Argentina's BCRA tightens credit provider rules

More oversight for credit providers

The Central Bank of the Argentine Republic issued Communication A 8456/2026, introducing changes to the reporting regime for non-financial credit providers. The update focuses on the use of transfer-based collection services and on how these entities must submit information to the regulator.

According to coverage by Indicadores.ar, when a non-financial credit provider requests access to that service, the first information filing must be submitted through the Registro de Proveedores no Financieros de Crédito application. In addition, the annual filing for the year of the request must be submitted even if the period under review is shorter than 12 months.

The same report says the BCRA increased oversight of this segment through technical and regulatory information-submission requirements tied to the consolidated text of Presentación de informaciones al Banco Central, section 74.

Advice to avoid online scams

Alongside the regulatory change, the central bank issued recommendations to prevent online scams and protect bank accounts. Among its tips, it stressed not sharing passwords, security codes or confidential data through social media or links sent by suspicious contacts. It also said that, if an unexpected message arrives, users should end the conversation and go through the financial institution's official channels.

Sur24 added that if someone installed an app at the request of a supposed representative of an institution, shared banking information or suspects unauthorized access, they should contact their bank as soon as possible and file a report with the Unidad Fiscal Especializada en Ciberdelincuencia, UFECI.

The warnings were also expanded by El Litoral and Es Re Viral. Both outlets said these scams often rely on fake calls, cloned social media profiles, requests for codes and passwords, and remote-access apps installed at the request of supposed bank employees, a method that can end with emptied bank accounts.

Es Re Viral added that the BCRA recommends changing all login passwords for financial services immediately and warning family and acquaintances to help prevent further cases. The coverage from El Litoral and Es Re Viral also agrees that victims should carefully document the fraudulent activity, including dates, amounts, channels and transaction type, so they can escalate the complaint through a specific Central Bank form after obtaining a complaint number from the financial institution and once a minimum waiting period of ten business days has passed.

How the sector reads it

In the private sector, spokespeople in Argentina say financial institutions are seeking to comply with BCRA rules on digital fraud prevention through customer identity and access management architectures, known as CIAM. That approach combines checks against official databases such as RENAPER, behavioral biometrics and continuous risk-based authentication.

According to analysis cited by Infosertecla, these regulatory demands are pushing financial institutions to orchestrate low-friction anti-fraud controls, although the coverage makes clear it does not spell out which specific BCRA cybersecurity rules apply.

The material also includes a regional reference. The Banco Central de Chile guide Robos y fraudes en el uso de tarjetas e instrumentos financieros says issuers must provide free 24/7 channels to report theft, robbery, loss or fraud, block payment instruments that have been inactive for more than 12 months, and publish every six months on their websites the number of affected users, the amounts involved and response times, with itemized reporting to the Comisión para el Mercado Financiero.