In 2026, the sophistication of digital scams continues to represent a significant challenge to the financial and personal security of millions of Brazilians. Every year, criminals improve their tactics, exploiting new technologies and human vulnerabilities to deceive victims and steal valuables. Understanding how these frauds operate and what the warning signs are has become an essential defense in today’s connected environment.
This comprehensive guide was designed to function as a digital security anchor page, detailing the most prevalent scams expected for the year 2026. For each type of fraud, the objective is to expose the script used by scammers, point out the signs that expose the scam and provide guidance on the immediate actions that should be taken if someone becomes a victim. The adaptability of criminals also manifests itself in payment methods; while Pix is the preferred tool in Brazil, other countries see the use of instant transfers, which requires local attention.
Phishing and smishing fraud in messages and emails
This type of scam exploits gullibility and haste, simulating communications from legitimate institutions to steal data. Phishing mainly manifests itself through emails, while smishing uses text messages (SMS) or messaging applications, such as WhatsApp, to send malicious links. The promise can be a prize, an unmissable offer, a problem with your bank account or an order delivery notification.
The criminal’s script usually involves creating a sense of urgency or offering something very advantageous. It sends a link that, when clicked, directs the victim to a fake page identical to that of a known bank, store or service. There, the person is induced to enter sensitive information, such as banking details, passwords, CPF or credit card numbers, which are immediately captured by the scammers. This technique is the gateway to a series of other financial crimes.
Important warning signs
- Portuguese errors, strange formatting or low quality logos in the message.
- Unknown sender or suspicious email/phone address that does not match that of the official company.
- Requests for personal or financial data via links, something legitimate institutions rarely do via email or SMS.
- “Too good to be true” offers or warnings of urgent issues that require immediate action.
- URL of the website to which the link directs must be different from the official address of the institution, even if it is just one letter.
Immediate actions to protect yourself and react
- Never click on suspicious links. If in doubt, type the company’s official address into your browser.
- Do not provide personal or financial information on pages that appear dubious.
- If you have clicked and provided information, immediately change all bank account, email and social media passwords.
- Monitor your bank accounts and credit card statements to identify unauthorized transactions.
- Register a police report online or at the police station, gathering all the evidence (prints of the message, email).
- Notify the bank or institution involved in the fraud attempt.
Fake support or fake call center scam
This scam exploits victims’ trust in large companies and concern about the security of their accounts. The criminal poses as a technical support employee at a bank, cell phone carrier, technology company or social media platform, claiming that there is an urgent issue with the victim’s account that needs to be resolved. They can contact you by phone, message or even through fake pop-up windows on the internet.
The script involves convincing the victim to install a remote access application on their cell phone or computer, or to provide a security code. With remote access, the scammer takes control of the device and carries out financial transactions, such as transfers via Pix, or accesses confidential information. In the case of codes, he can use them to clone the victim’s WhatsApp or access other digital accounts.
Important warning signs
- “Support” calls or messages without the victim having previously requested help.
- Requests to install applications that allow remote access (TeamViewer, AnyDesk) or share screens.
- Claiming “urgent” issues that can only be resolved “now” and require the provision of passwords or codes.
- Pressure to perform quick actions without time to think or check accuracy.
- The phone number does not match the company’s official support number.
Immediate actions to protect yourself and react
- Never install software or share remote access at the request of a supposed support person who contacted you.
- Hang up the call and contact the institution directly using the official phone number.
- If you have already granted access, immediately disconnect the device from the internet (Wi-Fi and mobile data).
- Uninstall any suspicious applications.
- Change all email, social media and bank account passwords.
- Notify your bank about the fraud and try to reverse transactions via Pix or transfers that were made.
- Register a police report and notify consumer protection agencies.
False job or investment opportunity with high earnings
This scam attracts victims with the promise of quick and easy money, whether through a dream job that doesn’t exist or an investment with extraordinary returns. Criminals use ads on social networks, direct messages or fake recruitment and investment websites to capture the attention of those looking for extra income or better financial conditions.
