ScamLens
Guides 22 min read

Complete Anti-Scam Guide for Brazil: From Identifying Pix Scams to Filing Police Reports and Recovering Funds (2026)

Covers all official anti-fraud channels in Brazil (190 emergency, Cybercrime Police, Delegacia Eletronica online reporting, SaferNet, Procon, Banco Central, CVM, consumidor.gov.br). Detailed identification methods for Brazil-specific scams including Golpe do Pix, WhatsApp cloning, Boleto fraud, fake online stores, and investment scams, plus complete steps for Pix MED mandatory refund mechanism, evidence collection, police reporting, scam website takedown complaints, and fund recovery.

Brazil (Brasil) is Latin America's largest digital economy, with over 180 million internet users and a smartphone penetration rate exceeding 85%. Since its launch in 2020, the Pix instant payment system has covered more than 150 million users, becoming an indispensable payment tool in daily life for Brazilians. However, this high degree of digitalization has also made Brazil a hotspot for online scams. This article is a complete anti-scam operations manual for readers living, working, or doing business in Brazil, helping you identify scams, collect evidence, report to police, and recover funds.

1. The State of Online Scams in Brazil (2026)

According to statistics from the Brazilian Public Security Forum (Forum Brasileiro de Seguranca Publica) and the Central Bank of Brazil (Banco Central do Brasil, BCB), economic losses from online scams in Brazil exceeded 25 billion reais (approximately $5 billion USD) in 2025, a year-over-year increase of more than 25%. The following are the most common types of scams in Brazil:

1. Golpe do Pix (Pix Transfer Scams)

Pix is the instant payment system launched by the Central Bank of Brazil -- available 24/7, with real-time settlement and no fees -- making it Brazil's most mainstream payment method. However, the instantaneous nature of Pix has also made it the tool of choice for scammers: once a transfer is completed, funds arrive in the recipient's account instantly, making recovery extremely difficult.

Common methods:

  • Emergency plea scams: Scammers impersonate friends or family, sending messages via WhatsApp claiming they "changed their number," then fabricating urgent reasons ("my phone broke," "I was in a car accident," "I need bail money") to request Pix transfers from victims. This is the most frequent scam type in Brazil.
  • Fake bank customer service: Phone calls or text messages impersonating customer service from banks like Nubank, Itau, Bradesco, or Banco do Brasil, claiming "suspicious activity detected" or "your account will be frozen," luring victims into making Pix transfers to a "safe account."
  • Pix phishing links: Sending forged Pix payment QR codes or links; when victims scan them, funds are transferred to the scammer's account instead of the intended recipient.
  • Fake Pix refunds: Claiming they accidentally overpaid you and requesting you "return the excess." In reality, the alleged "overpayment" is a fake impression created with a forged comprovante (transfer receipt) screenshot.
  • Pix robbery (Sequestro relampago): Physically coercing victims to open their mobile banking app to make Pix transfers. While this is an in-person crime, it exploits Pix's instant settlement feature.

How to identify: Any request for an urgent Pix transfer should first be verified by calling the person to confirm their identity. Legitimate banks will never ask you to make a Pix transfer to a "safe account." When receiving a Pix refund request, check actual transaction records in your banking app rather than trusting screenshots.

2. Golpe do WhatsApp (WhatsApp Cloning/Hijacking)

WhatsApp has over 120 million users in Brazil and is effectively the national messaging tool. WhatsApp scams are the second most common scam type in Brazil.

Common methods:

  • Number cloning (Clonagem): Scammers use social engineering to obtain the victim's WhatsApp verification code (codigo de verificacao), take over their account, and then borrow money from contacts in the victim's address book. Common script: the scammer poses as customer service claiming "we need you to confirm a verification code."
  • Identity impersonation (Perfil falso): Using the victim's profile photo and name to create a new WhatsApp account, then sending messages to friends and family saying "I changed my number" (troquei de numero) before asking to borrow money.
  • Business account impersonation: Impersonating WhatsApp Business accounts of well-known brands, sending fake promotional messages or prize notifications to direct users to phishing links.

How to identify: Enable WhatsApp's "two-step verification" (verificacao em duas etapas). When receiving a "changed number, need money" message from a friend or relative, call their original number to confirm. Never share any verification code with anyone.

3. Golpe da Loja Virtual (Fake Online Store Scams)

  • Social media fake stores: Setting up fake brand or discount stores on Instagram or Facebook, attracting buyers with extremely low prices, then disappearing after receiving Pix payments.
  • Fake e-commerce websites: Cloning websites of well-known e-commerce platforms like Mercado Livre (Brazil's largest), Magazine Luiza, or Americanas, with domain names highly similar to the originals.
  • Fake promotional campaigns: Exploiting sales events like Black Friday (also very popular in Brazil) to run massive fake advertisements, luring consumers to place orders on fraudulent sites.
  • Off-platform transactions: Contacting buyers on platforms like Mercado Livre, then persuading them to transact directly via Pix outside the platform, bypassing buyer protection mechanisms.

