What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Fraudsters send SMS messages that impersonate Banco do Brasil (BB) to create panic or promise a benefit. The usual goal is to make you click a fake banking page, call a criminal “support” center, install software, disclose credentials, or approve a payment. BB’s public guidance supports an ongoing impersonation and SMS-phishing threat; it does not establish a particular new data breach, one mass campaign, or a verified victim total.
If you received one, do not use any link or telephone number in the message. Open the official BB app or type bb.com.br yourself, then follow the response steps below.
How the Banco do Brasil SMS scam works
This is SMS phishing, often called smishing. A criminal sends a message that looks like a BB alert, adds urgency or fear, and directs you to an action. The destination may be a fake BB page, a fraudulent call center, WhatsApp chat, or an app download. Information entered there can include CPF, agency and account numbers, passwords, card data, telephone numbers, or one-time authentication codes. Criminals may then access accounts, create beneficiaries, make Pix transfers, pay bills, withdraw funds, or continue the fraud by telephone.
BB describes phishing as a fake message leading to a page that resembles the bank’s website and solicits banking credentials (BB’s scam guide).
Recommended Free Tools
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Claims used in fake messages
- A suspicious purchase, payment, transfer, or card transaction
- An account or card that is supposedly blocked
- An urgent security, registration, or device update
- Loyalty points that will expire
- A prize, discount, promotion, or other benefit
- A request to call a “security” or support number
- Instructions to cancel or reverse a transaction
- A request to install a security app, browser component, or remote-access tool
A message does not need to contain a link. Some campaigns start with a phone call or direct you to WhatsApp. A genuine BB transaction alert can also be followed by a criminal who uses the information in a second-stage call. Contact the bank independently rather than replying.
What BB’s sender information means
In guidance published by BB and current as of August 18, 2026, the bank identifies 4004-0001 (without an area code) as the sender for transactional SMS. Since April 2025, promotional messages may display BB INFORMA without a visible telephone number. BB also says its SMS messages do not request passwords or personal or financial information. See the bank’s SMS verification guidance.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
These are indicators, not proof. Sender-ID spoofing can make a fraudulent message display a familiar number or name. Conversely, a real alert may be followed by a scam call. Judge the requested behavior and verify through a channel you opened yourself.
Warning signs that should stop you
- Pressure: threats of immediate blocking, loss, or a same-day deadline.
- A link or callback number: especially a shortened URL, lookalike domain, or number supplied only in the SMS.
- Requests for secrets: password, full card details, CPF, one-time code, or authentication approval.
- Software or permissions: instructions to install an app, browser extension, accessibility service, or remote-control program.
- A payment “to cancel” or “test” security: Banco Central warns that these instructions can authorize a real payment or compromise the device (Banco Central FAQ).
- Polished branding: correct logos, grammar, or personal details do not make a message genuine.
What to do when the SMS arrives
- Do not click, reply, call, download, or enter any information.
- Take a screenshot showing the text, sender, link, and time. Do this before deleting or blocking the message.
- Open the BB app independently and check transactions, alerts, beneficiaries, Pix keys, cards, and scheduled payments. Alternatively, type bb.com.br manually or use a saved official bookmark; BB warns about lookalike domains (BB security guidance).
- Forward the suspicious SMS to 7726, the mobile-carrier short code for spam reporting.
- Send impersonating links, pages, or messages to [email protected].
- After preserving evidence, delete and block the sender. Reporting does not secure an exposed account, so complete the relevant incident steps below.
If you clicked the link
You clicked but entered nothing
- Close the page and do not download or install anything.
- Check recent downloads, newly installed apps, browser extensions, configuration profiles, and accessibility or device-administrator permissions.
- Update the phone’s operating system and security software.
- Monitor BB and other accounts. If you cannot rule out that information was copied, change passwords from a trusted device.
You entered credentials or personal information
- Contact BB immediately through an independently verified channel.
- From a clean device, change exposed passwords, beginning with your email and banking credentials. Do not reuse them.
- Review account access, device authorizations, beneficiaries, Pix keys, loans, cards, and scheduled payments.
- Enable available protections, including BB Code where appropriate.
- Expect possible follow-up calls claiming to be BB security staff. Never disclose another code or approve a “test,” “cancellation,” or “security” transfer.
BB’s assistance guidance recommends immediate contact, password changes, BB Code when possible, and incident reporting (BB help for security incidents).
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchRank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
You installed an app or remote-access tool
- If active compromise is suspected, disconnect the device from the internet and stop using it for banking.
- Document the app and permissions before removal if evidence may be needed.
- Use a different trusted device to contact BB, change passwords, and revoke suspicious sessions or device access.
- Obtain qualified technical help; a factory reset may be appropriate after preserving essential evidence and arranging secure backups. Deleting an app alone does not prove that access has been removed.
If money was transferred or a transaction is unauthorized
- Call BB immediately and request fraud intervention and attempted recovery. Ask for a protocol number.
- If the funds went to another bank, notify that institution immediately as well.
- Preserve the SMS, URL, phone numbers, screenshots, Pix or payment receipts, timestamps, and call or chat history.
- File a Brazilian police report (boletim de ocorrência) and retain all communications.
Fast reporting can give banks a chance to attempt recovery. Reimbursement is not automatic; the outcome depends on the transaction, timing, authentication, evidence, investigation, and applicable Brazilian rules.
Official BB contact options
These contacts are listed in BB’s security assistance guidance. Verify current numbers on BB’s own website before calling, and never rely on a number embedded in a suspicious SMS.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
| Purpose | Contact |
|---|---|
| Relationship center (capital cities) | 4004-0001 |
| Relationship center (other locations) | 0800-729-0001 |
| SAC | 0800-729-0722 |
| Ouvidoria | 0800-729-5678 |
| 61 4004-0001 | |
| Impersonating links or pages | [email protected] |
| Carrier spam report | 7726 |
BB reported on July 22, 2026, that false-central scams can begin through phone, WhatsApp, or SMS and may use spoofing (BB’s false-central warning).
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Do not confuse impersonation with a bank breach
A fake SMS is evidence of criminal impersonation. If you enter data or install malware, your credentials or device may be compromised. Those facts do not by themselves show that Banco do Brasil’s systems were hacked. No source cited here establishes a specific BB breach, campaign size, or total loss figure.
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
The Bottom Line
Treat an unexpected BB SMS that demands urgent action as hostile until independently verified. Use the app or bb.com.br, never the message’s link or phone number; report the SMS to 7726 and impersonation material to [email protected]; and contact BB immediately if you disclosed data, installed software, or moved money.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
