color: var(color-red-500)

Uniswap phishing campaign on Google ads nets attackers over $400k

People using cryptocurrency are still getting tricked by phishing scams advertised on Google Ads. Scammers are now creating fake Uniswap websites to steal money – totaling hundreds of thousands of dollars – from those who aren’t careful with their digital wallets.

Summary

  • Fake Uniswap ads on Google search have reportedly helped scammers steal at least $400,000 from crypto users.
  • Security groups said attackers continue using sponsored Google ads and cloned crypto websites to drain connected wallets.
  • SEAL reported that phishing campaigns tied to malicious Google advertisements stole more than $1.27 million within weeks earlier this year.

A fake website pretending to be Uniswap, a popular decentralized exchange, stole at least $400,000 from several users, according to on-chain analyst b-block.

According to data from Etherscan, the analyst identified two digital wallet addresses connected to the activity, which collectively contained 146 ETH, valued at approximately $306,000 when the information was published.

Stacy Muur, who founded the Web3 marketing agency Green Dots, explained that the scam worked by using paid Google search ads to look like official Uniswap results, appearing at the very top of search pages.

Scammers have stolen around $400,000 from people by using a fake Uniswap advertisement on Google. It’s concerning that Google hasn’t addressed this problem for years, allowing these fraudulent links to appear higher in search results than legitimate ones, leading to users losing their funds. This fake ad was actually the first result I saw when searching.

— Stacy Muur (@stacy_muur) May 25, 2026

Muur posted a screenshot of a misleading ad and faulted Google for not preventing these types of scams, which have repeatedly targeted people interested in cryptocurrency.

In my research, I’ve consistently seen Google Ads used in phishing scams over the last year. Just last July, crypto.news reported on a case where a DeFi user lost over $1.23 million in Uniswap NFTs after falling for a scam. The user signed a harmful transaction on a website that looked legitimate, but was actually fake and promoted through a Google Ad.

Scam Sniffer reports that the attackers created a fake website that looked almost identical to Uniswap. They used this to deceive the victim into authorizing a harmful smart contract, allowing the attackers to steal their assets.

As a crypto investor, I’ve been hearing a lot about a new scam tactic that’s really concerning. Apparently, attackers are using fake website addresses – they look almost exactly like the real crypto platforms – and copying their interfaces. The scary part is, if you connect your wallet and approve a transaction on one of these fakes, they can steal your assets *without* even needing your private keys. Security firms are warning everyone to be extra careful and double-check everything before connecting your wallet anywhere.

Security groups warn phishing attacks are increasing

According to DeFiLlama, a platform that tracks decentralized finance, fake Google ads are still a major way scammers try to steal cryptocurrency through phishing attacks.

The Security Alliance (SEAL) recently noted a large increase in phishing attempts using Google Search ads during March.

SEAL reports that attackers use Google ads to trick people into visiting fake websites that look like official crypto platforms and exchanges. They either buy ads directly or hack into existing advertiser accounts. To ensure their scam pages are seen first, attackers often bid more money than legitimate businesses for ad space, pushing the real results further down the search results.

Over the past year, the cybersecurity firm SEAL has blocked over 356 harmful ad links and reports the threat is still ongoing, with users continuing to be affected. Attackers are cleverly disguising their malicious ads by using hidden code and extra layers that bypass Google’s usual security checks, while still appearing to show safe website addresses to users.

People who visit these scam websites usually find pages that look almost exactly like the real apps for cryptocurrency.

SEAL reports that traffic from fake websites is being directed through servers controlled by hackers, allowing them to steal authorization codes and empty users’ digital wallets. They estimate that phishing scams using Google ads resulted in approximately $1.27 million in losses between March 13th and March 30th.

Recently, PeckShield Alert, a company specializing in blockchain security, reported a new phishing scam. This scam involves fake advertisements for Aave appearing at the very top of Google search results.

As crypto.news reported earlier, dangerous websites tricked users into authorizing transactions that gave attackers direct control of their digital wallets. Scam Sniffer gave a similar alert in June, noting that fake advertisements for Aave were appearing high up in Google search results.

Read More

2026-05-26 10:16