Skip to main content
NOPE
Low reported severity Criminal Charges

Police in Espírito Santo say a man photographed an 81-year-old's face, passed his bank app's facial recognition on his own phone and took R$6,080; arrested

Folha Vitória reported on 29 September 2026, citing the Espírito Santo Civil Police, that a 39-year-old man was arrested on 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud against an 81-year-old man in the north-west of the state. According to the police, the suspect, who worked as a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face. The police say he used the images to get past the facial recognition of the banking app and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge, diverting R$6,080. The victim is described as illiterate. The police say the suspect had prior records and was serving a sentence under a progressive regime. Folha do ES and Tribuna Norte Leste carried the same police account but could not be read.

AI system
Unidentified facial recognition system
Occurred
Event date unknown
Reported
29 September 2026
Event location
Brazil
What the AI did
Made a decision about the person
Reported harm
Financial Loss
Whose AI use
Someone else’s AI use · An institution’s AI use
Setting
Finance · Everyday life
Evidence
AI involvement reported · Causal attribution alleged · 1 source
4 claims: 4 reported. 5 open questions
People reported harmed
1 person

AI system as recorded: The facial-recognition check of the victim's banking app, which the Civil Police say the suspect passed with photographs of the victim's face to enable account access on his own phone (bank and app not named)

What Happened

The police account. Folha Vitória (29 September 2026) relays the Espírito Santo Civil Police (14th regional station): a 39-year-old man was arrested on Monday 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud. The suspect worked as a security guard at a dance venue and invited an 81-year-old man to his home saying he would make a card guaranteeing free entry. During the meeting he kept the victim's bank card, obtained personal data and photographed his face.

The facial recognition. The police say the suspect used the images to get past the banking app's facial recognition and enable access to the account on his own phone. He then reset security passwords, redeemed financial investments and made Pix transfers without the victim's knowledge or consent, diverting R$6,080.

The suspect. The police say he had prior records for theft, fraud, misappropriation, threats and traffic offences and was serving a sentence under a progressive regime when the new crime was committed. He was taken to the prison system.

Limits. One police account relayed by three regional outlets; only Folha Vitória could be read (through an archive capture). The bank, the app, the dates of the access and transfers and whether the money was recovered are not stated. The victim is described as illiterate and aged 81; he is not named. The suspect is not named here.

Reported harm

R$6,080 was diverted from an 81-year-old man's bank account after, according to the Civil Police, the suspect photographed his face and passed the banking app's facial recognition on his own phone, then reset passwords, redeemed investments and made Pix transfers (police account relayed by Folha Vitória).

Outcome

Ongoing

The Civil Police say the preventive arrest warrant was executed on 28 September 2026 after the inquiry into qualified theft by electronic fraud concluded, and that the suspect was taken to the prison system and remains at the disposal of the courts. No charge, trial or recovery of the money is reported.

What remains unknown

  • The bank and app whose facial recognition was passed, and whether the bank has commented.
  • When the meeting, the account access and the transfers took place.
  • Whether the R$6,080 was recovered.
  • Whether the suspect has been charged or tried.
  • How the photographs passed the liveness check, if any.

What the evidence supports

AI involvement: reported. The Civil Police, relayed by Folha Vitória, say the suspect used photographs of the victim's face to get past the banking app's facial recognition and enable access to the account on his own phone. The facial recognition check accepted the photographs as the account holder and granted access on another device; that authentication decision is what allowed the password resets, redemptions and Pix transfers. The bank, the app and the recognition vendor are not identified, and no bank statement is reported.

4 claims: 4 reported. What the statuses mean

Reported A 39-year-old man was arrested on 28 September 2026 on a preventive warrant, after a Civil Police inquiry into qualified theft by electronic fraud, on suspicion of using facial-recognition images of an 81-year-old man to access his bank account and divert R$6,080.

Causal attribution. Civil Police account relayed by Folha Vitória.

  • folhavitoria.com.br(opens in new tab) supports · Portuguese
    'Um homem de 39 anos foi preso suspeito de usar imagens do reconhecimento facial de um idoso de 81 anos para acessar a conta bancária da vítima e desviar R$ 6.080,00'; 'O mandado de prisão preventiva foi cumprido nesta segunda-feira (28).'; 'a prisão ocorreu após a conclusão do inquérito que apurou furto qualificado mediante fraude eletrônica.'
Reported According to the police, the suspect, a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face; the victim is illiterate.

