Exploiting Trusted Brands and Meta Ads
Android users are increasingly targeted by illicit gambling platforms through sophisticated fake versions of widely trusted applications, according to recent findings from cybersecurity researchers at NordVPN. The coordinated criminal campaign leverages advertisements on Meta platforms, including Facebook and Instagram, to impersonate household names such as Google, Disney+, and Duolingo.
Rather than directing victims to the legitimate Google Play Store, these deceptive ads steer users toward convincing imitations. Once installed, the applications operate as Progressive Web Apps designed to connect users to unlicensed gambling networks while triggering persistent push notifications promoting gambling offers.
Cloaking Tactics and Industry-Wide Patterns
NordVPN’s Threat Intelligence Team uncovered extensive use of cloaking technology within the campaign. This method displays harmless-looking decoy webpages to automated advertising moderation systems while routing actual users straight to unauthorized gambling content.
This operation mirrors broader trends identified across the digital landscape during major sporting events. Brand protection firm Corsearch previously reported a 118% month-on-month increase in betting-related phishing activity during major summer sports fixtures, as bad actors exploit licensed operator identities.
Additionally, research commissioned by the Betting and Gaming Council highlighted how unlicensed affiliates have hijacked abandoned websites, ranging from local tourist pages to political domains, to advertise non-GamStop casinos directly to self-excluded users.
Mounting Pressure on Meta
The disclosure places additional regulatory and legal scrutiny on Meta regarding illicit advertising controls. A previous Reuters investigation indicated that internal projections estimated roughly 10% of Meta’s 2024 advertising revenue, equating to about $16 billion, stemmed from ads connected to scams and prohibited goods, including unauthorized gambling.
Authorities in Thailand and the Netherlands have already initiated legal action challenging the structural adequacy of Meta’s safeguards. Meanwhile, regulatory bodies such as the UK’s Gambling Commission have openly questioned why major technology firms struggle to eradicate illegal gambling ads, warning that weak moderation severely undermines consumer protection efforts.