How to identify: Be highly suspicious of products priced far below market value. Check suspicious shopping websites on ScamLens. Use in-platform payments (Mercado Pago) on Mercado Livre to enjoy buyer protection. Verify whether the website displays a CNPJ (Brazilian business tax ID) and other legitimate business information.

4. Golpe do Boleto (Boleto Fraud)

Boleto Bancario is a payment method unique to Brazil, similar to a bank payment slip, payable at banks, ATMs, or online banking. Boleto fraud is a scam type specific to Brazil.

Common methods:

  • Boleto tampering: Infecting victims' computers with malware that automatically alters the payee information (barcode and digit line) when victims download or print a Boleto, redirecting payment to the scammer's account.
  • Forged Boletos: Scammers forge Boleto bills from well-known companies (such as telecom operators Vivo, Claro, Tim, or banks) and send them to victims via email or text.
  • Double payment scam: Claiming a previous Boleto payment was unsuccessful and requesting a new payment (when the first payment actually went through).

How to identify: Always verify the payee name and CNPJ/CPF before paying a Boleto. The first few digits of a legitimate Boleto's barcode correspond to the receiving bank's code (e.g., Itau=341, Bradesco=237, BB=001). Obtain Boletos through official channels; do not download them via email links.

5. Investment and Cryptocurrency Scams

  • Fake Forex/binary options platforms: Foreign exchange trading platforms promising high returns that let victims "profit" initially to build trust, then demand additional investments, ultimately preventing withdrawals.
  • Cryptocurrency Ponzi schemes: Promising monthly returns of 10%-30% under the guise of "mining profits," "DeFi staking," or "stablecoin high interest" -- actually pyramid schemes.
  • Fake exchanges: Imitating the interfaces of exchanges like Binance or Mercado Bitcoin, luring deposits that can never be withdrawn.
  • "Renda Extra" scams: Under the pretense of "extra income" (renda extra), claiming you can earn hundreds of reais daily just using your phone at home -- actually MLM or pyramid schemes.

How to identify: The Brazilian Securities and Exchange Commission (Comissao de Valores Mobiliarios, CVM) website allows you to search for registered legitimate financial institutions. Any investment platform not registered with the CVM is illegal. Any investment promising guaranteed high returns is a scam.

6. Fake Job Scams (Golpe da Vaga de Emprego)

Brazil's relatively high unemployment rate makes job scams very active:

  • Fake job postings: Publishing fake high-salary positions on LinkedIn, Indeed Brasil, Catho, and other platforms.
  • Onboarding fee scams: After "hiring," requiring payment for "training fees," "uniform fees," "system registration fees," etc., then disappearing.
  • Task-based scams: Under the guise of "e-commerce reviewer" or "data entry" side jobs, requiring upfront deposits to purchase tasks with promised commissions per task -- ultimately preventing withdrawals.
  • Impersonating famous companies: Impersonating recruitment from well-known Brazilian companies like Ambev, Petrobras, or Magazine Luiza.

How to identify: Legitimate companies never charge fees before employment. Verify job postings on the company's official website. Any "side job" requiring upfront payment is 100% a scam.

7. Bank Impersonation Scams (Golpe da Falsa Central de Atendimento)

This is a very classic type of phone scam in Brazil:

  • Scammers spoof their caller ID to display the bank's official number (in Brazil, caller IDs can be spoofed).
  • They claim suspicious transactions have been detected or a credit card has been compromised, requesting victims to "verify their identity."
  • They guide victims to provide card numbers (numero do cartao), CVV codes, passwords, or OTPs.
  • An advanced version: claiming they need to "cancel" a suspicious transaction, guiding victims to perform operations in their banking app that actually complete transfers to the scammer's account.
  • Another variant: asking victims to cut their credit card and hand it to a "bank courier" (motoboy) -- the chip actually remains usable.

How to identify: Banks will never proactively call to ask for passwords, CVV codes, or full card numbers. After receiving a suspicious call, hang up and call the official hotline on the back of your bank card yourself. Never hand your bank card to anyone who comes to your door.

2. How to Use ScamLens to Determine If You're Being Scammed

ScamLens (scamlens.org) is a professional online scam detection platform that aggregates data from over 90 global threat intelligence sources. ScamLens supports a Portuguese interface -- visit scamlens.org/pt/ to switch to the Portuguese version.

