´ó¿§¸£ÀûÓ°Ôº

How do you know it was "stolen". Anyone can find just about anyone else's CPF on the internet because it is so widely used. I've seldom had any difficulty finding the CPF of anyone. That's one of the sad realities of a country where you need to give someone your CPF for just about every time you do something except breathe. It seems more likely someone grabbed her CPF from the internet or elsewhere and sent her a scam message hoping she would pay. The same person probably sends hundreds of these a day.

I would possibly but carefully ignore it! If it's just some Whatsapp then they probably don't have anything to use against your girlfriend.

Also, I hate the fact that so many places ask for a CPF. But I never give it to them (I know in some places that's not possible though).

But what's even more suspicious is the Serasa AntiFraude website. Well maybe it's good but it doesn't seem official. And if it isn't, what are they gaining out of this "service"?

Thanks for the response I been reading this is becoming more a problem. I had her go make a police report and check her bank in person. The Serasa site has a phone number so I said if she want to use the service to call them. At the police station they told her nothing would be done.  It was good she didn’t go to the website on the message. Just a tip we looked at the phone number and it was from Santos not a government agency. Second looked up on Google search the name of the so called agency in the message no such government agency. Just a couple way to check without following the message instructions. Hope this helps. Did police report to have as evidence in case they do use her CPF to open account or what every else.