Portuguese 
English 
Spanish 
4 min of reading 
0 comments 
New Pix Scam Uses “Ghost Hand” to Drain Accounts in Fake Calls. Know How the Scam Works and How to Protect Your Bank Account in Brazil.
A new Pix scam is spreading quietly and worryingly in Brazil, allowing scammers to empty bank accounts in minutes without the victim realizing until it’s too late. Known as the “ghost hand,” this type of fraud takes advantage of customers’ fear and trust in their banks, turning a simple phone call into a financial nightmare. Just at the beginning of 2025, nearly 3,500 cases were reported in the country, according to Kaspersky, reinforcing the alert about the importance of understanding how it works and why it is so easy to fall into this trap.
How the “Ghost Hand” Fraud Works
Unlike traditional scams that rely on suspicious links or malicious apps, the new Pix fraud is based on phone calls that perfectly imitate the service of banking call centers. The scam begins when the victim receives a call from a supposed bank employee, usually informing them of suspicious transactions or security blocks, creating a sense of urgency that lowers the person’s guard.
During the conversation, the scammer instructs the victim to install a remote access application on their phone, claiming it is necessary to fix the problem. These applications are legitimate, used for technical support, which leads the victim to believe they are performing a safe procedure. It is at this moment that the trap is set.
-
The prospector who heard about the advance of soy in Maranhão and opened a grocery store in Balsas in 1986 transformed that small store into Grupo Mateus, the third largest supermarket in Brazil, with revenues of R$ 43.5 billion and 490 units.
-
Fiserv, the world’s largest payment processor, has just inaugurated its first factory outside Asia in Brazil. The unit in Betim (MG) will produce 100,000 Clover payment terminals per year and is part of a US$100 million investment that includes technology and expansion until 2027.
-
Fiserv, the world’s largest payment processor, has just opened its first factory outside Asia in Brazil. The unit in Betim (MG) will produce 100,000 Clover payment terminals per year and is part of a US$100 million investment that includes technology and expansion until 2027.
-
Pix could become a headache between Brazil and the US, and the Lula government will go to the White House to explain the system before pressure mounts.
With access granted, the criminals take control of the device remotely, navigating the phone as if they were physically holding it. The victim watches, often not fully understanding what is happening, while the scammer accesses the banking app and makes transactions via Pix.
With each command, there is a feeling that an “invisible hand” is manipulating the phone, executing the operations swiftly and accurately. Hence the name “ghost hand,” which aptly defines the terror experienced by those who go through this experience.
Why This Pix Scam Is So Effective?
The effectiveness of the “ghost hand” scam lies in the use of social engineering techniques that manipulate emotions such as fear and urgency. By informing that the account may be blocked or that a fraud is being investigated, the scammers manage to break the victims’ resistance and lead them to follow each step without questioning.
Additionally, the use of known and legitimate applications for remote access decreases suspicion, and since the phone’s owner themselves authorizes the access, traditional security mechanisms are unable to block the fraud.
Another factor that makes the scam dangerous is the false sense of control on the part of the victim, who believes they are solving a real problem. While typing passwords or confirming accesses for “data verification,” they are actually allowing the scammer to complete the transactions via Pix. In many cases, when the victim realizes what has happened, the money has already been transferred, and the bank account is practically empty.
What Banks and Experts Are Warning About the “Ghost Hand”
According to cybersecurity experts, such as the team at Kaspersky, this scam does not occur merely by receiving the call, but rather by following the instructions of the supposed representative. Banks and consumer protection entities emphasize that no financial institution requests the installation of apps or passwords via phone, and any call with such requests should be immediately terminated.
Despite this, the naturalness with which criminals conduct the conversation and the urgency created to force quick decisions are factors that continue to make new victims daily in Brazil.
The experts’ recommendation is clear: upon receiving any suspicious call, the victim should hang up immediately and contact the bank through official channels before taking any action on their phone. Keeping banking apps updated, using two-factor authentication, and adopting strong passwords are measures that help reduce risk but do not replace the need for attention and caution in situations involving unexpected phone contact.
The Importance of Acting Quickly If You Fall for the Scam
If you realize you have fallen victim to the Pix scam with the “ghost hand,” the guidance is to act quickly to try to reverse the damage. It is essential to immediately contact the bank to block transactions and activate the Special Mechanism for Refund (MED), which may allow the recovery of funds, depending on the time and situation of the transfer. It is also necessary to file a police report, change passwords, and monitor the account for suspicious movements.
The Pix has brought practicality and agility to the Brazilian financial system, but it has also opened doors for scams to become faster and harder to trace. The “ghost hand” scam reinforces that digital awareness is one of the best defenses for consumers, showing that the protection of your data and your account starts with paying attention to your own behavior, especially in situations involving urgency and emotional pressure.
Be the first to react!