The path of a report
- 01nowYou report
Anonymously or identified. The text you write stays with triage only.
- 02no deadline: minutes or daysTriage
A person at CyberX checks that it is a scam and not a commercial dispute, that there is substance and whether the identifiers match a scam already registered, and writes a summary with no personal data.
Done by a person - 03when warrantedInvestigation
When the scam deserves it: domain, wallet, CNPJ, app, profiles and authority alerts. The investigation writes the page's mechanics.
CyberX investigationinvestigated by CyberX - 04laterPage or lookup
The report enters a page, with a summary free of personal data, or starts answering in the search.
What we publish, and what we never do
Each item in a report falls into one of three levels. You see the level of each one while you report.
- Name or brand
- Website
- App
- Profile
- Wallet
- CNPJ
- Group or channel
A CNPJ whose registered name is a person's name is shown with initials only.
- Phone
- Pix key
- Bank account
- Transaction hash
You type it in the search and the answer says how many reports it appeared in, and when. It only answers once corroborated.
- CPF
- A person's name
- Account institution
- Victim data
- Evidence files
- Report text
Encrypted, with the key outside the database. Triage sees it; the page never does.
[i]Every identifier is shown with its origin: an authority act, a CyberX investigation or a report. Those from reports carry the period in which they were reported and the mark “reported” or “corroborated”. Phone numbers get recycled and accounts get used without the owner knowing: the registry describes reports, not people.
Three requests, made on the page itself
All three requests are made on the scam page itself, in the “were you named on this page?” block.
- 01Reply
A named company, brand or CNPJ replies through the page itself, with no fixed deadline. An accepted reply is published, dated, next to what it contests.
who asks: the named company, brand or CNPJ - 02Request concealment
A formal request, with identification, to conceal a company name or another identifier. If granted, it stops being shown and answers only by lookup.
who asks: the identifier's holder, identified - 03Remove from lookup
The holder of a phone or Pix key can ask, with proof of ownership.
who asks: the holder, with proof of ownership
Cybercrime reports
Whoever knows who broke into a system, or where leaked data is for sale, can report it here without being the victim, including anonymously. Triage documents it and, when warranted, the report becomes a CyberX investigation, and it is that dossier that goes to the competent authority.
Crime outside this niche is not published; if you identified yourself, we point you to the right channel.
Data: purpose, retention and rights
- 01Purpose
- Receive and triage reports, publish scam pages with vetted identifiers, answer lookups and, when warranted, open our own investigation. The reporter's data serves replies and proof of submission; third-party data in the report serves triage and the page, within the limits above.
- 02Retention
- Reporter's name, email and IP: 180 days, extendable only with a recorded justification. Unpublished report: 180 days, after which only the summary without personal data and the hashes remain. Published report: while it is live. A report turned into an investigation follows the investigation's regime.
- 03How we store it
- Phone, Pix key, account, text and identity are encrypted, with the key outside the database. Lookups compare hashes and never return the value. Triage sees data in the clear; the page never does.
- 04Your rights
- Confirmation, access, correction, objection and deletion, through the data officer channel. We answer within fifteen days. The full privacy policy will be linked on this page as soon as it is published.
What we are not
- We are not an authority
- We do not recover funds
- We do not rate or certify companies
- This registry is not proof
File a police report. The full dossier of a case is an investigation on demand. Request an investigation