Fraudulent Ads on Social Media Target Users with Fake Investment Schemes and Bank Impersonation

Fraudulent advertisements are increasingly appearing on social media and online platforms in Colombia, using fake investment opportunities, company impersonation, and fake security alerts to steal personal and banking information. A recent survey found that 91% of adults experienced some form of cyber threat in the past 12 months.

How the Scam Works

Fraudulent advertisements appear across various platforms including social media, search engines, online shops, apps, games, and messaging applications. Social media platforms pose the highest risk according to security experts.

Common tactics used by scammers include:

Company Impersonation: Posing as legitimate businesses or banks to build credibility
Limited-Time Discounts: Creating urgency to pressure quick purchases
Investment Promises: Claiming high returns with little to no risk
Prize or Reward Offers: Requesting personal or financial data in exchange for false rewards
Fake Security Alerts: Using artificial security warnings to prompt clicks
Celebrity Endorsement: Misusing images and names of public figures
Sensational Headlines: Using exaggerated or false claims to grab attention

Types of Damage

These ads serve different criminal purposes:

Malware Distribution: Exploiting security vulnerabilities or tricking users into downloading malicious files or apps (malvertising)
Financial Fraud: Non-existent investment opportunities, products never delivered, fake paid services
Data Theft: Fraudulent online stores designed to steal credit card information
Phone-Based Scams: Phone numbers in ads connect victims to criminals seeking confidential information or payment

Warning Signs to Identify Fraudulent Ads

Urgency Language: "Only today" or "limited time" to rush decision-making
Exaggerated Promises: Claims of high profits without risk are classic fraud indicators
Poor Grammar or Spelling: Unofficial wording compared to legitimate company communications
Misused Corporate Logos: Unauthorized use of recognizable brand images
Unnecessary Personal Information Requests: Asking for data not typically needed for the service
Suspicious URLs: Links pointing to domains similar to but different from official company sites

Prevention Tips

Before Clicking:

Verify information on the official company website before clicking ads
Check URLs and email addresses carefully for authenticity
Enable two-factor authentication on important accounts
Install and maintain reputable security software
Keep your device's operating system and apps updated

If You Click a Fraudulent Ad:

Avoid entering additional information and don't respond to scammers
Review bank accounts for unauthorized transactions
Contact your bank or card issuer immediately if fraud is suspected
Change passwords and enable two-factor authentication
Scan your device with security tools if suspicious files were downloaded

What to Do If You're Victimized

Act Quickly: Rapid response minimizes potential damage
Collect Evidence: Save screenshots, URLs, messages, and payment receipts
Contact Your Bank: Report any unauthorized transactions immediately
Report to Platform: File a report with the website or app where the ad appeared
File Police Report: Document the incident as a fraud or identity theft case

Key Takeaway

While technology offers tools against cyber threats, maintaining strong cybersecurity habits remains fundamental to protection. Vigilance toward suspicious ads and links is your best defense against fraud.