Is cartaoatacadao.com.br legit? TrustSniffer's high-trust assessment: 80/100

Overview

The website is the institutional and promotional portal for Cartão Atacadão, presenting a consumer credit-card offering and related financial services operated by Banco CSF, with revenue apparently derived from card usage, interest, fees, and insurance products.

Scam/Impersonation Risk

No identity contradictions, phishing indicators, brand impersonation, malicious reputation findings, or other confirmed scam signals were observed. The domain is long-established, carries a meaningful global traffic footprint, and is registered to Carrefour Comércio e Indústria Ltda. Interactive testing identified no hidden forms, credential forwarding, cloaking, wallet-related activity, clipboard manipulation, or suspicious scripts. These mutually reinforcing identity, reputation, and behavioural signals support the conclusion that this is a legitimate website.

• The domain registration record identifies Carrefour Comércio e Indústria Ltda and shows registration in 2015 (~11.04 years old), with expiry on 24 July 2027.
• The homepage identifies the service as Cartão Atacadão operated by Banco CSF and presents an internally consistent institutional identity.
• External reputation checks recorded 0 malicious and 0 suspicious detections, no search-browsing safety hit, no reported abuse, and inclusion within the global top one million at rank 175,815.
• Behaviour observed on the homepage showed no login form, hidden form, external password form, cloaking, suspicious inline script, or brand-impersonation indicator.

Regulatory Verification Notes

The site provides substantial financial-services disclosure, including a corporate identifier, physical address, contracts, tariff information, policies, complaints handling, security guidance, and customer-service channels. Its offerings extend beyond the core credit card to personal loans, cash advances, bill payment, insurance products, prize-linked promotions, and account-management services; these products carry ordinary consumer-credit, interest, fee, insurance-coverage, and promotion-eligibility considerations. The supplied pages do not establish a specific regulatory authorization or license number, so regulatory status remains a disclosure-verification matter rather than a legitimacy concern. No matching broker-reputation entry was identified, but that result is not determinative of legal or regulatory standing.

• The homepage and linked institutional material identify Banco CSF and expose contracts, tariff schedules, privacy policies, a physical address, a corporate registration identifier, an ombudsman function, and service channels.
• The homepage advertises exclusive store discounts, instalment purchasing, personal credit, insurance, cash withdrawal, bill payment, mobile recharge, protected-invoice products, and prize draws, including a stated R$100,000 prize.
• The site’s transport encryption uses a DV certificate issued by WE1, valid until 25 August 2026.
• The site is served from AS13335 by Cloudflare, Inc., United States.

What to Verify Next

Before entering a material credit or insurance commitment, the applicant should confirm Banco CSF’s current authorization directly with the relevant official registry, compare the applicable contract and tariff schedule with the terms shown during onboarding, and retain the final pre-contract disclosures. Promotion rules, insurance exclusions, effective interest costs, and repayment obligations should be reviewed before acceptance. Customer-service details should be independently confirmed before acting on unsolicited messages that reference the brand.

• The contracts and tariff materials provide the documentary basis for comparing fees, interest obligations, and final application terms.
• The insurance pages cover several distinct products, making policy exclusions, insured events, waiting periods, and cancellation provisions transaction-specific.
• The homepage publishes an official WhatsApp assistant number for balance, limit, billing-cycle, and transaction information, providing a reference point for validating branded communications.
• The site provides dedicated security guidance and an ombudsman channel for escalation and complaint handling.

Summary Verdict

The website has a high-trust posture and reads as an established, legitimate financial-services presence. Its consistent institutional identity, mature domain provenance, substantive consumer documentation, clean external reputation, and benign observed behaviour converge without contradictory signals.

Infrastructure Integrity

Cloudflare provides the site’s CDN and WAF layer, with both observed addresses operating as edge endpoints and no direct origin address exposed during analysis. This arrangement reduces direct infrastructure exposure and is a useful security control, although protective hosting alone is not evidence of legitimacy.

Closing Assessment

Normal interaction, including account login, application activity, account servicing, and standard transactions, is appropriate, subject to ordinary review of contractual terms before accepting a financial commitment.