PrymeIntelligence

AI agent skills by role·Sector brief

AI agent training for fraud analysts in e-commerce in Brazil

How Brazilian e-commerce fraud analysts should train to oversee AI agents on Pix, boleto and card fraud, what stays human, LGPD duties and a 90-day plan.

Brazilian e-commerce fraud analysts should be trained to supervise AI agents that screen Pix, card and boleto orders, assemble chargeback and dispute evidence, and flag account takeovers, and to calibrate their decisions as a team. Account blocks, refunds and police referrals stay with people. The LGPD and Banco Central's Pix rules shape the oversight.

What does an e-commerce fraud analyst in Brazil handle?

Payment mix defines the job. Brazilian shoppers pay by card, often in instalments, by Pix in seconds, and still by boleto. Each method has its own fraud. Card fraud uses stolen details for high-value instalment purchases. Pix fraud often runs through social engineering, where a victim is tricked into paying a fake store or a fake seller on a marketplace. Boleto fraud alters the barcode so the payment goes to a criminal's account.

On the platform side, analysts watch for account takeover, fake seller accounts on marketplaces, triangulation schemes in which a fraudster resells goods bought with stolen cards, and abuse of the consumer right to withdraw from online purchases within a short period. Identity checks lean on the taxpayer number, which fraudsters buy or invent.

What changes when AI agents join the fraud team?

  • Order screening packs (depth 2). The agent assembles device, taxpayer number, address and payment history for each risky order and drafts a recommendation. The analyst decides.
  • Low-risk Pix and card order release (depth 3). Orders that clear every check the merchant has set ship without manual review.
  • Seller onboarding checks (depth 2). For marketplaces, the agent checks a new seller's registration and bank details and drafts a risk summary.
  • Chargeback and dispute responses (depth 2). The agent compiles delivery evidence and account activity; the analyst submits.
  • Account blocks and seller payout holds (depth 4, held). The agent prepares the action and evidence; a named person releases it.

The full role map is in AI agent skills by role, and our analysis of which AI agent skills matter most for fraud analysts ranks them.

What must analysts learn, and what stays with them?

Calibrated judgement. Fraud teams in large Brazilian retailers can have dozens of analysts across shifts. If one approves borderline Pix orders and another rejects them, the agent's corrections conflict. Regular calibration sessions for fraud analysts keep decisions consistent.

Evidence and provenance. A Pix confirmation from the payment provider is sealed. A screenshot of a Pix receipt sent by a customer is declared and easy to fake. A boleto barcode in an email is external. Analysts should know which class each fact carries before accepting the agent's recommendation.

Verdicts. Allowed, held, refused, withheld. A held seller payout means a named person must act. A withheld action is fixed at the platform floor and is not the team's to release.

Practical review under supervision. New analysts learn faster with structured review of real decisions; our guide on how to run a two-week practicum for fraud analysts sets out the format.

What stays with analysts: blocking accounts, holding seller payouts, refusing a withdrawal-right refund, labelling a customer as fraudulent, and police referrals. Agents change the analyst's work rather than ending it; see will AI agents replace fraud analysts.

Which Brazilian rules shape oversight and literacy?

The LGPD governs shoppers' personal data, including taxpayer numbers, device data and purchase history used in fraud checks. Fraud prevention can support processing, but the law still requires purpose limitation, necessity, security and transparency. It gives data subjects the right to request review of decisions made solely on automated processing that affect their interests, which applies directly when an agent's screening leads to a refused order or blocked account. The ANPD enforces the law.

Banco Central do Brasil runs Pix and has built in a special return mechanism that lets institutions block and return funds in cases of fraud, along with rules on marking suspected fraud. Analysts working with Pix should understand that funds can sometimes be recovered quickly if the bank is told in time. Consumer law gives online buyers a short cooling-off right, so refusing a withdrawal must rest on evidence of abuse, not suspicion. Card merchants must meet PCI DSS v4.0.

Brazil does not have an AI act in force, so retailers lean on voluntary governance frameworks; ISO/IEC 42001 and the NIST AI Risk Management Framework are the usual references when a payment partner asks how the fraud agent is controlled.

This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.

What does a 90-day training plan look like?

Days 1 to 30. All analysts complete foundations training. The agent runs in shadow on order screening packs for card orders.

Days 31 to 60. New and mid-level analysts run a two-week practicum on live packs, logging decisions. Calibration sessions every week on Pix and boleto cases. Certify low-risk card order release at depth 3.

Days 61 to 90. Senior analysts complete operator certification. Set an approver authority matrix for the fraud team so only certified people can release held account blocks and seller payout holds.

Where the Academy fits

Pryme Intelligence Academy lets Brazilian fraud teams start with the free Foundations track and move senior analysts to the Operator track, whose module tests are set in e-commerce fraud. Its exam is 40 questions in 60 minutes, passed at 32 correct. For teams of up to 25, a free readiness assessment reports scores by concept and the gaps to close first.

Questions people ask

Can the agent decide that a withdrawal request is abusive?

It can assemble evidence of past behaviour. The decision to refuse a consumer's withdrawal stays with a person, because the right is protected and errors are costly.

How should analysts treat Pix receipts sent by customers?

As declared evidence. Confirm against the provider's records before relying on them.

Does the agent need separate certification for marketplaces and own-stock retail?

Yes. Seller fraud and buyer fraud are different capabilities, and each must be proven on the merchant's own cases.

Train the people who run your agents.

Pryme Intelligence Academy: free courses on the real product, audio lessons, labs in a free workspace, and certificates anyone can check on VerifyDoc.ai. Teams get seats, an admin view and a free readiness assessment.