Investigation Summary
CENIPA classified the accident as an in-flight icing event that led to a system failure and loss of control. The 14-year-old ATR 72-500 (PS-VPB) left Cascavel with an undocumented airframe de-icing failure and a broken first-officer wiper. Neither had been logged, so the operating restrictions that would normally apply were never used. Weather forecasts had clearly indicated severe icing along the route at FL170, but the flight was released anyway. Climbing through around FL130 the ice detector triggered and the crew cycled the de-icing system on and off. A fault appeared on the right wing boots and the associated checklist was not run. At FL170 the de-icing was toggled multiple times as ice kept accreting. The performance-monitoring system (APM) warned the crew eight times that cruise speed was low, once that performance was degrading (about 1 minute 42 seconds before the stall warning), and finally to increase speed 13 seconds before the stall. None of the corresponding procedures were carried out and the cockpit voice recorder captured long stretches of informal conversation. During the right turn to SANPA the wing reached the icing-condition stall warning and then the stick pusher activated as designed. The crew pushed back on the right control column with more than 10 daN of force. That opposing input triggered the pitch uncoupling mechanism, which splits the left and right elevators to isolate a jammed side. With pitch control effectively lost, the aircraft rolled 52° left, then 94° right, entered a stable left flat spin (five rotations in 68 seconds at roughly 14,000 ft/min) and struck the ground in Vinhedo, São Paulo. The aircraft was destroyed and there was a post-impact fire. Vehicles on the ground were destroyed; nobody on the ground was killed.
Final Conclusions
CENIPA concluded that the accident was the result of continuing a flight into severe icing with a known airframe de-icing failure, and then not following the required procedures for that failure or for the repeated APM cruise-speed, degraded-performance and increase-speed alerts. At the stall the crew applied nose-up inputs that ran counter to their upset-recovery and stall-recovery training, and the opposing force on the control column against the stick pusher triggered the pitch uncoupling mechanism. Pitch authority was lost and a flat spin developed from which recovery was not possible. Main contributing factors identified in the report: - Nose-up control inputs during the stall warning. - Loss of attention (informal cockpit conversation, missed alerts). - Deciding to continue despite the known de-icing failure and severe icing forecast. - Training gaps in applying upset-recovery and severe-icing procedures. - Prolonged exposure to severe icing. - Poor crew resource management and standards compliance. - Complacency around frequent APM alerts. - Weak use of flight-data monitoring by the operator and the regulator. - The INCREASE SPEED alert being flagged as a caution rather than a warning, which may have led crews to underestimate it.
Photographic Evidence (1)
Video Analysis
Understanding the Voepass Flight 2283 Crash: Ice Issues & Facts — An ATR captain analyzes the technical aspects of the Voepass 2283 crash, focusing on icing conditions, the ATR 72's de-icing systems, and the flight data recorder findings.
If playback is blocked, the owner has disabled embedding — use the link above.
Airframe & Maintenance
Systems & Failure Modes
Airframe de-icing (pneumatic boots)
Rubber boots on the wing and tail leading edges that inflate to break off ice. PS-VPB was dispatched with an undocumented fault. In flight, a right wing boot fault appeared and the crew cycled the system on and off without running the required checklist.
Aircraft Performance Monitoring (APM)
Warns the crew when ice is degrading performance. On this flight it fired CRUISE SPEED LOW eight times, DEGRADED PERFORMANCE once (about 1:42 before the stall) and INCREASE SPEED 13 seconds before the stall. No corresponding action was taken.
Stall protection (stick shaker and stick pusher)
Warns the crew and automatically pushes the nose down when the angle of attack gets too high. It worked as designed, but the crew opposed it with more than 10 daN on the right control column.
Pitch uncoupling mechanism
Safety feature that splits the left and right elevators if control inputs disagree strongly (for example if one side jams). The pilot force against the pusher looked like a disagreement, uncoupled the elevators, and pitch authority was effectively lost.
