When the scam is the advert

People are careful about links in emails and trust the ones they found themselves. Scam adverts exist because that distinction stopped being protective. That distinction has stopped being protective, because the results you find are increasingly placed rather than earned.

What an ad slot actually guarantees

That someone paid for it. Platforms run automated checks and remove impersonators when reported, but the pipeline is built for volume and campaigns are short-lived. An advert that runs for two days has done its work before any review.

This matters most where the ad sits above the real result, which is what a paid placement is for. A search for a bank, a wallet, a support number or a delivery company can return a hostile page in the position people trust most.

The three shapes it takes

Brand impersonation on search. The company's name, a lookalike domain, a page that mirrors the real one. Common for banks, crypto services, airlines and anything with an urgent support need — a person searching for a support number is already in trouble, which is the state the scam wants.

Shops on social feeds. A product at an implausible price, professional photography lifted from the real manufacturer, a checkout that works. The card is charged and nothing arrives, or a counterfeit does. The FTC reports losses of around $2.1 billion from scams that started on social media in 2025.

Investment and trading. Ads featuring a public figure who has no involvement, sometimes with synthetic video and fabricated profit screenshots. These lead to a group chat rather than a purchase, and the money leaves over weeks.

Checks that fit in the moment

For a company you already deal with: never use a search result or an ad. Type the address, use a bookmark, open the app, or use the number printed on your card or statement. A support number found through a search is the single most dangerous thing in this category.

For a shop you have not used:

1. Read the domain properly. The registered domain is the last two labels before the first slash — shop-nike-outlet.com is not Nike.
2. Look for a physical address and a company registration. A shop with neither is not accountable to anyone.
3. Check the age of the site. A brand-new domain selling established brands at a large discount is the pattern.
4. Pay by card, never by transfer. Card payments have a dispute process; bank transfers do not.
5. Reverse-search a product image. If it appears on the manufacturer's site and a dozen other shops, the listing is not what it claims.

For anything investment-shaped: an advertisement is not a prospectus. Check the firm against your national regulator's register — the FCA in the UK, the SEC and FINRA in the US — using the register's own site, not a link supplied by the firm.

The habit worth building is small: when something matters, arrive by a route you chose. Not the result you were shown, not the link you were sent.

Why it works on careful people

The advert is not asking you to believe something implausible. You went looking for this. The scam does not have to create desire or urgency — you brought both, and it only had to be in the right place when you arrived.

That is also why the usual advice fails here. There is no unsolicited contact to be suspicious of, no urgency that was manufactured, no story that sounds too good. The only anomaly is the position of the link, which is invisible unless you look for the word sponsored.

If you have paid

• Card: contact your bank and ask about a chargeback. There are time limits, so do it now rather than after waiting for delivery.
• Bank transfer: report immediately and use the fraud line. Some transfers can be recalled within hours, and many countries now have reimbursement rules for authorised push payment fraud.
• Report the advert to the platform. It is the mechanism that gets the campaign stopped, which matters for the next person even when it does nothing for you.
• Keep screenshots of the ad, the listing and the receipt. Campaigns and pages disappear within days, and your bank will want evidence.

What are scam adverts?

Scam adverts are paid placements — on a search engine, a social feed or a video platform — bought by someone impersonating a business, selling goods that do not exist, or recruiting for an investment fraud. They are not a failure of moderation so much as a consequence of how ad markets work: placement is sold in seconds and reviewed afterwards.

That ordering is the whole problem. A campaign running for 2 days has already reached its audience.

How do scam adverts compare with other scam contact?

The second row is why the standard guidance fails here. Nearly 30% of people who reported losing money in 2025 said it began on social media, and none of them were contacted out of the blue — they were shown something while looking for something.

Is the sponsored label enough of a warning?

Not on its own, because it is doing 2 jobs at once. It tells you the placement was paid for, which most people read as this company spent money, not as anyone could have bought this position.

The 4 checks that survive the moment:

1. For a company you already deal with, never use a search result. Type the address, use the app, or use the number on your card.
2. Read the registered domain — the last 2 labels before the first slash.
3. Pay by card, never by transfer, so a dispute remains possible.
4. Check an investment firm on your regulator's own register, reached by typing the regulator's address.

See also impersonation, website safety and shopping scams for the specific patterns each of these takes.

What platforms are and are not obliged to do

Advertising rules differ by country, and enforcement is uneven. In the UK the Financial Conduct Authority requires financial promotions to be approved by an authorised firm, and platforms carrying them have obligations under the Online Safety Act. In the US the FTC pursues deceptive advertising after the fact.

Both are remedies rather than prevention, which is the point worth internalising: scam adverts are removed after someone reports them, and the person who reports them has usually already paid.

So the check has to be yours. Reach a company by a route you chose, read the registered domain, pay by card, and verify an investment firm on the regulator's own register before any money moves.