Brazil: Chamber of Deputies Consumer Defence Committee adopted proposed replacement for Bill No. 242/2024 providing for measures to increase security in transactions involving companies that provide online payment platforms

On 26 September 2025, the Chamber of Deputies Consumer Defence Committee adopted a proposed replacement for Bill No. 242/2024. The Bill provides for measures to increase security in transactions involving companies that provide online payment platforms. It aims to enhance security in transactions involving online payment platforms and to combat cyber fraud. In particular, the Bill mandates that digital platforms providing services to the Brazilian public implement internal controls designed to prevent the use of their cyber environment for crimes against consumers. These controls must align with the risk profiles of clients, the platform, and its employees, partners, and outsourced service providers. The Bill requires platforms to establish reliable and auditable registries to prevent illegal acts. The Bill also requires platforms to define procedures for evaluating and pre-analysing product and service advertisements to mitigate fraud risks that could lead to financial losses for consumers. Furthermore, digital platforms must conduct internal assessments to identify and measure the risk of their services being used for false advertisements and scams. This assessment should consider various risk factors, including client and platform profiles, operational aspects, and activities of personnel. The Bill also stipulates the implementation of client identification procedures, including due diligence for verification and validation of identity. Such information must be regularly updated. Additionally, companies operating online payment platforms are obligated to provide payment receipts to consumers and receiving establishments for transactions conducted through their systems. These receipts must include transaction details such as the amount paid, parties involved, and the date and time. Platforms must ensure consumers have efficient access to these receipts. Non-compliance with the law’s provisions will result in penalties under the Consumer Defence Code. The law is scheduled to come into force 60 days after its official publication.