Search Ads That Lead to Phishing Sites
Criminals buy search adverts that appear above real results for banks, software downloads and customer support. How malicious search ads work and how to avoid them.
Many people reach their bank or favourite software by typing its name into a search engine and clicking the first result. Criminals know this, so they buy adverts that appear above the genuine result, leading to fake login pages, malware-laced downloads or fake support numbers.
What malicious ads target
- Bank and payment logins: fake sign-in pages.
- Software downloads: installers bundled with malware. See password-stealing malware.
- Crypto wallets and exchanges: fake wallet sites that drain funds.
- Customer support: fake phone numbers. See fake customer care numbers.
- Government services: lookalike sites charging extra fees.
How to avoid them
- Use bookmarks or official apps for banking, email and other important sites.
- Type the address yourself if you know it.
- Skip "Sponsored" results for sensitive searches.
- Check the domain before clicking and after the page loads. See how to read a URL.
- Download software only from the developer's official site or your device's official app store.
Being at the top of search results is not proof of legitimacy. Ads can be bought, and some scam sites also appear in ordinary results.
If you clicked a malicious ad
- Entered a password: change it and sign out of all sessions.
- Downloaded software: uninstall it, scan your device, and change passwords from a clean device.
- Called a number: hang up; if you gave details or access, act quickly. See after giving remote access.
- Report the ad using the search engine's report option.
Unsure about a site you found through search? Paste its address into CyberWatch AI Scan for a free check.
For more, read our phishing guide.
Frequently asked questions
Why would a scam appear as a sponsored result?
Criminals buy ads like any business. Some are removed quickly, but they can appear for a time above genuine results.
What searches are most targeted?
Bank logins, popular software downloads, crypto wallets, customer support numbers and government services.
How do I avoid them?
Use bookmarks and official apps for important sites, scroll past ads to organic results, and check the domain before clicking.
Sources
- Malware: How To Protect Against, Detect, and Remove It, US Federal Trade Commission
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
- Report a phishing page, Google Safe Browsing
