New Pix Scam: Understand the Danger and How to Avoid Losses — You’ll understand how it works and why you need to be on the lookout. Learn how phishing messages and fake links try to steal your information, QR code scams, fake websites, and cloned apps, and how Pix fraud help criminals commit theft.
The article provides practical steps to protect your account: don't accept suspicious QR codes, verify the recipient before paying, don't share codes, passwords, or tokens, enable two-factor authentication, and keep your apps up to date.
And also what to do if you're targeted: block the account, report the bank, file a police report and file a complaint with the Central Bank or Procon, in addition to the documents and deadlines relevant to the investigation.
Key Lessons
- Do not click on links; open the your bank's app.
- Never disclose codes, passwords, or tokens; the bank will never ask for them.
- Be wary of calls that claim to be from the bank and ask for confirmation.
- Confirm the recipient before sending any Pix.
- Enable your account's security features and notify the bank if anything seems off.
Understand how the new Pix scam works and why the alert says: “New Pix Scam Is More Dangerous”
The scam of the Pix It has evolved: Criminals combine phishing, fake QR codes, and cloned apps to appear legitimate.
They create believable scenarios—a bank message, a receipt, or an urgent link—and exploit people’s haste and trust. That’s why the alert “New Pix Scam Is More Dangerous” calls for extra caution.
These attacks require immediate action—update your account information, confirm a transaction—and a single click leads to fake websites or apps that collect passwords, SMS codes, or Pix data.
They also use social engineering over the phone and on WhatsApp, using numbers that look similar to the bank’s. If someone asks for your information or codes, stop and verify it through official channels. For technical guidance on incidents, check out the CERT.br's Guide to Preventing Online Scams.
Warning: If someone pressures you over the phone, via text message, or on WhatsApp to confirm codes or install something, be wary. Always confirm through your bank's official channels.
Pix Phishing: Fake Messages and Links That Ask for Your Information
In Pix phishing scams, the message appears legitimate (refund, bill, account issue) and includes a link to a website that looks exactly like the bank’s. There, they ask for your CPF, password, app code, or SMS code—which allows the scammer to access your account and make transfers via Pix.
Watch out for urgent requests, Portuguese language errors, and strange URLs. Always confirm via the official app or by the bank's number on the institutional website.
QR Code Scams and Methods of Pix Data Theft
Scammers place fake QR codes in public places, cover up real codes, or send images via text message. Some QR codes lead to malicious websites or download apps that capture data. Signs of fraud:
- A QR code that does not generate an official receipt
- Request to install the app after scanning
- Message asking for codes or personal information
- Short links or strange URLs in the browser
If the QR code does not come from the establishment's official channel, confirm it in person or ask for proof.
| Method | What they are asking for | How to Identify |
|---|---|---|
| Link-based phishing | CPF, password, SMS code | Strange URL, text errors |
| Fake QR code | App installation, data | QR does not generate a receipt; it requires installation |
| Cloned app | Full bank login | Same design, strange fonts or permissions |
How Scammers Get Information: Fake Websites, Cloned Apps, and Pix Scams
They create fake websites that look exactly like the bank's, clone apps, and use social engineering to obtain codes. They also resort to SIM swapping (fraudulent number portability) and malware that captures keystrokes and messages.
In short: technology and human manipulation are used to take advantage of your trust and steal your money. To understand the broader picture of financial attacks and how they have been on the rise, check out our content on Financial scams on the rise.
How to Protect Your Account: Practical Steps to Combat the New Pix Scam
Warning: New Pix Scam Is More Dangerous — that’s why it’s essential to know the basic steps to avoid falling for it. Watch out for incorrect amounts, requests to scan a QR code on a stranger’s phone, or pressure to pay immediately. If you need to report a cybercrime, here’s what to do How to Report Cybercrimes and Scams.
Before making a payment, confirm who will receive it and how much. Use the preview feature in your banking app, check the recipient's name, and decline any suspicious QR codes. If something seems off, ask for a receipt and wait until you're sure.
You can also learn the basic transfer process with our guide on how to make a Pix.
Simple daily habits can reduce risks: check your notifications, don't accept help that asks for codes, and stay calm when you receive urgent messages. See also the Official Pix Security Guidelines.
Warning: New Pix Scam Is Even More Dangerous — if someone asks for a code, password, or for you to scan an unfamiliar QR code, stop and verify before doing anything.
Do not accept suspicious QR codes, and always verify the recipient before paying
Never scan a QR code without checking it first. Ask for the recipient's name, make sure it matches what appears in the app, and verify the amount. In stores, ask for a receipt; for online purchases, choose official channels.
