Overview
Pix on File is an implementation of Pix in Brazil that enables payments through Open Finance without redirecting the customer to their bank app for each transaction. It is the EBANX layer on top of Pix Jornada Sem Redirecionamento, the Brazilian Central Bank (Bacen) product. Pix on File is available on both the Cross-border and Local tenants.
The integration uses the Open Finance Payment Initiation specifications with FIDO2/WebAuthn authentication, allowing customers to pre-authorize payments with biometrics or passkeys directly within the merchant's application. Unlike the Pix Automático QR Code journey, customers do not scan QR codes or get redirected to their banking app. Instead, they authenticate with FIDO2 credentials registered during a one-time enrollment, providing an in-app payment experience.
Features
| Feature | Description |
|---|---|
| One-Tap Payments | Ideal for services with high customer returning rates, such as marketplaces, ride hailing, etc. |
| High-Security Transactions | Perfect for merchants requiring strong customer authentication. FIDO2/WebAuthn provides cryptographic proof of customer presence and consent. |
| Mobile-First Experiences | Optimized for mobile applications where biometric authentication (fingerprint, face recognition) provides a frictionless payment experience. |
| Risk Signals Collection | Device and behavioral data is collected during enrollment and payment to enhance fraud prevention. |
| Payment Authorization | Each payment requires an authentication assertion, ensuring customer presence for every transaction. |
The Flow
Pix on File works by establishing an authorization between merchant and customer through an enrollment, and referencing it in every payment. Each payment is then confirmed with the FIDO2 credential registered on the customer's device.
Enrollment flow
The enrollment establishes the authorization between merchant and customer. Unlike the QR Code journey, Pix on File requires the customer to complete FIDO2 credential registration after bank authorization.
- The merchant initiates the enrollment, and the customer selects a bank from the Bank List.
- The customer authorizes the enrollment in their banking app.
- The customer returns to the merchant app and completes the FIDO2 credential registration.
- The enrollment becomes active and ready for payments.
Payment flow
Once an active enrollment is in place, payment requests can be initiated. Each payment requires FIDO2 authentication to ensure customer presence and consent.
- The merchant initiates a payment referencing the enrollment.
- EBANX returns a FIDO2 challenge.
- The customer authenticates with their registered FIDO2 credential.
- The payment is authorized and the funds are transferred.
Integration options
| Option | Description |
|---|---|
| Direct API | The merchant application collects Risk Signals and runs the FIDO2/WebAuthn ceremony. See Device Linking and Payment. |
| Hosted Flow | EBANX collects Risk Signals and runs device linking and customer authentication on its own page, then notifies the merchant by webhook. |
By following this basic integration guide, you will understand how you can create enrollments and accept Pix on File payments in your checkout using EBANX Direct API.
Still need help?
We hope this article was helpful. If you still have questions, you can explore the following options:
- Merchant support: Contact our support team at sales.engineering@ebanx.com for assistance.
- Not a partner yet? Please complete the Merchant Signup Form, and our commercial team will reach out to you.