Usage Steps

  1. Visit ScamLens Portuguese version: Open your browser and go to https://scamlens.org/pt/.
  2. Enter the suspicious URL: Type the suspicious link or website domain you received into the search box on the homepage.
  3. Check the Trust Score: ScamLens will provide a Trust Score (Pontuacao de confianca) from 0-100 within seconds -- the lower the score, the higher the risk.
  4. Read the risk analysis: The system will list which threat intelligence sources flagged the website, domain registration information, SSL certificate status, and other detailed information.
  5. AI Risk Summary: ScamLens's AI generates an easy-to-understand risk analysis summary to help you understand the specific risk factors of the website.

Common Use Scenarios

Scenario Action
Received suspicious link via WhatsApp Copy the link to ScamLens for detection
Someone recommended an investment platform Search the platform's domain to check its score
Instagram ad leads to a shopping site Check it first before deciding to order
Received a link in a "bank" text message Detect the link's authenticity on ScamLens
Boleto payment email contains a link Check if the sender's website is trustworthy
Job site requires paid registration Check if the website is a known scam

Cryptocurrency Address Detection

If cryptocurrency scams are involved, you can also use ScamLens's cryptocurrency detection feature:

  1. Visit scamlens.org/pt/check-crypto.
  2. Enter the wallet address provided by the other party (supports 18 chains including ETH, BTC, TRON, Solana, etc.).
  3. Check whether the address has been flagged as a scam address, its risk score, and on-chain transaction analysis.

3. Searching and Reporting Suspicious Websites on ScamLens

Searching

Enter a domain name in the ScamLens homepage search box to query. Search results include:

  • Trust Score (0-100): A comprehensive result from 90+ threat intelligence sources.
  • Threat flag details: Which security organizations have blacklisted the domain.
  • Domain information: Registration date, registrar, server location.
  • Community reviews: Other users' reviews and report records for the website.
  • AI analysis: AI-generated comprehensive risk assessment.

Reporting

If you confirm a website is a scam, you can report it on ScamLens:

  1. On the website's report page, click the "Report" (Reportar) button.
  2. Select the scam type (Phishing, Investment scam/Golpe de investimento, Fake website/Site falso, etc.).
  3. Fill in a description of your specific experience.
  4. Submit the report. Your report will be incorporated into ScamLens's threat database, helping protect other users.

Every report you make has value: ScamLens's community reporting system uses a reputation mechanism where reports from high-reputation users are prioritized. Websites reported by multiple people automatically receive an elevated risk rating. Reports from Brazil are especially important for protecting other Brazilian users, as many scam websites targeting Brazil are only active in Portuguese-speaking communities.

4. Evidence Collection Checklist

Before reporting to police, make sure to collect and preserve the following evidence. The completeness of evidence directly affects the success of filing a case (registro de ocorrencia) and recovering funds.

Pix Transaction Receipts (Comprovante de Pix)

This is the most important type of evidence for anti-scam cases in Brazil:

  • Open your banking app -> Find the Pix transaction history -> Screenshot and save the comprovante for each transfer to the scammer.
  • Must include: Transaction date and time, amount (valor), recipient name (nome do recebedor), recipient CPF/CNPJ (partially displayed), Pix key type and value (chave Pix), transaction ID (ID da transacao / End to End ID, E2EID).
  • E2EID is crucial: This is the unique identifier for Pix transactions, required when applying for Pix MED refunds and filing police reports.
  • If multiple transfers were made, screenshot and save each one separately.

WhatsApp Chat Records

  • Export full conversation: WhatsApp -> Enter the conversation with the scammer -> Tap the three dots "..." -> "Mais" (More) -> "Exportar conversa" (Export chat) -> Select "Incluir midia" (Include media) -> Save to phone or email.
  • Screenshot key messages: Including the scammer's profile photo, phone number, and key conversation content (especially messages requesting transfers).
  • Save their information: The scammer's WhatsApp number (including country code +55), profile photo, and "About" information.

Boleto Information

  • Save the Boleto PDF file or screenshot, including the complete digit line (linha digitavel) and barcode.
  • Record the Boleto's payee name (cedente) and CNPJ/CPF.
  • If already paid, save the payment confirmation screenshot from your banking app.

Other Important Evidence

  • Scam website screenshots: Use browser screenshots to save scam website pages, making sure to include the full URL bar.
  • Text messages and emails: Save original screenshots of scam messages including sender number and time. Save complete scam email content (including email headers).
  • Social media evidence: Save the scammer's Instagram/Facebook profile links and screenshots, ad screenshots, and private messages.
  • Phone records: Screenshot and save scam phone numbers and call times (from your phone's call history).
  • Bank statements (Extrato bancario): Export complete bank statements from your banking app for the period involving the scam.
  • ScamLens reports: Search for the scam website on ScamLens, screenshot and save the trust score and risk analysis report as supplementary case-filing material.
  • Timeline: Compile an event timeline (linha do tempo) from first contact to discovering the scam.