Centralized Crew Alerting System (CCAS)
Cockpit alerting panel for warnings, cautions and advisories. CENIPA noted the manual does not tell crews how to prioritize when several caution-level alerts trigger at once.
Autopilot
Engaged in cruise, including the turn toward SANPA. Its lateral mode was not being recorded on the flight data recorder; CENIPA recommended adding it.
Flight Data Recorder (FDR)
Ran under an 18-month ANAC waiver that left out several parameters. CENIPA recommended recording de-icing failures, stick pusher activation, elevator positions, per-pilot control inputs and CCAS caution messages on all ATRs.
Interesting Facts
- 01Deadliest aviation accident in Brazil since TAM Flight 3054 in 2007.
- 02Dispatched with a known airframe de-icing malfunction that had not been logged, so the operating restrictions were never applied.
- 03The performance-monitoring system fired 8 cruise-speed-low alerts, 1 degraded-performance alert about 1 minute 42 seconds before the stall, and an increase-speed alert 13 seconds before the stall. None triggered the required crew actions.
- 04Pushing back against the stick pusher with more than 10 daN of force triggered the pitch uncoupling mechanism, splitting the elevators and effectively cutting pitch control.
- 05The aircraft completed 5 rotations in 68 seconds in a flat spin, descending at roughly 14,000 ft/min at impact.
- 06The flight data recorder was running under an ANAC waiver and missed several parameters that CENIPA now wants added on all ATRs.
- 07ATR released an updated APM software (V2.0) on 26 June 2025; EASA certified it before the final report was published.
Safety Actions & Advisories
ATR APM Version 2.0 software (Service Bulletin ATR72-31-1137, 26 June 2025)
Updated performance-monitoring software certified by EASA. It runs continuously regardless of ice detection, uses a more realistic speed margin, and adds a 60-second delay before alerts clear so they no longer flicker. In a simulation of the accident flight, V2 would have raised a DEGRADED PERFORMANCE alert about 27 minutes earlier.
CENIPA A-116/CENIPA/2024 – 01 (EASA)
Revise the DEGRADED PERFORMANCE procedure so crews must act immediately to restore performance and stay clear of the icing minimum speed.
CENIPA A-116/CENIPA/2024 – 02 (EASA)
Improve procedures for flight in icing, especially the use of LOW BANK mode, to avoid raising stall speed through bank angle when performance is degraded.
CENIPA A-116/CENIPA/2024 – 03 (EASA)
Record more data on all ATRs, including airframe de-icing faults, stick pusher activation, elevator positions, per-pilot control column and rudder inputs, pitch uncoupling activation, autopilot lateral modes and CCAS caution messages.
CENIPA A-116/CENIPA/2024 – 04 (EASA)
Reassess APM alert levels, including upgrading INCREASE SPEED from a caution to a warning. Not yet done at the time the final report was published.
CENIPA A-116/CENIPA/2024 – 05 to 09 (ANAC)
Verify cruise-phase speed bug settings on ATR operators, update Brazilian air-ground communication rules, tighten ANAC internal risk-management processes, share the lessons learned with all major airlines and monitor the EASA recommendations.
ANAC operational suspension of Voepass
After the accident and follow-up inspections, ANAC suspended Voepass Linhas Aéreas air operator certificate on safety grounds.
ANAC upset-recovery training initiative
Since 2024 ANAC has led technical work on upset prevention and recovery training, including a study on the startle effect, and in January 2026 issued a safety bulletin to major airlines strengthening this training.
ANAC flight-data-monitoring study
ANAC opened a study on making flight-data monitoring mandatory for all major operators regardless of aircraft weight, closing the gap that had left smaller operators outside the current requirement.
ATR maintenance manual update, left elevator sensor
Although not causal, investigators found an incorrectly installed left elevator position sensor. ATR is updating the maintenance manual or issuing a service bulletin so all operators are aware of the risk.
Location
ACCIDENT SITE · Coordinates taken from the wikidata coordinate.