Skip to content
archive

Scammers Make $400K Through Fake Uniswap Ads on Google

Crypto · · 4 min read

Scammers Make $400K Through Fake Uniswap Ads on Google

Phishing Scammers Net $400K With Fake Uniswap Google Ads

Image 2: Cointelegraph

Ecosystem

English

News

MarketsFeaturesLearn

Sponsored

About

ZEC$603.75 9.78%

LINK$9.46 0.96%

BTC$76,596 1.25%

TRX$0.3726 1.60%

XMR$379.36 2.10%

DOGE$0.101 1.72%

BCH$351.18 0.12%

ADA$0.2418 1.40%

BNB$656.94 0.67%

ETH$2,094 1.02%

SOL$84.36 1.87%

HYPE$59.70 6.08%

XRP$1.33 1.53%

ZEC$602.52 9.76%

LINK$9.45 0.97%

BTC$76,579 1.24%

TRX$0.3729 1.67%

XMR$379.36 2.52%

DOGE$0.101 1.73%

BCH$350.60 0.26%

ADA$0.2417 1.39%

BNB$656.62 0.71%

ETH$2,094 1.02%

SOL$84.36 1.87%

HYPE$59.70 6.08%

XRP$1.33 1.53%

Phishing Scammers Net $400K With Fake Uniswap Google Ads

Image 3: AdvertisementImage 4Image 5

Written by Martin Young ⁠, Staff Writer.Reviewed by Jesse Coghlan ⁠, Staff Editor.

Scammers make $400K through fake Uniswap ads on Google

Latest NewsPublished May 26, 2026

A blockchain analyst has warned that malicious phishing advertisements impersonating Uniswap have appeared on Google Search, which has netted attackers at least $400,000.

Copy link

Scammers have been using Google to deploy malicious phishing advertisements impersonating the crypto protocol Uniswap, which has reportedly netted the attackers at least $400,000.

The on-chain analyst “b-block” posted to X on Monday that a website impersonating decentralized finance exchange Uniswap was draining funds from multiple wallets and the scammers were holding at least $400,000.

Stacy Muur, founder of Web3 marketing agency Green Dots, said that the scammers had stolen the funds from users through a phishing ad on Google that impersonated Uniswap, and shared a screenshot of a sponsored result from the search engine.

“It’s insane that Google has ignored this issue for years while fake links keep getting pushed above real ones and users keep getting drained,” she said.

Source:Stacy Muur

The two flagged addresses held a combined 146 ETH worth around $306,000, at the time of writing, according to Etherscan.

DeFiLlama said that “fake ads on Google are a common source of phishing attacks.” The crypto non-profit group Security Alliance (SEAL) reported in April that there was a “significant uptick” in phishing activity on Google search in March.

SEAL said that attackers pay Google or hack legitimate advertiser accounts to run convincing fake ads impersonating popular crypto protocols to lure users. Threat actors outbid legitimate crypto exchanges and protocols to achieve a superior position within the “Sponsored results” section on Google Search.

SEAL blocked over 356 malicious advertisement links, a number which is “representative of a steady volume of attacker-deployed Google Ads each week for more than a year,” it added. “The campaign is not slowing down, and we are receiving more reports from affected users.”

Related:‘TrapDoor’ malware targets crypto dev tools in supply chain attack

The phishing ads used legitimate-looking URLs to bypass Google’s automated checks, while a hidden secondary iframe loads the malicious payload, also invisible to Google’s detection.

Victims land on convincing clones of real crypto apps, with all network traffic secretly routed through attacker-controlled servers, explained SEAL, reporting that $1.27 million in total funds were stolen between March 13 and 30.

In early May, it was reported that attackers were abusing Google Ads and legitimate shared chats from AI chatbot Claude in an active “malvertising” campaign targeting Mac users.

Facebook is also a hotbed of fake ads and scams, according to Malwarebytes, which reported in February that scammers were running paid ads that looked like official Microsoft promotions.

Victims were directed to near-perfect clones of the Windows 11 download page, where malware designed to steal crypto and credentials was deployed.

Magazine:Polymarket seeks Japan entry, Harvard dumps entire ETH position: Hodler’s Digest

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

Copy link

Add reaction 2 1 1 1 1

More on the subject

Image 12

‘TrapDoor’ malware targets crypto dev tools in supply chain attack

May 25, 2026

Martin Young

Image 13

StablR Euro and US dollar stablecoins depeg after $2.8M exploit

May 24, 2026

Martin Young

Image 14

70% of all crypto wrench attacks happen in France: Report

May 23, 2026

Vince Quill

Image 15

‘TrapDoor’ malware targets crypto dev tools in supply chain attack

May 25, 2026

Martin Young

Image 16

StablR Euro and US dollar stablecoins depeg after $2.8M exploit

May 24, 2026

Martin Young

Image 17

70% of all crypto wrench attacks happen in France: Report

May 23, 2026

Vince Quill

Editor's choice

Crypto PAC money pours into Texas primary runoffs, as prediction markets favor challengers### Why is Bitcoin falling despite pro-crypto Kevin Warsh becoming Fed chair?### Crypto lobby spending on Republicans far outpaces Democratic support### UAE-linked ADI Chain gains Ledger support amid stablecoin growth### Squid and Safe Labs say third-party module behind $3.2M exploit

Image 18: AdvertisementImage 19Image 20

Image 21: AdvertisementImage 22Image 23

NewsLatest NewsMarketsBitcoinEthereumAltcoinsBlockchainRegulation

SponsoredSponsored ArticlesPress ReleasesResearch

EcosystemMagazineAcceleratorEventsDecentralization GuardiansLONGITUDE Event

AboutAbout CointelegraphEditorial PolicyAds DisclosureFinancial Risk Disclaimer

Image 24: Download on the App StoreImage 25: Get it on Google Play

Cointelegraph is committed to providing independent, high-quality journalism across the crypto, blockchain, AI, and fintech industries.

All news, reviews, and analyses are produced with full journalistic independence and integrity. For more details on our standards and processes, please read our Editorial Policy.

© Cointelegraph 2013 - 2026Terms of Service and Privacy Policy