Wrong Pix payment online: mistake or scam? What to do
By Laís Peixoto
Growth Marketer, Proteside
Published · 4 min read
If you typed the wrong key, it is a mistake: MED, the Pix fraud refund mechanism, does not apply and the path is to ask the recipient to return the money. If you scanned or copied the store's code and the money went to another name, it is a scam: dispute it through MED in your banking app as soon as possible.
A wrong Pix payment in an online purchase (Pix is the instant payment system run by Banco Central do Brasil, Brazil's central bank) has two very different causes, and each one has its own path. If you typed the wrong key, it is a mistake, and MED (Mecanismo Especial de Devolução, the Pix refund mechanism for fraud cases) does not apply. If you scanned the QR code or copied the code the store showed you and the money went to another name, it is a scam, and MED exists for exactly that.
Mistake or scam: how to tell
Ask one question: where did the payment destination come from?
- You typed or chose the key. You got a digit of the CNPJ (Brazil's company registration number) wrong, pasted the key from another conversation or picked the wrong contact. That is a mistake.
- The destination came ready-made from the store. You scanned the QR code on the payment page or used the copy-code button, and the payee on the receipt is not the store. That is not your mistake: the code was altered along the way.
- The destination came by message. Someone sent the QR code or the key claiming to be the store, and it wasn't. That is also a scam.
The official Banco Central do Brasil guide on refunds is clear: a Pix sent by mistake to another recipient does not qualify for MED. Fraud, including a swapped payment code, does.
If it was a scam: step by step
- Dispute it in your banking app. In the Pix section, use the Contestar Pix (Dispute Pix) option, pick the transaction and report scam or fraud. The self-service button has existed since October 2025.
- Don't wait. The deadline to file is 80 days from the payment, but a refund depends on there being a balance in the receiving accounts. Scammers spread the money across several accounts within a few hours. MED 2.0 follows the money beyond the first account, which improves the odds, with no guarantee.
- Tell the store and send the receipt. If the store's QR code was altered, the store needs to know so it can fix it. Other customers are paying the same account.
- Keep the evidence. The receipt, screenshots of the payment page, the order number, conversations and the bank's case number.
- File a police report. It is not required to dispute the payment, but it strengthens the request.
The bank reviews the case and may freeze the amount in the suspicious accounts. If the fraud is confirmed and there is a balance, the money returns to your account.
If it was a mistake: step by step
- Check the receipt. Look at the recipient's name, partial ID number and institution.
- Talk to your bank. It cannot reverse the payment on its own, but it can advise you and, in some cases, contact the recipient's institution.
- Ask the recipient to return it. Anyone who receives a Pix can return it through their own app, in any case, by their own choice.
- If you can't reach an agreement, get legal advice. Someone who keeps money received by mistake may be required to return it.
- Tell the store. The order was not paid. If you still want the product, the store will generate a new charge.
"I paid the right amount, but the store says it didn't receive it"
This is the most common sign of a code swapped on the page. The customer pays, the bank shows the Pix as completed, and the order stays pending. Before drawing any conclusion, check the payee on the receipt. If it is the store, the problem is with the confirmation, and the playbook is in paid by Pix and the order is still pending. If it is another company or person, treat it as a scam and follow the steps above.
In September 2026, Kaspersky confirmed 90 Brazilian online stores with malicious code that swapped the QR code and the Pix Copia e Cola code (the text version of the payment code that the customer copies and pastes into their banking app) at checkout. No customer of these stores typed the wrong key. They all paid the code the page showed them. See altered Pix QR code: how to tell before you pay.
How to avoid a wrong Pix on your next purchase
- Use the QR code or the copy button on the payment page instead of typing the key.
- Before confirming, read the payee's name and CNPJ in your banking app.
- Be wary of a QR code or key received by message.
- At a small store, if the name is an individual's, confirm with the store through an official channel.
For merchants
A customer with a wrong Pix will come to the store, even when the mistake was theirs. Answering quickly, checking the receipt and pointing to the right path preserves trust. When the payee on the receipt is someone else and the customer used the page's QR code, the problem is the page. Proteside checks, on the payer's screen, whether the QR code and the Copia e Cola code are the ones the store issued, and blocks the swap before confirmation. See Pix protection at checkout.