Martin Köppelmann, co-founder of Gnosis, reported that the top Google search result for 'gnosis safe' is a fraudulent advertisement. The sponsored link directs users to a deceptive clone of the Safe multisig wallet, which currently secures over $60 billion in assets.
The malicious ad uses the display link 'google.com' but redirects visitors to 'wallet-safe.global'. This fake site mimics the official Safe Wallet interface, including its latest product banners. The scam targets users searching for the outdated name 'gnosis safe', which the company rebranded in 2022.
Once a user connects their wallet and signs a transaction, the site requests approvals that allow attackers to drain the account. Köppelmann criticized Google for selling top ad placements to scammers while frequently suspending legitimate cryptocurrency projects from its advertising programs.
Similar incidents have occurred recently, including a fake Trezor page in August that resulted in the theft of approximately 24 BTC. In May, a fraudulent Uniswap site caused losses of roughly $400 000, and DeFiLlama recently highlighted a fake App Store clone used to drain wallets.
Experts recommend avoiding all 'Sponsored' search results when looking for financial applications. Users are advised to bookmark official project addresses, verify domain names character by character, and cross-reference links with official social media accounts to prevent unauthorized access.
