields) |
| 52 | 0000 | Merchant Category Code (0000 = uncategorized) |
| 53 | 986 | Transaction Currency – ISO 4217 code for BRL |
| 54 | 100.00 | Transaction Amount (omitted in static QR) |
| 58 | BR | Country Code – ISO 3166-1 alpha-2 |
| 59 | Max Mustermann | Merchant Name – max 25 chars, shown to payer |
| 60 | Sao Paulo | Merchant City – city of the recipient |
| 62 | … | Additional Data Field Template (transaction ref) |
| 63 | ABCD | CRC16 Checksum – 4 uppercase hex characters |
CRC16 – The Integrity Check
Every PIX QR payload ends with a CRC16-CCITT checksum — the last 4 characters of the string, always in uppercase hexadecimal (e.g. 6304ABCD). The "6304" prefix is the tag (63) and length (04) of the checksum field; the 4 hex characters that follow are the computed CRC value. The algorithm uses polynomial 0x1021 and initial value 0xFFFF. Any modification to the merchant name, PIX key or amount changes the checksum and causes banking apps to reject the payment.
- ⚙️Algorithm: CRC16-CCITT with polynomial 0x1021 and initial value 0xFFFF. This is the same variant used in XMODEM and many industrial protocols.
- 📥Input: The entire PIX payload string up to and including the "6304" field header — the 4-character checksum slot is excluded from the computation.
- 📤Output: A 16-bit integer, formatted as 4 uppercase hexadecimal characters (e.g. A3F2). Padded with leading zeros if needed.
- 🔒Why it matters: The CRC prevents tampered QR codes. Any modification to the merchant name, PIX key or amount changes the checksum and causes the banking app to reject the payment.
- 🌐Client-side computation: QRPayHub computes the CRC16 checksum entirely in your browser using JavaScript. No payload data is ever sent to a server.
Supported Banks & Apps
The BCB mandates that every Brazilian financial institution with 500,000 or more active accounts must offer PIX. As of 2026, this covers 700+ institutions. PIX is fully interoperable — a payment from any one of these apps lands instantly in any other. Beyond the major names, every regional cooperative bank, state bank, digital bank and licensed fintech in Brazil is part of the PIX ecosystem.
PIX vs Traditional Brazilian Transfers
Before PIX, Brazil had two primary electronic transfer methods: TED for same-day transfers during business hours, and DOC for next-day settlement. Both were fee-based and had operating-hours restrictions. PIX replaced both as the default everyday payment method. Boleto Bancário, while still used for scheduled billing, is increasingly being replaced by Pix Cobrança — dynamic PIX QR with a due date and late fee — which offers instant settlement.
| Feature | PIX | TED | DOC | Boleto |
|---|---|---|---|---|
| Speed | Seconds | Minutes (business hours) | Next day | 1–3 days |
| 24/7 Available | ✅ | ❌ | ❌ | ❌ |
| Free (individuals) | ✅ | ❌ | ❌ | ❌ |
| Limit | Bank-defined | R$1M+ | R$5,000 | Unlimited |
| QR Code | ✅ | ❌ | ❌ | Boleto code |
Security & Regulation
PIX is regulated and operated by the Banco Central do Brasil, which sets technical standards, security requirements and participation rules. All PIX transactions flow through the BCB's SPI (Sistema de Pagamentos Instantâneos). Key security features: night limits (20:00–06:00) reduce fraud risk; sharing a PIX QR is safe as it contains only the PIX key and name — no bank account details; MED (Mecanismo Especial de Devolução) allows reversal of confirmed fraud; DICT maps every PIX key to a bank account centrally.
- 🔒Same security infrastructure as Brazilian internet banking (SPB). All transactions require biometric or PIN authentication inside your banking app.
- 🌙Night limit (20:00–06:00): banks enforce a lower PIX limit, typically R$1,000 per transaction, to reduce fraud risk during overnight hours.
- 🛡️Safe to share QR codes publicly: a PIX QR contains only the recipient PIX key and name — no bank account details, no credentials, no sensitive personal data.
- ↩️MED – Mecanismo Especial de Devolução: in cases of confirmed fraud, the BCB can trigger a special reversal mechanism that forces the receiving bank to return funds.
- 📋DICT – Diretório de Identificadores de Contas Transacionais: the BCB maintains this central registry that maps every PIX key to a bank account. All key lookups go through DICT before a transfer is initiated.
- ⚖️Mandatory participation: all financial institutions with 500,000+ active accounts must offer PIX under BCB Resolution 1. Smaller institutions may join voluntarily.
Ready to generate your PIX QR Code?
Free, instant, works with all Brazilian banking apps. No sign-up required.