- Fake Google ads impersonating Uniswap stole over $400,000 from unsuspecting crypto users.
- Attackers used cloned websites and hidden scripts to bypass Google’s security systems.
- Security experts warn phishing scams now spread across Google, Facebook, and software platforms.
Crypto scammers continue finding new ways to target unsuspecting users online. This time, attackers used fake Google ads impersonating Uniswap, one of the largest decentralized exchanges. Victims clicked sponsored links that looked completely legitimate before losing funds from connected wallets. Reports suggest the scam already stole more than $400,000 from crypto holders. Security researchers now warn that fake ads across Google and social platforms have become one of the fastest-growing threats facing digital asset users.
Fake Sponsored Links Drain Crypto Wallets
The scam first gained attention after on-chain analyst “b-block” shared warnings on X. According to the analyst, fake Uniswap websites drained funds from multiple wallets after users connected accounts. Web3 marketing founder Stacy Muur later confirmed the campaign and shared screenshots showing fake sponsored results appearing directly on Google Search. Attackers reportedly used paid Google advertisements to push malicious links above legitimate search results.
Some scammers created advertiser accounts directly, while others hijacked existing business accounts. Those ads often appeared almost identical to genuine Uniswap promotions. The fake links also used convincing website addresses designed to avoid suspicion. Security researchers explained how scammers bypassed Google’s automated detection systems. Hidden iframes loaded malicious scripts that remained invisible to Google’s scanners. That tactic allowed dangerous ads to stay active longer before removal.
Once users clicked the fake links, they landed on nearly identical copies of real crypto platforms. Wallet activity then passed through attacker-controlled servers behind the scenes. Victims unknowingly approved transactions that drained digital assets from connected wallets. Blockchain data revealed two flagged wallets holding roughly 146 ETH. At reporting time, those funds carried a value near $306,000. Total stolen funds likely exceeded that figure because additional wallets may remain unidentified.
Crypto Scams Spread Beyond Uniswap
Security experts say the problem now extends far beyond decentralized exchanges. Earlier this month, attackers reportedly targeted Mac users through fake Google advertisements connected to AI chatbot Claude. Those campaigns spread malicious software designed to steal personal information and crypto assets. Facebook also faces similar abuse from cybercriminals.
Malwarebytes recently warned users about fake Microsoft advertisements appearing across Facebook feeds. Victims clicked sponsored posts believing they downloaded official Windows software updates. Instead, users landed on cloned download pages carrying hidden malware. The malicious programs targeted crypto wallets, passwords, and login credentials stored on infected devices.
Many victims likely remained unaware until funds disappeared. The growing trend highlights a larger problem across mainstream advertising platforms. Attackers now exploit trusted services like Google and Meta to spread convincing scams. Sponsored search results often appear safer than random links, which makes these campaigns more dangerous.
