It is not that uncommon, unfortunately, to see Google Ads that are designed to steal your login credentials for various platforms, including your Google account. Now, when you search for "my business," which is how many businesses login to their Google Business Profile account, you are presented with a Google Ad that will attempt to grab your login credentials and take over your account.
Again, this is really not common, but I know many of you do this "my business" search and since late last night, this ad has been live and working in stealing businesses' Google account login credentials. So I want to call this one out publicly.
It was spotted by Dan Foland on X who walked us through the process and screens.
All you do is search for [my business] and you get this ad (I tried it in numerous browsers at 6:20am ET - several hours after Dan posted about it) and yes, it comes up:
Here are Dan's posts that walk you through the hack:
Google "my business" as many people do to manage their GBP profiles. There's an ad that LOOKS like it's from Google. pic.twitter.com/6AeTzdL62M
— Dan Foland (@DanFoland) June 4, 2026
When you click on any link you get a pop-up that looks like a legit Google login (it's not). P.S. [email protected] doesn't exist, so a real Google login form would stop you after you click Next. pic.twitter.com/I2mWQIaB9R
— Dan Foland (@DanFoland) June 4, 2026
Paste the code, and boom. You've just given them access to your computer, passwords, files etc. All while assuming you were on a legit Google-owned site the entire time.
— Dan Foland (@DanFoland) June 4, 2026
Be careful and do not do this... Go directly to the web site, don't click the ads!
Forum discussion at X.