Important note: All evidence should be saved simultaneously on your phone, computer, and cloud storage (Google Drive, iCloud, etc.) to prevent loss of evidence due to a single device failure. Legal proceedings in Brazil may take a long time, so evidence needs to be preserved long-term.

5. Reporting and Complaint Channels (Brazil)

The following are all available official reporting and complaint channels in Brazil, each with Portuguese names and detailed operational steps.

1. 190 -- Emergency Police (Policia Militar)

Portuguese name: Ligue 190 -- Policia Militar
Phone: 190
Scope: Emergencies, including ongoing scams and threats to personal safety (e.g., Pix robbery).

Steps:

  1. Call 190 (nationwide in Brazil, 24/7 service, free).
  2. Once connected, explain the situation and provide your location and contact information.
  3. If a crime is in progress (e.g., being coerced into a Pix transfer), police will dispatch officers immediately.
  4. If it's a past online scam, the operator will direct you to the nearest police station (delegacia) or the online reporting system.

Note: 190 primarily handles emergency cases. For general online scams, it's recommended to use Delegacia Eletronica (online reporting) or specialized cybercrime units first.

2. Delegacia de Crimes Ciberneticos (Cybercrime Police)

Multiple Brazilian states have specialized cybercrime police units (also called Delegacia de Repressao aos Crimes Informaticos or Delegacia de Crimes Digitais) dedicated to handling online fraud cases.

State cybercrime units:

State Agency Name Contact
Sao Paulo (SP) 4a Delegacia de Delitos Cometidos por Meios Eletronicos (DIG/DEIC) (011) 2221-7030
Rio de Janeiro (RJ) Delegacia de Repressao aos Crimes de Informatica (DRCI) (021) 2332-8192
Minas Gerais (MG) Delegacia Especializada de Investigacao de Crimes Ciberneticos (031) 3217-9714
Rio Grande do Sul (RS) Delegacia de Crimes Informaticos (051) 3288-9815
Parana (PR) Nucleo de Combate aos Cibercrimes (Nuciber) (041) 3321-1900
Bahia (BA) Delegacia de Repressao a Estelionato e Outras Fraudes (071) 3116-6916
Pernambuco (PE) Delegacia de Repressao aos Crimes Ciberneticos (081) 3184-3207

Steps:

  1. Visit your state's cybercrime police unit (you can schedule an appointment by phone).
  2. Bring: ID documents (RG or CPF + passport if you're a foreigner), all evidence materials (see Section 4).
  3. Give a statement (depoimento), describing the events in detail.
  4. Submit evidence materials.
  5. Obtain a Boletim de Ocorrencia (police report), which is a key document for subsequent fund recovery and complaints.

3. Boletim de Ocorrencia (B.O.) -- Online Reporting (Delegacia Eletronica)

Portuguese name: Delegacia Eletronica / Delegacia Online
Scope: All non-emergency crime reports, including online scams.

Most Brazilian states now have online reporting systems (Delegacia Eletronica), allowing you to complete a police report and obtain a B.O. (Boletim de Ocorrencia) from home.

State online reporting systems:

State Online Reporting URL
Sao Paulo (SP) delegaciaeletronica.policiacivil.sp.gov.br
Rio de Janeiro (RJ) delegaciaonline.pcivil.rj.gov.br
Minas Gerais (MG) delegaciavirtual.sids.mg.gov.br
Rio Grande do Sul (RS) delegaciaonline.rs.gov.br
Parana (PR) delegaciaeletronica.pr.gov.br
Federal District (DF) delegaciaeletronica.pcdf.df.gov.br

Steps:

  1. Visit your state's Delegacia Eletronica website.
  2. Select the case type: "Estelionato" (fraud) or "Crime cibernetico" (cybercrime).
  3. Fill in personal information: name, CPF (or passport number), address, contact details.
  4. Describe the events in detail: time, amount, scammer's contact information, scam method.
  5. Upload evidence files (screenshots, transaction receipts, etc.).
  6. After submission, the system will generate a B.O. number; you can view and download the B.O. PDF online.
  7. Keep the B.O. safe -- you'll need it when contacting banks, Procon, and courts later.

Note: The B.O. is the official record of a police report in Brazil's legal system, equivalent to a "case filing receipt." Without a B.O., banks and courts may not process your fund recovery request.

4. SaferNet Brasil

Portuguese name: SaferNet Brasil
Website: https://www.safernet.org.br
Reporting page: https://denuncie.safernet.org.br

Scope: Cybercrime reporting (scam websites, phishing, online fraud, child protection, etc.).

SaferNet Brasil is Brazil's most important non-governmental cybersecurity organization, operating a cybercrime reporting platform in partnership with the Federal Public Ministry (Ministerio Publico Federal, MPF).

