How to Spot a Google Search Ad Scam (Cloaking Explained)

Carol, a 71 year old retiree from Ohio, noticed her printer had stopped connecting to her home network. It was a Sunday morning, and she did not want to wait for her grandson to visit and fix it for her. So she did what millions of people do every day. She opened Google and typed "HP printer customer service number." What she accidentally fell victim to was a sophisticated Google search ad scam.

The first result on the page had a phone icon, a clean looking website, and the words "Official Support" right in the title. It even had the little "Sponsored" tag, which most people do not think twice about. Carol called the number. A polite man answered, said his name was "Kevin," and told her he could fix the issue right away if she let him install a small program on her computer to "check the connection."

Within twenty minutes, Kevin had remote access to her entire computer. He asked her to log into her bank account "just to verify her identity," and by the time Carol hung up, three hundred dollars had quietly left her checking account.

Carol did nothing wrong. She did not click a suspicious link in an email. She did not fall for a scary pop up. She simply searched for a phone number the same way she has for years. What she did not know is that the ad she clicked was built using a technique that experts call cloaking, and it is becoming one of the most common tricks scammers use to run a Google search ad scam and reach older adults through Google itself.

Read next: Rental Scams in 2026: $275 Million Lost and How to Spot One

This case study, based on patterns confirmed by consumer protection groups and cybersecurity researchers, breaks down exactly how this trick works so families can recognize it before the next call.

What Is Cloaking, in Plain Words

Think of cloaking like a store that shows the health inspector a spotless kitchen, then swaps it out for a dirty one the moment the inspector leaves. That is essentially what scammers do with Google.

Google has a review team and automated systems that check every ad before it is allowed to run. This team looks at the page the ad links to, to make sure it is safe and honest. Scammers know this, so they build two different versions of the same web page.

One version is shown only to Google's reviewers. It looks completely normal, maybe a simple page with a company logo and some harmless text.

Read next: Is ShopVSB.com Legit? Vitamin Sea Boutique Review 2026

The second version is shown to everyday people, like Carol, who click the ad after it has been approved. This version has the fake phone number, fake branding, and sometimes urgent language telling you to "call now" for support.

The scammer's software can tell the difference between a Google reviewer and a real visitor by looking at small clues, such as the visitor's location, the type of device being used, or even the exact way someone is browsing. Once the software decides this is not Google checking on it, this is a real person, it swaps the page content instantly, without the visitor ever noticing anything changed.

According to security researchers at Varonis, tools built specifically for this purpose are now sold and rented to scammers, complete with features that filter out anyone who looks like a researcher or investigator, so the fake ad can stay online longer and keep sending real, unsuspecting people to the scam page while avoiding detection. This means cloaking is no longer something only tech savvy criminals can pull off. It has become a service that almost anyone can buy, fueling every Google search ad scam running today.

Google is aware this kind of manipulation happens, and it is spelled out directly in Google's own advertising policies, which describe cloaking as showing different content to reviewers than to real users in order to circumvent their systems.

Read next: Doxo Pays $2.1M: The Bill Pay Ad That Looked Official

Why This Trick Works So Well on Search Ads

Most people have been trained for years to trust whatever appears at the very top of a Google search. That trust is exactly what scammers are exploiting.

According to the Federal Trade Commission's warning reported by ABC7 San Francisco, scammers build a fake website with a fake phone number and then pay for a Google ad so that number appears at the top of the search results, a method sometimes referred to by the press as "malvertising." This has become common enough that the FTC has issued repeated public warnings about it.

Google itself even acknowledges the difficulty of stopping this. In its own help materials for business owners, Google explains that fraudulent callers use untraceable phone numbers and other cloaking tactics, which is one reason these scams can be so hard to trace back to a real person or company.

There is also a newer twist. Fraud awareness groups like Scamicide have reported that scammers are no longer limiting themselves to paid ads. They are now working to get their fake numbers to show up inside Google's AI generated answers as well, sometimes referred to as AI Overviews. When an AI answer confidently displays a phone number, people tend to trust it even more than a regular search result, because it feels like the computer itself is vouching for it. This shift means fake customer service numbers can now surface not just through paid ads, but woven directly into an AI generated summary at the top of the page.

For a closer look at how remote access scams often follow this same call, and what to do if you have already shared account access, the State Department Federal Credit Union's breakdown of these Google phone number scams is a helpful companion resource.

Step by Step: How the Scam Actually Unfolds

To understand how a case like Carol's happens, it helps to walk through each stage the way a detective would.

Step one, the setup. The scammer picks a well known brand people commonly search for support on, such as a printer company, an airline, a bank, or a delivery service. They build a simple website using that brand's name or a very similar sounding name.

Step two, the disguise. They create two versions of the landing page, exactly as described above. The clean version goes to Google's review system. The fake version, with the phone number front and center, goes to everyday visitors.

Step three, the approval. Because the clean version passes review, Google approves the ad and it starts appearing at the top of search results, often above the real company's own website.

