Cách Báo Cáo Quảng Cáo Lừa Đảo (Và Lưu Trữ Bằng Chứng)

Hầu hết các báo cáo quảng cáo lừa đảo chết vì một lý do nhàm chán. Khi ai đó xem xét, không còn gì để nhìn nữa. Sáng tạo đã được xoay ra hai ngày trước. Đích được che giấu bây giờ phục vụ một trang sạch. Người báo cáo chỉ còn một bức ảnh mờ chụp bằng điện thoại của tiêu đề. Mạng đóng ticket với ghi chú "unable to reproduce." Cơ quan quản lý ghi lại như một điểm dữ liệu không kèm tài liệu.

Vì vậy, báo cáo quảng cáo lừa đảo là vấn đề bằng chứng trước, và vấn đề giấy tờ sau. Đây là quy trình mà các thương hiệu, nhà mua truyền thông và nhà phân tích thực sự sử dụng: những gì cần thu thập, theo thứ tự nào, nơi gửi và cách một kho lưu trữ có dấu thời gian của quảng cáo và trang đích biến một khiếu nại mơ hồ thành một tài liệu mà đội trust-and-safety hoặc cơ quan quản lý có thể hành động.

The short version#

Document five things before they vanish: the full-quality creative, the ad copy, the serving network or widget, the traced click path to the landing page, and the dates the ad ran. Then file twice. Send it to the ad network's abuse channel for fast removal, and to the relevant regulator (the FTC's ReportFraud.ftc.gov in the US, a platform's DSA notice mechanism in the EU) for accountability. Evidence first. Forms second.

Why a screenshot alone gets you nowhere#

A scam ad is a moving target by design. The operators behind fraudulent native advertising assume someone will try to report them, so the whole campaign is built to evaporate under inspection.

Three things defeat the casual screenshot.

• Creative rotation. A single offer runs dozens of headline-and-image variants. The one you saw might be retired within hours, so "the ad with the celebrity photo" means nothing to a reviewer who can only see what is live right now.
• Cloaking. The advertiser shows reviewers and bots a compliant page while sending real users to the scam. Your screenshot of the ad, followed by a screenshot of a harmless-looking destination, can actively undermine your own report. That is why reproducible evidence matters so much. We go deep on this in our guide to ad cloaking and how auditable evidence exposes it.
• Disposable infrastructure. Landing-page domains get burned and replaced constantly. A URL you copied last week is often a parked page or a 404 by the time the ticket gets opened.

Here is the scale of the haystack you are working in. OpenAdLibrary has archived 589,036 creatives from 25,933 advertisers across 42 networks (OpenAdLibrary index, June 2026), and that pile is heavily concentrated in the exact verticals scammers love. Finance leads with 17,232 creatives, insurance is next at 15,629, and health sits at 14,895. Those three categories are where fake IRS forgiveness offers, miracle supplements, and bogus insurance "loopholes" live.

Look at a real one. This finance ad was running live on Taboola, dressed up to look like breaking tax news:

A screenshot proves you saw something. An archived creative paired with a traced landing page and a timestamp proves what it was, where it sent people, and when. That gap is the difference between a closed ticket and an enforcement action.

The goal is never to capture the ad. It is to capture the chain: creative, then network, then click path, then landing page, then dates. Each link answers a question a reviewer would otherwise use to dismiss you.

The five evidence fields that make a report actionable#

Before you file anything, assemble these. Think of them as the columns a network's abuse team or a regulator's intake form is implicitly asking for.

The two hardest fields to capture by hand are the click path and the timeline. You cannot safely click a live scam ad to trace where it goes. You risk landing in a malware or fraud funnel, and you tip off the operator that someone is watching. And you have no way to know how long an ad has been running unless you happened to be watching it the whole time.

That is exactly where an ad-transparency archive earns its keep. OpenAdLibrary captures live public native ads across networks like Taboola, Outbrain, MGID, Revcontent, Teads, Yahoo Native, and MSN. Taboola alone accounts for 157,727 archived creatives in our index, with Outbrain at 84,252 and MGID at 49,689 (OpenAdLibrary index, June 2026). We store the real creative at full quality and follow each click to the advertiser's landing page without you ever clicking the live ad. We also record first-seen and last-seen dates, so a long-running scam exposes its own longevity. By the time you go to file, the five fields are already filled in and date-stamped by a third party, which is far more credible than your own after-the-fact screenshot.

What "longevity" actually looks like#

This part matters more than people expect, so let me be precise about it. Continuous observation is what proves an offer is a sustained operation rather than a fluke. Across our index, the longest-running creatives we are currently tracking have been observed live for about 28 days straight. To be clear, that is the span of our continuous observation window, not a claim that these specific ads are scams. Plenty of legitimate brands run for weeks too.

