Google Coin fake Gemini chatbot crypto scam campaign
Campaign
Summary
Hide ▲
Show ▼
The Google Coin presale scam is using a fake Google Gemini chatbot to push visitors into sending irreversible crypto payments to attackers. It pairs brand impersonation with a convincing presale site that mimics Google's look and includes a dashboard, logos, and upsell tactics. The operation matters because it can engage hundreds of visitors simultaneously, 24 hours a day, turning AI into a scalable fraud engine. The target cohort is people shopping for crypto online, especially visitors to third-party presale pages.
Related Happenings
GPPStorm Google Partners enrollment phishing campaign
Campaign
H score33
First: 13.07.2026 16:03
Last: 13.07.2026 16:03
Sources 1
About this happening:
GPPStorm is a phishing campaign that uses bogus Google Partners and Google Premier Partner enrollment workflows to push recipients to a fake Google sign-in page and st...
GPPStorm Google Partners enrollment phishing campaign
CampaignAbout this happening: GPPStorm is a phishing campaign that uses bogus Google Partners and Google Premier Partner enrollment workflows to push recipients to a fake Google sign-in page and st...
Google civil lawsuit against Outsider Enterprise
Regulatory/Legal Action
H score55
First: 14.06.2026 17:36
Last: 14.06.2026 17:36
Sources 1
About this happening:
Google filed a civil lawsuit against Outsider Enterprise, adding legal pressure to a major phishing infrastructure operation that sent fraudulent texts at scale. T...
Google civil lawsuit against Outsider Enterprise
Regulatory/Legal ActionAbout this happening: Google filed a civil lawsuit against Outsider Enterprise, adding legal pressure to a major phishing infrastructure operation that sent fraudulent texts at scale. T...
Magecart Stripe and Google Tag Manager card-skimming campaign
Campaign
H score36
First: 04.06.2026 23:47
Last: 04.06.2026 23:47
Sources 1
About this happening:
The Magecart campaign is abusing Stripe's API infrastructure and Google Tag Manager containers to steal checkout data from Magento/Adobe Commerce stores. The skimm...
Magecart Stripe and Google Tag Manager card-skimming campaign
CampaignAbout this happening: The Magecart campaign is abusing Stripe's API infrastructure and Google Tag Manager containers to steal checkout data from Magento/Adobe Commerce stores. The skimm...
NGate Android Brazil fake-app and fake-lottery campaign
Campaign
H score37
First: 21.04.2026 12:00
Last: 21.04.2026 12:00
Sources 1
About this happening:
A NGate campaign has been active since November 2025, targeting primarily Android devices in Brazil and using fake-app and fake-lottery lures to spread a malic...
NGate Android Brazil fake-app and fake-lottery campaign
CampaignAbout this happening: A NGate campaign has been active since November 2025, targeting primarily Android devices in Brazil and using fake-app and fake-lottery lures to spread a malic...
Google expands Gemini AI for malicious ad blocking on Google Ads
Security Tool/Service
H score56
First: 16.04.2026 18:24
Last: 16.04.2026 18:24
Sources 1
About this happening:
Google expanded Gemini AI use across its ad platforms to detect and block malicious ads in real time, reducing scam and malvertising exposure at scale. The move matter...
Google expands Gemini AI for malicious ad blocking on Google Ads
Security Tool/ServiceAbout this happening: Google expanded Gemini AI use across its ad platforms to detect and block malicious ads in real time, reducing scam and malvertising exposure at scale. The move matter...
Timeline
-
18.02.2026 23:47 2 articles · 4mo ago
Malwarebytes Labs finds fake Google Coin presale scam
Initial DisclosureMalwarebytes Labs found a fake Google Coin presale site that impersonates Google Gemini with a custom chatbot, uses Google's branding and major-company logos, and pushes visitors toward irreversible crypto payments for a nonexistent token.
Show sources
- Scam Abuses Gemini Chatbots to Convince People to Buy Fake Crypto — www.darkreading.com — 18.02.2026 23:47
- Scam Abuses Gemini Chatbots to Convince People to Buy Fake Crypto — www.darkreading.com — 18.02.2026 23:47