Sefaz warns of online IPVA scam: stay tuned!

Protect yourself against online scams: Learn how to avoid the IPVA scam and keep your money safe while paying your vehicle tax.

The start of a new year always brings with it the responsibility of meeting financial commitments.

In this context, for many Brazilians, paying the Motor Vehicle Ownership Tax (IPVA) is one of the obligations that stands out.

The search for facilities and amenities in the digital world has led many citizens to choose to pay this tax online, taking advantage of the discounts offered. But be careful!

Sefaz Alert: Online IPVA scam on the rise! (Credit: @jeanedeoliveirafotografia /

Finance Secretariat (Sefaz) warns of online IPVA scam

In 2024, the payment of IPVA requires special alert, as scammers are taking advantage of this trend to deceive and harm taxpayers.

The online IPVA scam is a worrying reality, and the State Finance Department (Sefaz) issued an important warning to raise taxpayers’ awareness of the dangers surrounding this practice.

Below, provides details about this growing threat. We will understand how scammers are operating and provide valuable tips to protect yourself against fraud of this type.

Scammers clone IPVA payment sites

The convenience of paying IPVA online, often with attractive discounts for those who pay the single installment, has led many Brazilians to seek this alternative in recent years.

However, this convenience has also aroused the interest of scammers, who are cloning official payment sites and distributing fake links through Google and other search engines.

Sefaz issued a warning to taxpayers about the existence of fraudulent links that lead to false tax payment pages.

Furthermore, he highlighted that the agency does not contact via messaging applications to collect taxes using PIX numbers, making any approach of this type suspicious.

How does the online IPVA scam work?

The scam in question is known as phishing, a practice in which criminals create cloned pages that closely resemble the original websites.

They use domains and layouts that are very similar to legitimate ones, making fraud difficult to detect at first glance.

During an investigation, one of these false links was identified, which has the following address:

The differences between this link and the official website are subtle, which makes the scam particularly dangerous. Both sites use SSL certificates, which is no longer a reliable indicator of authenticity as it is also used by legitimate sites.

Another feature to pay attention to is the website address. The official website uses the "webas" subdomain before the real domain, indicating its legitimate source at

On the other hand, the fake website uses a subdomain called "detranpi" to appear authentic, but is registered under the domain "". This discrepancy is a warning sign.

Understand how scammers operate

Scammers use very similar colors and fonts on fake websites, which makes the fraud even more deceptive.

However, when analyzing the form fields, it is possible to notice slight differences that may go unnoticed by inattentive users. Additionally, fake websites often lack security protections such as captchas.

During a test, a random vehicle license plate and equally random Renavam numbers were inserted, and the fake website allowed access without any database verification.

The values ​​presented were low, with the intention of encouraging users to make payments impulsively, without thinking about the possible consequences of the scam.

It is essential to highlight that, in the case of payment, the beneficiary is not Sefaz, but a company with a recently created CNPJ. This is a crucial clue to identifying fraud.

Unfortunately, there are people who fall into this type of trap, which makes raising awareness and spreading information about scams of this type even more important.

Protect yourself against phishing attacks

To avoid falling victim to the online IPVA scam and other phishing frauds, it is essential to follow some security tips:

Check the domain: Be wary of strange domains, such as .one, as legitimate sites usually use or .gov. Portuguese errors: Be aware of gross Portuguese errors on the site. Analyze the layout: Check the site’s layout looks off-kilter or amateurish.Page redirection: Note whether the site frequently redirects to other pages.Beneficiary of payment: Check whether the beneficiary is an individual or a legitimate company.Pop-up windows: Be wary of pop-up windows that request sensitive information.User Protections: Look for protections, such as captchas, which are common on legitimate sites.

Furthermore, if in doubt, call the company or body responsible to confirm the website address.

Therefore, if you believe you have found a fake website, report it to the police and use an antivirus on your computer when making online payments.

Also avoid accessing bank accounts and applications on public Wi-Fi networks, where your security may be compromised.

Ultimately, online safety is key, and awareness is the best weapon against scammers.

Therefore, stay alert and protect yourself against the online IPVA scam, ensuring that your payment is made safely and calmly.

More about scams: Avoid banking scams: check out 6 essential tips from Febraban

Post a Comment

Previous Post Next Post