
Not exactly the kind of engagement Meta wants
Meta just had to pull dozens of Facebook and Instagram ads after Indian authorities flagged a scam that used sexually explicit bait to lure people into downloading malware. The endgame was ugly: steal banking info, grab one-time passwords, and potentially empty accounts.
The ad-farm whack-a-mole continues
The ads reportedly ran under names like Night Play and Kyss, steering users to phishing pages and fake Android apps disguised as pornography apps. One lure even promised hundreds of explicit videos and 24-hour access — because apparently the internet’s oldest trick still works when wrapped in an APK.
Why investors should care
This isn’t about a single rogue ad; it’s about how expensive it is to keep Meta’s giant ad machine clean enough for regulators and users to trust. If the platform is seen as a recurring delivery truck for scams, that can mean more moderation costs, more scrutiny, and more headaches in a market that matters.
- India says the malicious apps could intercept OTPs and bank PINs
- Reuters said at least 39 ads were still active after the advisory, then got removed after Meta was contacted
- The incident lands in the middle of India’s growing cyber-fraud problem, which makes platform enforcement even more politically sensitive
Big picture: Meta can print money from ads all day, but every scam that slips through is a tiny tax on trust — and trust is the whole game.