Step by step:
- Open your bank's app and select Pix.
- Scan the QR code or paste the provided key.
- Check the name, CPF/CNPJ, and amount on the screen before confirming.
- If something doesn't add up, cancel the order and confirm with the seller through another channel.
If you want to compare payment methods and find out when it's better to use Pix or a credit card, check out our article on credit card or Pix.
Don't share codes, passwords, or tokens—practice Pix security every day
Never disclose your SMS code, app token, or password. Banks do not ask for this information over the phone or via WhatsApp. If someone calls claiming to be from the bank, hang up and call the official number.
Develop good habits: check your statements, turn on notifications, and don’t save passwords in open notes. Explain to friends and family that they shouldn’t ask for codes—it could be a scam. For more practical tips on how to protect yourself, read How to Protect Yourself from Financial Scams.
Enable authentication, keep your apps up to date, and check your security settings in Pix
Enable biometric authentication or a PIN, keep your apps up to date, and set transaction limits whenever possible. Turn on immediate notifications and enable the feature that blocks transactions from unknown devices. These settings greatly reduce the risk.
Also, be sure to stay up to date on the system's new rules; the The Central Bank has been tightening security requirements to sign up for Pix.
If you're a target: What to do now after the Pix scam alert to try to get your money back
If you received the alert and realized you were a victim, act quickly. Determine what happened: the time of the transaction, the amount, who received it, and how you were contacted.
Save screenshots of conversations, app screens, and receipts—they’re essential evidence. To formally report the case on official platforms, see How to File a Police Report Online.
Then, contact the bank immediately. The sooner you report it, the greater the chance of blocking the recipient’s account or stopping the transfers. Write down reference numbers, the names of the representatives you speak with, and any deadlines. Be persistent: contact the ombudsman’s office if necessary and use the Central Bank and Procon channels to reinforce your complaint.
Block the account and contact the bank immediately if you suspect fraud involving Pix
If you suspect fraud, request that your Pix keys and linked cards be temporarily blocked. Ask the bank to launch an investigation and keep you informed about any potential refunds. Keep all communications on file.
Actions practices:
- Call the bank's customer service and ask them to block the card immediately.
- Please ask for the case number and the representative's name.
- Send screenshots and receipts via email or the bank's chat service.
- If you do not receive a response within 48 hours, contact the bank's ombudsman's office.
File a police report and file a complaint with the Central Bank or Procon
Filing a police report (BO) is essential—banks and authorities require it to initiate proceedings and place holds on accounts. File the report in person at a police station or through the Civil Police’s online platforms.
Next, file a complaint on the Central Bank’s website and, if necessary, with Procon, citing the bank’s case number and the police report number. See also our content that explains how to financial scams in 2025 have been handled by the authorities.
Do not transfer any more money or share passwords or codes with anyone claiming to be from customer support. Ask them to contact you again through official channels.
Documents and deadlines you'll need
Keep everything, both digital and printed; banks usually ask for the police report as soon as possible. Keep the documents for at least 6 months while the case is open.
- Police Report (copy and number)
- App screenshots, messages, and calls
- Transaction Receipts/Statements
- Document with a photo and CPF number
- Bank Protocol and Staff Names
Conclusion: New Pix Scam: Understand the Danger and How to Avoid Losses
The new Pix scam is more sophisticated—it combines phishing, fake QR codes, and cloned apps to pressure you into acting quickly. Don't let the rush get to you: take a breath and double-check.
Take these simple steps: don’t click on suspicious links, don’t share passwords, codes, or tokens, verify the recipient and amount in the official app, enable two-factor authentication, and keep your apps up to date. If something happens, lock your account, contact your bank, file a police report, and report the incident to the Central Bank or Procon.
Small habits become a shield. One smart move today can save you money tomorrow. Want to learn more? Read other articles at Wealth Formula.
Frequently Asked Questions
This is a warning about scams that use Pix to request codes, QR codes, or bank information while appearing legitimate. To better understand how Pix works, see Pix in Brazil e What is Pix?.
They send text messages, WhatsApp messages, or make phone calls pretending to be the bank, create a sense of urgency, and ask for codes or for users to install malicious apps.
Never share your password, code, or token. Always verify everything through the bank's official app. Be wary of unverified links and QR codes. For more practical tips, see prevention tips.
Block your keys, accounts, and cards; call your bank; file a police report; and report the incident to the Central Bank and Procon.
Watch out for errors, strange URLs, and requests for codes. Official messages never ask for your password. Check your bank's app and read more about Financial Scams and Protection.
