Fake Antivirus Scams via Google Search & Ads
Sponsored search results promote bogus security software, directing worried users to fake product pages that charge for useless or harmful tools.
Part of: Fake Antivirus Scams
Last reviewed: 1 June 2026
When users search for antivirus software or type queries like 'my computer is slow' or 'virus removal', they are in a heightened state of security concern — and fraudsters know it. Fake security product ads appear prominently in these search results, offering free scans or discounted protection from organisations that look like established security brands.
The landing pages are convincing, with professional design, fabricated lab test scores, and fake awards. Users who purchase the 'software' receive either nothing, a useless application, or — worst of all — actual malware disguised as a protection tool.
How this scam works on Google Search & Ads
A user clicks an ad for what appears to be a well-known or professional security product. The landing page displays alarming statistics about current threats and encourages immediate purchase. Payment is taken and a download link is provided. The downloaded software may show fake scans with scary-sounding detections to justify its existence, or may silently install credential-stealing malware alongside the fake product.
Some ads lead to pages with auto-playing pop-up warnings mimicking Windows or macOS alerts, pushing users to call a fake support number or install a 'cleaning tool' that is itself malicious.
Common red flags
- Search ad for an antivirus brand you do not recognise that you cannot find in established security reviews
- Landing page with exaggerated threat warnings and countdown timers
- Download offered without a clear description of what the software does
- Ad destination URL does not match the brand name shown in the ad headline
- Pop-up on the page that cannot be closed and displays a phone number
- Price significantly below mainstream security products with claims of equal or superior protection
How to protect yourself
- Only download security software from official vendor sites, accessed by typing the URL directly
- Research security products on established independent review sites before purchasing
- Legitimate security software does not generate urgent pop-ups asking you to call a number
- If a pop-up cannot be closed, force-quit the browser — do not call any number displayed
- Report suspicious security ads to Google through the ad's 'Report an ad' option
How to report it
- Report the ad to Google Ads via the report option
- Submit the URL to your national cyber authority or a public malware-analysis service
- If malware was downloaded, seek professional device cleaning and change all stored passwords
Frequently asked questions
How do I know if a security product I found via Google is real?
Cross-check the product name against reviews on established independent security-research sites (not testimonials on the vendor's own page). Download only from the vendor's official domain, verified by separate research, not from a search ad link.