The script begins with an irresistible offer: a job opening with high salaries and few demands, or an investment that guarantees safe, daily profits. To “secure” the place or investment, the victim is asked to make initial payments – “registration”, “certification”, “material” fees, or “deposits to leverage earnings”. These payments are made via Pix or instant transfer to orange accounts. Once the money is sent, the scammers disappear, and the “opportunity” never materializes.
Important warning signs
- Job offers that require paying fees or purchasing materials to get started.
- Promises of salaries well above the market average for simple roles or with no experience.
- Overly simplified selection processes, without interviews or with superficial interviews.
- Investments that guarantee fixed and very high returns in a short time, without risks.
- Pressure to make quick decisions about the “opportunity.”
- Communication made through unofficial channels (personal WhatsApp) and with an anonymous profile.
Immediate actions to protect yourself and react
- Never pay to get a job or to make a promised investment.
- Be wary of excessively advantageous offers; research the company or investment from reliable sources.
- Check the company’s reputation on review sites and regulatory bodies.
- If you have made the payment, contact your bank to try to dispute the Pix transaction or transfer.
- Keep all communication and transaction records.
- Register a police report, describing in detail what happened.
Love scam or fake profile on dating apps
This scam is based on emotional manipulation, creating a false relationship to financially exploit the victim. Scammers create attractive and captivating profiles on dating apps and websites, or even on social networks, and initiate contact with the aim of building a deep connection with the victim over time.
The “love scam” script is one of the most insidious. After gaining the victim’s trust, the scammer begins to invent dramatic stories that demand money. It could be a serious illness in the family, an urgent financial problem, an emergency to meet the victim, or even a difficulty in releasing an inheritance or large sum of money. Requests for financial aid become constant and are made via Pix or transfers. Scammers are masters at manipulating, making the victim feel guilty or obliged to help, promising to repay them with interest, which never happens.
Important warning signs
- Relationships that develop very quickly and with intense declarations of love right at the beginning.
- People always have an excuse for not making video calls or face-to-face meetings.
- Requests for money, loans or financial assistance for various “emergencies”.
- The profile’s life story seems too perfect or contains inconsistencies.
- The scammer’s profile usually has few photos and does not have many interactions with other users, or the photos appear to be of models.
- The person is always in another country or in a situation that prevents meeting.
Immediate actions to protect yourself and react
- Never send money or make transfers to people you met online and aren’t sure who they are.
- Be wary of very elaborate and dramatic stories that always result in requests for money.
- Do a reverse profile image search to make sure the photos aren’t of other people.
- If the person asks for money, cut off contact immediately.
- Block the profile and report it to the platform where the contact was made.
- If you sent money, contact your bank to try to reverse the transaction and file a police report.
WhatsApp cloning and fake security center
This scam aims to improperly access the victim’s WhatsApp, generally to impersonate them and ask for money from their contacts. The “fake security center” tactic is one of the most common for cloning.
The criminal’s script begins with a contact pretending to be from a company or service (bank, store, loyalty program) where the victim is registered. The scammer claims that a security code will be sent to “update” the registration or “confirm” a purchase/promotion. In fact, he is starting the process of installing the victim’s WhatsApp on another device. The code sent by SMS is the verification key. If the victim informs him, the scammer can access the account, expelling the original user. From there, he sends messages to the victim’s contacts, asking to borrow money via Pix or transfer under false pretexts (emergency, blocked account).
Important warning signs
- Receive a WhatsApp verification code without requesting it.
- Messages or calls from unknown numbers requesting this code.
- Contacts from friends or family asking for money with urgent and unusual stories, especially if the Pix goes to an unknown account.
- Your WhatsApp suddenly disconnects and you can no longer access it.
Immediate actions to protect yourself and react
- Never share WhatsApp (or any other service) security codes with anyone.
- Enable two-step verification in WhatsApp (Settings > Account > Two-step verification). This adds an extra layer of security.
