A dangerous new phishing scam has emerged, targeting users through Google Ads and stealing their Google account credentials. 

The scam uses fake Google Sites pages designed to trick users into providing sensitive information. Here’s what you need to know and how to stay safe.

![Scammers Exploit Google Ads to Steal Login Details
](https://www.stanventures.com/news/wp-content/uploads/2025/01/Google-Ads-Phishing.jpg)

## Phishing in Plain Sight

When users click on certain Google Ads, they’re redirected to counterfeit Google Sites pages. These pages look legitimate but are not controlled by Google.

Once users enter their login details, scammers gain access to their accounts, putting personal data, emails, and payment information at risk.

## Google Takes Action

The scam was highlighted by Fabrizio Trentacosti on [LinkedIn](https://www.linkedin.com/posts/ftrentacosti_phishing-scam-google-activity-7285580558082985985-8s74), with a video showing the scam in action. 

![Fabrizio Trentacosti](https://www.stanventures.com/news/wp-content/uploads/2025/01/Fabrizio-Trentacosti-LinkedIn-post.jpg)

Google Ads Liaison Ginny Marvin [responded](https://www.linkedin.com/feed/update/urn:li:ugcPost:7285580503900917760?commentUrn=urn%3Ali%3Acomment%3A%28ugcPost%3A7285580503900917760%2C7285585276125540352%29&replyUrn=urn%3Ali%3Acomment%3A%28ugcPost%3A7285580503900917760%2C7285748743398662147%29&dashCommentUrn=urn%3Ali%3Afsd_comment%3A%287285585276125540352%2Curn%3Ali%3AugcPost%3A7285580503900917760%29&dashReplyUrn=urn%3Ali%3Afsd_comment%3A%287285748743398662147%2Curn%3Ali%3AugcPost%3A7285580503900917760%29) swiftly, stating, “Thanks for flagging. I’ve passed this along. We expressly prohibit ads that aim to deceive people in order to steal their information or scam them. Our teams are actively investigating this issue and working quickly to address it.”

Google has since patched the issue and is helping affected advertisers regain control of their accounts. Additional protections are being put in place to prevent future incidents.

## Why This Scam Is Alarming

This scam not only jeopardizes individual users but also raises concerns about Google’s ad security. 

Businesses relying on Google Ads could face unauthorized campaigns and financial losses if their accounts are compromised. This incident emphasizes the importance of stronger safeguards in digital advertising.

## Steps to Protect Yourself

Here’s how you can protect yourself:

**Inspect Links Before Clicking**: Check URLs carefully to confirm their legitimacy. Only trust official domains like “google.com.”

**Secure Your Accounts**: Enable two-factor authentication to add an extra layer of security.

**Report Fraudulent Ads**: Flag suspicious ads to Google immediately.

**Monitor Your Activity**: Regularly review your account for any unauthorized actions.

**Stay Alert**: Keep up with updates and advisories from Google.

## A Wake-Up Call for Digital Security

Phishing scams have evolved over the years, exploiting trusted platforms like Google Ads to deceive users. This incident stresses the need for better monitoring, stricter ad approvals, and user awareness to combat online fraud.

## Key Takeaways

- Scammers are using Google Ads to steal Google account credentials.
- Victims are redirected to fake Google Sites pages that mimic real ones.
- Google acted swiftly, patching the issue and supporting affected users.
- Advertisers must strengthen account security to avoid breaches.
- Vigilance and education are key to preventing phishing scams.