Steps:

  1. Visit denuncie.safernet.org.br.
  2. Select report type: "Crimes contra o patrimonio na Internet" (Internet property crimes).
  3. Enter the scam website's URL and detailed description.
  4. Upload evidence screenshots.
  5. After submission, SaferNet will analyze the report content and, once confirmed, forward it to relevant law enforcement agencies.
  6. You'll receive a report number to track processing progress online.

Highlights: SaferNet works closely with Brazil's Federal Police (Policia Federal) and state police forces, ensuring reports are efficiently forwarded. SaferNet also provides cybersecurity education and victim support services.

5. Procon -- Consumer Protection Agency

Portuguese name: Procon -- Programa de Protecao e Defesa do Consumidor
Scope: Consumer fraud (fake stores, false advertising, non-delivery, counterfeit products, etc.).

Procon is the consumer protection agency in each Brazilian state. For scams involving consumer transactions (such as fake stores or false advertising), Procon is a very effective complaint channel.

Steps:

  1. Find your state Procon's contact information (you can call 151 for transfer).
  2. Prepare shopping receipts, payment records, and communication records with the merchant.
  3. Submit a complaint via Procon's official website or in person.
  4. Procon will contact the complained party to request a response; unresponsive businesses will be placed on a "blacklist."

Main state Procon contacts:

State Website
Sao Paulo (SP) procon.sp.gov.br
Rio de Janeiro (RJ) procon.rj.gov.br
Federal District (DF) procon.df.gov.br

National hotline: 151 (available in some states)

6. Banco Central do Brasil (BCB) -- Central Bank of Brazil

Portuguese name: Banco Central do Brasil
Website: https://www.bcb.gov.br
Complaint channel: https://www.bcb.gov.br/acessoinformacao/registrar_reclamacao
Phone: 145

Scope: Financial fraud, Pix scam complaints, banking service complaints.

Steps:

  1. Visit the BCB complaint page or call 145.
  2. Select complaint type: for Pix-related issues, select the "Pix" category.
  3. Enter the involved bank's name, your CPF, and a detailed complaint description.
  4. Upload the B.O. (police report) and transaction receipts.
  5. BCB will require the involved bank to respond within a specified deadline.
  6. For Pix scams, BCB will also coordinate execution of the Pix MED mechanism (see Section 7).

Note: BCB is the highest regulatory authority for Brazil's financial system. Complaints to BCB have direct binding force on banks. If a bank is unresponsive in handling your scam complaint, escalating to BCB usually drives progress.

7. CVM -- Brazilian Securities and Exchange Commission

Portuguese name: Comissao de Valores Mobiliarios
Website: https://www.gov.br/cvm
Complaints/reports: https://sistemas.cvm.gov.br
Phone: 0800-025-9666

Scope: Investment scams, illegal securities activities, fake funds/exchanges.

Steps:

  1. Visit the "Denuncia" (report) page on the CVM website.
  2. Enter the reported platform/company name and website.
  3. Describe the specific investment scam situation (promised return rates, investment amounts, platform operating model, etc.).
  4. CVM will investigate and may impose administrative penalties on the involved entity or refer the case to police.

Special feature: The CVM website provides an "Alerta CVM" (CVM Alert) section that publishes a directory of investment platforms confirmed to be engaged in illegal activities. You can check here before investing.

8. consumidor.gov.br -- Federal Consumer Complaint Platform

Portuguese name: consumidor.gov.br -- Plataforma Digital de Resolucao de Conflitos
Website: https://consumidor.gov.br
Supervising authority: Senacon (National Consumer Protection Secretariat)

Scope: Consumer disputes, merchant non-delivery, false advertising, service fraud.

Steps:

  1. Visit consumidor.gov.br and log in with your gov.br account (Brazil's unified government identity system).
  2. Search for the complained business (the business must be registered on the platform).
  3. Fill in complaint details and desired resolution.
  4. The business has 10 days to respond.
  5. You can indicate whether you're satisfied or dissatisfied with the business's response.
  6. Complaint records and businesses' response and resolution rates are public, creating reputational accountability.

Note: This platform mainly applies to businesses with formal registration (CNPJ). If the scammer is an individual or an unregistered fake company, this channel may not be applicable -- the police route is recommended instead.

6. Getting Scam Websites Taken Down

Beyond reporting to law enforcement, you can directly contact service providers to get scam websites taken down. A multi-pronged approach accelerates the banning of scam sites.

1. WHOIS Domain Registration Lookup

  • Use whois.domaintools.com or who.is to look up the scam website's domain registration information.
  • Record the domain registrar name and Abuse complaint email.

