Clean Onboarding for Promo Campaigns
API that screens every signup during your Pix giveaway, referral or sign-up bonus campaign. Bots and recycled CPFs are blocked before they touch your CRM, your wallet or your bonus engine.
Growth · Performance · User Acquisition · Brazil
Up to 70% fewer fake users in your funnel. The easiest way for global companies to legally onboard Brazilian users.
Bots, recycled CPFs and incentive-farmers eat through your CAC long before a real customer signs up. X8flow is the AI-powered shield that lets your Pix giveaway, sign-up bonus or referral campaign land budget only on verified, real Brazilians — without breaking LGPD.
/ The Problem
Every campaign in Brazil attracts millions of bots and fake CPFs. Your CAC is paying for them.
When you launch a Pix giveaway, a sign-up bonus, an affiliate program or a paid acquisition burst in Brazil, the spike attracts professional fraud farms within minutes. They submit recycled CPFs, synthetic identities and stolen documents at industrial scale.
Without a real-time KYC and deduplication layer, your dashboards lie. Conversion looks great, until finance reconciles activation, retention and chargebacks — and discovers half the funnel was never a real person.
X8flow sits between your sign-up form and your CRM. We block bots, deduplicate identities and confirm each Brazilian user against official sources, in milliseconds, without adding friction for legitimate customers.
- Real-time CPF validation against official Brazilian sources
- Bot, emulator and farm-pattern detection on signup
- Cross-campaign deduplication (one person, one bonus)
- Device, IP and behavioral signals scored by AI
- Frictionless flow for legitimate users
- Full LGPD compliance, declared purpose, audit trail
Three things you turn on. One outcome: budget that lands on real Brazilians.
Foreign Company Fast Lane
If you're a global product launching in Brazil, we operate as your local KYC and compliance partner. You ship features; we keep onboarding legal, fast and fraud-free under LGPD.
Growth-Safe Compliance Layer
Marketing wants speed, legal wants safety. Our governance, opt-out and audit trail let both ship the same campaign without rewriting it twice.
Built for the campaigns burning the most budget on fake users.
PIX GIVEAWAY
R$10 reward, 1M signups, 80% bots — until X8flow.
We deduplicate by CPF + device + behavior so the same person can't claim 400 rewards across burner phones.
SIGN-UP BONUS
Fintechs, exchanges and super-apps.
Block recycled CPFs and synthetic identities before they trigger a bonus payout or KYC review backlog.
AFFILIATE / CPA
Stop paying affiliates for fake leads.
Each conversion is scored in real time. Pay only for verified, eligible Brazilian users.
GLOBAL LAUNCH
Foreign apps entering Brazil.
Local KYC, local sources, local compliance — without you having to open a Brazilian legal team on day one.
/ FAQ
FAQ for Growth, Performance and Foreign Teams
Honest answers for marketing leaders, performance teams and foreign companies launching in Brazil.
What does the 70% reduction in false positives actually mean for my campaign?
+
Across deployments, after enabling our AI-powered KYC layer, our clients see up to a 70% drop in false-positive signups — accounts that look real long enough to claim a bonus, but never convert. That budget goes back into acquiring real users.
We're a foreign company with no Brazilian entity yet. Can we still use X8flow?
+
Yes. We frequently onboard global products that want to test the Brazilian market before incorporating locally. We act as your KYC and compliance layer under LGPD, with declared purpose, contractual data processing terms and audit-ready logs from day one.
Do you add friction to legitimate users?
+
No. The whole point is the opposite. Real Brazilians pass through silently. Friction is added only to high-risk signals — bot signatures, recycled CPFs, suspicious device fingerprints. Your conversion curve improves on the good cohort.
How do you handle LGPD for an acquisition campaign?
+
Every check runs under a declared purpose (fraud prevention and KYC), with a formal retention term, immutable logs and a global opt-out registry. Your DPO — or ours, on a DPO-as-a-service basis — receives the evidence pack.
Is this an API or a managed service?
+
Both. You can integrate the API directly into your signup flow, or we operate it as a managed service inside your performance stack, including weekly campaign hygiene reports.
Stop paying for fake Brazilians. Start acquiring real ones.
Tell us about your next campaign. We'll give you a fraud and CAC waste estimate, the integration plan and the LGPD setup — usually within one week.