But the framing is the point. A health offer that keeps reappearing across regions for nearly a month is a profitable, deliberate campaign, and that is the framing that makes a regulator take a complaint seriously. Here is one of those 28-day persisters, a hearing-aid ad that kept surfacing on the Microsoft Audience Network:

Separately, the industry lore about "90-day winners" you will hear from media buyers is general folklore, not something our index measures. Our observed numbers cap at the ~28-day window above. Keep the two ideas apart when you write your complaint, because a reviewer can tell the difference between a measured date range and a vibe.

Documenting the evidence, step by step#

Work in this order. Each step preserves something the next one depends on.

1. Identify the exact creative. Note the headline and the advertiser name on the ad. If you can, find the same creative in an archive so you have the full-resolution asset, not a phone-camera crop. Pull every variant of the same offer. Volume and spread are evidence in themselves.
2. Record the network and widget. Note which native ad network served it and on which publisher site. The recommendation unit at the bottom of an article is the native ad widget. The small "by Taboola" or "Outbrain" label tells you where to send the report.
3. Trace the click path, but do not click it live. Use a stored click-trace instead of visiting the ad yourself. You want the full redirect chain ending at the real landing page or pre-lander, captured safely and reproducibly.
4. Capture the landing page. Save the final destination: the offer page, the fake news article, the cloned checkout. If it impersonates a brand, this is the centerpiece. Copycat operators clone real brands at scale, and our guide to copycat landing pages walks through the patterns to flag.
5. Pin the timeline. Record when the ad first appeared, whether it is still live, and which geos it targeted. A scam that has run for weeks across several regions is a sustained operation, and that changes how seriously a regulator treats it.

By the end you have a self-contained exhibit: image, copy, network, redirect chain, destination, and dates. That one package can be reused for every channel you report to.

Health ads are worth singling out, because the deceptive ones lean on fake medical authority. This Taboola creative is a textbook example of the "doctors identified a secret list" framing:

Where to send the report#

There are two distinct audiences. Use both. They do different jobs.

The ad network, for fast removal#

The network that served the ad can pull it and ban the advertiser within hours, far faster than any regulator. The major native networks all maintain abuse, trust-and-safety, or advertiser-policy channels for exactly this. When you submit:

• Lead with the creative and the traced landing page, side by side. Reviewers act on what they can verify.
• Name the policy it violates: deceptive claims, brand impersonation, prohibited product category. Concrete beats outraged.
• If your brand is being impersonated, frame it as a takedown with proof of ownership. That is a trademark matter, and networks move quickly on verified rights-holder claims.

Networks act in their own commercial interest, so a clean, reproducible report that minimizes their review effort gets the fastest result.

A regulator, for accountability#

Regulators are slower, but they carry investigative and enforcement weight, and your report becomes part of a record that builds cases.

• United States, the FTC. File at ReportFraud.ftc.gov. The FTC accepts reports of scams and deceptive business practices, you can file anonymously (contact details help if they follow up), and reports feed pattern-detection across complaints. Attach or reference your documented evidence.
• European Union, the DSA. Online platforms must offer a notice-and-action mechanism under Article 16 of the Digital Services Act, so you can flag illegal advertising directly on the platform and get a decision you can appeal. Recognized organizations with proven expertise can be designated trusted flaggers under Article 22, whose notices platforms must prioritize.
• Sector and consumer bodies. For financial scams, health fraud, or local consumer-protection issues, route a copy to the relevant national authority too.

Reporting to both is the whole point. The network for speed, the regulator for accountability. The same evidence package serves both intake processes.

A reusable reporting template#

Keep a short, structured note you fill in for every report. It forces completeness and reads cleanly to a reviewer:

• Ad creative: [link or attachment, plus variants]
• Headline and advertiser name: [text]
• Served by: [network] on [publisher]
• Click path: [redirect chain to final URL]
• Landing page: [what it does, who it impersonates]
• Active dates and geos: [first-seen to last-seen, regions]
• Policy or law violated: [specific clause or statute]
• Requested action: [removal, advertiser ban, takedown, investigation]

If you monitor a category or defend a brand, this is not a one-off. Treat it as a standing process. The broader playbook lives in our pillar on brand protection in native advertising, which covers detection, escalation, and the ongoing monitoring that wraps around the reporting step described here.

Make the evidence outlast the ad#

The recurring failure mode is timing. By the time a report gets reviewed, the ad is gone, so the real work is having the evidence before you need it. A standing native ad spy tool that continuously archives live creatives, identifies the serving network, and traces each click to the landing page means the exhibit already exists, date-stamped, the moment a scam surfaces. You file in minutes instead of scrambling to reconstruct something that no longer exists.

Scammers rely on disposability. With 5.4 million ad observations and 926,259 landing-page captures already on record (OpenAdLibrary index, June 2026), the most effective thing a brand or analyst can do is make the ad permanent: captured, attributed, and traced, so a complaint lands with proof a reviewer can verify rather than a description they have to take on faith.

Start free and browse 200 archived native ads with stored creatives and traced landing pages, no card required, so the evidence is ready before you need to report.

Sources#

• FTC, ReportFraud.ftc.gov
• European Commission, The Digital Services Act
• European Commission, Trusted flaggers under the DSA