Skip to content

Services, Wiki-Artikel, Blog-Beiträge und Glossar-Einträge durchsuchen

↑↓NavigierenEnterÖffnenESCSchließen
AdSense blackmailer - Bitcoin or blocking of the account!
Security Awareness

AdSense blackmailer - Bitcoin or blocking of the account!

So-called AdSense blackmailers are targeting the function with which operators of a website can earn money. It has been a successful business model for years, a...

Chris Wojzechowski Chris Wojzechowski Geschäftsführender Gesellschafter
Updated: October 7, 2024 3 min read read
IT-Grundschutz-Praktiker (TÜV) IT Risk Manager (DGI) § 8a BSIG Prüfverfahrenskompetenz Ausbilderprüfung (IHK)

TL;DR

AdSense blackmailers threaten website operators with bot-generated click fraud to trigger Google's invalid traffic detection, potentially blocking their AdSense account. The extortion demand is typically USD 5,000 in Bitcoin. While Google states that actual account manipulation through bot traffic is rare in practice due to built-in safeguards, short-term revenue blocks are possible. Affected publishers should report suspicious traffic via Google's invalid clicks contact form rather than paying.

Table of Contents (2 sections)

So-called AdSense blackmailers are targeting the function with which operators of a website can earn money. It has been a successful business model for years, and some site operators and media houses can still (survive) on it. Google integrates banners on the website. If these are clicked, the website operator receives a share. Criminals use this dependency and send blackmail attempts to websites that would be severely affected by a potential failure. The claim amounts to USD 5,000. If this is not paid, the AdSense account will be blocked.

A targeted AdSense manipulation rarely takes place in practice!

A lot of things on the Internet are data-driven. Among them is the advertising system of Google. To place advertising on Google an AdWords account is necessary. In order to integrate advertising, and thus earn money proportionately, AdSense is necessary. If the search engine giant finds an irregularity, the account will be blocked. That is at least the acceptance of the blackmailers and the threat to the victims. So here is not threatened at all with the publication of a secret, as it is often the case with other extortion mails - it is threatened to block the AdSense account. A loss of income or missing days in the calculation would be the consequence. With the help of bots, which suddenly visit the website and click on links, the suspicion of manipulation should be established. Since Google pays the website operator for each click, the willingness on the part of Google to block highly fraudulent users is highly suspect. The AdSense blackmailers take advantage of this - because at least in the short term the advertising revenues of victims can be blocked in this way. The blackmailing model is based on this principle. Either pay 5,000 USD or run the risk of the account being blocked and in the worst case even more money is lost.

AdSense blackmailers have a hard time with the precautions of Google

An official statement from Google itself says that although the potential for sabotage is great, in practice it is extremely rare. Additional security measures help to filter out the invalid traffic. The company concerned, which reported this case to Brian Krebs, noticed an increase in invalid traffic in any case. For publishers there is also a contact form. This can be used to report invalid traffic - this way you can avoid an AdSense blackmailer. A potential blackmailing email reads as follows:

“Very soon the warning notice from above will appear at the dashboard of your AdSense account undoubtedly! This will happen due to the fact that we’re about to flood your site with huge amount of direct bot generated web traffic with 100% bounce ratio and thousands of IP’s in rotation - a nightmare for every AdSense publisher. More also we’ll adjust our sophisticated bots to open, in endless cycle with different time duration, every AdSense banner which runs on your site. Next an ad serving limit will be placed on your publisher account and all the revenue will be refunded to advertisers. This means that the main source of profit for your site will be temporarily suspended. It will take some time, usually a month, for the AdSense to lift your ad ban, but if this happens we will have all the resources needed to flood your site again with bad quality web traffic which will lead to second AdSense ban that could be permanent!”

Next Step

Our certified security experts will advise you on the topics covered in this article — free and without obligation.

Free · 30 minutes · No obligation

Share this article

About the author

About the Author

Chris Wojzechowski
Chris Wojzechowski

Geschäftsführender Gesellschafter

E-Mail

Geschäftsführender Gesellschafter der AWARE7 GmbH mit langjähriger Expertise in Informationssicherheit, Penetrationstesting und IT-Risikomanagement. Absolvent des Masterstudiengangs Internet-Sicherheit an der Westfälischen Hochschule (if(is), Prof. Norbert Pohlmann). Bestseller-Autor im Wiley-VCH Verlag und Lehrbeauftragter der ASW-Akademie. Einschätzungen zu Cybersecurity und digitaler Souveränität erschienen u.a. in Welt am Sonntag, WDR, Deutschlandfunk und Handelsblatt.

10 Publikationen
  • Einsatz von elektronischer Verschlüsselung - Hemmnisse für die Wirtschaft (2018)
  • Kompass IT-Verschlüsselung - Orientierungshilfen für KMU (2018)
  • IT Security Day 2025 - Live Hacking: KI in der Cybersicherheit (2025)
  • Live Hacking - Credential Stuffing: Finanzrisiken jenseits Ransomware (2025)
  • Keynote: Live Hacking Show - Ein Blick in die Welt der Cyberkriminalität (2025)
  • Analyse von Angriffsflächen bei Shared-Hosting-Anbietern (2024)
  • Gänsehaut garantiert: Die schaurigsten Funde aus dem Leben eines Pentesters (2022)
  • IT Security Zertifizierungen — CISSP, T.I.S.P. & Co (Live-Webinar) (2023)
  • Sicherheitsforum Online-Banking — Live Hacking (2021)
  • Nipster im Netz und das Ende der Kreidezeit (2017)
IT-Grundschutz-Praktiker (TÜV) IT Risk Manager (DGI) § 8a BSIG Prüfverfahrenskompetenz Ausbilderprüfung (IHK)
Certified ISO 27001ISO 9001AZAVBSI

Cookielose Analyse via Matomo (selbst gehostet, kein Tracking-Cookie). Datenschutzerklärung