Fake payment sites in search ads are tricking people paying bills online, the FTC says

Paying a utility, car loan, or other bill online often starts with a quick search for the biller’s website. Federal regulators warn that the results at the very top of that search can lead somewhere other than the official payment page.

The Federal Trade Commission is cautioning that dishonest operators buy paid search ads to impersonate the company or agency people are actually trying to reach. The result can be extra fees, misdirected payments, or both, all triggered by clicking what looks like the obvious first link.

How a sponsored result becomes a trap

The scheme leans on the layout of a search results page. Paid ads frequently appear above the genuine, unpaid listings, so a rushed user may click the first thing they see without noticing it is an advertisement.

The FTC says dishonest companies use these paid search ads to trick people into paying them instead of the intended biller. Because the ad can mimic a familiar name, the payer may believe they have landed on the official channel when they have not. On a phone screen, where the label marking a result as an advertisement is small and the listings are stacked tightly, the visual cues that would flag a paid placement are even easier to miss.

An enforcement case that shows the pattern

The warning is not hypothetical. The FTC secured a settlement with the online bill-payment firm Doxo, which agreed to pay $2.1 million to resolve allegations tied to this kind of conduct.

According to the agency, Doxo and two of its co-founders used misleading search ads and other advertisements to impersonate consumers’ billers, disguising the company as the official payment channel for utility, car loan, and other bills. The FTC also alleged the company misled consumers about millions of dollars in add-on fees tacked onto their payments. The settlement, which resolved the allegations without the company admitting wrongdoing, illustrates how the harm can flow through a real intermediary rather than an outright thief, blurring the line between an inconvenient middleman and a deceptive one.

Why the fees are the sting

The harm in these cases is not always a stolen payment that never reaches the biller. Sometimes the bill does get paid, but through a third-party platform that layers on charges the consumer did not expect.

Those add-on fees can accumulate quietly, especially for recurring bills paid the same way each month. A payer who assumes they are on the biller’s own site may never realize a separate company is taking a cut of every transaction. There is also the risk that a payment routed through an unofficial third party posts late or fails to reach the biller on schedule, exposing the consumer to a missed-payment penalty on top of the added charge.

The habits the FTC recommends

The agency’s advice is to change how people navigate to a payment page in the first place. Rather than trusting the top search result, consumers are urged to scroll past sponsored listings when looking for a place to pay.

The FTC recommends typing a company’s web address directly into the browser’s address bar instead of relying on search results. For added certainty, the agency suggests using the exact web address printed on a physical billing statement, which points straight to the biller’s real payment portal. Saving that verified address as a bookmark after the first visit removes the need to search at all on later payments, closing off the moment when a sponsored result can intercept the transaction.

A broader push against deceptive search ads

Officials have framed the issue as a priority rather than a one-off. The FTC has emphasized that misleading search text ads interfere with consumers’ pursuit of accurate information, and it has pointed to its commitment to stopping deceptive search text ads.

That stance suggests the bill-pay impersonation problem is viewed as part of a larger pattern in how paid search can be abused. The same impersonation playbook has surfaced around tech-support lookups, government-service pages, and customer-service phone numbers, where a paid result poses as the real destination and captures a payment or a call meant for someone else. The full guidance appears in the agency’s consumer alerts, which lay out the impersonation tactic and the steps to avoid it.

The simple defense

The through-line in the FTC’s warning is control over the destination. When a payer decides where to go, by typing a known address or using the one printed on a statement, the paid ad loses its power to redirect the transaction.

For anyone who pays bills online, especially on autopilot each month, the takeaway is to slow down at the search step. A few seconds spent confirming the real address can prevent both surprise fees and payments that never reach the intended company. It also helps to review a completed payment for a confirmation number and a receipt that matches the biller’s own name, since a page run by a third party may issue a record that looks slightly off or reference a company the payer did not intend to use. Where a biller offers automatic payments or its own mobile app, setting those up once removes the recurring search entirely and keeps each month’s payment on a channel already known to be genuine.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview