Brazilian miles fraud scheme targets credit‑card users

Criminal groups in Brazil are running a new “miles scam” that pretends to be loyalty‑program messages sent via SMS, WhatsApp, e‑mail or phone calls. The communications claim that points are about to expire or that urgent redemption is required, and include links that mimic airline or program websites. Victims are asked to provide CPF numbers, passwords, credit‑card details or authentication codes, which the scammers then use for further fraud.

The fraud also involves impostors posing as program representatives on WhatsApp and callers claiming to be bank or airline staff, offering fake promotions, discounted tickets or “bonus” transfers. Security experts warn that the scheme is becoming increasingly sophisticated and advise users to never click on unsolicited links, to access loyalty accounts by typing the official address directly, to enable two‑factor authentication and to use strong, unique passwords for each service.