2. Submit Abuse Complaints to Domain Registrars

Find the "Registrar Abuse Contact Email" in the WHOIS results and send a complaint email. The email should include:

  • The fraudulent domain (dominio fraudulento)
  • Description of the scam type
  • Evidence screenshots (attachments)
  • Request to take down the domain

Common international registrar Abuse emails:

Registrar Abuse Email
GoDaddy [email protected]
Namecheap [email protected]
Cloudflare [email protected]
Google Domains [email protected]
HostGator Brasil [email protected]
Locaweb [email protected]

3. Registro.br -- .br Domain Complaints

If the scam website uses a .br domain (e.g., .com.br, .net.br), you can complain to Registro.br:

Registro.br (the .br domain management authority under NIC.br)

Steps:

  1. Visit registro.br and use the domain lookup tool to view the scam domain's registration information.
  2. Send a complaint email to [email protected] explaining that the domain is being used for fraudulent activities.
  3. Attach the B.O. (police report) and scam evidence screenshots.
  4. Registro.br will evaluate whether to suspend the domain based on its policies; cases involving court orders will be processed faster.

NIC.br (Brazilian Internet Information Center)

  • Website: https://nic.br
  • NIC.br is the parent organization of Registro.br; if unsatisfied with Registro.br's handling, you can escalate to NIC.br.

4. Report to Google

5. Report to Payment Providers

If the scam website accepts online payments, contacting payment processors is also an effective takedown method:

6. Report to Social Media Platforms

A large volume of scams in Brazil are channeled through social media:

  • Instagram: Go to the scam account/post -> "..." -> "Denunciar" (Report) -> "Golpe ou fraude" (Scam or fraud).
  • Facebook: Go to the scam page -> "..." -> "Denunciar" (Report) -> Select "Fraude" (Fraud).
  • WhatsApp: Enter the scammer's chat -> Tap their name -> Scroll to the bottom -> "Denunciar" (Report).

7. Fund Recovery

Fund recovery is the issue victims care about most. In Brazil, recovery methods differ by payment type.

1. Pix MED -- Central Bank Mandatory Refund Mechanism (Most Important!)

Pix MED (Mecanismo Especial de Devolucao) is a mandatory Pix refund mechanism launched by the Central Bank of Brazil in 2021, specifically designed to handle Pix scams and operational errors. This is the most powerful fund recovery tool in Brazil's anti-scam system.

Critical time limits:

  • 80-minute golden window: After discovering you've been scammed, you must contact your bank to initiate a Pix MED request within 80 minutes of the Pix transaction. For requests made within 80 minutes, the receiving bank must immediately freeze the corresponding funds in the other party's account.
  • Beyond 80 minutes: You can still initiate a Pix MED request, but the success rate of freezing and refunding drops significantly (the scammer may have already moved the funds).
  • Maximum deadline: Pix MED requests can be made up to 80 days after the transaction.

Steps:

  1. Contact your bank immediately -- time is everything!
    • Nubank: In-app chat or call 4020-0185 / 0800-591-2117
    • Itau: 4004-4828 (major cities) / 0800-970-4828
    • Bradesco: 4002-0022 (major cities) / 0800-570-0022
    • Banco do Brasil: 4004-0001 (major cities) / 0800-729-0001
    • Santander Brasil: 4004-3535 (major cities) / 0800-702-3535
    • Caixa Economica Federal: 4004-0104 (major cities) / 0800-726-0104
    • C6 Bank: 3003-6116
    • Inter: 3003-4070
  2. Tell the bank you've been a victim of a Pix scam and request Pix MED (Mecanismo Especial de Devolucao).
  3. Provide the Pix transaction's E2EID (End to End ID), transaction amount, and time.
  4. The bank will send a freeze request to the receiving bank.
  5. The receiving bank will freeze the corresponding funds in the scammer's account (if funds are still available).
  6. BCB will rule on whether to issue a refund within a maximum of 7 business days.
  7. If a refund is approved, funds will be returned to your account.

Notes:

  • Pix MED does not guarantee 100% recovery -- if the scammer has already transferred or withdrawn the funds, there may be nothing left to freeze.
  • This is why reporting within 80 minutes is critical -- the faster you report, the greater the chance the scammer hasn't had time to move the funds.
  • Even if you're past 80 minutes, still try -- some scammers don't immediately move all funds.

2. Bank Dispute (Contestacao bancaria)

If Pix MED was unsuccessful (funds have been moved), you can also:

  1. Submit a formal dispute application (contestacao) to your bank.
  2. Provide the B.O. (police report) and all evidence.
  3. The bank will conduct an internal investigation.
  4. If the bank rejects your request, escalate the complaint to BCB (Central Bank) by calling 145 or filing an online complaint.

3. Credit Card Chargeback

If you paid a scam website using a credit card:

  1. Immediately contact your issuing bank and request a chargeback (estorno / contestacao de compra).
  2. Explain this is a fraudulent transaction (transacao fraudulenta).
  3. Provide evidence: scam website screenshots, B.O., ScamLens report.
  4. Credit card chargeback success rates are typically higher than Pix refunds because card networks (Visa/Mastercard) have mature dispute resolution mechanisms.
  5. In Brazil, the Consumer Protection Code (Codigo de Defesa do Consumidor, CDC) provides strong protection for credit card disputes.

