A message claiming that a Claro or NET bill is overdue may be a fake invoice designed to divert a payment or steal information. Do not open its attachment or follow its link. Check for the bill by opening the Minha Claro app or navigating to Claro’s official site yourself, then pay only an invoice shown in your account and confirm its beneficiary before authorizing payment.
How the Claro and NET invoice scam works
Brazil’s RNP/Cais Catalogue of Frauds documented an email claiming a Claro/NET invoice was overdue and inviting the recipient to download an attachment containing a counterfeit bill. The record establishes that this impersonation tactic has been used; it does not establish that every similar email received today belongs to one coordinated campaign. RNP/Cais Catalogue of Frauds: false Claro/NET invoice
The message may use a familiar logo and corporate colors, claim that a bill is overdue or newly available, and urge you to download a PDF or ZIP, click a payment button, scan a QR code, or pay a barcode to avoid service suspension. It can also reach someone who is not a Claro customer: bulk messages, old customer details, and the chance of frightening someone with an unexpected debt can all make the approach worthwhile to a scammer.
The aim depends on the message. A false boleto may direct money to a criminal-controlled account or a money mule. A link may lead to a fake login or payment page that collects credentials or personal and payment details. An attachment or linked download may also be used to deliver malicious software. Claro describes fraud involving manipulated payment documents and fake pages used to obtain money or personal information. These are possible tactics, not proof that every suspicious message contains every kind of payload. Claro’s fraud-awareness guide
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Verify the bill without using the email
- Leave the message untouched. Do not click its links, open its files or images, scan its QR code, or reply.
- Go to Minha Claro independently. Open the app you already use, or manually type Claro’s official website address into your browser. Do not use a link in the email or a search ad to get there.
- Sign in through the usual account route. Find the invoice in your authenticated account. Claro recommends checking bills in Minha Claro and obtaining a second copy through official channels. Claro security and fraud guidance · Claro/NET second copy of a bill
- Compare the account details. Check the customer name, service or plan, account or contract details, address, amount, due date, and invoice number against what you expect. A mismatch is a strong warning; matching details alone do not prove that an emailed payment document is genuine.
- Use the account-generated invoice. If the bill appears in Minha Claro, pay using the invoice or payment route provided there rather than the emailed attachment. If no corresponding bill appears, do not pay the message; contact Claro through an official channel if you are unsure.
Claro’s support pages continue to refer to Claro and NET in billing and fraud guidance. That context helps explain why an old NET reference may seem familiar, but neither brand name nor a convincing layout authenticates a payment request. Claro FAQ on identifying fraud
Check the sender and invoice—but do not rely on either alone
Sender and greeting
Claro’s current security page lists [email protected] for invoice emails, while another Claro information-security page lists [email protected]. Because Claro’s published pages give different addresses, do not treat either a familiar sender address or the display name as proof. An unrelated or unexpected sender is a warning, but the safer test is to locate the bill independently in Minha Claro. Do not reply to an uncertain message. Current Claro security guidance · Claro information-security guidance
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Claro says genuine invoice emails begin with the customer’s full name rather than a generic greeting such as “Cliente,” “Caro,” or “Prezado(a).” A generic greeting is a useful warning sign, not a conclusive test: a scammer may have personal details and use them to make a message look more credible.
Barcode and payment beneficiary
Claro says its boletos begin with 846 or 848 and advises customers to check that the payment beneficiary matches the company before confirming. Treat the prefix as one check, not a guarantee. A counterfeit document may reproduce familiar details or manipulate the payment destination. Do not pay solely because a PDF looks professional, shows a logo, or has an expected amount. Claro security and fraud guidance
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Attachments, links, and QR codes
An invoice attachment may simply be a counterfeit bill, but it may also contain links or lead to a malicious download depending on the scam. A PDF is not automatically malware; ZIP or RAR archives, Office files, and HTML files can present additional risks. A QR code can hide a destination just as a shortened link can, and the words shown on a button do not have to match the link’s actual destination. The safe rule is the same: do not open or follow an unexpected invoice message; retrieve the bill inside your account instead.
Preserve and report a suspicious message
Keep the original email and its full headers, the attachment without opening it, any URLs shown, screenshots, timestamps, and—if relevant—the boleto and payment receipt. Claro says suspicious material can be sent to its Security Incident Response process through the form on its security page; its guidance is to preserve the material and submit it as an attachment without opening it first. You can also report the message as phishing through your email provider. The RNP/Cais Catalogue of Frauds lists [email protected] for reporting suspicious or fraudulent messages to the catalogue; this does not replace notifying Claro or your bank. Claro reporting guidance · RNP/Cais Catalogue of Frauds
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you already interacted with the message
You clicked or opened something, but entered no information
- Close the page or document. Do not download or run anything else from it.
- Check your browser’s downloads and remove files you do not recognize; do not open them.
- Update your operating system, browser, and security software, then run a reputable security scan.
- Watch for follow-up calls, texts, or emails. Closing a page does not establish that no risk remains; the appropriate response depends on what opened and whether anything was downloaded or executed.
You entered a password
- From a device you trust, change the exposed password immediately and change it anywhere else you reused it.
- Enable multifactor authentication, review active sessions, and revoke devices you do not recognize.
- Check account recovery settings and email-forwarding rules for changes you did not make. Contact the provider if you cannot secure the account.
You entered card or banking information
- Contact your bank or card issuer immediately using the number on your card or the official banking app.
- Ask about freezing or replacing the card, reviewing pending and completed transactions, and any available procedure for a fraudulent boleto payment.
- Keep the receipt, beneficiary information, transaction ID, email, and other evidence. A report does not guarantee that a payment will be recovered.
You paid the boleto
Contact your bank immediately, identify the transfer as a suspected fraudulent boleto payment, and ask it to investigate and explain any blocking or recall procedure available. Then contact Claro through an official channel to check whether the legitimate invoice remains unpaid. Preserve the boleto, beneficiary details, transaction ID, email headers, screenshots, and timestamps, and file a fraud report with the appropriate Brazilian authorities. Recovery is not guaranteed, so act quickly and keep records of every contact.
Quick Recap
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
