A French internet user nearly entered their bank details on a fake website that imitated the official French tax administration site, impots.gouv.fr, while trying to complete a tax-related task during the back-to-school period. This incident highlights a growing threat from fraudulent websites that appear as the top result on Google due to a technique called malvertising. These fake sites are designed to look identical to legitimate ones, often including a valid security certificate, making it difficult for users to tell them apart. Many users search for "site des impôts" (tax site) on Google, expecting to be directed to the official tax administration page. However, the first link displayed may actually be a counterfeit site that closely mimics the official one, with the same colors, logo, and even a similar web address. This trick works because scammers exploit the trust people place in search engine results, using malvertising to hijack the top links for their own purposes. The method relies on the advertising auction system used by search engines, where the highest bidder for a keyword gets the top placement. Organized groups bypass these filters by creating ads that appear legitimate during the approval process but redirect users to fake sites once clicked. These sites are designed to look exactly like real ones, often copying the layout, forms, and menus, and sometimes even displaying a security certificate. However, this certificate only confirms that the site uses encrypted connections, not that it is officially legitimate. To protect themselves, users are advised to look for the word "Advertisement" before clicking on a search result, as this label indicates a sponsored link. It is also recommended to prefer organic, non-sponsored links and to verify the URL in the browser's address bar. Typing the official URL directly into the browser or saving it as a bookmark can help avoid being redirected to fake sites. Users should also be cautious of any urgent requests for personal information, as scammers often use urgency to pressure victims into acting quickly. Remembering that the position of a link in search results does not guarantee its legitimacy is key to staying safe, especially when dealing with sensitive tasks like taxes or banking.