A network of fake betting platforms is promising users returns of up to BR3,000 ($557) from deposits as low as BR20.
Still, those websites block withdrawals through the sites' own programming, according to a ZenoX investigation. This comes as Brazil has begun shutting down websites following a provisional ban, with over a thousand blocked websites.
The Brazilian cybersecurity company's "Saque Fantasma" investigation found sites imitating legitimate betting platforms, with casino games, account balances and displays of supposed recent withdrawals.
Saque Fantasma (“Ghost withdrawal”) is a financial scam involving fake online betting platforms that lure victims with promises of turning small deposits into massive returns, only to trap them in a loop of fake withdrawal fees.
Users are lured through social media. One Instagram approach told them to deposit BR20 and send their Pix receipt and key in exchange for BR2,000.
After depositing, users see a betting balance, but when they try to withdraw, they are told to pay a BR30 fee first. ZenoX found the system processing the fee was defective: the browser generated the payment QR Code, but the platform could not confirm payment. Withdrawals stayed marked "Payment of Fee Pending," letting users generate another QR Code and repeat the process.
In one database, 157 of 231 transactions remained pending. Some 92% of deposits were between BR20 and BR30, and 68% had not been returned. Internal records showed BR107,519 in accumulated balances since December 2025.
ZenoX linked three domains, MAXXBET7K, MAXBTT7K and NEWWBET7K, to the same operation through shared code, infrastructure and payment mechanisms, but could not confirm who is responsible.
The database exposed the names, emails and phone numbers of more than 3,600 accounts, which could be used for further scams and the platforms were promoted on Instagram, TikTok and Telegram
