Scammers target Google Ads to mimic crypto recovering service

Bad actors are using Google Ads to impersonate the Revoke Cash cryptocurrency recovery service and trick users into giving away their money.

Scammers are using Google Ads to impersonate the Revoke Cash cryptocurrency recovery service, redirecting users to a fake site designed to steal money.

Analysts at blockchain forensics firm ScamSniffer said in a Sept. 13 X post that fake ads appearing in Google search results initially show the legitimate address “revoke.cash” but redirect users to a deceptive website “revokc-cash.”[dot]com” was designed to embezzle cryptocurrency funds from unsuspecting users.

🚨 We’ve detected Google search phishing ads being targeted @RevokeCash‘s users.

If you are a cryptocurrency user, make sure to ignore the ads section when searching. Consider using tools like Adblock to block ads.
Stay safe and alert! 🔒✨ picture.twitter.com/NqUJT3wisB

— Fraud Sniffer | Web3 Anti-Fraud (@realScamSniffer) September 13, 2024

Launched in 2019, Revoke Cash is a recovery service designed to help users recover their lost or stolen cryptocurrencies by canceling unauthorized access to their funds and securing their accounts.

The latest incident reflects a disturbing trend of malicious actors using Google’s advertising platform to promote fake crypto websites. In April, a similar scheme led to Google Ads promoting a fake version of Whales Market, an over-the-counter crypto trading platform. Users who interacted with the ad were redirected to a fake site, “www.whaels.market,” where their digital wallets were compromised by malicious scripts.

The continued use of Google Ads for such scams highlights the persistent vulnerabilities in online advertising systems. In response, Google also appears to be fighting back against scammers. In early April, the company sued two men from China, Yunfeng Sun and Hongnam Cheung, for allegedly using the Google Play store to trick people into buying fake crypto investments.

While the lawsuit does not name the apps in question, Google said it has disabled about 90 fake apps attributed to Sun and Cheung over the past four years, with a combined total of about 100,000 downloads worldwide.