Causal attribution. Civil Police account relayed by Folha Vitória.

  • folhavitoria.com.br(opens in new tab) supports · Portuguese
    'o investigado teria convidado o idoso para ir até sua residência, sob a justificativa de produzir uma carteirinha que garantiria entrada gratuita no estabelecimento.'; 'ele teria retido o cartão bancário da vítima, que é analfabeta, além de obter dados pessoais e fotografar o rosto dela.'
Reported The police say he used the images to get past the banking app's facial recognition and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge or consent.

Causal attribution. Civil Police account relayed by Folha Vitória; no bank or app statement.

  • folhavitoria.com.br(opens in new tab) supports · Portuguese
    'o homem teria usado as imagens para burlar o sistema de reconhecimento facial do aplicativo bancário e habilitar o acesso à conta em seu próprio celular.'; 'ele teria redefinido senhas de segurança, resgatado aplicações financeiras e feito transferências via Pix sem o conhecimento ou consentimento do idoso.'
Reported The police say the suspect had prior records for theft, fraud, misappropriation, threats and traffic offences, was serving a sentence under a progressive regime, and was taken to the prison system.

Causal attribution. Civil Police account relayed by Folha Vitória.

  • folhavitoria.com.br(opens in new tab) supports · Portuguese
    'o investigado tem registros anteriores por furto, estelionato, apropriação indébita, ameaça e delitos de trânsito'; 'ele cumpria pena em regime progressivo quando teria cometido o novo crime.'; 'o homem foi encaminhado ao sistema prisional e permanece à disposição da Justiça.'

Sources

1 source inspected. Sources that repeat one account do not corroborate each other.

How the sources were read, and where the events happened

Read in Portuguese by the research agent (an AI) on 2026-10-07 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. Direct fetch returned HTTP 403; the article was read through an Internet Archive id_ capture of the same URL. The report relays the Espírito Santo Civil Police account. Applies to s1.

Not read: folhadoes.com returned HTTP 403 on 2026-10-06 and 2026-10-07 and has no Internet Archive capture. Its headline matches Folha Vitória's and it relays the same police account; cited for existence only. Applies to s2.

Event countries: Brazil. Affected-person countries: Brazil. Court countries: Brazil.

The police account places the meeting, the arrest and the regional police station in north-west Espírito Santo, Brazil; the victim is described as an elderly man there; the preventive arrest warrant was issued by a Brazilian court.

Reviewed for publication 2026-10-07: Published as a contextual case (made_decision_about) at low severity: the Espírito Santo Civil Police, relayed by Folha Vitória, say a suspect photographed an 81-year-old man's face, passed his banking app's facial recognition on another phone and diverted R$6,080 through password resets, redemptions and Pix transfers. One police account; the victim and suspect are not named; the bank is not identified.

People described

An 81-year-old man in north-west Espírito Santo, Brazil, described by police as illiterate (not named)

People reported harmed in this case

1 person

0 AI participants · 1 other person harmed

One person, the 81-year-old account holder whose R$6,080 was diverted (police account via Folha Vitória). The suspect is not counted. Exact 1.

Counted once within this case. The same person may appear in other cases. This count does not establish AI causation.

Tags

#facial-recognition#banking-app#biometric-bypass#pix#elderly-victim#financial-fraud#brazil#espirito-santo

Cite this case

Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.

APA

NOPE. (2026). Police in Espírito Santo say a man photographed an 81-year-old's face, passed his bank app's facial recognition on his own phone and took R$6,080; arrested. AI incidents. https://nope.net/incidents/2026-espirito-santo-bank-app-facial-recognition-passed-with-photos-of-elderly-man-pix-theft

BibTeX

@misc{2026_espirito_santo_bank_app_facial_recognition_passed_with_photos_of_elderly_man_pix_theft,
  title = {Police in Espírito Santo say a man photographed an 81-year-old's face, passed his bank app's facial recognition on his own phone and took R\$6,080; arrested},
  author = {NOPE},
  year = {2026},
  howpublished = {AI incidents},
  url = {https://nope.net/incidents/2026-espirito-santo-bank-app-facial-recognition-passed-with-photos-of-elderly-man-pix-theft}
}

Related cases

Medium Unidentified facial recognition system

Serra, Espírito Santo: a personal trainer who swapped his motorcycle for what turned out to be a rented car was told to complete a facial-recognition check 'to transfer the car's title'; police say the biometric was then used to contract a vehicle financing in his name, leaving a loss above R$100,000 (suspect arrested 22 September 2026)

