Google publishes a new warning against online scams: here are the most widespread threats

The online scams they now represent a constantly evolving global phenomenon and Google, through its Trust & Safety team, returns to the topic with a new official notice to help users and companies defend themselves from the most widespread scams of the moment. In the latest report, the Mountain View company collects data and observations from security researchers, who report a worrying growth in fraudulent campaigns based on social engineering, fake websites and improper use of artificial intelligence.

Google highlights how scammers are increasingly using AI to scale and improve their schemes, making them more credible and difficult to detect, which is why the company’s duty is to anticipate threats and share knowledge with the entire ecosystem. A clear message, which highlights how the giant’s platforms are not only a defense tool, but also a privileged observatory on the behavior of digital criminals.

Online job scams

Among the most worrying trends identified in the report are: false job offersoften conveyed via phishing emails, sponsored ads or social networks; the scammers imitate the official websites of companies and recruitment agencies, going so far as to stage fake video interviews to steal sensitive information or install malware on victims’ devices.

In many cases payment is requested registration fees or training costswith the promise of a job position that, obviously, doesn’t exist. To defend yourself from these scams, Google recommends never trusting anyone asking for money to get a job, always checking that the site domain is authentic and not downloading unverified files or software; serious companies never ask for advance payments or security deposits.

Extortion via negative reviews

A phenomenon linked to scams which is rapidly increasing is that of digital extortion against companiescarried out through so-called review bombing; the attackers leave fake negative reviews to damage the brand’s reputation and then contact the owner asking for money in exchange for their removal.

Google, which closely monitors these practices, is introducing a new system to quickly report extortion attemptsso that security teams can intervene without delay. The company underlines how important it is to never pay the ransom and to keep all evidence of the extortion attempt (emails, messages, screenshots), while reporting the incident through the official Google form dedicated to merchants.

Follow Google Italia on Telegram, receive news and offers first

Fake AI apps

The popularity of AI tools, from ChatGPT to Gemini, has generated fertile ground for new scams. Cybercriminals create counterfeit sites and apps that imitate the original services, promising free premium versions or exclusive access.

In reality, these are often fleeceware apps with expensive subscriptions, or worse, software that they steal credentials and personal data; this content is advertised through malvertising campaigns and hijacked social profiles, making it more difficult to immediately identify.

The advice in this case is to install software only from official stores such as the Play Store, always check the web address and be wary of shortened links or links with spelling errors; If an offer seems too good to be true, there’s probably something wrong.

Malicious VPNs

Another rapidly growing category of scams involves fake VPN appsoften promoted with misleading slogans and eye-catching banners, these software promises secure connections but in reality they deliver malware, trojans and spywarecapable of exfiltrating sensitive information, from private messages to banking data.

To combat these threats, the Play Store uses machine learning algorithms that analyze app behavior and alert the user via Play Protect if suspicious activity is detected. To protect yourself, simply download VPN apps with official verification badges, check the required permissions (a VPN doesn’t need to access your contacts) and don’t trust free versions that promise unlimited features.

Fund recovery scams

Among the most subtle scams are the debt collection scamswhich target people who are already victims of fraud; the criminals pose as investigators, lawyers or government agencies capable of recovering the lost sums, but they ask for a advance compensation.

To appear credible, they use fake websites and documents generated with artificial intelligence tools, worsening the economic and psychological damage of the victims. Google reminds us that no serious organization requires money in advance to recover funds, remote access to the device must never be provided and information must always be verified through official channels.

Seasonal scams

As Black Friday and Cyber ​​Monday approach, the number of fake online shops, trap offers and phishing messages who promise exaggerated discounts or report fake delivery problems.

According to Google, scammers exploit the urgency of purchases to trick users into click on malicious links or fill out forms with sensitive data; to combat the phenomenon it is advisable to always carefully check the site address before proceeding with the purchase, avoid links coming from suspicious SMS or emails and prefer credit card payments, which offer greater protection in the event of fraud.

An increasingly protected ecosystem, but prudence remains essential

Google reiterated its commitment to strengthening the security of the digital ecosystem, investing in automatic prevention tools and collaborating with authorities and companies to counter threats in real time.

The technologies of Play Protect, Gmail, Chrome and Messages work together to create a constant protection network, but the human component remains decisive: the user’s attention is still the first bulwark against online scams.

Ultimately, as Google underlines, the best antivirus is always digital common sense, being wary, checking and informing yourself before clicking on links or downloading apps can make the difference between a safe experience and a devastating scam.