On August 13, 2025, the Rio de Janeiro Civil Police launched Operation False Route to dismantle a sophisticated scheme that caused a $114,908.31 loss to Uber. Led by the Fraud Division, the operation targeted Pedro Pascoli Plata Souza and Yasmim Gusmão Soares, accused of orchestrating nearly 2,000 fraudulent rides using artificial intelligence to create fake driver and passenger profiles. The scam, which involved manipulated photos and multiple stops in rides, was uncovered after Uber detected irregularities and alerted authorities. The operation executed five search and seizure warrants, with investigations ongoing to identify potential accomplices.
The fraud relied on creating 70 fake driver profiles, many linked to Pascoli, using AI-manipulated images to bypass Uber’s identity verification system. Passenger accounts were registered from a single residential address tied to the main suspect. The scheme generated illicit profits through Pix payments, exploiting flaws in the platform’s billing system.
- Main targets: Pedro Pascoli and Yasmim Gusmão, suspected of masterminding the scam.
- Modus operandi: AI used to create fake profiles and manipulate ID photos.
- Total loss: $114,908.31 across 1,922 fraudulent rides.
- Police action: Five search and seizure warrants executed in Rio de Janeiro.
How the fraudulent scheme worked
The scheme uncovered by the Civil Police exploited vulnerabilities in Uber’s payment system, particularly in Pix-paid rides. The suspects created fake driver and passenger profiles, using AI to generate manipulated photos that fooled the platform’s verification system. These accounts were used to simulate 1,922 rides, with 1,125 canceled after adding multiple stops to inflate costs. Even with cancellations, Uber covered the expenses, transferring the full amount to the “drivers” while the “passengers” accrued unpaid debts.
Of the 797 completed rides, 484 user accounts were involved, with 478 registered at the same address linked to Pedro Pascoli. The driver accounts were tied to bank details under Yasmim Gusmão’s name, suggesting a coordinated operation. AI tools overlaid third-party faces onto Pascoli’s photos, identified by his distinctive tattoos.
Use of artificial intelligence in the fraud
The scam’s sophistication stunned authorities. AI was used to create realistic images, enabling the suspects to bypass Uber’s facial authentication system. The platform requires drivers to submit periodic selfies for identity verification, but fraudsters manipulated photos to simulate different people.
- Manipulated photos: Pascoli’s images with third-party faces, generated by AI.
- Fake accounts: 70 driver profiles and 484 passenger accounts created.
- Tattoo clues: Pascoli’s body markings helped identify him.
- AI tools: Advanced image-editing software used in the scam.
Police suspect additional accomplices, as 85 more driver accounts were linked to Pascoli’s bank details. The investigation now focuses on mapping the scheme’s full scope and identifying other potential participants.
Uber’s response to the fraud
Uber detected the irregularities and reported them to the Civil Police. The company emphasized its specialized fraud detection teams, which use manual and automated systems to monitor over 600 different signals, such as cancellation patterns, unusual routes, and banking discrepancies.
The platform is actively cooperating with authorities, providing data to identify suspects. Uber also stated it continuously implements new technologies to prevent fraud, including enhanced agent training and improved identity verification systems. The company reaffirmed its commitment to protecting honest users and drivers, ensuring strict measures like permanent account deactivation for fraudulent behavior.
- Principais alvos: Pedro Pascoli e Yasmim Gusmão, suspeitos de articular o golpe.
- Modo operandi: Uso de IA para criar perfis falsos e manipular fotos de identificação.
- Prejuízo total: R$ 114.908,31 em 1.922 viagens fraudulentas.
- Ação policial: Cinco mandados de busca e apreensão cumpridos no Rio de Janeiro.
Platform security measures
To combat such frauds, Uber employs various security strategies. One is the U-Code, a four-digit validation code required to confirm a ride’s start, shared only in person with the driver to prevent remote scams. Additionally, Uber partners with Serpro to verify driver data in real-time against the National Driver’s License database.
- U-Code: Validation code for in-person ride confirmation.
- Serpro verification: Real-time data checks with Senatran.
- Random selfies: Drivers must submit photos to verify identity.
- Monitoring: Systems analyze behavior patterns to detect fraud.
Uber encourages users and drivers to report suspicious activity through the app, enabling analysis and potential refunds. The company maintains a law enforcement response team, including former police officers, to assist in criminal investigations.
Impact on the ride-hailing market
The $115,000 scam exposes vulnerabilities in the ride-hailing industry, which generates billions annually in Brazil. The fraud not only caused financial losses for Uber but also raised concerns about the security and reliability of digital platforms. AI-manipulated images pose a new challenge for companies relying on digital authentication systems.
The Civil Police noted that the case could serve as a warning for other companies in the sector, which need to invest in more robust verification technologies. The operation also underscores the importance of collaboration between platforms and authorities to curb cybercrimes. Investigations continue to track potential extensions of the scheme and prevent similar frauds.
Advances in the police investigation
Operation False Route marked a significant step in combating digital fraud in Brazil. The five search and seizure warrants executed in Rio de Janeiro led to the collection of evidence that may clarify the scam’s full scope. Police found most fraudulent accounts tied to a single address, aiding in pinpointing the main suspects.
The Fraud Division is now analyzing seized electronic devices to identify AI software used and possible links to other crimes. The operation also highlighted Pascoli’s tattoos as crucial evidence, appearing in multiple manipulated photos and enabling his identification.
- Warrants executed: Five searches at addresses linked to suspects.
- Evidence collected: Electronic devices and banking documents.
- Tattoo evidence: Body markings linked Pascoli to fake accounts.
- Next steps: Device analysis to identify additional accomplices.
Preventing digital fraud
The Uber fraud underscores the need for preventive measures by both companies and users. Passengers should verify the driver’s identity before starting a ride, checking the name, photo, and vehicle plate in the app. Uber advises never sharing the U-Code via phone or message, as this can enable scams.
For drivers, the company recommends avoiding payments outside the app and reporting suspicious passenger behavior. Collaboration between users, drivers, and the platform is essential to maintain safety and reduce the impact of fraud in the sector.