Scammers usually do not use Pix itself to secretly extract personal data. They use WhatsApp to impersonate a bank, government agency, delivery company, or relative, then direct people to fake websites, ask for passwords or verification codes, or pressure them to authorize a Pix payment. Pix is typically the way money is collected—not the source of the data theft.
How a WhatsApp Pix scam works
A common pattern is an unexpected message claiming there is an unpaid fee, account problem, refund, benefit, delivery charge, or urgent family need. The sender may use an official-looking logo, a business-account profile, formal language, or personal details to seem credible. The message then asks you to click a link, scan a QR code, share a code, or send money.
For example, a fake government profile might cite your CPF and claim you owe a fee. A link leads to a page requesting more personal or banking information, or the sender supplies a QR code for payment. The data collection happens through the fake page or conversation; the Pix transfer is a separate financial loss. Brazil’s government cybersecurity alert, published February 13, 2026 and modified April 9, 2026, describes fake government profiles using real victim details, phishing sites, and fraudulent boleto or Pix requests. Read the alert.
Common WhatsApp and Pix scam variants
Fake bank or government representative
A criminal claims to be resolving a tax, benefit, debt, account, or refund issue. The Banco Central warns people not to trust links or requests sent through messaging apps; it does not contact individuals to confirm personal data or arrange the return of money. See the Banco Central’s scam guidance and its warning about fake “values to receive” contacts.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problems#1 Best Overall
- 【Combination set】: More affordable, The data blocker combination kit shown in the main image, which can meet your daily use needs, suitable for any mobile phones and electronic devices with USB A and USB C interfaces.
- 【PROTECT YOUR PHONE / TABLET】 : Think about that Traveling or going out in public areas one time when you needed a charge at an airport but were too scared to get juice jacked. That is why we brought this data blocker for you. Charge your device with this powerful USB data blocker without worrying about any hacker getting in your device.
- 【HIGH SPEED CHARGING】: USB defenders are made for blocking the hacker as well as fast charging, The 4th generation design chip can be used for the universal charging standards automatically switch to, Compatible with Various brands of smartphones, ensure compatibility with your device. and charge at up to 2.4 Amps.
- 【to make high quality safety products】:Advance manufacturing process design The metal shell material has multiple safety protection functions such as heat dissipation and fire safety, USB Data Blocker are used by the governments of the USA, Canada, UK and New Zealand as well as 100s of corporations around the world to secure their devices，100% guarantee against hacker attack.
- 【Perfect Compatibility】: We USB-C to USB-C and USB-A to USB-C data blocker ensures seamless data security across all your Type-C tech gadgets including iPhone 15 and 16 series, Galaxy S25 S24 S23 S22 S21 S10, USB-C iPad, Android Tablets, MacBooks, and more
Fake delivery or customs fee
A message says a parcel is held until you pay a tax or release charge. Correct tracking or purchase details do not prove the WhatsApp sender is genuine. Receita Federal advises checking through official websites or apps and paying only through the appropriate official channel. Read Receita Federal’s guidance.
Friend or relative asking for emergency money
An attacker may use a stolen account or a new number with a familiar name and photo. Verify a request through a separate, known channel—such as calling the person at a number you already have—not by replying to the suspicious chat. The Banco Central recommends independently verifying money-transfer requests. See its general tips.
Rank #2
- The Ultimate Data Guardian: Worried about the risk of mobile phone data leakage or viruses when using public charging stations? A data blocker is an effective way to reduce these risks. By physically blocking data transfer, it helps protect your device from potential spyware or hacking attempts while charging
- Only for Charging: With our USB data blocker, you can charge your device without any risk of data transfer. It allows only the charging function while blocking data transfer and syncing. Your phone will not receive pop ups requesting data transmission
- Fast Charging for USB C Data Blocker: JSAUX USB C Data Blocker adopts PD 3.0/2.0 fast charging technology, supports 100W fast charging (20V/5A), and is also compatible with charging power of 240W/140W/60W/45W/36W/27W/15W, etc. The USB Data Blocker supports up to 2.4A charging. (NOTE: The actual charging speed depends on your device and wall charger.)
