#55 2026 · BCP (Banco de Crédito del Perú) · Retail banking
BCP let Peruvians freeze their bank account at any corner-store card reader, since the stolen phone they'd normally call the bank with was gone too
the problem
Freezing a stolen phone's linked bank account normally required calling the bank from a phone the thief had just taken
background
More than 4,000 mobile phones were stolen daily in Peru, and each one typically doubled as a banking credential: the victim's usual way of calling their bank, using its app, or receiving a verification code to freeze the account was gone in the same instant they needed it most.
Existing fraud-prevention advice — call your bank immediately — assumed the victim still had a phone. BCP had no fast channel for someone standing on a street corner with nothing but their ID number and a stolen-phone panic, and building a new physical network of emergency kiosks would have taken years and heavy capital.
what everyone would do
The obvious fix was to build a new emergency channel purpose-built for this exact scenario: a dedicated hotline, a website reachable from any device, or physical emergency kiosks staffed for exactly this problem. All of those require new infrastructure and years of buildout, capital BCP didn't have time to spend while thousands of phones were being stolen every day in the meantime.
what they saw
BCP saw that it didn't need to build a new emergency network at all — it already had one, just not labeled as such: the 17,500 payment terminals sitting in every grocery store and pharmacy in the country. Those terminals already did the two things an emergency channel needs (verify identity, transmit an instruction to the bank) for an entirely different purpose. The insight wasn't a new capability, it was recognizing that an existing piece of infrastructure, built for payments, already had everything needed to solve a problem that looked like it required something new.
the move
BCP turned the country's existing card-payment terminals — already installed in more than 17,500 grocery stores, pharmacies and hardware shops — into an emergency channel: a theft victim walks into any of them, enters their ID number and PIN, and blocks their account on the spot, no phone or app required.
why it works
Because the card-payment network was already deployed at massive scale before this problem existed, repurposing it as an emergency channel required no new hardware and no new trust relationship with merchants — only a software integration letting a terminal accept an ID number and PIN as an emergency-block instruction instead of a payment. This sidesteps the two things that make new infrastructure slow to build (physical rollout and public trust), since the terminals were already physically everywhere and customers already knew how to use one. A theft victim's actual bottleneck — having no phone to call the bank with — is solved because the terminal never required a phone in the first place; it only ever needed a card or an ID and a PIN, which is precisely what a theft victim retains even after losing their handset.
the payoff
Saved a reported $7.8 million in projected stolen funds and cut money-theft reports by 48% in the first four months, reusing terminals already in place rather than building new infrastructure. Won the Creative Data Grand Prix at Cannes Lions 2026.
where it breaks
The approach only works when the repurposed infrastructure is already ubiquitous and already trusted for a related but different function — a network with sparse coverage or unfamiliar to the public would add friction instead of removing it. It also depends on the emergency function being simple enough to bolt onto the existing terminal's interface without retraining every merchant or overhauling the hardware; a more complex emergency service (dispute resolution, fraud investigation) couldn't be squeezed into a payment terminal's limited interaction model the way a single block instruction could. And because the metrics behind a story like this originate from the bank's own case study and campaign materials rather than independent audit, the specific figures deserve the same skepticism any self-reported corporate result does, even where the underlying mechanism is real and independently confirmed by press coverage of the product itself.
what came after
SOS POS won the Creative Data Grand Prix at Cannes Lions 2026 and is being studied by other Latin American banks facing similar phone-theft rates; because it reuses infrastructure merchants already had, expanding it to more terminals and more countries requires no new hardware, only integration.
references
- [1]Contagious — Peruvian bank turns 17,500 payment terminals into anti-theft banking networkContagious, 2026contagious.com
- [2]BCP habilita el Bloqueo de Emergencia en agencias: así podrás bloquear tus tarjetas tras el robo del celularLa República (Peru), 2026larepublica.pe