One-third of digital scams in Brazil involve Pix: experts explain how to protect yourself and recover your money
A study shows Pix is now the main channel criminals use to get money from victims; experts explain how to avoid fraud and what to do after falling for a scam
Brazil, June 22, 2026 – Pix, Brazil’s instant payment system, has transformed the way Brazilians make payments, transfers and purchases. But the tool’s popularity has also caught criminals’ attention. A survey released by Observatório Lupa revealed that one-third of the digital scams carried out in Brazil use Pix as the main way to get money from victims. The study analyzed more than a hundred pieces of fraudulent content that circulated in the country over the past two years and found that 33% of the scams demanded payment exclusively via Pix. In addition, 74% exploited the credibility of well-known companies, brands or public figures to make the fraud look legitimate.
For digital security experts, the data reinforces an important point: the problem is not Pix technology, but how criminals manage to manipulate victims’ behavior. “In practice, criminals exploit flaws in user behavior far more than technical vulnerabilities in Pix. The system itself is secure, with robust layers of encryption and authentication. What we see most often are social engineering scams, in which the victim is persuaded to authorize the transfer themselves, believing they are carrying out a legitimate transaction,” explains Géssica Ribeiro, Senior IT Governance Analyst at Trio Grupo Financeiro and an information security specialist.
According to her, scams have grown more sophisticated because criminals are no longer limited to technological attacks and now also exploit emotional factors such as urgency, fear and trust to increase their chances of success.
Fake agents, cloned WhatsApp accounts and tampered QR codes lead the fraud
Among the most common scams today are fake bank call centers, cloned WhatsApp accounts, fraudulent listings on sales platforms, tampered QR codes and fake investment opportunities. The pattern is usually similar: the criminal creates a sense of urgency or presents a seemingly advantageous opportunity to persuade the victim to transfer funds quickly.
“The goal is to get the person to make the transaction themselves, believing they are solving a problem or taking advantage of a legitimate opportunity. That’s why it’s essential to confirm the identity of the person or company involved before any payment,” says Géssica Ribeiro. The Observatório Lupa study itself shows that 71% of the scams analyzed promised some kind of financial benefit, such as compensation, promotions, giveaways, job openings or nonexistent discounts.
How to avoid falling for a Pix scam
Experts recommend that users take a few simple precautions before confirming any transfer. The first is to carefully check the name and the CPF or CNPJ (individual or company tax ID) linked to the Pix key. It’s also important to be wary of requests for money received through unexpected messages or calls, especially when there’s pressure to make the transfer quickly.
“In many cases, a few seconds of attention before completing the transaction are enough to avoid losses. It’s important to use only the official channels of financial institutions, avoid clicking links received through messaging apps and keep your phone protected with a password, biometrics and security updates,” advises Géssica.
Another feature that can significantly increase protection is multi-factor authentication. “Using biometrics, facial recognition and multi-step authentication adds extra layers of security. Even if a criminal gets hold of the user’s password, they’ll still need to pass other checks to access the account,” the specialist explains.
Is Pix still safe?
Despite the growth in fraud attempts, experts stress that Pix remains a secure system. “Pix was built with state-of-the-art encryption, mutual authentication and traffic that runs exclusively within the National Financial System Network (RSFN),” says Andressa Lipski, Governance Director at Trio Grupo Financeiro.
According to her, security is also reinforced by the constant oversight of the Central Bank of Brazil. “The Central Bank requires banks and payment institutions to implement anti-fraud mechanisms, time-based transaction limits, fraud alerts and strict controls when opening accounts. It also holds institutions accountable when they fail to adopt adequate prevention measures,” she explains.
Fell for a scam? You may still be able to recover your money
One of the main questions fraud victims have is whether there’s any chance of recovering the amounts transferred. The answer is yes, but how fast you react makes all the difference. “There’s currently the Special Refund Mechanism, known as MED, which allows financial institutions to request a block on and review amounts transferred in fraud cases. The sooner the case is reported to the bank, the better the chances of recovery,” explains Géssica.
Andressa Lipski notes that there is a relatively long window to report the incident. “Victims have up to 80 days after making the Pix payment to file a fraud report with their financial institution through the MED,” she says. However, she warns that refunds aren’t automatic. “When the funds have already been moved or spread across multiple accounts, recovery becomes more complex. That’s why acting quickly is essential,” she stresses.
The Central Bank is already working on new layers of security for the system. Among them is MED 2.0, which will make it possible to trace and block funds transferred to multiple accounts more quickly, as well as expand information sharing among financial institutions. “The main challenge for Pix governance going forward is striking a balance between speed and security. The more protection mechanisms are added, the more friction the user experience tends to have. The challenge will be to keep offering convenience without compromising customer protection,” concludes Andressa Lipski.
As new tools are rolled out, experts stress that information remains the main barrier against scams. “In a scenario where criminals increasingly exploit people’s trust and behavior, attention and caution remain the best forms of protection,” Géssica adds.
About Trio Grupo Financeiro
Founded in 2020 by Peterson Ferreira dos Santos and Manoel de Oliveira Souza, entrepreneurs with deep experience in technology and the financial market, Trio Grupo Financeiro was conceived to offer financial infrastructure capable of keeping pace with companies’ growth. Among its differentiators is a strong commitment to proprietary technology and advanced financial infrastructure. Trio develops solutions designed especially for the corporate environment, notably financial management tools, API integration, streamlined reconciliation systems and Pix-based solutions. For more information, visit www.trio.com.br or the official Instagram profile: @trio.fin.