Free Fire 2018: Barbosa Server key tests are alarming
The Barbosa Server promises access to Free Fire 2018, collects data from your Discord, and redirects to ad-filled sites without delivering any key.
By
Ronny Rolim
If someone sent you the link to the Barbosa Server claiming that you can play Free Fire 2018 for free, stop everything and read this before clicking any button. We tested the entire site, documenting each step — and what we found is a three-layer scheme that uses you to generate money without delivering anything in return.
This is not an exaggeration. It's what happens to anyone who accesses barbosasmobile.com thinking they will get a key to access the Free Fire 2018 private server.
What is the Barbosa Server
The Barbosa Server is an unofficial private server that modified the original Free Fire APK to redirect game traffic to its own infrastructure — allowing it to run a version similar to Free Fire 2018 outside of Garena’s servers. The site itself makes it clear at the top: "This is an independent community project and is not affiliated, authorized, endorsed, or sponsored by Garena, Free Fire, or any of its subsidiaries."
To access the server, you need a access key. And that’s exactly where the scam begins.
The Barbosa Server promises access to Free Fire 2018 — but the process to obtain the key hides a scheme for data collection and click fraud. Step 1: your Discord becomes currency
To get the key, the site redirects you to keys.barbosasmobile.com, where the only option is "Log in with Discord". It seems normal — until you see what the application requests when the Discord window opens.
The Barbosa Server requests the following permissions on your Discord account:
- Access your username, avatar, and tagline
- Access your email address
- Know which servers you are in
- Join servers on your behalf
This is not basic authentication. This is data collection. With these permissions, the Barbosa Server operator has access to your email, knows which communities you are part of, and can add you to servers without you noticing. The application has been active since March 28, 2026.
The Barbosa Server, identified in May 2026, collects the username, email, and list of servers from the player's Discord account as a mandatory condition to attempt to redeem an access key to Free Fire 2018 — even though this is not technically necessary to authenticate access to the game.
Step 2: the key that never appears
After authorizing Discord, you arrive at the Barbosa Server dashboard. The screen shows a “Live Stock” counter with tens of thousands of keys available — in our test, it read 84,865. A blue button saying “Redeem Key” and a captcha. Everything seems to work.
You solve the captcha, click on redeem. The button changes to “Processing...” And then the redirection occurs — to a completely different site, unrelated to Free Fire, full of ads. In our test, we ended up on rodaemotor.com, a site about electric cars, displaying Google AdSense advertising.
No key. No confirmation. No error explaining what happened.
If you try again, the system displays the message “Too many attempts. Please wait a moment.” — and the stock counter drops a few numbers. On the second access, it read 84,787. The numbers change, but the key never arrives.
Step 3: the closed loop of ads
The scheme is calculated. Every click on “Redeem Key” generates a visit to a partner site that displays ads — likely via Google AdSense or similar networks. The Barbosa Server earns for each generated click. The more times the player tries, the more revenue is generated for the website operator.
The key was never the product. You are the product.
The decreasing stock counter creates a false sense of urgency — making the user attempt multiple times for fear of missing out. Each attempt is yet another monetized click. It’s a click fraud machine using the nostalgia of Free Fire 2018 as bait.
What you lose by going through this process
| What the Barbosa Server accesses | Real risk |
|---|---|
| Discord account email | Can be used for spam, phishing, or sold |
| List of servers you participate in | Mapping of your profile and communities |
| Permission to join servers on your behalf | Can add you to groups without your action |
| Your clicks on the redeem button | Monetized via ads — you generate revenue for them |
| Your time | The key is never delivered |
This violates Google AdSense rules
The sites that the Barbosa Server redirects to display Google ads — including ads served via AdSense. The use of forced redirections to generate artificial clicks on monetized pages is a direct violation of the Google AdSense policies against invalid traffic. In other words: the sites receiving this traffic may have their AdSense accounts suspended if Google identifies the pattern.
What to do if you have already authorized Discord
- Access: Discord Settings → Authorized Applications
- Find Barbosa Server in the list
- Click Revoke to withdraw all granted permissions
- If you use the same password for Discord on other services, consider changing it
- Stay alert for unknown Discord servers that you may have been added to without realizing
To play Free Fire safely and still enjoy real rewards, check the active FF codes now and understand better why Free Fire 2018 only exists as a MOD and what the real risks are.
Do you want to receive notifications about Free Fire?