caminhaopipaagua.com is a fake water-tanker delivery site. It surfaces as a sponsored ad on Google and funnels the customer into WhatsApp. The "agent" arranges the delivery and then, just before the truck supposedly leaves, asks for a Pix transfer "to release the vehicle" or "to release the driver." Once the payment clears, the replies stop and the water never arrives. We received a report of a case dated November 3, 2026.
There is no company behind the site. It shows no CNPJ, no address, not even a city — just "delivery throughout the region." The email address in the footer uses a domain that doesn't exist. The X account referenced in the page's source code doesn't exist either. The ads present the same site as a local service in different cities, such as Guarapuava (PR) and Fortaleza (CE), yet the WhatsApp number on the site belongs to another state entirely.
How the scam works
- You search Google for "caminhão pipa," usually in a hurry because you've run out of water, and click a result labeled sponsored.
- The site is simple but looks professional: "Potable water by tanker truck," "fast, safe delivery," "available 24 hours," a "Request a quote on WhatsApp" button and a photo of a truck.
- On WhatsApp the exchange is quick and the price looks fair. Once everything is agreed, the condition appears: an upfront Pix to "release" the truck or the driver.
- You pay. The agent vanishes, or the WhatsApp account is deleted.
The playbook isn't new. Warnings about it circulate on social media, including from a legitimate water-tanker company flagging that scammers are using its name and photos.
The photo of the truck was made by artificial intelligence
The site's hero image is not a real truck. The file carries a content credential (the C2PA standard, which records an image's provenance) stating it was generated by OpenAI's image service on August 24, 2026. On that same day the caminhaopipaagua.com domain was purchased and the site's first TLS certificate was issued. The domain had belonged to someone else years earlier and had been left dormant.
In other words, the entire storefront — domain, site and photo — was assembled in a single day, nearly two and a half months before the reported case.
The WhatsApp number keeps changing
The site has displayed at least two WhatsApp numbers, from different area codes (81 and 11). One replaced the other, and one of the accounts was deleted after the scam. The numbers are stored in our lookup tool but are not published on this page: search the tool for the number you spoke with. If it's one of them, the search will bring you here.
Mobile numbers are routinely recycled. Whoever holds one of these lines in the future has no connection to the scam.
Before hiring a water tanker
- Treat any request for a Pix to "release" the truck, the driver or the dispatch as a red flag. No such charge exists. Legitimate operators collect on delivery or issue an invoice in the company's name.
- Ask for the CNPJ and verify it on the Receita Federal website (or through a CNPJ lookup service): confirm the company exists, is active, and that its registered activity is water transport or supply. Check that the name on the Pix matches that company.
- Look the company up outside the ad: an address you can actually find on a map, a landline, older reviews.
- A Google ad is no guarantee. In this case, the ads came from an account with a "verified" identity on Google.
If you've already paid
- Contact your bank immediately and request a refund through the MED (Mecanismo Especial de Devolução), stating that it was a scam. Keep the receipt with the transaction ID.
- File a police report (your state's online police portal accepts them). Attach the receipt and screenshots of the conversation, the number and the ad.
- Report the ad to Google (three-dot menu next to the ad, "Report ad") and the number to WhatsApp (on the contact's profile, "Report").
- Tell us what happened through our reporting channel. The Pix key and the receipt help us link this case to others.
What this investigation does not claim
- Who operates the site. The domain registration sits behind a privacy service.
- That the real companies whose name or photos the scam uses have any involvement in it.
- That every water-tanker ad on Google is this scam.
Websites, profiles and accounts linked to the scam
With the period in which they appeared in reports. Copy and compare with what you received.
Phones, Pix keys and accounts never appear here. Search the number: the answer says whether it appeared in vetted reports.
People who fell for it tell how
Summaries written by CyberX from each report. The original text and the reporter's data are not published.
Quem relatou conta que um amigo pediu um caminhão-pipa de água potável pelo WhatsApp. O atendente disse que, para liberar o caminhão, era preciso fazer um Pix antes. O amigo pagou e o atendente parou de responder.
What people ask
Short answers, only with what this page already states: vetted reports, authority acts and CyberX's investigation.
- Is Caminhão Pipa Água (site falso) a scam?
- CyberX holds 1 vetted report about Caminhão Pipa Água (site falso), in Nov 2026. This page describes reports and public acts, with sources; it does not judge the company.
- Which sites, apps and profiles does Caminhão Pipa Água (site falso) use?
- Vetted reports and the investigation list: caminhaopipaagua.com (site). The full list, with the origin of each item, is in the identifiers section.
- What kind of scam is Caminhão Pipa Água (site falso)?
- Fake online store. Fake stores show up in sponsored ads, borrow the name and CNPJ of real companies and push Pix after “declining” the card. If you typed your card into a site like this, ask your bank to block it even if you then paid by Pix.
- I fell for Caminhão Pipa Água (site falso). What should I do?
- File a police report with your receipts. Ask your bank for the Pix special return (MED) as soon as possible. Keep screenshots, numbers and links. If you paid in crypto, check the destination wallet. CyberX is not an authority and does not recover funds; the wallet check is free and the dossier is an investigation on demand.
Sources
- Report submitted to CyberX's reporting channel on 11/03/2026 (incident from the same day).
- The caminhaopipaagua.com page, reviewed by CyberX's investigation team on 11/03/2026 via a private urlscan.io analysis, and the site's hero image file, with its C2PA credential.
- Domain registration (RDAP), public certificates (certificate transparency) and DNS history, consulted on 11/03 and 11/04/2026.
- Google Ads Transparency Center, consulted on 11/03/2026.
This is a registry of reports vetted by CyberX; it is not a ruling nor proof. Identifiers are shown with the period in which they were reported. Authority alerts link the public act. CyberX works in digital intelligence applied to investigation — OSINT, on-chain tracing, and fraud prevention. This content is informational and does not constitute legal advice.
how we write →