Step four, the bait. A person searches for help, sees the ad, and assumes that because it is on Google, and marked as an ad from a seemingly official source, it must be legitimate. They click, land on the fake version of the page, and call the number.

Step five, the trap. A scammer answers the phone, often sounding calm, professional, and patient, which makes the call feel trustworthy. From here, the tactics can vary. Some ask for a small service fee paid through gift cards or wire transfer. Others, like in Carol's case, ask to remotely access the victim's computer under the excuse of fixing the problem, which then gives them a door into banking apps, saved passwords, and personal files.

Step six, the disappearance. Once the money is gone or the access has been used, the scammer often shuts down that particular ad and website, and quickly builds a new one under a slightly different name to start the cycle again.

Why Older Adults Are Targeted So Often

Scammers are not choosing older adults by accident. Search engine habits matter here. Many younger internet users have grown used to skipping past the very first "Sponsored" result, almost out of instinct. Many older adults, having spent decades trusting that anything at the top of a printed phone book or an official looking directory was verified, naturally extend that same trust to the top of a Google page.

There is nothing wrong with this instinct. It made complete sense in a world of printed directories. The problem is that today, being first on the page does not mean being reviewed or approved by a human being. It usually means the advertiser simply paid the most money, or in this case, tricked the system into approving something harmful.

How to Protect Yourself and Your Family

The good news is that once you understand how a Google search ad scam works, it becomes much easier to spot and avoid. Here are practical steps that consumer protection experts recommend.

Never call a number found only through a search ad. Instead, go directly to the company's official website by typing the web address yourself, or use a bill, receipt, or the back of a credit card for a verified number.

Look past the first result. Scroll down and compare a few listings. If the phone number is different across multiple sites claiming to be the same company, that is a warning sign.

Be suspicious of urgency. Real customer service departments rarely pressure you to act immediately or to stay on the phone while you make a payment.

Never install software during an unexpected support call. No legitimate company should need remote access to your entire computer to solve a basic printer or account issue.

Use a credit card, never a gift card or wire transfer. Credit cards offer fraud protection that gift cards and wire transfers do not.

Talk to someone before you pay anything. A quick phone call to a trusted family member before sending money can stop a scam in its tracks.

Report what you find. If you come across one of these fake ads, reporting it to Google directly helps get it removed faster and can protect the next person who searches for the same thing.

Frequently Asked Questions

Is a "Sponsored" label proof that Google reviewed and approved the destination page? No. Scammers use cloaking to show Google's reviewers a clean, safe version of a page while showing real visitors a fake one. Passing review says nothing about what is actually on the page today.

How can I tell if a phone number from a search ad is fake? Compare it against the number on your bill, account statement, or the company's verified website, typed in directly rather than clicked from an ad. If the numbers do not match, do not call the ad's number.

What is cloaking, in one sentence? Cloaking is when a website shows one version of a page to Google's review systems and a completely different, scam version to real visitors.

Who do I call if I already lost money or gave someone remote access? Call your bank or card company immediately using the number on the back of your card, then contact the National Elder Fraud Hotline at 1-833-372-8311 and file a report at reportfraud.ftc.gov.

The Bigger Picture

Carol's story is a common one, not a rare one. Search engines have become the modern day phone book, and scammers have simply adapted their oldest trick, the fake customer service line, to fit a Google search ad scam built for this new environment. Cloaking is what allows that trick to slip past the very systems built to stop it.

Understanding the mechanics behind these scams does not require any technical background. It simply requires knowing that the very top of a Google search is not the same thing as verified or safe, and that a confident voice on the other end of the phone is not proof of a real company standing behind it.

The next time you or a loved one needs to find a customer service number, take the extra thirty seconds to go straight to the company's own website. That small habit is often the only thing standing between a normal Sunday morning and a very expensive phone call.

A Note From the Editor

I've spent over 14 years working in SEO, pay-per-click advertising, and online reputation management. In that time, I've watched closely how Google reviews and displays the ads people see every day.

Cloaking works because it turns the same trust building tools that honest marketers use against everyday people. Scammers build software that can tell the difference between Google's review team and a real visitor, using things like location, device type, or browsing behavior, and then quietly swap in the fake page once they know a real person is looking.

Here's the takeaway for your family: a top spot in Google's search results is the result of an ad auction, not a safety check. Treat it that way. The safest habit is to skip the ad entirely and go straight to a number from your bill, your account statement, or the back of your card.

Sources

• Scamicide: Fake Customer Service Numbers Are Now Showing Up in AI Search Results
• ABC7 San Francisco: Fake customer service phone numbers connect consumers to scammers
• State Department Federal Credit Union: Google Search Fake Phone Number Scams
• Varonis Threat Labs: 1Campaign, A New Cloaking Platform Helping Attackers Abuse Google Ads
• Google Ads Help: Circumventing Systems Policy
• Google Business Profile Help: Protect against fraudulent calls and texts