Fake or tampered boleto scam: how it works, warning signs and what to do

Payment fraud · médio

The criminal sends a "duplicate" or "discounted" boleto (Brazilian bank slip) by email or WhatsApp with the creditor's branding. In another version, malware or a fake issuing site swaps the barcode when the slip is generated.

The slip looks identical to the original, but the payee and barcode point to the scammer's account.

The victim pays, gets a receipt and only finds out when the company chases the debt. In businesses it appears as a supplier email announcing "new bank details".

Sinais / Signs

Payee name on the payment screen doesn't match the creditor.
Slip arrived through an unusual channel or unknown sender.
Discount offered for quick payment.
The first barcode digits don't match the expected issuing bank.
Supplier email announcing a bank-account change.

Prevenção / Prevention

Before confirming, check the payee name and company ID shown by your banking app.
Only generate duplicates on the official site or app, typing the address yourself.
Prefer direct debit or DDA (electronic bill presentment) for recurring bills.
In businesses, confirm bank-detail changes by phone with a known contact.
Keep antivirus and operating system up to date.

O que fazer / What to do

Call your bank right away using the official number (back of the card or in the app) and ask to block cards, accounts and access.
Notify the real creditor and ask how to settle the debt.
File a police report (many Brazilian states accept online reports) and keep screenshots, receipts, numbers and links.
If a company was involved (store, carrier, lender), file a complaint at Consumidor.gov.br and with Procon.

FAQ

How can I tell if a boleto is genuine?

When you scan or type the code, the banking app shows the payee. It should be the company you owe. If in doubt, generate the slip through the official channel.

I paid a fake boleto. Can I get the money back?

There's no guarantee. Tell your bank immediately so it can try to freeze funds at the receiving bank, and file a police report.

Radar

2024-06-01 — Pix and fake boleto scams cost Brazilians R$25.5bn · R$ 25,5 bi. In the 12 months to Jun/2024, card scams totaled R$18.3bn and phone thefts R$22.8bn, per Datafolha/FBSP. Source: Datafolha / FBSP (via Finsiders Brasil)

Finsiders — Golpes com Pix e boletos falsos (Datafolha/FBSP) · CERT.br — Cartilha de Segurança para Internet · Consumidor.gov.br