MED 2.0 — Responding to a Funds Recovery

While the funds recovery has the awaiting_analysis status, you can respond to it justifying the legitimacy of the transaction. The response is composed of a text explanation and a .zip evidence file (invoice, receipts, conversations, etc.), sent as multipart/form-data.

After the response, the funds recovery moves to the pending_approval status, proceeding to the analysis stage.

Warning

The maximum period to respond to a MED is 5 days.

Funds recovery identifier

The identifier used in the route is the funds_recovery_id field, received in the incoming funds recovery webhook when the funds recovery is opened:

{
  "event_datetime": "2026-07-16T16:48:43Z",
  "key": "0dedf537-a75e-4945-be1d-5d278c623022",
  "data": {
    "funds_recovery_id": "b8d19bd4-51dc-4784-a2ad-52807c6dfc80",
    "funds_recovery_status": "awaiting_analysis",
    "...": "..."
  },
  "status": "awaiting_analysis",
  "webhook_type": "incoming.internal_infraction_report"
}

The same identifier can also be obtained through the funds recoveries listing.

Request

ENDPOINT

/internal/pix/funds_recovery/incoming/FUNDS_RECOVERY_ID

METHOD

PATCH

Path params

Field	Type	Description	Characters
FUNDS_RECOVERY_ID *	string	Identifier of the funds recovery at Bacen (funds_recovery_id).	32

Form data

Field	Type	Description	Characters
client_awnser *	string	Your interpretation of the transaction reported as fraudulent.	2000
file *	file	.zip file with the evidence supporting the justification. Maximum size: 50MB.	-

Response

STATUS

200

Response Body

{
  "funds_recovery_key": "9eb5f452-81fd-4f67-9f2a-49e14e53ef64",
  "funds_recovery_id": "b8d19bd4-51dc-4784-a2ad-52807c6dfc80",
  "infraction_report_id": "3541127e-cbc9-44f6-bb0e-3e346ddaefb4",
  "pix_transfer_key": "957ef961-1824-47e6-90fd-f8b4775a1e1c",
  "target_account_key": "6711e3cf-fdf4-41b4-88e8-0a31cb83b9f4",
  "target_person_key": "4f6ea994-e53a-4ef8-b2b0-89d14c4667bc",
  "end_to_end_id": "E12345678202607161648s188f18bJty",
  "funds_recovery_status": "pending_approval",
  "situation_type": "scam",
  "report_details": "Transaction reported as fraudulent by the originator.",
  "infraction_amount": 150.50,
  "credited_participant": "32402502",
  "debited_participant": "12345678",
  "client_awnser": "Legitimate transaction, as demonstrated by invoice XXXXXXXXXX confirming the sale of the product.",
  "analysis_result": null,
  "analysis_details": null,
  "blocked_balance_status": "completelly_blocked",
  "tracking_graph": null,
  "funds_recovery_status_events": [
    {
      "old_status": null,
      "new_status": "awaiting_analysis",
      "created_at": "2026-07-16T16:48:43Z"
    },
    {
      "old_status": "awaiting_analysis",
      "new_status": "pending_approval",
      "created_at": "2026-07-17T10:12:05Z"
    }
  ],
  "updated_at": "2026-07-17T10:12:05Z",
  "created_at": "2026-07-16T16:48:43Z"
}

The response is the updated funds_recovery object, with funds_recovery_status = pending_approval and the justification in client_awnser.

Errors

Code	Status	Description
QIT000001	400	client_awnser or file missing from the request.
MED000042	400	The funds recovery does not have the awaiting_analysis status.
MED000043	400	The sent file is not a .zip file.
MED000044	400	The sent file exceeds the maximum size of 50MB.
MED000039	404	Funds recovery not found for the given FUNDS_RECOVERY_ID.