An ad can copy a company name and send people to a fake domain to collect payments, data, or credentials. The incident may involve an outside advertiser or a compromised company ad account; each scenario requires different evidence and recovery steps.
What decision-makers should know
An ad can copy a company name and send people to a fake domain to collect payments, data, or credentials. The incident may involve an outside advertiser or
Confirm what the affected person actually saw
Do not repeatedly search for the ad or click it from multiple devices. Ads vary by location, query, time, and profile, and clicks can generate cost or lead to a dangerous page. Ask the viewer for a complete screenshot showing the Sponsored label, copy, displayed name, visible domain, query, date, country, and device. If they already clicked, request the final URL without asking them to open it again.
Separate the displayed domain from the true destination. An ad may use a similar company name while sending people to a site with changed letters, deceptive subdomains, or redirects. Preserve the link through browser tools only when this can be done without visiting the site. Do not enter passwords, codes, card numbers, or documents to discover how far the scam goes.
Record what the page requested: payment, sign-in, download, phone call, investment, booking, or personal information. Note where the copied branding appears. A short timeline and representative screenshots are more useful than a folder of duplicates.
- Query and country where it appeared
- Complete ad screenshot
- Displayed domain and final URL
- Date, time, and device
- Payment, data, or action requested
Separate outside impersonation from a hacked account
Check the company’s Google Ads account, manager hierarchy, and authorized users’ email. Look for unknown campaigns, budget increases, automated rules, new manager accounts, payment changes, and added users. If no related internal activity exists, an outside advertiser may be using the brand’s identity.
When unauthorized changes exist, Google says to report the compromised account promptly. Its guidance recommends gathering change-history timestamps, unknown manager IDs, budget increases, unusual rules, and verification information. Secure the Google account and mailbox too: change compromised credentials, review sessions, enable strong authentication, and remove unknown recovery methods.
Do not destroy all evidence before preserving it, and do not create a replacement account to keep advertising before understanding the scope. Notify finance about suspicious charges and check whether other tools share a user, card, tag, or access. A compromised account is a security incident; external impersonation is platform and brand abuse. Both can happen together.
Report the ad through the correct route
Google provides a form to report ads or Shopping listings. It lets a user say that an asset violates policy—for example scam or phishing—or that it should be removed for a potential legal violation such as trademark, copyright, or counterfeit goods. Choose the category matching the facts; do not automatically frame a commercial dispute as phishing or a brand copy as unauthorized account access.
Google Ads’ Misrepresentation policy prohibits hiding or falsifying material information, pretending to be supported by another brand, and impersonating businesses to obtain money or personal data. Identify the ad copy, domain, behavior, and real relationship to the company. Avoid claims about who operates the ad when their identity is unknown.
Save the confirmation and separately report the domain, page, phone number, or social account where appropriate. Removing an ad does not disable its website, while taking down a site does not erase alternate ads or profiles. Google decides independently; removal, suspension, advertiser identification, and timing are not guaranteed.
Protect customers without amplifying the scam
When the risk is verified, publish a short warning on the official website and controlled channels. Identify the domain or number that is not associated with the company, explain the genuine process, and provide a place to verify an offer. Do not link to the fake site or repeat banking details. Date the warning and update it as facts change.
Prepare customer service to receive screenshots and guide people without unnecessarily collecting complete identity documents. Someone who shared credentials should secure their accounts; someone who paid should promptly contact their bank or provider. Victims may also use official fraud and law-enforcement channels appropriate to their country.
In Spain, Mexico, the United States, and other markets, legal and regulatory routes depend on the facts. A Google Ads report does not replace contacting a bank, provider, authority, or qualified professional when loss, sensitive data, or personal risk is involved. This guide is general information, not legal advice.
Reduce the chance of recurrence
Maintain a public page listing official domains, phone numbers, applications, and payment methods. Register reasonable domain variants where useful and monitor new registrations, branded ads, and pages copying company text. Protect advertising accounts with individual users, least privilege, strong authentication, and periodic access and manager reviews.
Do not respond by buying clicks on the fake ad or making exaggerated claims in your own ads. Google also prohibits misleading promises and false affiliations. A defensive campaign should use a clear identity, official domain, and verifiable messaging; it cannot guarantee that the authentic ad always appears above a fraudulent one.
ReputationGeo.ai can organize evidence, map ads, domains, and profiles, prepare reports, and coordinate warnings and monitoring. Google, registrars, hosts, and payment providers decide independently. We do not guarantee removal, reimbursement, actor attribution, ad position, or commercial recovery. Serious incidents may require security specialists and qualified legal professionals in the relevant jurisdiction.
How to turn this guidance into a responsible plan
Begin with evidence, not assumptions. Save the exact URLs, screenshots, publication dates, search phrases, review profiles and AI answers that are creating concern. Record where each item appears, who controls the source and whether the information is inaccurate, outdated, private, misleading or simply unfavorable. These distinctions matter because removal, correction, response, suppression and monitoring are different remedies. A credible adviser should explain those differences before recommending work or discussing timing.
Next, define the audience and the decision at risk. A result seen by prospective clients in Spain may require different language, sources and local signals from a result affecting investors in the United States. Decide which names, brands, locations and search questions matter most. Prioritization prevents a campaign from becoming a vague attempt to control the internet and turns it into a measurable program focused on accuracy, trust and discoverability.
Evidence, people and measurements to prepare
Create a baseline before changes begin. It can include the first two pages of Google for agreed searches, ratings and review volume, visibility of owned pages, recurring themes in AI answers and the status of platform or publisher requests. Keep personal data to the minimum necessary and share sensitive documents only through an agreed secure process. If a legal right may apply, involve qualified counsel in the relevant jurisdiction; reputation strategy does not replace legal advice.
Assign an owner for approvals, factual verification and customer responses. Review progress consistently, but do not judge the program by one daily ranking. Useful measures include corrected or removed items, response completion, the share of credible owned and independent sources, search-result composition, branded query trends and whether public information answers real questions. The objective is a more accurate and resilient digital record, not an artificial promise that criticism will disappear.
Keep a decision record, not just a list of links
For every material item, record the exact source, the factual concern, the person responsible for verification, the proposed route and the reason that route is proportionate. Include the date of any request, response deadline, platform reference number and next review date. This record prevents duplicate or contradictory reports and helps a new decision-maker understand why an item was corrected, challenged, answered, monitored or left alone.
A sound record also separates confirmed facts from interpretations. Label legal questions for qualified counsel, service failures for operational owners and public explanations for communications review. If an item changes, preserve the before-and-after evidence without collecting more personal data than necessary. This discipline is especially important when search engines and AI systems update unpredictably: it shows what actually changed and avoids claiming credit for movements that may have several causes.
- Source, URL, date and affected search or prompt
- Verified facts, disputed claims and supporting evidence
- Chosen route, owner, status and next review date
- Privacy, amplification and escalation risks
Related ReputationGeo.ai services
Use these service pages to distinguish image removal, broader content removal and search delisting before choosing a route.
Frequently asked questions
Official sources and further reading
Rules and procedures change. Check the current official guidance before submitting a request.
The practical next step
Document the relevant URLs, searches and facts before acting. A responsible plan should separate what can be corrected or removed from what needs response, suppression or monitoring. The correct approach depends on the source, market and evidence.