The Espírito Santo Civil Police (Defa, the fraud and forgery unit) said a 27-year-old man was arrested on a warrant in Serra on 22 September 2026, suspected of defrauding a personal trainer of more than R$100,000. According to the police, the suspect offered a car in exchange for the victim's motorcycle; during the negotiation he persuaded the victim to perform a facial-recognition procedure, saying it was needed to transfer the car's ownership; the biometric was later used to contract a vehicle financing in the victim's name without his authorisation, and weeks after the exchange the victim discovered that the car he had received did not belong to the suspect and was a rental. The loss, combining the motorcycle and the fraudulently contracted financing, exceeded R$100,000. The suspect, who police say had been arrested in São Paulo in July 2025 in a 'love scam' case, was taken to the Centro de Triagem at the Rodrigo Figueiredo da Rosa prison complex and remains at the disposal of the courts. The financing provider and the facial-recognition system are not identified, and the reports do not say how the captured biometric was used to pass the financing.

Medium Unidentified voice-cloning tool

Picos, Piauí, Brazil: a digital influencer lost more than R$56,000 when fraudsters sent him audio messages in his uncle's AI-cloned voice 'confirming' a car he was buying in Fortaleza

On Monday 10 August 2026 a digital influencer from Picos, in the centre-south of Piauí, began negotiating a car advertised online for sale in Fortaleza (Ceará), where an uncle of his lives, and asked the sellers to take the car to the uncle so he could inspect it. On Tuesday 11 August a contact using a different number but the uncle's photo sent him audio messages in a voice identical to his uncle's, generated with artificial intelligence, saying the car was in good condition and telling him to make the bank transfer. Believing he was speaking to his uncle, he transferred the money; when he then called the uncle's real number he learned he had been defrauded. The loss exceeded R$56,000, money he says he had saved for years. He registered a police report on 11 August; the Piauí property-crimes unit (Depatri) is investigating and he is seeking a refund from the banks. The account is the victim's own, reported by G1 Piauí on 13 August 2026 from his social-media posts and an interview; the police unit did not respond to G1 before publication.

Medium Unidentified video tool

Brazil: scammers used AI-cloned voices and images of children with cancer in fake donation campaigns; 16 arrested in Operação Sophia

On 14 July 2026 the Rio Grande do Sul Civil Police launched Operação Sophia against a group that used AI voice cloning and deepfake to turn real fundraising campaigns of children with cancer into fake donation appeals: AI-generated child voices asked for money in videos boosted by pages such as 'Clube de Doadores' and 'Unidos pelo Amor', leading donors to lookalike sites that issued Pix codes to shell companies. Sixteen people were arrested across five states. In the campaign that started the investigation — using the image of Kelen Santos's daughter, who was in cancer treatment — police traced R$294,500 diverted, and the investigation found a financial-hub company that moved more than R$1.7 million. The family had to tell congratulating donors that their money had gone to a scam.

Medium Unidentified voice-cloning tool

Campo Grande, Mato Grosso do Sul: a workshop owner paid about R$28,000 by Pix for a car after messages and voice notes in his brother's AI-cloned voice 'confirmed' the vehicle; a second family avoided the same fraud by checking directly with their daughter

A businessman who owns a workshop in Campo Grande, Mato Grosso do Sul, found a car advertised at a market price by a seller who said he was in Ponta Porã, the businessman's home town; he passed his brother's contact so the brother could inspect the car. The fraudsters then contacted him as if they were his brother, saying he had seen the car, sending a video and confirming everything was in order; believing he was speaking to his brother, he made a Pix transfer of about R$28,000, after which the contact was blocked. He told G1 MS and TV Morena that the criminals used information about his family and a cloned voice. Guided by his wife, he contested the transfer through the Central Bank's special return mechanism and, after nearly three hours, a police report and an in-person registration, recovered about 20 percent. In a second case reported alongside, a medical student's mother in Dourados received messages, a voice note and a video from someone posing as her daughter, in a cloned voice, approving payment for an HB20 she was buying in Campo Grande; the mother checked directly with her daughter and discovered the audio had been AI-generated before any money was sent. A state prosecutor said his unit had not yet catalogued identical voice-cloning cases and urged victims to file police reports; the Civil Police did not respond to G1's questions. The date of the fraud is not reported.

If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.

Back to all incidents