Qrybut was an "exchange" operating at qrybut.com and qrybutgroup.co, both registered in January 2025 and offline since the end of that year. The second ran the same interface kit, down to the same charting library, as the Bitsaci site, another platform in this record; a May 2025 security guide lists clones of the identical design under other names. We found no action by the CVM, the Banco Central, any Procon or police force naming the brand, and no coverage in the professional press. "Bierce," the name of the club that funneled victims to the platform, corresponds to no real institution.
The script, as the reports describe it
A link in an influencer's profile or an ad leads to a group called "Clube de Análise de Investimento Inteligente Bierce," with an alphanumeric prefix in the name such as C41 or H31. The "professor" calls the trades, the platform offers a "USDT loan" to scale up the position, and the balance climbs on screen. When the withdrawal is requested, an "audit release" and fresh deposits are demanded, along with the warning that the platform "is leaving Brazil." A legal article from October 2025 describes a case involving R$ 528,000 between February and May 2025. The Pix transfers went to shell companies, one of which had complaints filed against it on Reclame Aqui as late as November 2025.
Qrybut has no page of its own on Reclame Aqui: the complaints are filed against third parties, such as the app store and the companies receiving the Pix transfers, which are not the scheme itself. The list of eight "club and platform" pairs that gave rise to this and other pages in the record appears in the footer of a consumer complaint from June 2025; each club was matched to its platform against independent sources before being included here.
What the sources support, and what they don't
They support: the registration dates and the abandonment of the domains; the technical identity with Bitsaci; the fact that public reports and a legal article describe the script. They do not support: who is behind it, the total amount lost, or that Qrybut and Bitsaci are the same group — something the shared technical kit suggests but does not prove. No individual is named here.
If you were caught
File a police report with receipts and screenshots of the group. If you sent Pix, ask your bank to open a Mecanismo Especial de Devolução (MED) claim, citing the recipient's CNPJ. If you sent USDT, CyberX's wallet lookup is free.
Websites, profiles and accounts linked to the scam
With the period in which they appeared in reports. Copy and compare with what you received.
No reports about Qrybut yet
This page came from an authority alert or from CyberX's investigation. If you fell for it, or know someone who did, your report can be the first and changes what the page is able to show.
Sources
- O golpe da Qrybut Exchange, a falsa corretora de criptomoedas, Jusbrasil, October 15, 2025 (law firm article; third-party account).
- Qrybut scam, HowToFix Guide, May 2025 (verifier).
- Complaint listing the eight club and platform pairs, Reclame Aqui, June 4, 2025 (third-party account).
- Internet Archive captures of qrybut.com and qrybutgroup.co (2025) and domain registration records consulted on September 29, 2026.
This is a registry of reports vetted by CyberX; it is not a ruling nor proof. Identifiers are shown with the period in which they were reported. Authority alerts link the public act. CyberX works in digital intelligence applied to investigation — OSINT, on-chain tracing, and fraud prevention. This content is informational and does not constitute legal advice.
how we write →