- If you had WhatsApp cloned, immediately notify all your contacts by other means (call, SMS) to avoid falling for the scam.
- Try reinstalling WhatsApp on your device. The app may ask for the verification code again.
- Block the scammer’s number and file a police report.
- Your contacts who made transfers must contact the bank to try to reverse Pix.
Fake kidnapping or relative in emergency scam
This scam takes advantage of desperation and family love to extort money. It usually involves phone calls from unknown numbers that take the victim by surprise.
The script is harrowing: the criminal calls the victim, usually at night or early in the morning, claiming to have kidnapped a family member (child, spouse, close relative). It simulates screaming and crying in the background to increase realism. The demand is for an immediate rescue, made via Pix or transfer, to “release” the relative. In another variation, the scammer pretends to be a family member in an emergency situation (accident, arrest, health problem in another city) and urgently asks for money to resolve the situation, instructing the victim not to call other numbers or tell anyone.
Important warning signs
- Calls from unknown numbers demanding money under threat or under the pretext of a family emergency.
- The person on the phone avoids giving specific details about the family member or the situation, or stutters.
- Pressure to act quickly, with no time to verify the veracity of the story.
- The requirement for deposits or transfers to accounts of unknown individuals.
- The family member who is supposedly in danger has their cell phone “turned off” or “no signal.”
Immediate actions to protect yourself and react
- Keep calm. Don’t give in to panic.
- Try to contact the family member believed to be kidnapped or in emergency, or other people who may know their whereabouts.
- If you can’t, call the police immediately (190) and report what happened.
- Never make deposits or transfers before confirming the situation.
- If the contact is by message, ask for details that only the family member would know.
- Block the scammer’s number.
Fake QR Code fraud in payments and collections
With the popularization of Pix and payments via QR Code, criminals adapted their tactics to include this tool, generating fake codes to divert money.
The script can manifest itself in several ways: in adulterated invoices (where the QR Code points to a scammer’s account instead of the original beneficiary), in fake billing emails or messages, or even in physical establishments where stickers with legitimate QR Codes are replaced by fake ones. When scanning the QR Code, the victim believes they are paying a bill or purchasing a product, but the amount is sent directly to the scammers’ account. In other countries, the same happens with instant transfer codes.
Important warning signs
- Discrepancy between the name of the beneficiary that appears on the payment application screen and the name of the company or person who should receive it.
- Bills or charges with strange layout, Portuguese errors or incorrect data.
- QR Code stickers in commercial establishments that appear to have been pasted on top of others.
- Charge amount different from expected.
- Payment url presenting domains other than the official one.
Immediate actions to protect yourself and react
- Always check the beneficiary’s name (business name or CPF/CNPJ) before confirming any payment via Pix or transfer.
- On bills, check the typeable line and the beneficiary’s data to see if they match.
- In establishments, if you are suspicious of the QR Code, ask to pay in another way or request a new code to be issued.
- If you have any questions about a bill or charge, contact the company directly through the official channel.
- If you paid for a fake QR Code, contact your bank immediately to try to reverse the transaction.
- Register a police report and take all evidence (prints, proof of payment).
Card exchange or tampered with machine scam
This scam occurs during in-person purchases, exploiting the consumer’s distraction to steal their bank details or the card itself. It is common in shops, deliveries or street services.
The criminal’s script involves several steps: when making a purchase, the scammer (who can be a fake delivery person, salesman or even a corrupt employee) uses a tampered with machine that captures the card data when the victim enters the password. Another tactic is, when returning the card, the scammer exchanges it for a similar, but inactive card, or for one belonging to the victim that he already had in some way. The victim leaves the place believing they have paid, but the original card has been stolen or cloned, and the scammer can make purchases or withdraw funds immediately.
Important warning signs
- Card machine with an unusual appearance, with loose wires, strange stickers or that constantly freezes.
- Seller or delivery person very hurried, trying to distract the victim at the time of payment.
- The value on the machine appears incorrect and the person tries to “correct” it quickly.
