Common USDT and Pix scams and how to protect yourself

USDT and Pix scams have grown along with the popularity of crypto in Brazil. The reason is simple: Pix, the country's instant payment system, is fast, and a crypto transfer can't be undone. For a scammer, it's the perfect combination. In this guide, you'll learn the most common scams, the warning signs and what to do if you fall for one.

Why scammers like USDT

USDT tracks the dollar, is easy to send and moves at any hour. And, once confirmed on the blockchain, a transfer can't be reversed. No one presses a button and gives it back. If you don't know the coin well yet, see what USDT is.

A Pix, on the other hand, can be disputed by the payer's bank in cases of fraud. This gap between "one side that comes back" and "one side that doesn't" is the basis of several scams.

1. Fake support

How it works. You post a question on social media or look for help online. Soon a very polite "agent" shows up on WhatsApp, Telegram or Instagram, claiming to work for the platform or the wallet. To "fix" your problem, they ask for your password, a verification code, your recovery phrase, or for you to install a remote access app. Sometimes they ask for a "release fee" to unlock your balance.

How to protect yourself.

• Only contact support through the channels listed on the official website or app.
• Never share passwords, verification codes or your recovery phrase. With anyone.
• Don't install apps because a stranger asked you to.

usdtap, for example, says it in its own emails: it never asks for your password or codes by phone, WhatsApp or email.

2. "Double your money" and guaranteed returns

How it works. Someone promises to multiply your USDT: an "investment bot", "guaranteed arbitrage", "send 100 and get 200 back". At first, the platform even shows profits on screen, and sometimes lets you withdraw a small amount to win your trust. When you put in more, withdrawals freeze or a "fee" appears to release them.

How to protect yourself.

• High, fast, "guaranteed" returns don't exist. The bigger the promise, the bigger the risk of a scam.
• Be wary of urgency: "today only", "last spots".
• Be wary of testimonials and screenshots of profits: they're easy to fake.

3. P2P with third-party Pix

How it works. In P2P, one person sells crypto directly to another. The scam goes like this: a "buyer" asks for your USDT and sends a Pix. But the Pix comes from someone else's account, who is actually a scam victim. You receive the reais and send the USDT. Days later, the victim reports it to their bank, and the amount is blocked and returned to them through Pix's refund mechanism, the MED. You end up without the reais and without the USDT.

The opposite also happens: you pay by Pix and the seller disappears without sending the crypto.

How to protect yourself.

• Be suspicious when the name of the person paying isn't the name of the person you're dealing with.
• Prefer platforms that only accept a Pix from the same CPF or CNPJ (Brazilian tax ID) as the account holder.
• Don't trade with strangers in messaging groups.

Learn about this rule in detail in third-party Pix: why your deposit must come from your own CPF.

4. Fake websites and phishing

How it works. The scammer builds a website identical to an exchange's or a wallet's. It shows up in ads at the top of search results, in emails or in messages with links. You type in your password and code, or your recovery phrase, and the scammer uses them right away.

How to protect yourself.

• Type the website address yourself, or use a saved bookmark.
• Check the address in the browser bar, letter by letter.
• Be wary of emails demanding urgent action, such as "your account will be blocked".
• Use two-factor authentication with an authenticator app.

5. Swapped address

How it works. There are two versions.

• Clipboard malware. A malicious program on your phone or computer replaces the address you copied with the scammer's, at the moment you paste it.
• Address poisoning. The scammer sends a tiny amount, or a fake token, from an address that looks very much like one you use, with the same beginning and the same end. They hope you'll copy the wrong address from your history next time.

How to protect yourself.

• Always copy the address from the receiving wallet, never from your history.
• After pasting, check the beginning, the end and a few characters in the middle.
• Use wallets that are registered and confirmed on the platform.

The full walkthrough is in how to send USDT to your wallet without mistakes.

6. Fake receipt and "Pix sent by mistake"

Fake receipt. In a P2P deal, the "buyer" sends you an image of a Pix receipt for a transfer that never happened, or for a scheduled Pix they cancel later. Always check that the money is actually in your account, in your bank's app, before you send anything.

Pix sent by mistake. You receive a Pix from someone you don't know. Right after, the person asks you to "return" it to a different Pix key. If you make a new Pix, they can still dispute the original one through the MED and get paid twice. If you need to return it, use the refund option on the Pix you received, in your bank's app, or talk to your bank.

Warning signs of USDT scams

If you notice any of these signs, stop and be suspicious:

• urgency or threats ("now", "your account will be blocked");
• requests for passwords, codes or your recovery phrase;
• promises of guaranteed profit;
• a contact that reached out to you, and not the other way around;
• a payment coming from a different name than the person you're dealing with;
• a request for a "fee" to release a withdrawal or a prize.

I fell for a scam. What should I do?

1. Paid by Pix? Contact your bank immediately. In the app, look for the option to dispute the Pix or report a scam. You can file the request up to 80 days after the transfer, but the sooner you do it, the better the chances of blocking the money.
2. File a police report (boletim de ocorrência). Many Brazilian states let you do it online.
3. Tell the platform where your account is, and change your passwords and two-factor authentication.
4. Sent crypto? The transfer won't come back. Keep the hash and screenshots for the police report.
5. Watch out for the second scam. Anyone promising to "recover crypto" for a fee is usually another scammer.

How usdtap helps reduce the risks

Some of usdtap's rules exist precisely because of these scams. The Pix must come from an account under the same CPF or CNPJ as the usdtap account, and a Pix from someone else is sent back and doesn't become balance. A new wallet only becomes active after you confirm it with an email code and with two-factor authentication. And, before every transfer, you see the exchange rate, the fee and how much USDT arrives. Learn more at usdtap.com.

Frequently asked questions

Can I get back USDT I sent to a scammer?

In general, no. A transfer confirmed on the blockchain is final. In specific cases, authorities can ask the issuer to freeze funds, but that isn't guaranteed and shouldn't be your plan. File a police report and keep the transfer's hash.

How can I tell if a crypto platform is a scam?

Be wary of guaranteed profits, pressure to hurry, requests for a "fee" to release a withdrawal and contact only through WhatsApp or Telegram. Search for the platform's name together with the word "scam" (or "golpe", in Portuguese) and check whether it shows the exchange rate and fees before you confirm.

Support asked for my recovery phrase. Is that normal?

No. No real support team asks for your recovery phrase, your password or a verification code. Whoever asks is trying to rob you. End the conversation and find the official channel through the website or the app.

What should I do if I fell for a Pix scam?

Contact your bank as soon as possible and use the option to dispute the Pix or report a scam in the app. The bank can trigger the MED, Pix's special refund mechanism. Also file a police report.

Is selling USDT on P2P safe?

It has risks. The main one is receiving a Pix from someone else's account, which is later disputed and returned, after you've already sent the USDT. Check that the payer's name matches the person you're dealing with and that the money is in your account before you send anything.