Fake BBC and Guardian ads on Reddit pushing AI 'investment' scams (2026)

In June 2026, Bitdefender Labs published an analysis of a paid advertising campaign running on Reddit that impersonated trusted news organizations to promote fraudulent investment platforms. The sponsored posts mimicked outlets such as the BBC, the Financial Times, and The Guardian, lending an air of editorial legitimacy to what were in fact scam funnels.

The campaign promoted fake AI-themed investment services under names including Wencoin STX, Warrior Coin AI, and Nevo Coin, dangling extraordinary returns — for example, claims that a €250 deposit could become thousands within weeks. The funnel worked in stages: a sensational Reddit ad redirected users to cloned news websites carrying fabricated articles, which then pushed visitors toward registration pages that harvested personal information and steered them toward depositing funds.

To make the pitch convincing, the operators layered in fabricated celebrity endorsements, invented testimonials, doctored financial documents, and false-urgency messaging claiming that registration spots were limited. Some ads even incorporated deepfake-style BBC news segments and political imagery — including figures such as Donald Trump and Ursula von der Leyen — to manufacture credibility. The infrastructure relied on rapidly rotating domains designed to evade detection, and it targeted both US and European audiences.

The campaign is significant because it weaponized Reddit's advertising system, not just its organic communities. Where earlier crypto-scam controversies on Reddit centered on user-run subreddits and coordinated posting, this case showed scammers paying to place deceptive promotions directly into users' feeds, exploiting the trust associated with both established news brands and the platform's own ad placements. It mirrors a broader pattern in which social platforms struggle to vet financial advertising, a problem that has repeatedly drawn regulatory attention in the UK and EU.

For Reddit, the episode adds to a growing record of the platform being used as a distribution channel for investment fraud — this time through the paid-ads pipeline. It underscores the difficulty of policing scam advertising at scale: by the time a fraudulent ad and its cloned-news landing pages are identified and removed, the operators have often rotated to new domains and creatives, leaving a moving target that purely reactive enforcement struggles to contain.