Scammers have been exploiting Google Ads to push fake Uniswap links, directing users to phishing sites that drain wallets. On May 25, on-chain analyst b-block raised the alarm after tracing stolen funds to addresses linked to the fraudulent site. Two flagged wallets held 146 ETH — about $306,000 at the time — and the total estimated stolen amount has climbed to at least $400,000.
How the scam works
Attackers purchase ad space or break into existing advertiser accounts, outbidding the real Uniswap protocol to secure the top search position. The phishing links use authentic-looking URLs with hidden elements that load malicious code, allowing them to bypass Google's automated review systems. Once a user connects their wallet and signs a transaction, funds are drained.
Rise in activity
Security Alliance (SEAL) tracked a sharp uptick in this phishing activity in March 2026. Between March 13 and 30 alone, attackers stole $1.27 million. SEAL has blocked more than 356 malicious ad links, calling that typical weekly activity — and it's been going on for over a year with no signs of slowing. The group continues to receive victim reports and says the campaign shows no sign of stopping.
Criticism mounts
Stacy Muur, founder of Web3 marketing agency Green Dots, shared a screenshot of a sponsored result and said scammers used it to steal funds. She criticized Google for ignoring the problem for years. DeFiLlama called fake Google ads a common and recurring source of phishing attacks targeting the crypto community. The timing isn't great for a platform that many users rely on for discovery.
Wider threat beyond Uniswap
This isn't an isolated Google Ads problem. In early May 2026, attackers abused both Google Ads and shared chat links from AI tools to push malware targeting Mac users. Facebook saw a similar wave of fake paid ads mimicking official Microsoft promotions, directing users to counterfeit Windows 11 download pages that steal credentials. The same playbook keeps working across platforms.
SEAL continues to receive fresh victim reports. Until Google and other ad networks change how they vet sponsored links, the next wave is likely already being written.
