Monday, April 28, 2008

Google Phishing Emails - Update

Last week I posted a quick comment about a recent rash of Google Phishing Emails I have been receiving. I stated that everyone at some time or another has probably received a fake PayPal or Credit Card email stating to log into your account immediately or else it will be shut down or something like that. These are from the bad people who want your login information so they can buy stuff with your money. I was a bit confused why someone would want access to your Google Adwords account because anything you link to could be easily tracked down. One of my clients fell victim to this fraud and I'm still confused as to why.

My client had an ad group created for "Ringtones." His settings were adjusted to accept a $25,000 daily limit with each keyword set at $18.00 max CPC. The fraudster then bought dozens of ringtone related keywords. The puzzling part was the actual ad was jibberish and the desitination URL was an invalid domain. In fact, it was available to purchase. The fraudster was either testing something out or just had too much free time on his hands.

Either way, we worked with Google to fix everything, but the only thing the fraudster really did was waste several hours of time.

I'm not going to post screen shots of the ad or what everything looked like as I don't want to give this guy credit, but we did get the clients password changed and everything seems to be running smoothly now.

So... What did we learn? Change your passwords to something not easily guessed or figured out and most of all, never click on a link to log into your account from anyone! Actually go to the website and login. I would like to think that if your account is about to be shut off, the company would put some kind of message on the site once you logged in without having to click on any links within an email.

For your reference, below are copies of 3 different Google Spoof emails that I have received:


-----------------------------------------------------------------------------
Dear Google Adwords Customer, Your ads have stopped running because we were unable to process your billing information.
To activate your account and start running your ads, enter your billing information.

In order to activate your account and start running your ads, enter your billing information.
Pease sign into your account at http://adwords.google.com/select/login, and update
your billing information.

Once your account is reactivated and your billing information has been processed,
any your ads and campaigns can begin running immediately on Google.

----------------------------------------------------------------------------------
This message was sent from a notification-only email address that does
not accept incoming email. Please do not reply to this message.

----------------------------------------------------------------------------------

Google Adwords Team



Dear Google AdWords Customer,

Your ads have stopped running because we were unable to process your billing information. We will reactivate you account after you update your billing information. In order to reactivate your account, please sign it to your account at http://adwords.google.com/select/login, and update your billing informatio



Dear AdWords Customer,

The ads in this account are not running. All other account activity has been stopped.
Any edits you make here will take effect only if you reactivate the account.
If you would like to reactivate your account, please sign in
to your account at http://adwords.google.com/select/login,
and update your billing information.



Labels: , ,

Monday, April 21, 2008

Google Phishing Emails

I just wanted to write a quick post pertaining to a rash of Google Phishing emails I've been receiving lately. Everyone at some time or another has probably received a fake PayPal or Credit Card email stating to log into your account immediately or else it will be shut down or something like that. These are from the bad people who want your login information so they can buy stuff with your money.

Apparently they now want to increase traffic to their websites by writing fake Google Adwords ads from your account. Anyway, whatever the reason, be careful.

Here are copies of 3 different Google Spoof emails that I have received lately:


-----------------------------------------------------------------------------
Dear Google Adwords Customer, Your ads have stopped running because we were unable to process your billing information.
To activate your account and start running your ads, enter your billing information.

In order to activate your account and start running your ads, enter your billing information.
Pease sign into your account at http://adwords.google.com/select/login, and update
your billing information.

Once your account is reactivated and your billing information has been processed,
any your ads and campaigns can begin running immediately on Google.

----------------------------------------------------------------------------------
This message was sent from a notification-only email address that does
not accept incoming email. Please do not reply to this message.

----------------------------------------------------------------------------------

Google Adwords Team



Dear Google AdWords Customer,

Your ads have stopped running because we were unable to process your billing information. We will reactivate you account after you update your billing information. In order to reactivate your account, please sign it to your account at http://adwords.google.com/select/login, and update your billing informatio



Dear AdWords Customer,

The ads in this account are not running. All other account activity has been stopped.
Any edits you make here will take effect only if you reactivate the account.
If you would like to reactivate your account, please sign in
to your account at http://adwords.google.com/select/login,
and update your billing information.

Labels: , ,

Google URL Policy Update

Google will be updating it's display URL policy beginning April 1st. This change marks the beginning of a stricter stance on display URLs. No more re-directs or vanity URL's will be allowed. Google states that this policy will be strictly enforced regardless of past approvals and will apply to all advertisers.

Basically, the new rules state the display URL will need to match the destination URL. Most exceptions that were allowed before will no longer be approved.

Here are a few examples that will not be approved:

  • www.Google.co.uk - this URL leads to a different site
  • www.Gogle.com - this URL simply redirects to www.Google.com
  • www.Gooogle.com - this URL leads to a page showing content identical to www.Google.com
    Google will also not allow the use of multiple domains or branding and vanity URLs.

    What about Yahoo Tracking URLs?
    Google understands that many advertisers utilize tracking URLs within the destination field of their ads. Therefore, if the URL of your landing page matches that of your display URL, your ads will be approved.

    For example:
    Display URL: www.mydomain.com/widget
    Destination URL: http://store.yahoo.com/cgi-bin/clink?yhst1234567+a1B2C3D4E5+widget.html
    --> Landing page URL: www.mydomain.com would be acceptable

    Display URL: www.mydomain.com/widget
    Destination URL: http://store.yahoo.com/cgi-bin/clink?yhst1234567+a1B2C3D4E5+widget.html
    --> Landing page URL: http://store.yahoo.com would not be acceptable

    Are sub-domains or extra text still acceptable?
    Yes, the use of sub-domains and additional text within the display will continue to be acceptable provided the top-level domain matches the URL of your landing page.

    For example, display URLs such as the following:
    sub.google.com
    google.com/extratext
    www.google.com/extratext
    would all be acceptable for the landing page URL below, as the top-level domain of google.com is matched:
    http://sub.google.com/miscellaneous

    Finally, note that you don't have to change your ads. Existing ads within your account will not be immediately affected by this change. However, if Google receives complaints regarding specific violations of this policy, they will review and take the appropriate action. (Usually at 5:00pm on a Friday night). I would however, suggest that everyone check their account for potential blatant violations.

    For more information regarding the update, look at the Google Blog

  • Labels: , , ,