A top search result is not proof of an official service. A sponsored link, government-like design and glowing reviews can steer someone in a hurry toward a payment or personal-data form.
To investigate, preserve more than the suspicious domain. Reconstruct the search query, advert, landing page, payment flow and review claims as the user saw them.
Establish the facts and gaps before deciding on investigation or legal action.
On 22 October 2026, the US FTC filed a complaint against GovAssist, Entry and others. It alleges paid search adverts and landing pages made travellers believe they were using government passport services, alongside misleading service, price and review claims. A court has not resolved these allegations.
The useful business question is the whole journey: what someone searched, what advert appeared, where information was entered and what was delivered after payment.
A user with an urgent task may read the rank and visual cues before the legal identity of the operator. An advert, website and reviews can reinforce each other.
Separate the signals. Ask who controls the domain, what the page claims, whether the provider is clearly identified, who receives payment and whether reviews can be independently checked. These are investigative questions, not an instant verdict.
A person who paid or supplied sensitive information should contact the payment provider, verify status through a known official channel and consider reporting the incident. Do not follow a refund link from the suspect page.
An organisation whose identity is borrowed should preserve visible claims and ad clues before coordinating with the platform and counsel. Public clues alone may not establish who operates a campaign.
Within lawful public information and client-supplied records, we can map adverts, sites, reviews and payment touchpoints for counsel or a platform report, separating verified facts from hypotheses.
We cannot guarantee takedown, attribution or recovery. Work does not include unauthorised account access or covert transactions.
Verify an important service from a known official channel, especially before sending money or identity data.
For a business, preserving the full impersonation route creates a stronger basis for response than watching a brand keyword alone.
Preserve the search result, redirects and page version before deciding on platform or legal action.