Expert provides ways to protect finances from cyber threats
Cybercrime caused losses of nearly $21 billion in the past year, leading Kurt Knutsson to issue warnings about increasingly sophisticated scams that utilize AI. Appearing on ‘Fox & Friends Weekend,’ he discussed FBI data, mentioning that investment fraud alone accounted for $8.65 billion in losses. To help families safeguard their finances and secure their accounts, Knutsson is offering a free live class.
Many people casually check their bank accounts online, often just typing their bank’s name into Google and clicking the top search result without much thought. Federal investigators, however, point out that criminals have exploited this natural behavior to steal bank logins and empty accounts. The Justice Department recently announced the extradition of a Russian web developer tied to a significant bank account takeover operation. This group was buying sponsored search engine ads that directed banking customers to fake login pages, where unsuspecting victims unwittingly provided their credentials.
This alarming tactic should prompt anyone who banks online to take notice. Here’s how the scam operates, why those sponsored links can mislead you, and some steps you can take to keep your bank login secure from criminals.
How the fake bank ad scam worked
According to federal prosecutors, the scheme involved creating spoofed domains that resembled legitimate bank websites. The perpetrators bought sponsored links that showed up in search results when potential victims looked for their banks. A click on these links led users to fraudulent login pages, where their credentials were captured by the criminals. The indicted individuals also allegedly stored over 5,000 stolen login credentials and developed software meant to capture sensitive data.
Where Google and Bing come into the story
The recent announcement from the Justice Department noted that the conspirators purchased these sponsored ads but did not specify the search engines used. However, a previous report indicated that Google and Bing were involved in the dissemination of these fraudulent advertisements. Victims who interacted with these ads ended up on fake banking sites controlled by the criminals, resulting in significant financial losses.
While Microsoft claims to have systems in place to prevent misleading ads, it acknowledges the challenge of combating such sophisticated scams. Google was not available for comment at the time of this reporting.
Why a sponsored Google result can fool you
Paid search results can easily catch our attention since they often appear right where we look first when searching for a bank. The wording on these ads may seem familiar, prompting clicks without a second thought. Most ads are legitimate, but the FBI warns that scammers can pay for ads that masquerade as real businesses and lead users to phishing sites. They refer to this deceptive tactic as SEO poisoning and advise using bookmarks to access banking sites instead of relying on search results or ads.
Bank account takeover losses have topped $262 million
The issue goes beyond just this one operation. The FBI’s Internet Crime Complaint Center has received over 5,100 complaints regarding account takeover fraud since January 2025, with losses exceeding $262 million. Various methods, including phishing sites, have been employed by criminals to gain access to accounts, and once inside, they might quickly transfer funds to accounts they control, complicating recovery efforts.
The accused developer has now been extradited to the U.S.
Sergei Anatolyevich Filimonov, a 36-year-old Russian web developer, was recently extradited to the United States following his indictment by a federal grand jury.
Tips to protect yourself from fake bank login ads
It’s still perfectly fine to bank online, but changing your approach to reaching your bank’s login page could significantly reduce your risk.
1) Use your bank’s official app when possible
If you have your bank’s official app, it’s best to use that directly instead of searching online. This change can help you avoid falling for scams.
2) Bookmark your bank’s real website
Once you visit your bank’s verified site, save it as a bookmark. The FBI highly advises using bookmarks to reach financial login pages instead of relying on search results.
3) Check the web address before entering anything
Always take a moment to verify the domain before entering your credentials. Fake sites may employ minor tweaks to mimic a legitimate URL.
4) Do not assume a sponsored result has been verified
A “Sponsored” label simply means someone paid for that ad. Confirm the destination yourself before clicking, especially for sensitive logins.
5) Keep multifactor authentication turned on
Activate multifactor authentication if your financial institution offers it, but remember that it’s not foolproof. Criminals can use various tactics to obtain your one-time codes, so never share these with anyone who contacts you unexpectedly.
6) Use a password manager as another warning sign
A trusted password manager is useful in identifying when something seems off. If it usually fills in your bank information but doesn’t, pause and check the address before entering anything.
7) Use strong antivirus software
Having effective antivirus software can help keep you safe if you accidentally click a malicious link. While it won’t protect against all threats, it adds another layer of security.
8) Turn on financial account alerts
If your bank provides them, set up alerts for unusual activities. Regularly checking your accounts can help you catch unauthorized transactions quickly.
9) Consider identity theft protection
Such services can alert you to unusual actions regarding your credit and financial accounts, offering assistance if fraud occurs. While not preventative, they help in monitoring your information’s safety.
10) Act quickly if you already entered your login
If you believe you’ve entered your credentials on a fraudulent site, contact your bank immediately. Change your password and report fraudulent transfers if necessary.
Kurt’s key takeaways
This scam really hits home because it feels so routine. You check your bank, clicking a search result that seems legitimate—there’s no strange email or unexpected message involved. You initiated this search, making it difficult to spot a trap. For online banking, I’d recommend skipping search results altogether. Use your bank’s app or a verified bookmark instead, and take a bit of time to ensure the address is correct before inputting any sensitive information. A little extra caution now can prevent a lot of headaches later on.
