Government detects diversion of R$3.5 million after payment system invasion

The federal government made a determination Diversion of at least R$ 3.5 million of resources belonging to the Ministry of Management and Innovation in Public Services (MGI) following unauthorized access to the Union’s official payment system, as revealed by Folha de S.Paulo yesterday (23). R$2 million of this amount has already been recovered.

According to the newspaper, the money was diverted by changing the bank information of the supplier who was supposed to receive the money. Later, a The second attempt to withdraw funds from MGI accounts in the amount of R$ 9 million was not successful.

The money, originally allocated for a software maintenance contract with the Federal Data Processing Service (Serpro), was transferred during access to the Integrated Financial Management System (Siafi). Sent to Adonai Comércio. It is registered in Campinas (SP) and its main activity is “furniture retail trade”.

As detailed in the report, the illegal transfer of the amount took place on March 28 using a random Pix key in the name of the company. MGI only noticed the irregularity on April 1Initiating procedures to recover money transferred without authorization.

Changes to system access

The amount transferred illegally, the ministry managed to recover R$2 million, which had not yet been removed from the account of the company that received the money, when you contact the bank. The remaining R$1.5 million cannot be withdrawn as it has already been withdrawn or transferred to other accounts.

Siafi’s occupation continues to be investigated by the Federal Police and the Brazilian Intelligence Agency (Abin). In order, The government has done some work changes to system access It is used to pay creditors, public officials, and transfer funds to states and municipalities to strengthen security.

With the changes, financial managers and employees of public institutions with access to Siafi now have a Digital certificate issued by Serpro specifically to carry out transfers. Before that, it was possible to use the password and account as well as the digital signature provided by private companies on the Gov.br platform.