<div class="textg" style="text-align: justify; font-weight: lighter; line-height: 1.3em; font-size: 15px; border-radius: 3px; color: #80909a; padding: 10px; background-color: #F4F6F9; margin-bottom: 15px;">
 Neither the author, Tim Fries, nor this website, The Tokenist, provide financial advice. Please consult our&nbsp;<a href="https://tokenist.com/terms-of-service/" style="text-decoration:underline;color:#3c7b7b" target="_blank" rel="noreferrer noopener" class="deco-link">website policy</a>&nbsp;prior to making financial decisions.
</div> 
<p class="has-drop-cap">Scammers have stolen over $4 million in crypto funds from users using deceitful websites they promoted through Google search ads, <a aria-label="ScamSniffer reported (opens in a new tab)" href="https://drops.scamsniffer.io/post/4-million-stolen-due-to-google-search-ad-phishing/" target="_blank" rel="noreferrer noopener nofollow" class="deco-link">ScamSniffer reported</a> on Thursday. Based on the number of affected users and the amount of money they spent to promote their malicious ads, scammers’ return on investment (ROI) was 276% over the past month.</p> 
<h3 id="how-did-scammers-deceive-the-users">How did Scammers Deceive the Users?</h3> 
<p>According to the Web3 anti-scam solution ScamSniffer, users have lost over $4 million after falling victim to crypto <a aria-label="phishing websites (opens in a new tab)" href="https://www.phishing.org/what-is-phishing" target="_blank" rel="noreferrer noopener nofollow" class="deco-link">phishing websites</a> promoted via Google.</p> 
<p>In a <a aria-label="Twitter thread (opens in a new tab)" href="https://twitter.com/realScamSniffer/status/1651452380385509377" target="_blank" rel="noreferrer noopener nofollow" class="deco-link">Twitter thread</a> posted on Thursday, ScamSniffer revealed that there had been a great number of malicious ad links to phishing websites on Google ad searches. These links lead users to fake websites, asking users to enter their login signature information, thus compromising their wallet addresses. Some of the most targeted crypto projects these ads target include popular decentralized finance (DeFi) protocols and brands such as Zapper.fi, Lido, Stargate, Defillama, and Radiant, among others.</p> 
<blockquote class="wp-block-quote"> 
 <p>“When you open a malicious advertisement from Zapper, you can see that it attempts to obtain authorization of my $SUDO by using a Permit signature. Currently, many wallets do not have clear risk warnings for this type of signature, and ordinary users may think it is a normal login signature and sign it without thinking twice.”</p> <cite>– ScamSniffer said in the official post. </cite>
</blockquote> 
<p>ScamSniffer says that scammers have used several techniques to circumvent Google’s ad review process. These include anti-debugging techniques, parameter distinction, and methods to manipulate the Google Click ID parameter, allowing scammers to display a regular webpage during Google’s ad review process.</p> 
<div class="cta-referral"> 
 <img src="https://tokenist.com/wp-content/themes/thetokenist/assets/img/del/cta-referral-1.png" alt="" class="cta-referral__img" loading="lazy" decoding="async"> 
 <div class="cta-referral__text"> 
  <p>Join our&nbsp;<a href="https://t.me/thetokenist" target="_blank" rel="noreferrer noopener nofollow">Telegram group</a>&nbsp;and never miss a breaking digital asset story.</p> 
 </div> 
</div> 
<h3 id="scammers-return-on-investment-is-276">Scammers’ Return on Investment is 276%</h3> 
<p>Data analysis of addresses linked to fake websites advertised by scammers shows that around $4.16 million has been stolen from users over the past month. More than 3,000 users have been affected by the scams, according to ScamSniffer.</p> 
<p>Based on an approximate conversion rate of 40% from 7,500 users clicking on the malicious ads, the money scammers spent to advertise the websites amounts to around $15,000. Since over $4 million was stolen, the scammers’ ROI has been around 276%.</p> 
<p><a href="https://tokenist.com/gmx-tokens-worth-3-4-million-stolen-in-phishing-attack-on-whale/" rel="dofollow" class="deco-link">Phishing attacks</a> have been one of the popular techniques scammers use to steal crypto funds from users. The crypto space, <a href="https://tokenist.com/fbi-rings-alarm-as-defi-hacks-dominate-crypto-crime-1-3b-stolen-in-q1-2022/" rel="dofollow" class="deco-link">particularly DeFi</a>, remains one of the hackers’ favorite playgrounds, with over <a href="https://tokenist.com/a-record-3-7b-was-stolen-in-crypto-hacks-in-2022-defi-most-targeted/" rel="dofollow" class="deco-link">$3.7 billion stolen</a> in 2022.</p> 
<div class="cta-sub js__cta-sub"> 
 <div class="cta-sub__start" data-step="1"> 
  <div class="cta-sub__title">
   <strong>Finance is changing.</strong>
  </div> 
  <div class="cta-sub__subtitle">
   Learn how, with Five Minute Finance.
  </div> 
  <div class="cta-sub__excerpt">
   A weekly newsletter that covers the big trends in FinTech and Decentralized Finance.
  </div> <button type="button" class="btn">Try it out (for free)</button> 
 </div> 
 <div class="cta-sub__form" data-step="2" style="display: none;"> 
  <script type="text/javascript" src="https://app.getresponse.com/view_webform_v2.js?u=QcLhh&amp;webforms_id=zw3Wv"></script> 
 </div> 
 <div class="cta-sub__result" data-step="3" style="display: none;"> 
  <div class="cta-sub__title">
   Awesome
  </div> 
  <div class="cta-sub__caption">
   You’ve subscribed.
  </div> 
  <div class="cta-sub__greeting">
   You’re well on your way to being in the know.
  </div> 
 </div> 
</div> 
<p><em><strong>Have you personally noticed any suspicious crypto-related ads on Google lately? Let us know in the comments below.</strong></em></p> 
<p>The post <a rel="nofollow" href="https://tokenist.com/crypto-scammers-used-google-search-ads-to-steal-4m-report/">Crypto Scammers Used Google Search Ads to Steal $4M: Report</a> appeared first on <a rel="nofollow" href="https://tokenist.com">Tokenist</a>.</p>

Crypto Scammers Used Google Search Ads to Steal $4M: Report

Table of Contents

Tokenist

Other articles published on Apr 27, 2023

“We can laugh about it now” ThriveAgric’s Uka Eje on how the company survived the COVID-19 troubles

NODO Grants offer a lifeline to struggling African web3 startups.

Trust Army: 1.0 Version and Trust Fuel Launched

What to know about Michael Saylor’s Bitcoin and Lightning event

Hong Kong Security Regulator to Issue Crypto license Guidelines in May

StableSwap benefits on WingRiders

Join our free newsletter for daily crypto updates!