Meta Sues Advertisers in Brazil, China and Vietnam Over Scam Ads

Summary
Meta said it sued deceptive advertisers in Brazil, China and Vietnam, disabled accounts, blocked scam domains and targeted consultants selling ad-policy bypasses. The article also describes broader scam-ad and DNS-manipulation operations.
Key points
- Meta said it sued advertisers based in Brazil, China and Vietnam; it also suspended payment methods, disabled related accounts and blocked domains used in the scams.
- Meta sent cease-and-desist letters to eight consultants who advertised ad-policy bypasses, fake account restoration and access to trusted accounts.
- The lawsuits include allegations of altered celebrity images and voices used to promote fraudulent healthcare products and investment schemes, and of cloaking ads to evade review and lead to subscription fraud.
- Gen Digital reported that about 30.99% of 14.5 million Meta ads it analyzed across the E.U. and U.K. linked to scams, phishing or malware; it said scam ads generated over 300 million impressions.
- The article reports that compromised routers were used to alter DNS responses associated with Okta and Shopify, redirecting users to scam or malware content through infrastructure hosted by Aeza International.
- More than 23,000 domains were identified in an ecosystem combining social-media investment ads with pig-butchering fraud, primarily targeting people in Japan.
Article Details
- Event Type
- Meta filed lawsuits against advertisers it describes as deceptive and issued cease-and-desist letters to consultants accused of offering ad-policy bypass and fake account-restoration services.
- Impact
- Meta said it suspended payment methods, disabled related accounts, and blocked scam domains. The reported schemes used celebrity-bait ads, cloaking, and subscription fraud to direct people to fraudulent offers, collect sensitive or payment information, or solicit investment. Other reported scam networks involved DNS manipulation and malicious push notifications.
Threat Actors
B&B Suplementos e Cosméticos Ltda.Meta is suing the company as part of an alleged scam operation that used synthetic imagery of a physician to advertise healthcare products without regulatory approval.Brites Academia de Treinamento Ltda.Meta is suing the company as part of an alleged scam operation that used synthetic imagery of a physician to advertise healthcare products and sold courses teaching the same tactics.Daniel de Brites Macieira CordeiroMeta is suing him as part of an alleged scam operation involving synthetic imagery of a physician, healthcare-product advertising, and courses teaching the same tactics.José Victor de Brites Chaves de AraújoMeta is suing him as part of an alleged scam operation involving synthetic imagery of a physician, healthcare-product advertising, and courses teaching the same tactics.Lý VÄn LâmMeta is suing the Vietnam-based advertiser, alleging that it used cloaking to evade ad review and direct users to fraudulent shopping offers and subscription charges.Milena Luciani SanchezMeta is suing her, alleging that she used altered celebrity images and voices to promote fraudulent healthcare products.Shenzhen Yunzheng Technology Co., LtdMeta is suing the China-based advertiser, alleging it used celebrity-bait ads to lure people into investment groups as part of a fraud scheme.Vitor Lourenço de SouzaMeta is suing him, alleging that he used altered celebrity images and voices to promote fraudulent healthcare products.
Vendors
Aeza InternationalCloaking, DNS tampering tied to Aeza International, and malicious push networks facilitated large-scale subscription and malware-linked scams.MetaMeta on Thursday said it’s taking legal action to tackle scams on its platforms by filing lawsuits against what it calls deceptive advertisers based in Brazil, China, and Vietnam, while suspending payment methods,
Products
Android ChromeA malicious push notification network has been observed using a network of malicious domains to target Android Chrome users all over the world with a steady stream of unwanted push notifications (e.g., “Android infectedMeta platformsIn an analysis of 14.5 million ads running on Meta platforms across the E.U.OktaThis unauthorized modification is engineered to selectively alter DNS responses associated with Okta and Shopify, allowing the operators to direct users to scam and malware content by means of an HTTP-based trafficShopifyThis unauthorized modification is engineered to selectively alter DNS responses associated with Okta and Shopify, allowing the operators to direct users to scam and malware content by means of an HTTP-based traffic
Countries
BangladeshAccording to data from Infoblox, Bangladesh, India, Indonesia, and Pakistan represented 50% of all the traffic.Brazilto tackle scams on its platforms by filing lawsuits against what it calls deceptive advertisers based in Brazil, China, and Vietnam, while suspending payment methods, disabling accounts, and blocking scam domains.Chinascams on its platforms by filing lawsuits against what it calls deceptive advertisers based in Brazil, China, and Vietnam, while suspending payment methods, disabling accounts, and blocking scam domains.Hong KongRepeated campaign clusters were traced to shared payment and infrastructure linked to China and Hong Kong, indicating organized, industrial-scale operations rather than isolated bad actors.”IndiaAccording to data from Infoblox, Bangladesh, India, Indonesia, and Pakistan represented 50% of all the traffic.IndonesiaAccording to data from Infoblox, Bangladesh, India, Indonesia, and Pakistan represented 50% of all the traffic.Japanand Japan, as part of a fraud scheme designed to lure them into joining investment groups.PakistanAccording to data from Infoblox, Bangladesh, India, Indonesia, and Pakistan represented 50% of all the traffic.United Kingdomand U.K. over a 23-day period, Gen Digital found that nearly one in three of those ads (about 30.99%) pointed to a scam, phishing, or malware link.United StatesChina-based Shenzhen Yunzheng Technology Co., Ltd for using celeb-bait ads to target people in various countries, including the U.S.Vietnamits platforms by filing lawsuits against what it calls deceptive advertisers based in Brazil, China, and Vietnam, while suspending payment methods, disabling accounts, and blocking scam domains.
Industries
HealthcareCeilb-bait scams used altered celebrity images and voices to promote fraudulent healthcare products and investment schemes.InvestmentCeilb-bait scams used altered celebrity images and voices to promote fraudulent healthcare products and investment schemes.Social mediaConcurrently, the social media giant said it has also issued cease and desist letters to eight marketing consultants who advertised the ability to bypass its ad policy enforcement systems.
