Cryptocurrency scammers seek out unsuspecting victims on various social networking platforms and are now extending their footprint to the Google search engine. Taking advantage of people’s propensity to interact with Google ads, these scammers are now using the popular search engine to facilitate their own malicious crimes. Web3 tracker Scam Sniffer recently discovered that an individual lost $900,000 (roughly Rs. 740 crore) this week through ad phishing scams. The incident set off alarm bells, and delving into the subject revealed some shocking details.
A cyber researcher who goes by the username @0xngmi on X has sounded the alarm about crypto criminals using legitimate sites on Google to scam people. 0xngmi is a researcher at Web3 company DeFiLlama.
These cybercriminals are buying ads for real websites on Google. When potential victims click on these links, they are sent to “kochava.com,” an ad network that then redirects people to fake scam sites.
The researchers posted a screenshot on X showing how the DeFiLlama website itself has been imitated by copycats. Screenshots from 0xngmi show that the scam site is identified by the “Sponsored” label displayed above the site.
There’s a New Crypto Scam on Google
Scammers will buy Google ads for correct cryptocurrency sites with correct URLs
Then, when the user clicks it, they are sent to the ad network (https://t.co/k5azsHhC2s) to track clicks, but the network redirects to a scam site! pic.twitter.com/YEUYqc9IUk
— 0xngmi (@0xngmi) August 23, 2023
DeFiLlama has repeatedly reported the ad and the ad network to Google. “But Google didn’t take any action,” the researchers posted in their X thread. The search engine giant has yet to respond to those concerns.
However, for other members of the crypto community, 0xngmi recommends installing an ad blocker to prevent users from being exposed to suspicious ads.
The really cool thing about this scam is that not 100% of clicks on the ad will redirect you to a scam site
first try, second try pic.twitter.com/Bip0WLou8b
— Pumpkin Biscotti (@PumpkinBiscotti) August 23, 2023
Cryptocurrency investors have lost as much as $4 million (roughly Rs. 350 crore) by participating in hoax links spread across the web, ScamSniffer said in a recent report.
Back in October 2022, Binance CEO Changpeng Zhao accused Google of not removing scam sites from search results, thereby exposing people to financial vulnerabilities on a daily basis.
Google displays phishing websites when users search for CMC. This affects users who use these phishing sites to add smart contract addresses to MetaMask. We are trying to contact Google to resolve this matter and remind users through social channels. pic.twitter.com/3q4860Jl4H
— CZ 🔶 Binance (@cz_binance) October 27, 2022
Despite multiple complaints, Google has yet to issue a statement or a solution to address these issues.
Svlook