剖析巴西即时支付系统Pix的欺诈类型与防御策略
A Taxonomy of Pix Fraud in Brazil: Attack Methodologies, AI-Driven Amplification, and Defensive Strategies
- 分类梳理了针对Pix系统的攻击手法
- 发现欺诈从纯社交工程演变为技术+人为结合的混合模式
- 适合金融科技安全从业者与监管者参考
本文综述了针对巴西中央银行2020年推出的即时支付系统Pix的攻击方法。研究旨在识别并分类影响用户和金融机构的主要欺诈类型，揭示这些技术手段的演变过程及日益复杂的趋势。方法结合结构化文献回顾与对银行业内专业人士的探索性访谈。结果显示，欺诈手段已从单纯的社交工程发展为融合人类操控与技术入侵的混合策略。研究指出，安全防护必须与攻击手段的复杂化同步升级，尤其需重视自适应防御机制与持续的用户意识教育。
原文摘要 · Abstract (English)
This work presents a review of attack methodologies targeting Pix, the instant payment system launched by the Central Bank of Brazil in 2020. The study aims to identify and classify the main types of fraud affecting users and financial institutions, highlighting the evolution and increasing sophistication of these techniques. The methodology combines a structured literature review with exploratory interviews conducted with professionals from the banking sector. The results show that fraud schemes have evolved from purely social engineering approaches to hybrid strategies that integrate human manipulation with technical exploitation. The study concludes that security measures must advance at the same pace as the growing complexity of attack methodologies, with particular emphasis on adaptive defenses and continuous user awareness.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。