Search your bank’s name right now. The first thing on the page is usually a paid ad sitting above the real website. Somebody bought that placement. Nobody necessarily checked who they were.
That gap is what the FTC opened a rulemaking on this week, and it’s why a bank impersonation scam can reach you through the most official-looking surface on the internet.
What the Commission actually said
On September 24 the FTC voted 2-0 to issue an advance notice of proposed rulemaking under its Impersonation Rule (16 CFR Part 461, Matter No. R207000). The rule already bans pretending to be a government agency or a business. What it doesn’t touch is the advertising machinery that carries the pretending.
The Commission’s language about that machinery is blunter than agencies usually get. Platforms, it writes, “profit from optimizing online ads for third parties, regardless of whether the third parties are legitimate, while avoiding the social cost of the impersonation scams furthered by such ad optimization.”
A footnote explains why nothing fixes itself. When somebody gets taken by a fake bank ad, they blame the scammer, or they blame the bank. They don’t blame the search engine. So platforms “face little to no market discipline to correct the problem.”
The banking case is named outright. Scammers, the notice says, “frequently use search-engine ads to impersonate legitimate banking institutions and obtain placement at the top of sponsored search results for consumer banking searches.” It cites a December 2025 Justice Department action in which fraudulent ads on Google and Bing imitated real banks’ sponsored listings and steered people to lookalike sites.
What it’s costing
Consumers reported losing about $16 billion to fraud in 2025, a 25% jump from 2024. Impersonation was the largest single category: more than a million reports and nearly $3.5 billion. Close to 30% of the people who lost money said the scam started on social media, where reported losses hit $2.1 billion, eight times the 2020 figure.
Then there’s the number that shows who collects. A watchdog report cited in the FTC’s own notice found the top 30 known Medicare scammers on Meta ran roughly 215 million scam impressions in 2025, earning the platform an estimated $12 million in ad revenue that year. Seventy-three percent of those impressions landed on people over 65.
The targeting worked exactly as advertised. It was just sold to the wrong customer.
The verdict, and the move
This is a proposal, not a rule. Nothing about your account changes this month, and the measures on the table may never take effect.
What should change is how you read that first search result. The fake bank ad above the real one isn’t a hole in the platform’s system. It’s the system doing its job for a customer who paid.
So stop reaching your bank through a search box. Type the address yourself, open the app, or call the number printed on the back of your card. A sponsored result verifies nothing except that someone paid for it.
Do it, because the cleanup is worse than the habit. Once the money leaves, one word decides whether a Zelle transfer gets refunded, and an unauthorized debit runs on a 60-day clock off your statement date. More deposit-account coverage sits on the savings hub.
And file a comment if this one hits you where you live. Comments are due 60 days after the notice reaches the Federal Register, at regulations.gov, marked “16 CFR Part 461, Impersonation Rule, Matter No. R207000.”
The history, for anyone keeping score
The FTC tried a version of this before and backed off, floating a “means and instrumentalities” provision during the original rulemaking and dropping it in December 2024 after commenters called the language too broad. This notice is narrower on purpose, aimed only at ad optimization. It names Google, Facebook, Amazon, the Apple App Store, and LinkedIn as examples of who would be in scope.
How Candid Yak makes money. Some of the products we write about pay us if you apply or sign up through our links. That never changes our verdict, our rankings, or the numbers in this article. We call a bad deal a bad deal whether it pays us or not. Some brands shown in our comparison tools are placeholder examples while we finalize partner agreements, and we label them as such.
Sources
- FTC Seeks Public Comment on Whether to Update Rule on Impersonation of Government and Businesses to Address Platforms' Role in Promoting Impersonation Scams (Federal Trade Commission, September 24, 2026)
- Rule on Impersonation of Government and Businesses, Advance Notice of Proposed Rulemaking, 16 CFR Part 461, RIN 3084-AB90, Matter No. R207000 (Federal Trade Commission)
- Impersonation of Government and Businesses Rule (Federal Trade Commission)