It's a functionality of banking apps. Yes, transfers are done either via a QR code or via one or more "Pix Keys", that the person/bussiness authorizes in their baking app. These keys can be the brazilian equivalent of your SSN, a cell phone number, an e-mail address or a randomly generated UUID-formated one.