Artículos y guías sobre fraude, ciberseguridad, privacidad y PLD
Artículos con datos sobre fraude, costo de filtraciones, ransomware, privacidad, delitos informáticos, PLD y M&A en ciberseguridad.
- Fake FTC calls threaten to cut off your phone: how the scam works — The FTC warns of callers posing as its staff who say your number was used in crimes, pass you to a fake officer and demand a deposit. How it works, what to do.
- Fake police call scam in Brazil: a video call to steal your face — Police in southern Brazil warn of callers posing as officers who push victims onto a video call to capture their face and voice for fraud. How it works and what to do.
- Fake charity deepfakes in Brazil: inside Operation Cáritas — Brazilian police arrest 5 suspects accused of using deepfakes of a singer and priests in fake charity drives that moved R$10 million. How it worked and how to give safely.
- El Buen Fin 2026: tiendas falsas y premios por WhatsApp, cómo evitarlos — Antes de El Buen Fin (13 al 17 de noviembre), autoridades alertan por tiendas clonadas y un falso premio de 200 mil pesos por WhatsApp. Cómo operan y cómo protegerte.
- 2026 midterm election scams: the FBI warning on donations and AI — Ahead of the Nov. 3 vote, the FBI warns of fake PACs, campaign 'investment pools', merchandise that never ships and fake voter-registration pages powered by AI.
- Data leaked in Brazil? What to do, step by step, under the LGPD — Your data leaked in Brazil? Step by step: passwords, bank, Registrato, police report, the 3-business-day LGPD notice rule and how to complain to the ANPD.
- Binance hack: $6.3B theft tied to North Korea, what we know — The $6.36B Binance hack, the largest crypto theft on record: how it happened, what was frozen, why North Korea is blamed and what users should do now.
- Estafas con Pix en cifras: cuánto se robó y por qué se devuelve poco — Datos del Banco Central muestran R$ 24.500 millones robados vía Pix desde 2022 y solo 8,9% devuelto. Qué cambia el MED 2.0 y cómo protegerse.
- Falsa central y falso motoboy en Brasil: cómo operan y cifras — La estafa de la falsa central bancaria creció 195,7% en Brasil en el primer semestre de 2025, según Febraban. Cómo opera el falso motoboy y qué hacer.
- US cyber fraud hits a record: key findings of the FBI IC3 2025 report — Losses reported to the FBI reached $20.9 billion in 2025, up 26%. Key figures on investment fraud, BEC, crypto and scams targeting older Americans.
- Cuánto cuesta una filtración de datos en 2025: Brasil, EE. UU. y mundo — El costo medio global de una filtración bajó a US$ 4,44 millones, pero en EE. UU. llegó a US$ 10,22 millones. El dato de Brasil, el papel de la IA y qué ayuda.
- Cuentas mula y cuentas ómnibus: el crimen y las fintech en Brasil — De la Operación Carbono Oculto a la Ley 15.397/2026: cómo las cuentas mula y ómnibus en fintech sirvieron al lavado en Brasil y qué cambió ya.
- Ransomware en gobierno y salud en Brasil: casos 2024–2026 — Municipios, hospitales y proveedores de software de salud: los ataques de ransomware confirmados en Brasil entre 2024 y 2026 y sus lecciones clave.
- Ransomware 2025–2026: most active gangs, top countries and Brazil — 2025 set records for ransomware victims and active gangs, with Qilin on top. See the most targeted countries, where Brazil ranks and what surveys show.
- LGPD en la práctica: qué fiscaliza la ANPD y cómo adecuarse — Incidentes en 3 días hábiles, encargado, cláusulas estándar y multas de hasta R$ 50 millones: los reglamentos de la ANPD y sus prioridades 2026–2027.
- LGPD vs GDPR vs US law: privacy fines and breach notice deadlines — Brazil requires breach notice within 3 business days, the EU within 72 hours, and the SEC 4 business days. Compare fine caps, deadlines and enforcement.
