# Tech Support Scams Using Google Ads

**URL:** <https://community.bolster.ai/t/tech-support-scams-using-google-ads/198>\
**Category:** Phishing Kits\
**Tags:** phishing\
**Created:** [May 27, 2024, 5:49pm UTC](https://community.bolster.ai/t/tech-support-scams-using-google-ads/198 "2024-05-27T17:49:45Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![minger](https://avatars.discourse-cdn.com/v4/letter/m/c5a1d2/32.png) [@minger](https://community.bolster.ai/u/minger)\
**Post date:** [May 27, 2024, 5:49pm UTC](https://community.bolster.ai/t/tech-support-scams-using-google-ads/198/1 "2024-05-27T17:49:45Z")

</div>

Will be posting typical tech support call based scams (Most leading to call centers) promoted using Google ads.

---

<div class="post-metadata">

**Author:** ![minger](https://avatars.discourse-cdn.com/v4/letter/m/c5a1d2/32.png) [@minger](https://community.bolster.ai/u/minger)\
**Post date:** [May 27, 2024, 6:20pm UTC](https://community.bolster.ai/t/tech-support-scams-using-google-ads/198/2 "2024-05-27T18:20:01Z")

</div>

**Itunes/Apple Support**

Domains:  
www[.]apples-customer-care.netlify[.]app ( **SUSPENDED** ) **Netlify**

www[.]apples-customer-care.b-cdn[.]net ( **Live** ) - On **BunnyCDN**

www[.]apples-customer-care.vercel[.]app ( **Live** ) - On **Vercel**

www[.]apples-customer-cares.github[.]io/care/ ( **Live** ) - On **Github**

Looks like they are using multiple urls with same ad and same phone number.

**Ad screenshot**

 ![Screenshot_20240527_134506_Chrome](https://canada1.discourse-cdn.com/flex028/uploads/checkphish/original/1X/068e75ae8f21f5f25485b9715361223215d999e3.jpeg)

Advertiser name:

 ![Screenshot_20240527_134516_Chrome](https://canada1.discourse-cdn.com/flex028/uploads/checkphish/original/1X/787cf93ab840fb0ed5d0d55ecfbbe0e1af2461b4.jpeg)

Looks like this is an agency account, mostly used for phishing campaigns.

**Web screenshot** :

 ![Screenshot_20240527_134549_Chrome](https://canada1.discourse-cdn.com/flex028/uploads/checkphish/original/1X/fe5f9fe089a6a558090d6521eadd550641245fb9.jpeg)

Upon clicking on the ad you’re redirected to a number:  
**+1-888-725-3983**

---

<div class="post-metadata">

**Author:** ![hannah](https://yyz2.discourse-cdn.com/flex028/user_avatar/community.bolster.ai/hannah/32/30_2.png) [@hannah](https://community.bolster.ai/u/hannah)\
**Post date:** [May 28, 2024, 4:15pm UTC](https://community.bolster.ai/t/tech-support-scams-using-google-ads/198/3 "2024-05-28T16:15:38Z")

</div>

this is happening often now, esp for airlines as well. check this out @zero @Voodoo @vikasjha @Jaclyn

---

<div class="post-metadata">

**Author:** ![minger](https://avatars.discourse-cdn.com/v4/letter/m/c5a1d2/32.png) [@minger](https://community.bolster.ai/u/minger)\
**Post date:** [May 28, 2024, 5:14pm UTC](https://community.bolster.ai/t/tech-support-scams-using-google-ads/198/4 "2024-05-28T17:14:44Z")

</div>

> [@minger](#):
>
> apples-customer-care.netlify

It’s worse than i thought, every page has at least 3-4 fake ads.

 ![asdadasd](https://canada1.discourse-cdn.com/flex028/uploads/checkphish/original/1X/297602ef3a5d97c03e662796a006acf11b5e98a8.jpeg)

**Domain** :  
www[.]apples.helps-line-centres[.]online

Every domain has the same adcopy, descriptions, same web layout.  
All the ads are being ran on agency accounts, these accounts are considered strong accounts in bh adwords niche world.  
Most scams, phishing campaigns are ran on same agency accounts.  
Most of these accounts are sold on Russian forums or by Russian users either on TG or other online forums.

Looking at the ads it seems most of the ads are being ran by a big center, with at-least 30 scammers on calls.

This is pretty serious if compared with other niche being exploited by scammers.

---

<div class="post-metadata">

**Author:** ![minger](https://avatars.discourse-cdn.com/v4/letter/m/c5a1d2/32.png) [@minger](https://community.bolster.ai/u/minger)\
**Post date:** [May 28, 2024, 5:30pm UTC](https://community.bolster.ai/t/tech-support-scams-using-google-ads/198/5 "2024-05-28T17:30:38Z")

</div>

another big buck niche exploited by scammers.  
Will be updating this comment with any phishing ads i can come across on google.

**Airline Tickets** :

Adcopy:

 ![photo_1_2024-05-28_22-57-28](https://canada1.discourse-cdn.com/flex028/uploads/checkphish/original/1X/c604078d5432e5cdfb9625cce0f6858d7265a1b5.jpeg)

Advertiser Info:

 ![photo_2_2024-05-28_22-57-28](https://canada1.discourse-cdn.com/flex028/uploads/checkphish/original/1X/944c5653244f27f75355cf685ecd2cdc40631426.jpeg)

Uses google forms to publish a call only campaign using adwords.

---

<div class="post-metadata">

**Author:** ![hannah](https://yyz2.discourse-cdn.com/flex028/user_avatar/community.bolster.ai/hannah/32/30_2.png) [@hannah](https://community.bolster.ai/u/hannah)\
**Post date:** [June 13, 2024, 5:43pm UTC](https://community.bolster.ai/t/tech-support-scams-using-google-ads/198/6 "2024-06-13T17:43:23Z")

</div>

Our team also saw this recently - social media also being targeted [Scammers use fake social media accounts to impersonate airlines](https://www.bbc.com/news/articles/cp3371r7l1vo)
