That Google ad for Uniswap may be fake

You search for Uniswap, click the top result, and a familiar-looking site asks to connect your wallet. That is a common phishing pattern. The sponsored result can be a clone, not the real app.

Security Alliance's SEAL Radar published a report on April 21, 2026, on malicious Google ads targeting crypto. The investigators describe a March 2026 uptick in ads that hide their real destination and impersonate DeFi apps. Uniswap was the brand they saw impersonated most often. The campaigns also rotated through other names, including Morpho Finance, PancakeSwap, Hyperliquid, and CoW Swap.

How to spot a clone before you connect

Ignore sponsored results when you are looking for a DeFi app. Type the official domain yourself, or open a bookmark you already saved. Uniswap's support page on crypto wallet signature scams identifies the official app at https://app.uniswap.org/.

SEAL recommends not using Google Search to find crypto apps, and verifying every link before you connect a wallet. Ads in that campaign could last only minutes, which is why a result that looks current can still be fake.

If your wallet shows a "Deceptive site ahead" warning, stop. MetaMask's help page says not to connect. That warning does not catch every clone. Treat a clean prompt as unproven, not as a safety certificate.

Never enter a recovery phrase, and read the signature

Keep your recovery phrase secure and never share it. Uniswap's support page on crypto wallet signature scams says no legitimate Uniswap page will ask you to type it into a website. Close the tab if a pop-up, chat, or "support" window asks for it.

Inspect what a signature request actually does. MetaMask documents that off-chain signatures, including Permit2-style approvals, can be stored and used later. If you do not understand the permission, reject it.

Signature phishing is a separate problem from fake search ads. MetaMask's February 27, 2026 Crypto Security Report, citing Scam Sniffer, said signature phishing rose 207 percent in January 2026, with $6.27 million taken from 4,700 wallets. About 65 percent of those losses came from two wallets. Those figures are not Google Ads totals, and they are not a count of every DeFi phishing loss.

What the investigator numbers do and do not show

SEAL Radar attributed $810,929 in confirmed stolen funds to the March 13 through March 30, 2026 Google Ads campaign it reviewed, and $1,274,259 when it included unattributed victim reports. The report says the actual total is considerably greater. Those are investigator figures for that campaign window. They are not official Google totals, and they are not a count of every DeFi phishing loss.

SEAL says Google suspended the listed advertiser accounts in that report. New ads can still appear under other brands. Do not treat any single takedown as the end of the method.

Sources

SEAL Radar, April 21, 2026: https://radar.securityalliance.org/malicious-google-ads-targeting-crypto/
MetaMask Crypto Security Report, February 27, 2026: https://metamask.io/news/metamask-crypto-security-report-february-2026
MetaMask, Deceptive site ahead: https://support.metamask.io/stay-safe/safety-in-web3/deceptive-site-ahead-when-trying-to-connect-to-a-site/
MetaMask, Signature phishing: https://support.metamask.io/stay-safe/protect-yourself/wallet-and-hardware/signature-phishing
Uniswap Support, Crypto Wallet Signature Scams: https://support.uniswap.org/hc/en-us/articles/40050562560781-Crypto-Wallet-Signature-Scams

Disclosure: This article is educational security coverage based on dated SEAL Radar, MetaMask, and Uniswap support pages. It does not identify every clone, does not print attacker URLs, and does not claim any wallet warning catches every fake site. The accompanying illustration is generated editorial art, not a screenshot of a real ad or wallet. This article is not financial, legal, or investment advice. AI-assisted research and writing. Cited sources, not AI alone, support the claims.