cyberx_█
CyberX investigation

Is Qrybut a scam? What the reports say about the "Clube Bierce" exchange

Also known asQrybut ExchangeQrybut GroupClube de Investimento Bierce
> file · qrybut
status
active
no vetted reports yet
loss per report
no amount reported yet
“me too”
0
people said they fell for it
Before investing, check the CVM

Anyone offering investments to the public in Brazil must be registered with the Securities Commission (CVM), which publishes alerts about unauthorised companies and websites. Fixed daily returns, a WhatsApp group with a “teacher” and a fee to release a withdrawal are the most common signs.

Qrybut was an "exchange" operating at qrybut.com and qrybutgroup.co, both registered in January 2025 and offline since the end of that year. The second ran the same interface kit, down to the same charting library, as the Bitsaci site, another platform in this record; a May 2025 security guide lists clones of the identical design under other names. We found no action by the CVM, the Banco Central, any Procon or police force naming the brand, and no coverage in the professional press. "Bierce," the name of the club that funneled victims to the platform, corresponds to no real institution.

The script, as the reports describe it

A link in an influencer's profile or an ad leads to a group called "Clube de Análise de Investimento Inteligente Bierce," with an alphanumeric prefix in the name such as C41 or H31. The "professor" calls the trades, the platform offers a "USDT loan" to scale up the position, and the balance climbs on screen. When the withdrawal is requested, an "audit release" and fresh deposits are demanded, along with the warning that the platform "is leaving Brazil." A legal article from October 2025 describes a case involving R$ 528,000 between February and May 2025. The Pix transfers went to shell companies, one of which had complaints filed against it on Reclame Aqui as late as November 2025.

Qrybut has no page of its own on Reclame Aqui: the complaints are filed against third parties, such as the app store and the companies receiving the Pix transfers, which are not the scheme itself. The list of eight "club and platform" pairs that gave rise to this and other pages in the record appears in the footer of a consumer complaint from June 2025; each club was matched to its platform against independent sources before being included here.

What the sources support, and what they don't

They support: the registration dates and the abandonment of the domains; the technical identity with Bitsaci; the fact that public reports and a legal article describe the script. They do not support: who is behind it, the total amount lost, or that Qrybut and Bitsaci are the same group — something the shared technical kit suggests but does not prove. No individual is named here.

If you were caught

File a police report with receipts and screenshots of the group. If you sent Pix, ask your bank to open a Mecanismo Especial de Devolução (MED) claim, citing the recipient's CNPJ. If you sent USDT, CyberX's wallet lookup is free.

Sister brandsBitsaci →Bierce (nome do clube, sem instituição real por trás)Names that sources or our investigation link to this one. With an arrow, they already have a page.
// identifiers

Websites, profiles and accounts linked to the scam

With the period in which they appeared in reports. Copy and compare with what you received.

brand
Qrybutfound by CyberX's investigation
CyberX investigation
brand
Bitsacifound by CyberX's investigation
CyberX investigation
brand
Bierce (nome do clube, sem instituição real por trás)found by CyberX's investigation
CyberX investigation
site
qrybut.comfound by CyberX's investigation
CyberX investigation
site
qrybutgroup.cofound by CyberX's investigation
CyberX investigation
group
Clube de Análise de Investimento Inteligente Bierce (WhatsApp; prefixos C41, H31)found by CyberX's investigation
CyberX investigation
// vetted reports

No reports about Qrybut yet

This page came from an authority alert or from CyberX's investigation. If you fell for it, or know someone who did, your report can be the first and changes what the page is able to show.

What already helps
website or appPix key or accountprofile or groupdate and amount
About 5 minutes · can be anonymous · nothing goes live before triage
Be the first to report →
// sources

Sources

Named on this page?We answer through this page, with no fixed deadline. An accepted reply is published, dated, next to what it contests.

This is a registry of reports vetted by CyberX; it is not a ruling nor proof. Identifiers are shown with the period in which they were reported. Authority alerts link the public act. CyberX works in digital intelligence applied to investigation — OSINT, on-chain tracing, and fraud prevention. This content is informational and does not constitute legal advice.

how we write →
Report