Cybersecurity alerts: Google Ads scams and physical phishing tactics

Security researchers and authorities are warning of diverse phishing and scam campaigns targeting users through digital and physical channels.

A significant wave of tech-support scams has been identified using Google Ads. Between August 31 and September 14, 2026, fraudulent advertisements appeared on at least 284 legitimate websites, including weather, real estate, and sports platforms. These ads use malicious scripts to freeze users' screens and display fake security warnings, prompting them to call fraudulent hotlines to resolve non-existent computer issues.

In Switzerland, the Federal Office for Cybersecurity (BACS) has issued warnings regarding a sophisticated phishing method where scammers leave fake Swiss Post collection notices in physical mailboxes. These notices contain QR codes that lead victims to fraudulent websites designed to steal personal information and credit card data.

General guidance for victims of fraud emphasizes immediate action: contact banks to block cards or online banking, secure digital access by changing passwords, preserve all evidence such as messages and payment receipts, and report the incident to the police.