- Compact Design for Travel and Daily Use: Small and lightweight for easy carrying in pockets, backpacks, or keychains. Ideal for travelers, commuters, and anyone who frequently uses public charging stations. The transparent casing provides a modern and durable look
- USB & USB C Data Blockers 4 Pack: We offer you two USB Data Blockers and two USB C Data Blockers, compatible with iPhone 18 Pro/18 Pro Max, iPhone Duo, iPhone 17/17e/Air/17 Pro/17 Pro Max, iPhone 16/16 Plus/16 Pro/16 Pro Max, iPhone 15/15 Plus/15 Pro/15 Pro Max, Samsung, iPad, Macbook and other devices. Works with both USB and USB C ports, ideal for safe charging at airports, hotels, and public charging stations
“Pix sent by mistake” reversal trick
A sender claims to have transferred money accidentally and asks you to return it to a different account. Check your actual bank statement first. If a payment arrived and you want to return it, use your bank’s Pix return function so it goes back to the original payer; do not make a new transfer to another account. The Banco Central explains this risk.
What information scammers may try to collect
- Identity details: CPF, full name, date of birth, address, names of relatives, and identity-document information.
- Account access: bank or email passwords, WhatsApp registration codes, two-factor codes, recovery codes, or approval of a new device.
- Payment details: card number and CVV, Pix key, bank balance, transaction confirmations, or screenshots of banking apps.
- Device access: installation of an APK, screen sharing, remote control, or permissions to read SMS, notifications, or accessibility functions.
These are different risks: a person can lose money without installing malware, and personal data can be harvested without a Pix payment. A CPF alone does not automatically give a criminal access to a bank account, but it can help make later impersonation or fraud more convincing.
Rank #3
- ✨ Absolutely Safe: Features an internal physical data line cut design, permanently disconnecting the data pins in the USB interface, leaving only the power pathway, effectively eliminating the risk of data leakage.
- ⚡ Fast Charging Without Slowdown:The usb data blocker Adapter supports charging up to 100W and is compatible with multiple fast charging protocols. Charging speed is the same as the original charger, ensuring both safety and efficiency.
- 🔗 Wide Compatibility: Suitable for all devices that use various charging interfaces. Whether it’s iPhone, Android phones, iPad, tablets, Bluetooth headsets, or power banks, just plug and play.
- 👌 Compact and Portable: The lightest model weighs only 2.2g, as compact as a USB drive. Protects safe charging anytime, anywhere.
- 🎯 Plug and Play: No drivers, no apps, no complicated setup required. Simply insert into a public USB port and connect your charging cable to start safe charging.
Warning signs to check
- An unexpected message claims to be from a bank, government office, courier, or company.
- It demands immediate payment or threatens arrest, account suspension, debt escalation, or cancellation of a delivery.
- It asks you to use a shortened or unfamiliar link, or a QR code sent in the chat.
- It asks for a password, one-time code, WhatsApp verification code, card security code, or device approval.
- It asks you to install an app outside the official app store or enable remote access.
- The Pix recipient is an individual or an organization that does not match the stated purpose.
- It asks you to return money to an account other than the one that sent it.
- It urges secrecy or uses accurate personal details to make an unverified sender seem legitimate.
A correct name, CPF, delivery detail, logo, or business-account label is not proof of identity. Personal information in a message may have come from another leak, public source, commercial database, or previous interaction; it does not by itself establish a breach of Pix data.
How to verify before paying
- Stop and do not use the message’s links or contact details. Do not answer questions or provide codes while you verify the claim.
- Open the official app or type the organization’s website address yourself. Check the alleged debt, shipment, refund, benefit, or account issue there.
- Contact the supposed sender independently. Use a phone number or contact channel you already know or find through the official site, not one supplied in the suspicious message.
- Inspect the payment inside your banking app before confirming. Check the recipient’s name and CPF/CNPJ where shown, the amount, and the payment purpose. A matching name is helpful but not conclusive.
- Do not treat a QR code as proof that a request is genuine. A Pix QR code can trigger an instant transfer to the destination account; it is not simply a delayed boleto. Confirm the recipient details in your bank app. The Banco Central explains QR-code payments.
Never make a “test Pix” or share credentials because someone in a WhatsApp conversation says the bank needs it. If you are unsure, leave the chat and contact your bank through its official app, website, card number, or branch.
Rank #4
- Special Attention: For optimal charging speeds, ensure the entire connection is USB-C to USB-C from end to end. Using this Data Blocker with a USB-A to USB-C cable may result in slow charging or no charging due to the absence of data pins.
