Topic starter
16/01/2026 2:48 pm
TL;DR: Contactless Pix replaces repeated bank redirects with a redirectless enrollment model that binds a device key to payment authorization, while keeping OAuth, FAPI, and risk evaluation intact, according to Raidiam. The real change is not convenience alone, but a shift from static authorization steps to contextual, device-bound trust that IAM and NHI teams must govern explicitly.
Editorial analysis by NHI Mgmt Group, based on content published by Raidiam: “Contactless Pix: How Redirectless Payments Work in Open Finance Brasil”.
Key questions
Q: What breaks when payment authorization moves from redirects to device-bound enrollment?
A: The old assumption that each payment can be re-validated through a visible bank redirect no longer holds.
Q: Why do redirectless payment models increase governance complexity for IAM teams?
A: They shift assurance away from a single authentication moment and into a mix of device possession, application provenance and risk evaluation.
Q: Where do device-bound credentials fail if origin validation is weak?
A: If the bank cannot reliably match the credential to an approved application origin, a malicious app or browser can impersonate the expected context.
Practitioner guidance
- Define the enrollment step as the control boundary Map the redirectless flow so the device-binding ceremony, not the later payment request, becomes the auditable trust event.
- Tighten origin validation for delegated credentials Ensure declared software_origin_uris are enforced at runtime and reconciled with the applications allowed to create FIDO credentials.
- Separate proof of possession from protocol compliance Document which evidence is required for device possession, attestation and risk review so teams do not mistake OAuth conformance for assurance.
Bottom line: Redirectless Open Finance payments shift assurance from repeated redirects to a device-bound enrollment model.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 4 days ago by NHI Mgmt Group
08/10/2026 4:43 pm
Device-bound authorization changes the unit of trust from session to hardware. Open Finance controls built around a redirect assume that each authorization is re-established through a user-visible bank interaction. Contactless Pix weakens that assumption by allowing a prior enrollment to carry forward trust through a device key and challenge signing. The implication is that identity governance must follow the credential lifecycle, not just the login journey.
A few things that frame the scale:
- Only 44% of developers are reported to follow security best practices for secrets management, exposing a significant developer behaviour gap, according to the State of Secrets in AppSec.
A question worth separating out:
Q: What should organisations do when contextual authorization replaces repeated redirects?
A: They should define which signals are mandatory for approval, which ones are advisory and who can override the default decision. Without that governance, a smoother payment journey can outpace the controls needed to defend liability and trust.
👉 Read our full editorial: Contactless Pix shifts open finance trust from redirects to devices