Fake Uniswap Google Ads Drain Over $400K from Crypto Trader

An experienced crypto trader known as @ika_xbt lost a portfolio worth over $400,000 after clicking a sponsored Google ad that looked exactly like the official Uniswap site. The ad led to a cloned interface that harvested the user’s wallet approval and drained the funds in a single transaction [1].

Key takeaways

• The phishing campaign launched on May 26 2026 used Google‑sponsored ads that appeared above Uniswap’s organic search result [1].
• Attackers traced two wallets holding a combined 146 ETH (about $306 K) and total stolen assets exceeding $400 K [1].
• Similar ad‑based phishing attacks have cost victims more than $1.27 million in recent weeks, with prior incidents stealing $1.2 million in July 2025 [3].
• Uniswap founder Hayden Adams has publicly condemned the scams and the slow response from search platforms [1][2].
• Security experts advise bookmarking official URLs, verifying domain names, and using hardware wallets to mitigate such attacks [1][4].

How the fake Uniswap ads operated

The scammers purchased Google ad space for the keyword “Uniswap,” ensuring their malicious listing appeared at the top of search results. When users clicked the ad, they were taken to a replica of Uniswap’s web interface that looked identical to the real site. The page prompted users to connect their wallet and approve a transaction; once approved, a malicious contract transferred all accessible assets to the attackers’ addresses [1][4]. The scheme does not exploit any vulnerability in Uniswap’s smart contracts; it simply leverages user trust in Google’s search results and the habit of approving transactions without thorough review [1].

On‑chain investigators identified the two receiving wallets—0x37925684BA178821b4436E06e67f5dBD6cfA49Bb and 0x2fC25F46cC49D226eF92E9A7665f3d2821F3c5E2—holding roughly $400 K combined, as reported by analyst b‑block [2]. The Security Alliance (SEAL) has noted a sharp rise in Google‑search phishing campaigns targeting crypto protocols since March 2026, with similar tactics previously draining millions from wallets linked to MetaMask and Binance [4]. The recurring pattern underscores the low barrier for attackers to fund ad campaigns with compromised credit cards and launch new phishing domains within minutes [4].

Responses from Uniswap and the broader crypto community

Uniswap founder Hayden Adams has repeatedly criticized the lack of decisive action from search platforms, calling the scams “horrible” and highlighting that fraudulent apps continued to appear even after reporting efforts [2]. Google’s advertising policies prohibit phishing, yet the company has not publicly commented on this specific campaign, and its automated review process has struggled to keep pace with the rapid creation of new ads [4]. Security firms continue to advise users to avoid sponsored search results, verify URLs, revoke unused token approvals, and consider hardware wallets that require on‑device confirmation of transaction details [1][4].