Google Search Ad Phishing Scam Drains $550K from Crypto User

A crypto user has reportedly lost $550,000 in USDC to a phishing scam promoted through a Google search ad. The scammer directed the victim to a website impersonating Hyperliquid, where they likely entered their login credentials and private keys.

Darcy, co-founder of FlashRescue, attributed the loss to the paid Google ad. Darcy posted blockchain data showing three transfers from the user's wallet to addresses identified as controlled by the attacker.

This is not an isolated incident, as scammers have long used malicious search ads to target crypto users. In 2020, The Block reported on this tactic, where scammers bought ads directing users searching for platforms like Balancer and Uniswap to look-alike websites designed to steal private keys or obtain malicious wallet approvals.

The Security Alliance (SEAL) said it had blocked 356 malicious Google ad URLs over several weeks in April. SEAL also reported that attackers sometimes use compromised or illicitly purchased advertiser accounts to evade Google's automated reviews.