Home · Technology · Sep 20 archive
Scammers are buying Google ads to steal bank logins
Confirmed
In Short: The scammers created convincing fake login pages that tricked users into entering their banking credentials.
The Justice Department announced on Sept. 8 that a Russian web developer had been extradited to the United States to face charges related to a large-scale bank account takeover operation.
According to the DOJ, victims were redirected to fake banking websites after clicking on sponsored search engine links purchased by the criminals.
U.S. Attorney for the District of Columbia, Jeanine Pirro, highlighted the role of Xinbi Guarantee, a platform where scammers could purchase tools to steal money from Americans.
The scam exploits a common user habit: searching for a bank's website and clicking on the first result.
Federal investigators warn that this scam could affect anyone who banks online, emphasizing the importance of verifying the authenticity of banking websites.
Users are advised to manually type in their bank's URL and avoid clicking on search results or links from unsolicited emails.
What's confirmed
- The Justice Department announced on Sept. 8 that a Russian web developer had been extradited to the United States to face charges related to a large-scale bank account takeover operation.
- According to the DOJ, victims were redirected to fake banking websites after clicking on sponsored search engine links purchased by the criminals.
- U.S. Attorney for the District of Columbia, Jeanine Pirro, highlighted the role of Xinbi Guarantee, a platform where scammers could purchase tools to steal money from Americans.
- The scam exploits a common user habit: searching for a bank's website and clicking on the first result.
- Federal investigators warn that this scam could affect anyone who banks online, emphasizing the importance of verifying the authenticity of banking websites.
- Users are advised to manually type in their bank's URL and avoid clicking on search results or links from unsolicited emails.
What's still developing
- You need to check your bank account, so you open Google, type in your bank's name and click the first result that looks right.
- Victims then entered their credentials, believing they had reached their bank.
- Here's how the scam works, why those sponsored results can look so convincing and what you can do to avoid handing your bank login to a criminal.