BCRA requires fraud profiles for transfers

The Central Bank of Argentina said Communication A 8473 makes public information available to administrators of immediate transfers to strengthen analysis and monitoring tools. It also requires them to prepare fraud risk profiles and provide them free of charge to financial institutions and PSPCPs for use in transaction monitoring, customer onboarding and periodic KYC reviews.

What does Communication A 8473 require?

Communication A 8473 directs immediate transfer administrators to work with public information to strengthen transaction analysis and risk monitoring. According to the BCRA, those administrators must build fraud risk profiles and make them available at no cost to financial institutions and PSPCPs.

Those profiles are intended for three specific uses mentioned by the regulator, transaction monitoring, customer onboarding and periodic know-your-customer reviews. The BCRA says the goal is to reinforce the analysis and monitoring tools used across the system to detect signs of fraud.

What is happening in Mexico with security incidents?

In Mexico, a specialized publication said collective financing institutions must immediately notify the CNBV of any information security incident and send additional details within five business days of identifying it. It also said that if regulated sensitive information is lost, extracted, altered, or suspected of unauthorized access, affected customers must be notified within 48 hours of the incident or discovery.

The same publication added that electronic payment fund institutions follow separate rules issued by the CNBV and Banco de México. In that case, Article 42 would require immediate notice to both authorities, plus supplemental information within five business days.

Which parts remain unconfirmed?

References to changes in electronic transfers in Mexico appear in secondary coverage and, by themselves, are not enough to present them as current cybersecurity obligations. One of those reports attributes to Circulars 9/2026 and 10/2026 from Banxico adjustments to how electronic transfers work, with guidance to standardize the mobile app experience and an implementation deadline of December 14, 2026.

Another note says Circular 10/2026 would allow the last 10 digits of a mobile number to be linked to bank accounts at levels 2, 3 and 4 to receive transfers. That same coverage says institutions would need to review authentication and data validation, but adds that the point still needs to be verified against the official text of the circular.