Brazil alert over fake “reconstruction aid” scam that redirects users to betting sites

A fraud campaign circulating in Brazil is using the country’s 2024 Auxílio de Reconstrução, a real government payment to flood-affected families in Rio Grande do Sul, as bait. The twist matters for high-risk operators: the lure starts as a fake benefits check, but the traffic ends up on fraudulent pages and, in some cases, betting sites.

1. According to an investigation by UOL, social media posts are presenting the aid as if it had a new edition in 2026, with a payment of 1,050 reais, about 203 dollars at the current exchange rate. That claim is false: the benefit was paid only once, in 2024.
2. The original payment was limited to families affected by the disaster in Rio Grande do Sul, which UOL described as one of the most devastating floods in the state’s recent history. The flood left thousands of families without housing and caused significant material losses.
3. The campaign is also spreading through WhatsApp, which gives it a wider reach than ordinary social media posts and makes the source harder to trace. The fact that the scam is built around a real, previously paid government benefit appears to be part of the trick: it gives the message a layer of credibility that generic frauds do not have.
4. Users who click the links are taken to fraudulent pages, some designed to look like official Brazilian government websites. There, they are asked to check whether they qualify for the supposed benefit and enter personal information to continue.
5. Security researcher Fábio Assolini told UOL that the link used in the campaign is programmed to work only on mobile devices. He also said the final redirect can change depending on the victim’s location and the device used, which makes the scheme harder to detect with desktop-based security analysis.

For PSPs, acquirers, and monitoring teams, the operational point is simple: this is not just social engineering. It is a traffic acquisition funnel built on a fake public-benefit narrative, with device-based routing and personalized redirects that can obscure the end destination until the last step.