Federal investigators have revealed a sophisticated scam in which criminals use Google ads to steal bank logins and drain accounts. According to the Justice Department, a Russian web developer, Sergei Anatolyevich Filimonov, 36, has been extradited to the United States in connection with the alleged operation.
Prosecutors say the group bought sponsored search engine links that sent banking customers to fake login pages. Victims then entered their credentials, believing they had reached their bank. The scam relied on spoofed domains that mimicked websites belonging to federally insured financial institutions.
The Justice Department previously described the same bank account takeover operation when it seized the group's backend domain in December 2025. In that announcement, investigators specifically said the criminal group delivered fraudulent advertisements through search engines including Google and Bing.
The scam has resulted in significant losses, with reported losses exceeding $262 million since January 2025, according to the FBI's Internet Crime Complaint Center. The FBI warns that criminals can use several methods to gain access to accounts, including phishing sites and fake search advertisements.
To protect themselves from this type of scam, experts recommend using bookmarks or favorites to reach login pages, rather than clicking search results or advertisements. They also advise verifying the destination website before entering banking credentials, and using strong antivirus software to add an extra layer of protection.
The FBI specifically recommends using multifactor authentication, and advises against giving one-time passcodes to unknown individuals. Additionally, using a password manager can provide an extra warning sign if the login credentials are not filled automatically.
Microsoft has policies and detection mechanisms in place to prevent misleading advertising, and encourages users to report suspicious ads through its "Report a Concern" form.
NTC Report coverage is based on reporting from the original publisher.
View original reporting →
