Bitdefender uncovers APAC scam ad network abusing Meta platforms

Bitdefender tracked over 400,000 scam ad sightings across 13 APAC markets, with campaigns using Meta ads, fake sites, and redirects.

Bitdefender has released research on a scam network using paid ads on Meta platforms to target users across Asia-Pacific, including Singapore.

Bitdefender Labs researchers Alexandra Svetlana Dinulica and Vlad Mihai Sireanu tracked the activity between January and April 2026. The cybersecurity company said the research covered more than 400,000 scam ad sightings tied to more than 12,000 campaigns across 13 APAC markets, including Singapore, Malaysia, Vietnam, Australia, New Zealand, and the Philippines.

According to Bitdefender, the campaigns reused similar templates, fake websites, and redirect systems across multiple countries. The content was localized for each market, but the delivery methods and supporting infrastructure remained largely consistent.

Singapore was identified as one of the markets where scam campaigns used real financial data inside fake investment platforms. Bitdefender said the tactic was designed to make fraudulent tools appear more credible by resembling market analysis products used by investors.

Health and finance lead scam categories

Health-related scams accounted for 19% of the dataset, followed by finance at 18%. Together, the two categories made up 37.3% of the campaigns tracked by Bitdefender.

Many of the finance-related ads promoted fake app downloads or investment services, directing users to lookalike websites built to collect personal or financial information.

Some campaigns impersonated platforms such as Binance, TradingView, and Wise. The ads promoted offers such as bonuses, premium upgrades, or desktop app downloads, while sending users to fake sites designed to steal credentials or install malware.

Other campaigns relied on scandal-driven headlines, fake breaking news, and urgent claims to push users toward quick action. Bitdefender also found scam ads using references to AI-based investment tools, stock diagnostics, and automated trading systems.

Bitdefender said some finance-focused campaigns mirrored tactics it had documented earlier in a global investment scam network that abused Meta's ad system. Those tactics included fake news narratives, impersonated brands, celebrity endorsements, and coordinated redirect infrastructure.

Health-related scams included ads for sleep remedies, weight loss supplements, and insurance-related offers. These campaigns used fabricated doctor testimonials, time-limited claims, and pseudo-scientific language to target users with health concerns.

The redirect process was a recurring part of the campaigns. After clicking an ad, users were routed through one or more intermediary pages before reaching phishing forms, fake websites, or malicious downloads.

Bitdefender said some ads displayed legitimate-looking domains in the preview before redirecting users to different destinations. The final landing pages could also change frequently, making the campaigns harder to detect and remove.

Scam tactics vary by market

Bitdefender said the execution varied by country. In Australia, some campaigns used polished breaking-news formats and familiar names to build trust. In Indonesia, some campaigns used low-cost offers to move users into private conversations instead of sending them directly to websites.

In Bangladesh, ads were localized with familiar public figures and native-language content. In India, researchers observed the same message being pushed across many accounts at the same time.

The company said the use of paid advertising, tested creative formats, and shared redirect infrastructure made the campaigns more organized than many forms of opportunistic online fraud. The network's structure also made detection harder because individual ads often appeared localized and short-lived.

Bitdefender advised users to treat urgent claims as a warning sign, especially when ads involve health remedies, investment opportunities, breaking news, or offers that appear unusually favorable.

The company also pointed to verification tools such as Scamio, Link Checker, and Scam Radar. Scamio analyzes suspicious links, messages, and screenshots, while Link Checker previews where a link leads before users enter personal information. Scam Radar provides mobile alerts on active scam campaigns, including impersonated brands and current tactics.