Is Open Finance safe? Real risks and how to protect yourself
Is Open Finance Brasil safe? See its layers of protection, the real risks, how to spot fake consent screens and a checklist for connecting your account calmly.
9 min read
Learn how to use AI to organize your finances safely, what never to share with a chatbot and how to double-check the numbers AI calculates for you.
Otto TeamUpdated 9 min read

You can use AI to categorize spending, summarize card statements and build budgets safely if you never share passwords, verification codes, full card numbers or CVV codes, prefer tools with read-only access through Open Finance Brasil, double-check the numbers AI calculates and know your rights under the LGPD, Brazil's data protection law.
Artificial intelligence tools have become good at tasks that used to feel like a chore: sorting hundreds of transactions, explaining a confusing credit card statement, building a budget from a list of expenses. For many people, it is the first time organizing their finances has felt quick.
At the same time, money is a subject where mistakes are expensive. Pasting an entire bank statement into any chatbot, accepting a calculation without checking it or handing your bank password to an unknown app can cause real losses. And scammers have also started using AI to sound more convincing.
Here you will see what AI does well in personal finance, what never to share, how to choose safe tools, how to check the numbers it gives you and which scams use AI, with practical examples in Brazilian reais (R$).
Used the right way, AI saves time on repetitive tasks and helps you understand topics that seem complicated.
What it should not do is make decisions for you or move money without your review. AI organizes and suggests; the decision is still yours. If you are just starting to get organized, our guide on how to track expenses is a good starting point.
This is the most important rule in this article. No legitimate money management tool needs the data below:
| Data | Can you share it? | Why |
|---|---|---|
| Bank or app password | Never | Gives full access to your account |
| Verification code (text message, token, email) | Never | Used to confirm transactions and reset passwords |
| Full card number, expiry date and CVV | Never | Allows purchases in your name |
| Photo of an ID document with a selfie | Never in a general chatbot | Can be used to open accounts and commit fraud |
| Full CPF (Brazilian taxpayer ID), address and date of birth together | Avoid | The combination makes identity theft easier |
| List of expenses without personal data | Yes, with care | Useful for categorizing and analyzing |
| Totals by category | Yes | Enough for most analyses |
Before pasting a statement, delete your full name, CPF, account and branch numbers, names of other people that appear in transfers and any codes. For most analyses, AI only needs the date, a short description and the amount.
There are two main ways an app can read your banking data.
Open Finance Brasil. This is the system regulated by Banco Central do Brasil, the central bank, and the National Monetary Council (CMN). You give consent inside your own bank's app or internet banking, choose which data to share, for what purpose and for how long (up to 12 months under the general rule), and you can revoke it at any time. Only institutions authorized by the Central Bank take part, and you never give your bank password to the third-party app. Our guide on what Open Finance Brasil is explains how it works step by step.
Screen scraping. The app asks for your bank username and password and logs into your account as if it were you. This violates banks' terms of use, gives far too much access, can break at any moment and increases the risk if the company suffers a data leak.
To use AI with your real data, prefer tools that connect through Open Finance with read-only access, meaning they cannot make Pix payments (Pix is Brazil's instant payment system) or transfers. Our article is Open Finance safe? explains the layers of protection and the real risks.
AI models sometimes "hallucinate": they confidently present a number or a fact that is not correct. In finance, that can lead to bad decisions. Some common errors:
You ask a chatbot how much R$ 10,000 earns in a CDB (a bank certificate of deposit) paying 110% of the CDI over one year. It answers: "R$ 1,100". Let's check, assuming a hypothetical CDI of 10% a year, purely as an example:
The AI's answer was right for the gross amount, but it overstated by R$ 192.50 what would actually reach your account. When comparing with a Brazilian savings account (poupança), which is tax-exempt for individuals, that detail can change the conclusion.
Now a use where AI really helps. You ask it to list recurring charges from the last few months, and it finds three subscriptions you no longer use: R$ 39.90, R$ 55.90 and R$ 21.90.
Before canceling, check your statement or card bill to confirm the charges really recur and the amounts match. Under Brazilian consumer rules, you should be able to cancel through the same channel you used to sign up.
Scammers use AI too. The scams are the same as always, just more convincing.
If you fall for a Pix scam, dispute the transaction in your bank's app as quickly as possible and file a police report (boletim de ocorrência). Banks use the MED, the Central Bank's Special Return Mechanism, but a refund depends on there being money left in the scammer's account and is not guaranteed, so speed matters.
Brazil's General Data Protection Law (LGPD, Law 13,709/2018) applies to any company that processes your data, including AI companies. You have the right to:
With Open Finance, you can also cancel data sharing at any time, both in your bank's app and in the app receiving the data.
Otto was designed to use AI without asking for what it should not:
Otto is not a financial institution or an investment advisory service; it helps you organize and understand your money, and the decision is yours.
It can be, as long as you take a few precautions: never share passwords, verification codes, full card numbers or CVV codes; prefer tools that access data through Open Finance with read-only access; read the privacy policy; and check the numbers before making decisions. AI is great for organizing and explaining, but it can get calculations wrong.
You can, with care. First delete your name, CPF, account and branch numbers, other people's names and any codes. For most analyses, the date, a short description and the amount are enough. Also check whether the tool uses your conversations to train models and whether you can turn that off. Never send a password, token or full card details.
With Open Finance, you authorize sharing inside your bank's app, choose the data, purpose and time limit, and can revoke it whenever you want, without giving your password to anyone. An app that asks for your password uses screen scraping, accesses your account as if it were you, violates banks' terms and increases the risk in case of a data leak.
Yes. AI models can add incorrectly, forget taxes and fees, use outdated rates or cite rules that do not exist. For example, a CDB simulation that ignores income tax overstates the net return. Always ask for the calculation step by step, redo the main math yourself and confirm rates and rules at official sources.
Be suspicious of urgent requests for money, even when the voice or video looks like a family member, and confirm by calling the number you already know. Banks never ask for passwords, codes or a "test" Pix. Promises of high, guaranteed returns from AI bots are also a sign of a scam. When in doubt, end the contact and verify through another channel.
Otto Team
Reviewed by: Otto Finanças editorial team
We are the team building Otto Finanças, a personal and couples finance app, free to start, powered by Open Finance Brasil. Our guides are based on official sources (Central Bank of Brazil, Receita Federal, Tesouro Direto, B3, FGC) and on how people actually deal with money.
Educational content. Not investment advice or individual guidance. Rules, rates and limits change: always check the official source before deciding.
Is Open Finance Brasil safe? See its layers of protection, the real risks, how to spot fake consent screens and a checklist for connecting your account calmly.
9 min read
Understand what Open Finance Brazil is, how consent-based data sharing works, what it changes for you and how to use it safely in your everyday finances.
10 min read
Learn how to track expenses with a simple 7-step method, real examples in reais and a 15-minute weekly routine that fits real life in Brazil.
10 min read