New Fraud Wave in Brazil: Malicious QR Code Replacement Diverts Pix Payments

A new fraud scheme targeting Brazilian e-commerce platforms replaces legitimate Pix QR codes with fraudulent ones, diverting customer payments to criminal accounts. The scam goes undetected for days because merchants see orders as abandoned while customers only realize they're victims when delivery doesn't arrive. By that time, criminals have already dispersed the stolen funds across multiple accounts.

How the Scam Works

This emerging fraud in Brazil employs malware to replace legitimate Pix QR codes on e-commerce payment pages with fraudulent ones. When customers scan the altered QR code and make payment, funds are diverted to criminal accounts instead of the merchant's account.

Key Characteristics

Why Detection is Delayed

The "silent" nature of this scam enables it to go unnoticed for several days:

Merchants see orders as "abandoned" or "pending" because the store system doesn't record payment receipt
Customers believe payment was successful and only realize something is wrong days later when the product fails to arrive

This time gap is critical to the scam's success. During this window, criminals distribute stolen funds across multiple dummy accounts (known as "laranjas"), making recovery extremely difficult.

Current Impact

As of the report date, at least 90 small and medium-sized Brazilian e-commerce businesses have been infected with the malware.

How to Protect Yourself

For Store Operators

Keep all platform software updated to the latest version
Strengthen authentication protocols
Validate all Pix payments to ensure they are properly processed
Deploy security monitoring tools to detect malware infections

For Consumers

Always verify the recipient name displayed on the payment screen matches the store's official name before confirming payment
Install and maintain up-to-date antivirus software on all devices used for online transactions
Abort any transaction if the payment page appears unusual; contact the store directly to verify
Report immediately to your bank if a product doesn't arrive within the expected timeframe or if the merchant doesn't respond to inquiries

Where to Report

Brazil's Central Bank (Banco Central do Brasil): Pix fraud reports
Local consumer protection agencies
Your bank or Pix service provider
Federal or local police for fraud complaint filing