False Hope: Scammers Exploit Brazil’s Kindness in Latest Charity Scam




A new wave of charity scams is targeting Brazilians through social media. Scammers are repurposing people’s real-life struggles to create fake charity websites with the intent to steal money from individual charity donors. Victims of this scam may not even be aware that their donation has not reached its intended recipient.
The scam starts on social media such as Facebook, Threads and Instagram. Scammers use fake profiles or hacked accounts to join fundraising groups and groups dedicated to local towns. They often repost several posts from other accounts to gain legitimacy, followed by posting links to a prepared fake donation website.

Once the victim with charitable intentions clicks on the link, they are presented with a fake copy of a known fundraising website, often Vakinha. The scammers mostly copy real stories posted by people in need to scam money away from donors. The websites sometimes contain links to YouTube videos posted by the original profiles on the real website.

The websites feature a fake Facebook feed with incoming comments from people who have supposedly donated to the cause. There is also an incoming donation effect that tries to lend legitimacy to the scam, making the victim believe that other people are actively donating.
If the victim decides to donate, they are redirected to a payment page with a PIX code and QR code. PIX is a real-time instant payment system in Brazil, created by the Central Bank of Brazil. The payment page often contains further encouragements and a how-to-donate manual. Unlike with phishing and other types of cyberattacks, the scammers are not going after victim’s details, they just syphon away money from legitimate charitable causes.

If the victim sends away the payment, the website displays a thank you page, attempting to convince the victim that the money sent has been received by the cause. It is likely that victims may never know they have sent money away to scammers. The other victims, the people in actual need of assistance, never receive the money.

Avast blocks this new scam and has protected hundreds of users in Brazil in the last week. If you encounter a similar donation scam, please consider the following:
- Use reputable websites that verify profiles and charity cases. This way you can avoid falling for a scam or sending money to scammers instead of the intended cause.
- Beware of fake links spread through social media. Verify the URL you are clicking on and check that the website is the one you are intending to donate through.
- Research the organization. If you see a post asking for donations with a link to a website, do a quick Google search to ensure its legitimate.
- Avoid pressure tactics. Scammers often create a sense of urgency to keep their victim engaged. Be wary of sending money away if you are feeling pressured.