- No Loopholes Data Security: Hackers are everywhere—don't let your USB-C devices fall prey! Our blocker ensures comprehensive protection against malware, viruses, and hacking threats, guaranteeing data integrity and privacy, thanks to its no data pins feature
- Juice Jacking Shield: Our robust solution stands guard against data theft, ensuring your personal information remains secure from unauthorized access
- Perfect USB C-to-C Compatibility: Our USB C male to USB C female data blocker ensures seamless data security across all your Type-C tech gadgets including iPhone 15, 16 & 17 series, Galaxy S25 S24 S23 S22 S21, Fold & Flip Series, USB-C iPad, Android Tablets, MacBooks, and more
- Safe and Uncompromised Fast Charging: Experience worry-free charging of up to 240W PD, whether you're at hotels, airports, university libraries, or outdoor charging stations. With fast charging capabilities, your devices remain safeguarded wherever you go.
If you already sent a fraudulent Pix
- Contact your bank immediately through an official channel, report the transaction as fraud, and request the Mecanismo Especial de Devolução (MED). The Banco Central says to request it through your financial institution as soon as possible. A request can be made up to 80 days after the transaction, but faster action improves the chance of blocking funds. Recovery is not guaranteed and depends on the investigation and funds available. Read the Banco Central’s Pix security guidance.
- Save evidence: transaction ID, amount, date and time, recipient name and CPF/CNPJ, bank and Pix key if shown, chat history, phone number, links, QR code, and screenshots. The Ministry of Justice also recommends preserving the suspicious number, messages, date, time, recipient details, and loss amount. See its post-fraud guidance.
- File a police report with your state police or virtual police station and provide the evidence you saved.
- Secure affected accounts from a device you trust: change compromised passwords, revoke unfamiliar sessions, review email and bank security, and alert contacts if your WhatsApp account may have been taken over.
- Monitor your finances and identity. Watch bank accounts, cards, credit activity, and new-account activity; check Banco Central Registrato for unfamiliar banking relationships or Pix keys.
- Escalate if needed. If your bank does not resolve the report, contact the Banco Central or relevant consumer-protection authority.
The Banco Central FAQ describes an evaluation period of up to seven calendar days; if a refund is approved, it may be processed within 96 hours after the evaluation ends. If the recipient account lacks sufficient funds, partial recovery may depend on later funds entering it, with monitoring described for up to 90 days. These timelines are not a promise that money will be recovered. See the FAQ.
If you shared data but did not pay
- If you gave out bank credentials, card information, or authentication codes, contact the bank immediately and ask whether it should block cards, sessions, devices, beneficiaries, or Pix keys.
- Change exposed passwords, starting with email and banking accounts, and enable two-factor authentication through the official service.
- If you shared a WhatsApp code or approved a device, secure the account through WhatsApp’s official account settings and warn contacts if you lose access or see suspicious messages.
- If you clicked a link but entered nothing, close the page, check for downloads and unfamiliar permissions, update the device, and watch for follow-up attempts. A click alone does not prove malware was installed.
- If you installed an app or granted remote access, stop using that device for banking and contact your bank from another device. Review unfamiliar accessibility, notification, SMS, device-administrator, VPN, or screen-sharing permissions; consider a factory reset after preserving evidence if compromise is suspected.
- If CPF or identity-document details were exposed, monitor credit and account-opening activity and consider notifying relevant financial institutions or established credit-monitoring services.
A Pix-key holder may receive a notice from a financial institution if a security incident involving personal data in a database occurs; that is different from voluntarily giving information to a scammer. The Banco Central describes data-incident communications here: Pix user data security incidents.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Best Value
- Attach between your USB cable and charger to physically block data transfer / syncing; Charge mobile devices without any pop-ups or risk of hacking / uploading viruses in cars, airports etc
- This is our USB-A to A version, USB-C and others available; Read below if its the right one for your device
- The only data blocker to physically show you that its blocking data and several other great features; See full details below
- Allows charging without any risk of hacking / uploading viruses, can charge from an office PC even if USB socket has been disabled without breaking IT policy
What Pix safeguards can—and cannot—do
Pix has controls that support recipient checking and transaction traceability, and the Banco Central says participating institutions must verify Pix-key holder information against CPF or CNPJ records. These measures can help investigation, but they do not prevent a criminal from persuading an authenticated user to authorize a payment. The MED is a recovery mechanism, not insurance or a guaranteed chargeback; it does not apply to every ordinary mistake or commercial disagreement. Learn how Pix works and review the security measures.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