- Estafas por WhatsApp y falso pariente en Brasil: protección y ley — Clonación y falso pariente: cómo funcionan las estafas por WhatsApp en Brasil, qué cambió con la Ley 15.397/2026 y cómo protegerse paso a paso hoy.
- Delitos cibernéticos y sanciones: Brasil, EE. UU. y América Latina — De multas de la ANPD a acuerdos millonarios del DOJ: las sanciones verificadas por delitos digitales, filtraciones y lavado en Brasil, EE. UU. y América Latina.
- Fraude en el INSS de Brasil: hechos y cifras verificados — R$ 6.300 millones desviados, 97,6% sin autorización y más de R$ 3.000 millones devueltos: las cifras verificadas del fraude en el INSS de Brasil.
- Brazil's ANPD becomes a regulatory agency: what changes for companies — Law 15,352/2026 turned Brazil's ANPD into an agency with financial autonomy and 200 new posts. What changes in LGPD and ECA Digital enforcement.
- US state privacy laws: the full map through 2028 — Twenty-four US states have comprehensive privacy laws, from 2020 to 2028. See the effective dates, California's fines and where the federal bill stands.
- Apuestas y lavado de dinero en Brasil: reglas y operaciones 2026 — Qué exige la Ordenanza SPA/MF 1.143 a los operadores de apuestas en Brasil, los datos del primer año regulado y las operaciones policiales de 2026.
- Seguridad del Pix: MED 2.0, botón de impugnación y nuevas reglas — Botón de impugnación, MED 2.0 que rastrea el dinero, límites para equipos nuevos y BC Protege+: las reglas del Banco Central de Brasil para el Pix.
- Lavado de dinero: GAFI, récord del COAF y nuevas reglas cripto — El GAFI sacó a cuatro países de la lista gris en octubre de 2026, el COAF de Brasil batió un récord y el Banco Central endureció las reglas cripto. Qué cambia.
- Las mayores filtraciones de datos en Brasil y qué pasó después — De la megafiltración de 223 millones de CPF a las claves Pix, iFood y Cemig: las mayores filtraciones públicas de Brasil y lo que ocurrió después.
- Cybersecurity M&A: 2025's record year and the 2026 megadeals — Cybersecurity M&A hit $96.1 billion in 2025, and Wiz, CyberArk and Armis closed in 2026. The numbers, the buyers' theses and what to expect next.
- Who's who in Brazilian anti-fraud: Serasa, ClearSale, idwall and unico — Serasa Experian bought AllowMe, ClearSale and idwall; unico is valued at $2.6 billion. Meet Brazil's anti-fraud players and how the sector is consolidating.
- Ciberseguridad financiera en Brasil: C&M, Sinqia y nuevas reglas — Los ataques a C&M Software y Sinqia expusieron el riesgo de los proveedores en Brasil. Qué cambiaron las Resoluciones BCB 498 y CMN 5.274 y lecciones.
- Pig butchering: the crypto scam draining billions from Americans — How pig butchering crypto scams work, what Americans lost in 2025 and how the US is going after Southeast Asian scam compounds and the Prince Group.
- Phishing and deepfakes: the 2025 numbers and how to spot them — Brazil saw 553 million phishing attempts blocked in a year, and deepfake fraud losses reached $2.5 billion in 2025. See the data and the warning signs.
- Elder fraud in the US: $7.7 billion lost and how to protect parents — Americans over 60 lost $7.7 billion to fraud in 2025, the FBI says. How tech support and government impersonation scams work and how families can help.
- The biggest data protection fines: GDPR, South Korea and the US — From Meta (€1.2bn) to Coupang (KRW 625bn) and Equifax (up to $700m): a ranking of the largest privacy fines and settlements, and what triggered each one.
- SEC cyber incident rule: what 8-K Item 1.05 filings reveal — Since December 2023, US public companies must report material cyber incidents in four business days. What the 8-K filings show and lessons for boards.
