Cybercriminals are getting smarter, and one of their latest tricks is creating fake social media accounts that impersonate legitimate businesses, or using compromised business pages to carry out phishing attacks against victims.
These fake ads and social media accounts often mimic well-known brands, services, or financial institutions to trick users into clicking and entering sensitive information like login credentials, OTPs, or banking details.
Don’t fall for it. Stay alert before you click.
How It Works
Attackers create lookalike websites and use search engine or social media ads to place them above real results. These malicious ads are crafted to appear authentic.
Common Examples
You search for “Popular service/app” and the top result is a fake ad that looks real
You see a “social media” ad for a limited-time refund or “important update” clicking it takes you to a phishing page
The link leads to a page that looks identical to the original site but is designed to steal your information
Why It’s Dangerous
They bypass normal security filters because they’re served by trusted ad platforms
In addition, these scams can spread via compromised social media accounts. Attackers may hijack real user or brand profiles to post malicious links, making them appear more legitimate and increasing their reach.
They often use typo squatting
They are visually identical to real websites at first glance
What’s the Risk
Clicking on the malicious link can lead to serious consequences:
Credential Theft – Login pages steal your username, password, or OTP
Malware Infection – Clicking links may install spyware, ransomware, or keyloggers
Financial Loss – Attackers may access your banking apps or withdraw funds
Identity Theft – Stolen data may be reused or sold in future scams
How to Stay Safe
Here are five simple tips to protect yourself from fake ads and phishing attacks:
1. Don’t Trust Ads by Default
Even if it appears on Google or Instagram, treat sponsored ads with caution, especially if it involves banking, crypto, or login-related links.
Avoid clicking ads for downloads, login pages, or payment offers.
2. Verify the URL Carefully
Always check the full website address before entering sensitive information.
Official domains usually end in .com, .co.id, or .com.my, not random strings or extra characters.
3. Use Bookmarks or Type URLs Directly
Don’t rely on search engine results for critical services.
Type the full URL (e.g., fundingsocieties.com) into your browser or use bookmarks.
4. Enable Two-Factor Authentication (2FA)
Even if your password is compromised, 2FA adds an extra layer of protection.
Use 2FA wherever available, especially for financial services or email accounts.
5. Keep Your Devices Secure
Use trusted devices with updated antivirus and security software.
Never download apps or open forms from ad links or pop-ups.
Stay Informed and Report Suspicious Activity
If you're ever unsure about an ad, link, or message:
Do not click
Report it through official channels
Verify through the official website or social media for trusted updates.
Verify the Identity of Sponsored Ads
Just because it's labeled “Sponsored” doesn't mean it's safe. Look for these signs to verify authenticity:
Check the full domain name: official ads should only link to trusted domains like
fundingsocieties.comLook at the display name and spelling: slight changes (e.g., “fundings0cieties” with a zero) are red flags
Avoid ads making urgent claims like “limited offer,” “login now,” or “account update required”, these are commonly used in scams
Verify the advertiser's identity – On some platforms (like Google or Meta), you can click on the ad’s “About this advertiser” link to see if their identity is officially verified
If unsure, skip the ad and visit the official site directly by typing the URL or using your bookmark
Real-World Example (Illustrative Only)
You Google “BankName Login”
First result: Sponsored Ad – Secure Bank Login
You click and land on a fake login page
You enter your credentials, they go straight to attackers
The site then redirects you to the real one, so you don’t notice anything wrong
Your account is now compromisedNot everything at the top of the search page is trustworthy.
Report Suspicious Ads or Links
If you see anything strange or misleading that looks like it's pretending to be us, please report it immediately by emailing: [email protected]
Stay Alert. Stay Secure.
Fake ads are more common than you think and they’re getting harder to spot.
Protect yourself and others by taking a few seconds to verify before you click.
If you see something suspicious, don’t ignore it. Report it. Share it. Stay informed.
Together, we can reduce fraud and build a safer digital community.