Free to compare · No sign-up
How it worksAd disclosure
Article

The Fake Bank Ad Above the Real One Paid to Be There

The FTC voted September 24 to open a rulemaking on whether search engines and social platforms should answer for the impersonation ads they optimize. Consumers reported nearly $3.5 billion in imposter losses in 2025. Here is the move to make while the comment window is open.

Two hands holding a smartphone with a blank white screen against a plain background

Search your bank’s name right now. The first thing on the page is usually a paid ad sitting above the real website. Somebody bought that placement. Nobody necessarily checked who they were.

That gap is what the FTC opened a rulemaking on this week, and it’s why a bank impersonation scam can reach you through the most official-looking surface on the internet.

What the Commission actually said

On September 24 the FTC voted 2-0 to issue an advance notice of proposed rulemaking under its Impersonation Rule (16 CFR Part 461, Matter No. R207000). The rule already bans pretending to be a government agency or a business. What it doesn’t touch is the advertising machinery that carries the pretending.

The Commission’s language about that machinery is blunter than agencies usually get. Platforms, it writes, “profit from optimizing online ads for third parties, regardless of whether the third parties are legitimate, while avoiding the social cost of the impersonation scams furthered by such ad optimization.”

A footnote explains why nothing fixes itself. When somebody gets taken by a fake bank ad, they blame the scammer, or they blame the bank. They don’t blame the search engine. So platforms “face little to no market discipline to correct the problem.”

The banking case is named outright. Scammers, the notice says, “frequently use search-engine ads to impersonate legitimate banking institutions and obtain placement at the top of sponsored search results for consumer banking searches.” It cites a December 2025 Justice Department action in which fraudulent ads on Google and Bing imitated real banks’ sponsored listings and steered people to lookalike sites.

What it’s costing

Consumers reported losing about $16 billion to fraud in 2025, a 25% jump from 2024. Impersonation was the largest single category: more than a million reports and nearly $3.5 billion. Close to 30% of the people who lost money said the scam started on social media, where reported losses hit $2.1 billion, eight times the 2020 figure.

Then there’s the number that shows who collects. A watchdog report cited in the FTC’s own notice found the top 30 known Medicare scammers on Meta ran roughly 215 million scam impressions in 2025, earning the platform an estimated $12 million in ad revenue that year. Seventy-three percent of those impressions landed on people over 65.

The targeting worked exactly as advertised. It was just sold to the wrong customer.

The verdict, and the move

This is a proposal, not a rule. Nothing about your account changes this month, and the measures on the table may never take effect.

What should change is how you read that first search result. The fake bank ad above the real one isn’t a hole in the platform’s system. It’s the system doing its job for a customer who paid.

So stop reaching your bank through a search box. Type the address yourself, open the app, or call the number printed on the back of your card. A sponsored result verifies nothing except that someone paid for it.

Do it, because the cleanup is worse than the habit. Once the money leaves, one word decides whether a Zelle transfer gets refunded, and an unauthorized debit runs on a 60-day clock off your statement date. More deposit-account coverage sits on the savings hub.

And file a comment if this one hits you where you live. Comments are due 60 days after the notice reaches the Federal Register, at regulations.gov, marked “16 CFR Part 461, Impersonation Rule, Matter No. R207000.”

The history, for anyone keeping score

The FTC tried a version of this before and backed off, floating a “means and instrumentalities” provision during the original rulemaking and dropping it in December 2024 after commenters called the language too broad. This notice is narrower on purpose, aimed only at ad optimization. It names Google, Facebook, Amazon, the Apple App Store, and LinkedIn as examples of who would be in scope.

How Candid Yak makes money. Some of the products we write about pay us if you apply or sign up through our links. That never changes our verdict, our rankings, or the numbers in this article. We call a bad deal a bad deal whether it pays us or not. Some brands shown in our comparison tools are placeholder examples while we finalize partner agreements, and we label them as such.

Frequently asked questions

Does this change anything about my accounts right now?

No. An advance notice of proposed rulemaking is the earliest stage there is. The FTC is asking whether it should write a rule at all, and the measures it floats (vetting advertisers, monitoring posted ads, investigating suspected impersonation ads, removing confirmed ones, and disciplining the advertisers behind them) are questions, not requirements. What changes today is only how you should read a sponsored search result.

How do I file a comment, and by when?

Comments are due 60 days after the notice is published in the Federal Register, so the exact deadline depends on the publication date. File online at regulations.gov and mark the comment '16 CFR Part 461, Impersonation Rule, Matter No. R207000.' Paper comments go to the Federal Trade Commission, Office of the Secretary, 600 Pennsylvania Avenue NW, Washington, DC 20580, with the same marking on the comment and the envelope.

Why is the FTC going after platforms instead of the scammers?

It is doing both, but the notice argues the platform side has no self-correcting pressure. Its footnote puts it bluntly: because victims blame the impersonated business or the scammer rather than the platform that carried the ad, platforms 'face little to no market discipline to correct the problem.' The existing Impersonation Rule reaches the scammer. It does not reach the ad optimization that delivered the scammer to you.

What is the single habit change worth making?

Stop reaching your bank through a search box. Type the address yourself, open the app, or call the number printed on the back of your card. The FTC notice says scammers 'frequently use search-engine ads to impersonate legitimate banking institutions and obtain placement at the top of sponsored search results for consumer banking searches.' A paid placement is not a verification, and it sits above the real result by design.

Ready to compare?

Find your best Savings Accounts match in 2 minutes.

Free to compare. No spam, no commitment.