- Latin America: where attacks per organization grow fastest — Latin American organizations faced 3,065 attacks a week in December 2025, the fastest growth of any region. See the numbers, Brazil's role and the reasons.
- US healthcare data breaches: Change Healthcare and the HIPAA landscape — The Change Healthcare attack exposed data on 192.7 million people. US health breach numbers, what went wrong and where the HIPAA Security Rule update stands.
- BEC and real estate wire fraud in the US: how it works, how to stop it — Business email compromise cost US victims $3 billion in 2025. How BEC and real estate closing scams work, and the controls that stop wire fraud before it lands.
- Salt and Volt Typhoon: what is known about China's US network hacks — China-linked hackers breached US telecoms and critical infrastructure. What is publicly known about Salt Typhoon and Volt Typhoon: targets, tactics, response.
- China's data protection regime: PIPL, DSL and the 2025–2026 changes — A guide to China's PIPL, Data Security Law and cross-border data rules, with what changed in 2025–2026, including audits, certification and the amended CSL.
- China vs scam centers: 258,000 cases, mass transfers and executions — China solved 258,000 telecom fraud cases in 2025 and received 58,000 suspects from abroad. The figures behind its crackdown on Myanmar and Cambodia scam hubs.
- China's crypto ban and USDT: how underground banks launder billions — Crypto is banned in China, yet USDT has become the bridge for underground banks. Recent enforcement cases, sentences and the central bank's stablecoin warning.
- China's 1-hour cyber incident reporting: what foreign firms must do — Since November 2025, China requires serious cyber incidents to be reported within 1 to 4 hours. Thresholds, deadlines and what foreign companies need to do now.
- NIS2 explained: scope, obligations, fines and transposition status — A guide to the EU NIS2 Directive: essential vs important entities, 24h/72h reporting, fines up to 2% of turnover and which countries still lag on transposition.
- DORA since January 2025: what changed and supervisory priorities — DORA in review: 3,383 major ICT incidents in 2025, 19 critical tech providers under direct EU oversight and the ECB's resilience focus through 2028.
- Ley de IA de la UE y deepfakes: obligaciones y calendario — Qué exige la Ley de IA de la UE sobre deepfakes y contenido sintético, las nuevas fechas tras el Digital Omnibus, multas de hasta el 3% y cómo evitar fraudes.
- AMLA y el nuevo paquete antiblanqueo de la UE: bancos y cripto — AMLA, AMLR y Travel Rule cambian el antiblanqueo en la UE: 40 grupos supervisados desde 2028, tope de 10.000 euros en efectivo y fin de la transición MiCA.
- Payment fraud in Europe: APP scams, UK refunds and the EU PSR — Scams where victims authorise payments are surging in Europe. The numbers, the UK's 88% reimbursement rate and what the EU changes with verification of payee.
- Ransomware: ¿pagar o no? Sanciones OFAC, seguros y datos — Solo el 28% de las víctimas de ransomware pagó en 2025. El riesgo de sanciones de la OFAC, lo que exigen las aseguradoras y cómo decidir si conviene pagar.
- Supply chain attacks: from SolarWinds and MOVEit to 2026 — Third parties now feature in 30% of breaches. Lessons from SolarWinds, MOVEit, Salesloft Drift, Shai-Hulud and 2026 cases, and how to manage vendor risk.
- Passkeys, MFA and the end of passwords: what stops account takeover — 97% of identity attacks rely on passwords. Which MFA methods resist phishing, what passkey data show and a practical checklist to stop account takeover.
- Cyber insurance market: prices, exclusions and insurer demands — Global cyber premiums reach $15bn and rates have fallen for 13 quarters. Data for Brazil and the US, key exclusions and the controls insurers now require.
- How to build an incident response plan: the first 72 hours — What to do in the first 72 hours of a cyberattack: containment, evidence, notification deadlines in Brazil, the US and the EU, communication and a checklist.