TIM Impersonation Scam on WhatsApp: Fake CPF Restriction Alert Used to Steal Personal Data

A phishing scam impersonating Brazilian telecom TIM is circulating on WhatsApp, claiming recipients' CPF (taxpayer ID) has been restricted due to debt. The fraudulent message directs victims to a fake website to 'resolve' the issue, where personal data is harvested. Scammers use a verified profile badge to appear legitimate.

Scam Overview

A phishing scam impersonating TIM, a major Brazilian telecom provider, has been spreading via WhatsApp. The fraudulent messages falsely claim that recipients' CPF (Brazilian taxpayer ID) has been blocked due to outstanding debts and pressure them to take immediate action.

How the Scam Works

The fraudulent messages contain the following elements:

False urgency and threat: Claims that CPF restriction will prevent access to bank accounts, credit, and financing
Fake website redirection: Directs recipients to "timpaghoje.site" to "resolve" the issue
Personal data harvesting: The fake site or its redirect destination (cdntimer.site) requests the victim's CPF number
Fabricated legitimacy: Scammers use a WhatsApp profile with a blue verification badge and identify themselves as a "TIM Virtual Agent"

TIM's authentic domain is "www.tim.com.br"—the URLs mentioned above have no connection to the company.

Warning Signs

A verified badge does not guarantee legitimacy. Scammers can obtain verification badges, and their presence does not confirm that a message is authentic or that the account represents TIM officially. Always verify information through TIM's official channels before acting.

TIM has explicitly stated that it does not send messages about CPF blocks with links for account regularization. If you receive such a message, do not click any links.

Protection Tips

Never click suspicious links: Avoid accessing URLs from questionable messages, even if sent from a verified profile
Use official channels: To check for pending issues, visit TIM's official website or app directly
Do not share personal information: Never enter your CPF, passwords, or banking details on unverified websites
Report the message: Use WhatsApp's reporting tools and block the suspicious contact
If you already shared data: Monitor for further fraudulent contact attempts and contact TIM and your bank immediately to report any unauthorized access or check for signs of misuse

Where to Report

TIM official support channels
WhatsApp reporting tool
Brazilian law enforcement (if you suspect fraud)