Imposter Ads: The FTC Wants Platforms to Answer for Them
Free: How to Keep Yourself Safe From Scammers
9 chapters. Reporting checklist. 30-second protection checklist. Read on the site.
Imposter Ads: The FTC Wants Platforms to Answer for Them
It's 8:12 on a Tuesday night and you need to reschedule something with a government office. You type the agency's name into a search bar, tap the first result, and land on a page with the right logo, the right blue, and a very polite form asking for your Social Security number.
The first result was an ad. The page was a prop. And the person who paid for the ad is counting on you not noticing the little "Sponsored" label.
On November 2, the FTC put out a consumer alert asking the public to weigh in on exactly this. Here's what's happening, what it does and doesn't change, and how to spot an imposter ad before it gets anything out of you.
What the FTC is actually doing
Quick version: the FTC already has an Impersonation Rule that bans pretending to be a government agency or a business. What it's now asking is whether that rule should reach the platforms that sell the ad space too.
In a September 24 press release, the FTC said it is considering updating the rule, or taking other action, to address ad-optimization tools offered by social media sites, search engines and other digital marketplaces. The release cites FTC data showing more than 1 million imposter scam reports in 2025 and nearly $3.5 billion in reported losses to those scams.
The November 2 alert lists three examples of what platforms could be asked to do:
- Vet advertisers and ads before they're posted.
- Give people a way to report ads they think are impersonating a business or the government.
- Investigate suspected impersonation ads and take down the ones that turn out to be scams.
The alert also notes that ad platforms can target by things like age, browsing history and shopping habits, and that scammers pay for those ads too.
Look, I'll be honest: none of this is a rule yet. It's a question. The FTC is asking for public comment, and its alert gives a deadline of November 30, 2026 (the Federal Register link in the alert has the submission instructions). Nothing changes on your phone tomorrow.
Not sure if your message is real? Paste it into Cautellus and get a risk score before you reply.
Scan it now →Or: Get the Chrome extension to scan pages without leaving your browser.
How an imposter ad actually works
The mechanic is boring, which is why it works.
- A scammer pays for an ad or a search placement. The ad uses a real company's name, logo or a lookalike of a government agency's branding.
- You click because you were already looking. That's the trick. A text from a stranger has to interrupt you. An ad shows up right when you went searching.
- The landing page copies the real site, or it's a "support" page with a phone number. The goal is a login, a card number, an ID, or a phone call to a person who is very good at sounding helpful.
- Then comes the ask: pay a fee, "verify" your identity, buy gift cards, or move your money somewhere "safe."
Why this is harder to spot than a scam text
A scam text arrives from a number you don't know, and you're already a little suspicious. An imposter ad arrives wearing the platform's credibility. It sits in the same feed as your friend's vacation photos, or at the top of the same search results you use for everything else.
We've covered a version of this on social media, a search-ad version aimed at bill payments, and the fake customer service number that these ads often lead to. Same con, new storefront.
The red flags hiding in plain sight
- The domain isn't the real one. Look at the address bar before you look at the page. The FTC's own site, for instance, is ftc.gov, and a lookalike with extra words in it isn't.
- A fee for something that's normally free. If an agency page wants a "processing fee" to access your own records, back out.
- A phone number on the ad or landing page. Don't call it. Look up the number yourself from the organization's official site, typed in by hand.
- A discount that doesn't make sense. A big-name brand at a price no retailer could sustain is a storefront, not a sale.
- Urgency attached to a login. "Your account will be closed" plus a sign-in box is the oldest move in the book.
- A request for your Social Security number, ID photo or full card details on the first page. Real agencies don't open that way.
- Payment by gift card, wire or crypto. That's the scammer's preferred payment method, because it's hard to claw back. Real agencies don't ask for it.
- The ad was the only way you got there. If you can't reach the page by typing the official address yourself, that tells you something.
If you already clicked, entered something, or paid
Take a breath. These ads are built by people who do this all day, and you're not the problem here. Work through it in this order:
- Paid by card or app? Call the bank or card issuer right now and say it was a scam. The sooner, the better the odds.
- Entered a password? Change it on the real site, then anywhere you reused it. Turn on two-step verification.
- Gave an SSN or ID photo? Our guide on what to do after you click a scam link covers the freeze-and-monitor steps.
- Report it. Tell the platform that served the ad, then file at ReportFraud.ftc.gov. Our guide on how to report a scam has the order.
For anything government-flavored, the hub on government impersonation scams lists the other versions that are circulating.
How to not become the next click
- Skip the ad and go straight to the source. Type the address yourself, or use a bookmark you saved. The top result isn't a recommendation, it's a bid.
- Treat "Sponsored" as a yellow light. It's not proof of a scam. It's just not proof of anything.
- Check the address, not the logo. Logos are copy-paste.
- Scan before you sign in. You can upload a screenshot of the ad or paste the link into our screenshot checker or the scanner for a second opinion. There's one free trial scan, 1 per 30 days with no card needed, and ongoing use is Cautellus Plus at $9.99/mo. It's a second opinion, not a guarantee, so the type-it-yourself rule still applies.
- Have your say, if you want one. If you care whether platforms should vet advertisers, the FTC wants to hear it before the deadline in its alert.
Got something like this in your inbox? Drop it into the scanner — it takes 5 seconds and could save you thousands.
Check it now →Already been scammed? See where and how to report it.
FAQ
What is an imposter ad?
It's a paid ad, on social media, in search results or on a shopping platform, that pretends to be a well-known business or a government agency. The FTC describes scammers paying for these ads and hoping you click.
What is the FTC actually proposing?
Nothing final. In September 2026 the FTC issued an advance notice of proposed rulemaking asking whether to update its Impersonation Rule, write a new one, or use other measures. It's a request for public comment, not a new requirement on platforms.
Can I comment on the FTC's imposter ad proposal?
The FTC's November 2 consumer alert says comments are due November 30, 2026, and links to the Federal Register notice with submission instructions. The FTC page also showed a "comments closed" banner, so check the Federal Register link for current status before you write anything long.
How do I report an imposter ad?
Report it to the platform that showed it, then report it to the FTC at ReportFraud.ftc.gov. If you already paid, call your bank or card issuer right away.
Is an ad on a big platform safe because they review ads?
No. The whole reason the FTC is asking about vetting is that scam ads do get through. Treat a paid ad like a stranger's flyer: it tells you where to look, not whether to trust it.
Can Cautellus check an ad I'm unsure about?
You can upload a screenshot of the ad or paste the link for a second opinion. There is one free trial scan, 1 per 30 days with no card needed, and continued use requires Cautellus Plus at $9.99/mo.
The scammer paid for the ad. You don't owe it a click.
Sources: FTC Consumer Alert, "Tell the FTC about imposter ads online" (Nov 2, 2026); FTC press release, Sept 24, 2026.
Think you've been targeted? Paste any text, link, email, or screenshot into Cautellus for instant AI analysis.
Check something now →Want unlimited scans + the Chrome extension? See pricing.
Courtney
Founder, Cautellus · 20+ years in financial services
Two decades in financial compliance, digital security, and fraud prevention. Built Cautellus because the scam detection tools that exist were made for IT departments, not for real people getting weird texts.
Learn moreKeep reading
Support Our Mission
Cautellus is built to protect people from online fraud. Your contribution helps us keep building security tools and resources.