How to spot fake ads on social media before you get scammed

Dubai: Social media scams are getting more convincing—and more dangerous. From fake airline ticket giveaways to bogus bank offers, fraudsters are now using official-style ads to trick users into clicking phishing links or sharing sensitive data.

Recently, Emirates warned travellers about a growing wave of these fraudulent posts and even suspended its advertising on social platforms in response.

So, how do these fake ads work and how can you protect yourself?

Cybercriminals are creating fake profiles and ads that closely mimic legitimate brands. They use stolen logos, professional visuals, and trending hashtags to appear authentic. Trusted companies like airlines, banks, and government entities are common targets because of the trust people place in them.

But behind the polished design lies a dangerous trap: phishing links, data theft, and even financial loss.

According to brand protection specialists like Corsearch and digital risk experts at Styx Intelligence, scammers employ several tactics to widen their reach and deceive users.

1. Hijacking trends and hashtags
Fraudsters attach trending hashtags or brand tags to their posts to boost visibility and trick people into thinking the ad is legitimate.

2. Fake domains that look real
Slightly altered URLs—like emirates-off1cial.com or login.bank-secure[.]com—redirect users to phishing websites. These links may look normal at first glance but are designed to steal your data.

3. Unrealistic offers
Free airline tickets, investment schemes, or high-return financial opportunities are often bait. If it sounds too good to be true, it probably is.

You don’t need to be an expert to spot a fake ad. Here's how you can protect yourself from falling victim:

Check the account
Only trust social media profiles that have the verified blue checkmark. Most reputable organisations are verified. If you see a suspicious-looking account with few followers or recent activity, avoid it.

Look closely at the username
Scammers often use usernames that resemble real ones—with added characters or misspellings (like @emirates_off1cial instead of @emirates). Always double-check.

Examine the language and tone
Fake ads usually contain poor grammar, spelling mistakes, or excessive urgency like: “Act now or lose your chance!” Official posts from brands tend to be professionally written.

Hover before you click
On desktop, hover over a link to see where it’s really going. You can also use ScamAdviser.com to check if a website is legitimate or not. UAE residents can visit the government’s official cybersecurity platform Stay Safe - staysafe.csc.gov.ae/ to report or check suspicious links.

Ignore unrealistic promotions
Unless widely advertised by the company through official channels, offers like “free flights” or “cash giveaways” are likely scams.

Report suspicious ads
If you come across a fake ad, report it directly on platforms like Instagram or Facebook by tapping the three dots and selecting “Report Ad” > “Misleading or scam.” You can also alert the real company through their official website or fraud reporting email.

In light of the growing threat, the UAE Cybersecurity Council has issued public alerts, urging people not to purchase travel tickets or respond to investment opportunities promoted through social media platforms. The Abu Dhabi Judicial Department has also highlighted these scams as a major form of online financial fraud.

With summer holidays and travel bookings on the rise, cybercriminals are ramping up their efforts to target unsuspecting consumers. But being aware is your first line of defense.

What travel brands are doing about it

To help stop fraud at the source, 85% of the UAE’s top online travel brands have implemented DMARC (Domain-based Message Authentication, Reporting & Conformance) an email security protocol that ensures official emails come from verified sources.

This measure protects users from email impersonation and phishing attacks. If you receive an offer by email, always check whether it came from a verified sender and when in doubt, visit the company’s official website directly.