- Machine with a damaged screen or keyboard, making it difficult to see the numbers.
- The delivery person or salesperson tries to take the card from the customer’s hand and returns it suspiciously.
Immediate actions to protect yourself and react
- Never lose sight of your card during payment.
- Always check the value entered on the machine before entering the password.
- When you receive the card back, check that it is really yours.
- If you are suspicious of a machine, ask to pay with Pix or cash, or cancel the purchase.
- If your card has been exchanged or cloned, block it immediately via the bank app or call center.
- Monitor your transactions to identify unauthorized purchases.
- Register a police report, informing the place and time of the attempted coup.
False aid or social benefit scam
This scam exploits people’s financial needs, promising access to social programs or government aid that do not exist or are fraudulent. It is common during periods of economic crisis or announcements of new social programs.
The criminal’s script is based on the creation of websites, WhatsApp messages or fake profiles on social networks that pretend to be government bodies (Caixa Econômica Federal, Ministry of Citizenship, INSS). They announce the release of “aids”, “forgotten withdrawals” or “benefits” to which the victim was supposedly entitled. To gain access, the person is instructed to click on a link, fill out a form with personal data (CPF, full name, date of birth) or, in some cases, pay an “administrative fee” via Pix or transfer to release the amount. In addition to stealing money, scammers collect data that can be used in other frauds.
Important warning signs
- Announcements of benefits or aid that are not disclosed on official government channels.
- Sites with unusual addresses (that do not end in .gov.br or .caixa.gov.br, for example) and with a low-quality layout.
- Requests for personal data or payment of fees to release benefits.
- Messages via WhatsApp or SMS with links to “consult” the right to the benefit.
- Pressure to share the message with friends and family.
Immediate actions to protect yourself and react
- Always consult information about social programs and benefits on official government websites or through public bodies.
- Never click on links sent in messages about aid or benefits.
- Do not provide personal data or pay any fees to access social benefits.
- If you are suspicious, report the website or message to government communication channels and the police.
- If you have provided data, monitor your CPF and documents to avoid identity fraud.
- If you made a payment, contact your bank to try to reverse the transaction.
- File a police report.
False investment in cryptocurrencies or financial pyramid
The growing popularity of cryptocurrencies has created fertile ground for scams that promise unrealistic returns, luring investors with the promise of quick riches.
The scammers’ script begins with the promise of high profits from investments in cryptocurrencies or financial pyramid schemes. They create fake investment platforms, groups on social networks or communication channels that pretend to be serious companies in the market. To start, the victim is induced to transfer money (Pix or transfer) to the “platform” or to the scammers’ account. Initially, small “profits” may even be shown to give credibility and encourage the victim to invest more and invite friends. However, when the victim tries to withdraw a larger amount or the entire investment, the platform “disappears” or withdrawals are blocked, and the money is lost.
Important warning signs
- Promises of very high and guaranteed profits in a short time, without risks.
- Need to indicate new “investors” to increase profits (characteristic of a financial pyramid).
- Lack of clear information about the company, its founders or how the money is actually invested.
- Investment platforms with little history, amateur or unregulated sites.
- Pressure to invest large sums of money quickly.
Immediate actions to protect yourself and react
- Be wary of any investment that promises high and guaranteed profits. All investments have risks.
- Research the company’s reputation and whether it is registered with financial market regulatory bodies (CVM in Brazil).
- Never invest money you cannot afford to lose.
- Avoid schemes that require you to refer new people to generate profit.
- If you fell for the scam, stop sending money immediately.
- Contact your bank to try to reverse the transactions.
- Register a police report and gather all the evidence, such as proof of investment and conversations.
The constant evolution of digital scams requires continuous vigilance and the adoption of robust security practices. Staying informed about criminals’ new tactics is the main tool for protecting your data and assets. In 2026, the key to digital security lies in active distrust, constant verification, and a refusal to give in to pressure or offers that seem overly advantageous. Share this guide with friends and family so more people can protect themselves against these threats.
