See below from our friends at NAPEO…
Today, a PEO notified NAPEO that they and their clients were the victims of a novel phishing scam. Under this scheme, fake Google advertisements were created to mimick the PEO’s legitimate ads and appeared when any variation of the PEO’s name was searched. The phony ads then redirected anyone who clicked on them to a phony log-in page for the PEO’s payroll software. The unaware victims had their personal information captured, including usernames and passwords.
The PEO is working with Google to take down the fraudulent ads. They have also notified all victims and have secured any jeopardized accounts.
Please remain vigilant against these types of scams. You should also consider checking to see if any of your company’s Google ads are being mimicked to commit fraud. Additionally, you should consider recommending that all clients and employees enable two factor authentication, where available.