CSIDB logo
Organisation

Boleto Bancário

Profile

Primary URL
www[.]febraban[.]org[.]br
Location
Brazil
Sector
Financial Services
Known incidents
1 incident
Updated
2026-07-19 13:40
Aliases
2 aliases

Organisation tracking is available to eligible accounts.

Profile narrative

Boleto Bancario, also known simply as Boletos, is a payment instrument widely used in Brazil that functions as a bank slip for settling various financial obligations. It allows consumers to pay bills, taxes, online purchases, and other services by presenting a printed or digital barcode that can be processed at banks, lottery agencies, or through internet banking platforms. The slip contains essential information such as the amount due, expiration date, payer and beneficiary details, and a numeric line that enables manual entry if optical scanning fails. Because it does not require the payer to hold a bank account at the issuing institution, it serves as an inclusive payment method accessible to a broad segment of the population. Boletos are used for both recurring obligations, such as utility invoices, and one‑off transactions, including e‑commerce purchases and government fees, making them a versatile tool in the country’s payment landscape.

A notable distinguishing attribute of Boleto Bancario is its regulatory oversight by the Central Bank of Brazil, which sets standards for the format, security features, and clearing procedures of the slip. The instrument’s design emphasizes low cost and low tech reliance, utilizing a simple barcode that can be read by any optical scanner, which contributes to its resilience in environments with limited digital infrastructure. The 2015 incident highlighted a vulnerability in the surrounding DNS infrastructure rather than the boleto itself, as attackers poisoned DNS caches to redirect users to malicious sites that generated fraudulent payment vouchers. This event underscored the importance of securing the ancillary services that support boleto generation and validation, even though the underlying payment mechanism remains fundamentally sound. After the incident, participating banks strengthened their DNS defenses and adopted measures such as DNSSEC to mitigate similar risks, demonstrating the system’s capacity to adapt to emerging threats while maintaining its core functionality.

The source material does not provide explicit details about the ownership structure, parent company, or subsidiary relationships of the entity that manages the Boleto Bancario system. Consequently, any description of its corporate governance or affiliations would be speculative and is omitted here. The available information confirms only that the organisation’s headquarters are located in Brazil and that it operates under the aliases Boleto Bancario and Boletos. No further structural information is available from the provided context, so the profile remains limited to the confirmed facts about its purpose, attributes, and location.

Incidents

1 incident linked to this organisation.

CSIDB