Hey All,

![image.png](https://files.peakd.com/file/peakd-hive/gungunkrishu/23yxEDBS3zCWzKHALBf4L4fy9Lvr1yQDu44dYTEQ6bc531wqxt7tiYEr14YyuZoofhuhe.png)

I keep receiving alerts and information from my bank about different types of scams to watch out for. In this blog post we are going to talk about once such alert that said - **Important Name of the Bank - Fraud Awareness | Beware of Fake Search Engine Listing Scam**. I am sure you all will be familiar about SEO aka Search Engine Optimization and this scam which is known as the '**Search Engine Listing Scam**', also known as '**SEO Scam**' or '**Search Engine Poisoning**', is a type of cyber fraud where scammers/bad guys manipulate search engine results to display fake or malicious websites that appear legitimate. These fake listings are designed to trick users in a manner that the user will belief as if they are interacting with the official website or customer care of a trusted organization, such as a bank. But unfortunately these websites are replicas designed to mimic the official bank website and trick users into sharing sensitive information. Have you fallen prey to these cyber attacks? Next we will look into how SEO scam occurs. 

### How does the 'Search Engine Listing Scam' occur?

At first we will look into the various steps involved here and then will go into talking about the key pointers a bit so that we understand the attack vector better and make us familiar to it so that we don't fall prey to such and similar type of cyber fraud activities.  


| Step                     | Description                                                                                                              | Key Pointers                                                 |
|--------------------------|--------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------|
| 1. Fake Website Creation | The so called Scammers/Bad guys create fake websites that mimic popular banks or financial institutions.                                        | Lookalike sites trick users visually.                        |
| 2. SEO Manipulation      | They use unethical SEO tactics and trending keywords (e.g., “ABC Bank customer care”) to rank high on search results. Could even pay for higher rankings    | Fake sites appear on top of search results.                  |
| 3. User Clicks the Link  | Users searching for contact info click top results without verifying authenticity.                                       | Users trust high-ranking links.                             |
| 4. FAKE Interaction | Fake websites list scam phone numbers or forms to collect sensitive data like OTPs, card info, or install malware.       | Scammers pose as bank reps to extract data.                  |
| 5. Scam Execution        | Scammers use collected info to perform unauthorized transactions and steal money.                                        | Personal data gets compromised and is misused to commit fraud.                    |

Now that we know how a 'Search Engine Listing Scam' can occur. Lets look further as to how we can identify such scams and protect ourselves from falling victim to them. This is best explained in the following table.

###  Search Engine Listing Scam Awareness - Good Practices Vs Bad Practices

| 🔑 Main Key Pointer                         | ✅ Good Practices                                   | ❌ Bad Practices                                         |
|----------------------------------------|----------------------------------------------------|-----------------------------------------------------------|
| **Check URL authenticity**                 | Verify the website URL before clicking. Tip check for HTTPs            | Clicking top search results without checking the URL.      |
| **Use trusted sources**                    | Use contact details from official websites/apps    | Searching for "bank contact number" on random websites    |
| **Spot fake domains**                      | Look for typos in the official domain in question      | Trusting websites and not checking misspelled URLs something like extra letters      |
| **Confirm official communication**         | Call customer care using verified numbers          | Calling numbers listed on unknown or top rank based website   |
| **Protect personal information** PII           | Avoid sharing PII info unless 100% sure      | Entering OTPs, passwords, or card details on untrusted sites |
| **Browse safely**                          | Use browser safety tools or antivirus protection. Maybe try - "Malwarebytes Browser Guard"   | Browsing financial websites without any protection        |
 
Ok now before I end this post, I would say that there are different type of scams out there and there is one thing in common which is deceiving/misleading the users or enticing users to fall prey for the cyber fraud. And if we users make it a point to check on the few key pointers and their associated good practices rules then I am sure most of the time we will be able to make out what is Good and what is Bad. One last things there is no quick and FREE money and most important of all if something seems too easy or too good to be true, it probably is a trap. Therefore - ***Stay alert, stay informed*** & be safe out there on the internet.... cheers

### Deep Dive: What Is the 'Search Engine Listing Scam'? - Don’t Fall for It!

#OnlineScamAlert #CyberSafety #BankFraud #ScamAwareness #StaySafeOnline #FraudPrevention

**Be Safe Online...**

Best Regards
Paras

Image Courtesy:: IDBI Bank...