Bitcoin Forum

I just try to search for XMR wallet in Google using this keywords:

xmr wallet
xmr wallets

And Google display a fake and phishing site thru their Ads.


Archived: https://archive.is/NUzye

https://i.imgur.com/EXsZ2ZL.png

This is how the fake website looks like

https://i.imgur.com/9ftd0Yg.png

This is the domain information of this fake website:

https://whois.domaintools.com/xmrwallet.org

https://i.imgur.com/CSUqzCX.png

This is the real website: https://www.xmrwallet.com/#/login.html

I have send a report to namecheap:


So just be careful check everything before entering your seed.

nice find!


I've seen a lot of fake site/phishing site over the years I've been using google I just tend to report them but in order for the ad to be taken there have to be a lot of report coming requesting for the ad to be taken down.

Does not google ad check the site before posting it on the sites as their ads or they are just concern with the money which they get from publishing these ads  ???

If you want access any of your wallet, don't click on the ads link, rather look for the website link in google search.

cryptomaniac_xxx, Anyone who doesn't have AdBlock installed in their browser will see these ads, and it's known that Google can't control the content of these ads - or rather, they don't care too much about anything but profit. Therefore, everyone should protect themselves in the simplest way, which is also free - install something like uBlock Origin, and there will no longer be scam ads as search results.

https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/
https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en

In my perspective, it is superb easy to detect those scam sites and scam wallets. They tend to use prefix or suffix (wallet, official) and some special characters in their domain names: dash, dot, etc. Or they use uncommon domain like .xyz, and local languages, .it, .fr for example. Official websites don't have such things, generally.

Another risky type is Punny code: Punycode and how to protect yourself from Homograph Phishing attacks? (https://bitcointalk.org/index.php?topic=5184169.0)

Most websites that you access rely on the revenue they generate from advertisements. They provide you with free contents and you should support them. Using ad blocker will not help your favorite websites to survive. Make sure you whitelist websites that you frequently visit, or sites that you think doesn't have intrusive and annoying advertisement.
The way most of the websites are starting to advertise, no wonder everyone is using adblockers.

Nothing new over here. People will just have to be careful when clicking anything. I remember the other day when I googled malwarebytes, the top ad result was mulwarebytes! Hilarious.

I try to used Google with Adblock off and it's redirect me to this website, not on the fake website as pointed by OP.



And now it is impersonating this wallet: https://magnumwallet.co/, so these criminals have a back up website to constantly shifting/rotating to mislead potential victims, very tricky indeed.

I'm wondering why ads like this from a scam website cam have ads from Google? Since I know they have been strict with regards to crypto related ads in particular these type of scam websites shouldn't be shown in the first place. Are they fooling Google here by showing a legot service and then after a few hours they wilk tranform their website into a phishing website or Google simply just don't care when it comes to their viewer's protection? Because from what I see Google can be liable here by promoting an ad of a pishing website.

Perhaps scammers are trying to hide or cloak their ads in Google that's why they're able to get around and this ads keeps popping on Google. There are even Youtube videos instructions on how to do it. So I think the ball is really on Google, but since they are generating revenues as well, so it might take some time for them to take this out, without people actually reporting it.

Google may not be strict in terms of website content as long as the companies that wants to have an ad space will pay. These scammers can fake their contents in the beginning and proceed with the dark plan on the latter.
This is just another lesson not to trust anything in the internet that even Google, Facebook, YouTube are displaying a lot of ads about the scam companies. Note that these are reliable platforms, but they I guess they have no control over these website's content. Least thing to do is to report, so Google will take this ads off from their platform.

Currently, there are many fake websites or applications that are very similar to the original. And this deceives a lot of people.
Moreover, scammers make it on Google searches and in applications such as the Playstore. This will convince a lot of people.
But again, I agree with you, we have to be more careful.
If you find fake websites or applications like this, let us report it to Google so that Google will immediately shut down the sites and also advertisement.

