CHEAPUNO guide

Are fake AI ad portals stealing your MFA codes?

Fake dashboards pose as AI tools to grab 2FA codes, risking your ad account takeover and data loss.

CHEAPUNO EditorialSources checked 7 10 月, 2026

Cover

Woman Pool

Photo: StockSnap (CC0)

What you are probably seeing

You see a request for a two-factor authentication code from a dashboard that looks slightly off but familiar, or you notice unusual login activity on ad platforms immediately after entering a verification code.

You may detect discrepancies in your ad spend or see unauthorized changes to campaigns that align with recent login attempts from unfamiliar devices or locations.

Why it happens

Threat actors are exploiting the rapid adoption of AI tools by creating convincing replicas of popular AI interfaces to intercept security credentials during the login process.

This method bypasses standard 2FA because the code is requested by a fake portal that mimics the legitimate service, tricking users into handing over both their password and verification code simultaneously.

What changed recently

Step by step

1. Verify the domain of every ad management tool you use to ensure it belongs to the legitimate provider and not a lookalike phishing site.

2. Enable multi-factor authentication using an authenticator app rather than SMS where possible, and review recent login activity in your ad account settings.

3. Check that you are not using any third-party AI automation tools that request your full ad platform credentials or MFA codes.

4. Install an ad blocker or keep your browser updated to reduce the risk of encountering malicious pop-ups or fake dashboards during your workflow.

5. Create a separate, low-privilege account for testing any new AI or automation tools before granting them access to your main ad spending accounts.

Ways to go further

Affiliate links: CHEAPUNO may earn a commission if you buy through them, at no extra cost to you.