4. Cryptocurrency Tracing

Recovering cryptocurrency is far more difficult than traditional payments, but it's not entirely impossible:

  1. Use ScamLens Crypto Trace: Visit scamlens.org/pt/check-crypto, enter the scammer's wallet address, and obtain a fund flow analysis report.
  2. Report to exchanges: If tracing reveals funds flowed into exchanges like Binance, Mercado Bitcoin, Foxbit, or NovaDAX, report to that exchange's compliance department with the B.O. attached -- the exchange may freeze the related account.
  3. Preserve on-chain evidence: The Transaction Hash (TXID) is immutable on-chain evidence -- be sure to save it.
  4. Include on-chain data in your report: Submit ScamLens's tracing report as supplementary material to police.

5. Juizado Especial -- Small Claims Court

Portuguese name: Juizado Especial Civel (JEC)
Scope: Cases involving scam amounts under 40 minimum wages (salarios minimos) (approximately 56,000 reais / about $11,200 USD in 2026).

Steps:

  1. Go to the nearest Juizado Especial Civel or file a lawsuit online through the PJe electronic litigation system.
  2. Cases involving amounts under 20 minimum wages do not require a lawyer.
  3. Prepare materials: B.O., all evidence, loss amount calculation.
  4. The court will schedule mediation (audiencia de conciliacao); if mediation fails, the case proceeds to trial.
  5. JEC processing is typically much faster than regular courts (usually weeks to months).

Note: If you can identify the scammer's identity information (CPF/CNPJ), the success rate of recovering funds through JEC is higher. If the scammer's identity is completely unknown, JEC may not accept the case (due to lack of an identifiable defendant).

8. Recovery Scam Warning (Golpe da Recuperacao de Dinheiro)

This is an important warning that all scam victims must know.

After being scammed, you may search online for "como recuperar dinheiro de golpe" (how to recover money from a scam), and you're very likely to encounter secondary scams -- known as "recovery scams" (golpe da recuperacao).

Common Recovery Scam Methods

  • Fake hackers/tech experts: Advertising in Instagram comments, YouTube comments, or Google search results, claiming to be able to "hack into the scammer's account" to recover Pix transfers, requiring an upfront "service fee."
  • Fake law firms: Building seemingly legitimate websites claiming to specialize in Pix scam cases with "100% successful refund," requiring high upfront "legal fees."
  • Social media "success stories": Posting fake "recovery success" screenshots and thank-you letters on Facebook/Instagram to direct victims to contact "experts."
  • Fake bank/central bank employees: Claiming to be Banco Central or bank insiders who can "expedite Pix MED processing," requiring "rush fees."
  • Fake police: Claiming the scammer has been caught but requiring you to pay a "deposit" or "processing fee" to reclaim your funds.

How to Identify Recovery Scams

Any of the following is a scam signal:

  1. Requiring you to pay upfront to "recover" funds.
  2. Promising 100% recovery success (recuperacao garantida).
  3. Claiming to have "insider connections" at banks or the central bank.
  4. Contacting you proactively via WhatsApp DM or social media.
  5. Asking for your bank account passwords or remote access to your phone/computer.
  6. Pressuring you to "pay immediately" or the "opportunity will be lost."

Iron rule: No legitimate law enforcement agency or law firm will require you to pay upfront before starting work. Pix MED is a free service from banks and the central bank. Brazilian police do not charge any fees for case investigation. Legitimate lawyers may agree to success-based fees (exito), but they will never solicit clients by "guaranteeing 100% success."

9. Prevention Tips + ScamLens

Daily Prevention Measures

  1. Install the ScamLens browser extension: The OrangeDuck extension automatically displays risk warnings when you visit suspicious websites.
  2. Set Pix transaction limits (Limite Pix): Set daily and nighttime Pix transfer limits in your banking app. The Central Bank of Brazil mandates a default nighttime (20:00-06:00) Pix transfer limit of 1,000 reais -- it's recommended to keep limits low.
  3. Enable WhatsApp two-step verification: WhatsApp -> Settings (Configuracoes) -> Account (Conta) -> Two-step verification (Verificacao em duas etapas) -> Set a 6-digit PIN. This is the most effective measure against WhatsApp cloning.
  4. Don't click suspicious links: Especially links received via WhatsApp and SMS -- copy them to ScamLens for checking first.
  5. Don't download apps from unofficial channels: Only download banking and payment apps from Google Play Store or Apple App Store.
  6. Verify Boleto information: Before paying a Boleto, verify the payee name and CNPJ/CPF match expectations.
  7. Check investment platform legitimacy: Search the CVM website to verify if the investment platform is registered. Check the platform domain on ScamLens.
  8. Beware of "too good to be true" offers: High-return zero-risk investments, free prizes, ultra-cheap products -- se parece bom demais para ser verdade, provavelmente e golpe (if it seems too good to be true, it probably is a scam).
  9. Check bank accounts regularly: Quickly browse your banking app's transaction records daily to catch unauthorized transactions promptly.
  10. Use virtual credit cards: Banks like Nubank, Inter, and C6 Bank all offer virtual credit card features (cartao virtual); using virtual cards for online shopping prevents physical card information leaks.

