BBC Studios international site hit by sophisticated ad cloaking subscription scams
Consumer group Which? has issued a warning regarding 'ad cloaking' scams appearing on bbc.com that deceive international users into signing up for unwanted subscription services. The report highlights ongoing vulnerabilities within the programmatic advertising ecosystem and identifies gaps in current regulatory protections, including the UK's Online Safety Act.
Key Takeaways
- Fraudsters utilized 'ad cloaking' to show benign content to Google Ads reviewers while serving malicious subscription traps to genuine users.
- A single victim was charged €29.90 monthly for a tech e-book service after mistaking a 'Verify and Continue' banner for a BBC security check.
- The malicious ads were linked to Zodiac Technologies DMCC, a Dubai-based entity operating under multiple shifting brand names like MyTechTeach and TheFoodBliss.
- BBC Studios confirmed the ads violated internal guidelines and have been removed from the bbc.com international platform.
- UK regulatory protections under the Online Safety Act will not be fully enforceable for these types of display ads until late 2027.
Why It Matters
This incident highlights a critical vulnerability in the programmatic supply chain where even premium publishers like BBC Studios cannot fully insulate international audiences from sophisticated fraud. As streaming entities increasingly pivot to ad-supported models, the use of AI-driven cloaking to bypass verification tools threatens both brand safety and user trust. The gap between technical exploitation and regulatory enforcement—which in the UK remains over a year away—leaves publishers as the primary defense line against sophisticated 'scamscriptions.' Industry stakeholders should monitor Ofcom's upcoming 2027 enforcement milestones for fraudulent advertising codes to gauge future liability shifts.
Additional Context
The rise in ad cloaking coincides with a broader surge in sophisticated digital fraud. According to reports from Juniper Research and IAB Tech Lab in 2024, global ad fraud losses are projected to reach between $150 billion and $220 billion annually by 2026. This growth is fueled by generative AI and advanced cloaking platforms like '1Campaign,' which allow threat actors to fingerprint and filter out security scanners in real time. Per Varonis Threat Labs (February 2026), these tools enable malicious ads to stay active significantly longer by showing harmless 'white pages' to automated reviewers while targeting vulnerable human users with phishing or predatory subscription content.
Regulatory pressure is mounting but faces significant implementation delays. In July 2026, the UK regulator Ofcom proposed nearly 40 new measures under the Online Safety Act to force major platforms to proactively block scam ads and verify advertiser legitimacy. Per The Guardian (July 2026), these rules could eventually lead to fines of up to 10% of global revenue for non-compliant firms. However, consumer groups like Which? have criticized the current timeline, as full enforcement is not expected until mid-2027, leaving a 'Wild West' environment for digital advertising in the interim.
For major broadcasters, the commercial stakes are high. BBC Studios reported a 43% revenue growth in its media and streaming division for the 2024/25 fiscal year, driven largely by digital platform expansion. As the organization aims for a £1.5 billion return commitment by 2027, maintaining the integrity of its international ad-supported reach on bbc.com is essential. Industry analysts from Spider Labs (June 2026) note that programmatic display now accounts for nearly 90% of spending, yet fraudulent clicks in certain high-risk sectors can drain over half of allocated budgets if detection mechanisms fail to evolve alongside cloaking techniques.
Read full article at which.co.uk
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source