In this case, I prefer to download or signup via the website first. In order not to be mistaken, do not do a search on google search. If it's crypto-related, open crypto trackers like CMC and CoinGecko. They must have provided their real website address.
When it comes to blockchain in general, make sure we crosscheck the URL link address and check repeatedly, matching it with information from other sources such as official Telegram and others.

It's a good catch, have you already reported this?

Avoid searching on google because there are various phishing ads there that not yet reported by google. As mentioned above, just simply report this to google and they will eliminate quickly these phishing link ads. The problem is that they aren't able to filter their ads which is a scam/phishing site or not. So we have nothing to do with this, just to have extra carefull and be vigilant upon searching in google because they aren't safe at all.

I heard that Google has a plan of crypto adoption, but if this will not fix them, I dont think how many victims from scam.

A local friend was a victim of this scam 2 weeks ago, he forgets about the 'my monero wallet', and try the first recommendation from google, and he hit that scam. I can't believe google allows this kind of scams because the hackers only have to pay for a cheap campaign to get tons of users. Is like if google helps with the scam, they should feel guilty for this.

Never trust Google or Youtube when we are talking about cryptos.

What most will advise is that AdBlock is always turned on search pages, and of course everyone can decide whether or not to use it on a particular site. If everyone block Google Ads, then maybe the company's attitude towards scam would change, so they would hire a number of people who have knowledge of crypto to filter the good from the bad. I do not live in the illusion that this would prevent 100% of scams, but a certain percentage of such advertising campaigns would be stopped before they do any harm.

Until that attitude changes, we have satisfied scammers, satisfied Google and deceived users who become victims of bad people and greedy companies.

knowing that I've seen a lot of it being advertised in google over the years? I guess not, because if they do we or I wouldn't be seeing that many phishing site beings advertise on their search engine/web browser.

OP got the websites mixed up a bit, probably because of the same redirect

The ad is for
The website he got the screenshot and whois data is

One is with RM the other MR but both are pretty new and 33 and 46 days old.
Also the xrm version seems to have a geo-ip redirect in it, probably that's what's happening to you

Anyhow, browsing these days without adblock is similar to flogging oneself.

First of all why do we need to use google and see all those google ads  :(
I think we should shift to https://duckduckgo.com/ as it is a much decent search engine.

Secondly, we become victim of these scams because we behave careless. If we pay attention to what wallet and site we are opening, we will never be scammed.

I guess this is common because as long as you paid google you could probably promote anything in ads when someone searches something like a keyword they will recommend your website easily. Google doesn't filter this kind of concern so having a scam or fake websites is not a problem since anyone could just pay google, you could even promote cheat codes, fake websites, or some porn things, etc.

That is already a thing in google but a lot of people already know it, does anyone trusting advertisement by google here? I guess not for sure only newbies or someone that don't really have the knowledge or just new on the internet is going to trust ads on google.


I guess blocking the advertisement is a good move since you might misclick an ads.

No, they don't. Apparently, they don't care about the security of their visitors as long as they get a good revenue from those ads.
They say that they rely on their customers reports to detect phishing ads but this doesn't seem to be true either. I reported many phishing ads but none of them got removed.

If this is the case where Google only initially views the website for any kind of illegal activity I think the best thing for them to do is to actively screen/monitor websites that they have ads on as they are seriously endangering their own customers of being scammed. This only should also be applied to social media giants and other ad networks as they may partly be at blame here if their users got fooled by them somehow with the ads they are publishing. This websites could easily be avoided without receiving any kind of exposure from the use of these websites promoting their content.

I'm not visiting any sites on the Google header with -Ad on it. But there are users who think that ad is a part of the legitimate results.

Google says the ad was based on the user's search terms.

To report the site just in case it's not legit, just click the dropdown beside the ad name on the result and hit Report Ad.

The advertising page on Google is positioned at the top and if you are not observant then you don't know if you have accessed a phishing site. You have to bookmark the wallet page to avoid phishing on google search.