Protecting Elderly Family Members

Elderly Brazilians (idosos) are primary targets of phone scams. Recommendations:

  • Help set lower daily Pix limits for elderly family members.
  • Teach them one simple rule: "Ninguem do banco liga pedindo senha" (The bank never calls asking for passwords).
  • Tell them: If anyone borrows money via WhatsApp, call to verify first.
  • Install the ScamLens extension on their browsers.
  • Regularly discuss the latest scam methods with them.

Building Defenses with ScamLens

10. Psychological Support

Being scammed is not just a financial loss -- it's a psychological trauma. Many victims feel shame (vergonha), anger (raiva), self-blame (culpa), and may even develop depression. Remember: Being scammed is not your fault. Scamming is a carefully designed criminal act, and anyone can become a victim (qualquer pessoa pode ser vitima).

CVV 188 -- Centro de Valorizacao da Vida (Life Appreciation Center)

Phone: 188 (24 hours, free)
Chat: https://www.cvv.org.br
Email: Available via the official website

CVV is Brazil's most important emotional support and suicide prevention hotline, providing free 24/7 service. If you feel extreme anxiety, despair, or have thoughts of self-harm due to being scammed, please call 188.

  • Service methods: Phone, online chat, email
  • Language: Portuguese
  • Features: Completely confidential, volunteers are professionally trained, providing non-judgmental listening and support

CAPS -- Centro de Atencao Psicossocial (Psychosocial Care Center)

CAPS is a mental health service institution under Brazil's public health system (SUS -- Sistema Unico de Saude), found throughout Brazil's states and municipalities, providing free psychological counseling and mental health services.

How to find the nearest CAPS:

  1. Check the local municipal health department (Secretaria Municipal de Saude) website.
  2. Call the SUS hotline 136 to ask for the nearest CAPS address.
  3. Or visit the nearest UBS (Unidade Basica de Saude, basic health unit) and request a referral to CAPS.

Other Psychological Support Resources

Resource Contact Description
CVV (Life Appreciation Center) 188 / cvv.org.br 24/7 free emotional support hotline
CAPS (Psychosocial Care Center) Available in every city, call 136 SUS free mental health services
Conselho Federal de Psicologia cfp.org.br Federal Psychology Council, search for registered psychologists
Ligue 180 (Women victims) 180 Hotline specifically for women victims (includes emotional support)
Disque 100 (Elderly/vulnerable) 100 Protection hotline for elderly, children, and vulnerable groups

A Message to Victims

  • Don't bear it alone: Talk to a trusted family member or friend about your experience. In Brazilian culture, seeking help is not a sign of weakness (pedir ajuda nao e fraqueza).
  • Don't blame yourself: Scammers use professional psychological manipulation techniques (engenharia social) -- this is not a matter of intelligence. Millions of Brazilians are scammed every year.
  • Reporting is the right thing to do: Even if the amount is small, filing a police report (registrar B.O.) helps police combat criminal networks and protect more people.
  • Watch out for others: If you notice someone around you might be getting scammed, gently alert them -- don't mock them (nao julgue).
  • Recovery takes time: Give yourself time to process what happened; if needed, seek professional help through CVV (188) or CAPS.

Summary: The online scam situation in Brazil is severe, and Pix's instantaneous nature makes fund recovery even more challenging. However, by mastering the correct response methods -- especially initiating Pix MED within 80 minutes, promptly filing a police report to obtain a B.O., and reporting through multiple channels -- you can significantly reduce your losses. Save this guide and share it with your family and friends in Brazil. Fique seguro (Stay safe)!

Related resources:

Related Articles

Guides

Smart Contract Red Flags: How to Spot a Rug Pull Before It Happens

· 8 min read
Guides

How Scammers Use Multiple Wallets — and How to Connect Them

· 8 min read
Guides

Understanding Crypto Risk Scores: What Makes a Wallet Suspicious?

· 8 min read
Back to Blog

Chrome Companion for Safer Browsing

Save useful links, spot risky sites before you open them, and keep important research easy to find across devices.

Get Free Extension

Available on Chrome Web Store. Works on all Chromium browsers.