From Fox News · Kurt Knutsson, CyberGuy Report · · 2m
Scammers buy Google ads to steal bank logins
Criminals use fake Google ads to steal bank logins, causing millions in losses.
In brief
Criminals use fake Google ads to steal bank logins, causing millions in losses. Scammers bought Google ads to mimic bank login pages, stealing credentials and causing millions in losses. Originally reported by Fox News.
Scammers target bank logins
Criminals bought sponsored search links to mimic bank websites and steal login credentials.
FBI reports $262 million losses
Since January 2025, the FBI's Internet Crime Complaint Center received over 5,100 complaints about bank account takeovers causing more than $262 million in losses.
How the scam works
Victims click fake bank ads that redirect to phishing pages where they enter credentials, which criminals then use to access real accounts.
Sponsored search trick
Criminals use SEO poisoning to create ads that look like legitimate bank websites in search results, tricking users into clicking.
Extradition of suspect
Sergei Anatolyevich Filimonov, a 36-year-old Russian web developer, was extradited from Georgia to the U.S. after being indicted on Nov. 4, 2025.
Stolen credentials
The group captured over 5,000 stolen login credentials and used them to access bank accounts, causing millions in losses.
FBI recommendations
The FBI advises using bookmarks or verified apps instead of search results to avoid phishing sites when accessing bank accounts.
Microsoft's role
Microsoft has policies to detect and remove misleading ads, encouraging users to report suspicious ads through its 'Report a Concern' form.
Protection tips
Use strong antivirus software, enable multifactor authentication, and check web addresses before entering banking credentials.
What to do if compromised
Contact your bank immediately if you think you entered credentials on a fake page and reset your password.
Why this matters
This scam exploits everyday banking habits, making it harder to detect than other phishing attempts.
Recent losses
The operation caused approximately $28 million in attempted losses and $14.6 million in actual losses by December 2025.
How to avoid scams
Bookmark your bank's website, use the official app, and verify the web address before entering credentials.
What happens next
Victims should act quickly to reset passwords and report fraud to the FBI's Internet Crime Complaint Center.
What it means
Scammers bought Google ads to mimic bank login pages, stealing credentials and causing millions in losses.
