Meta pulls Facebook, Instagram ads using porn to steal users’ bank credentials

American tech giant Meta on Monday took down dozens of Facebook and Instagram advertisements that used pornography content as bait to steal Indian users’ banking credentials through malware downloads.
At least 39 of the advertisements, including “Night Play” and “Kyss”, were still active after Indian authorities issued an advisory, Reuters found, but Meta later took them down after the news outlet flagged them to the company.
Indian authorities said the ads directed Facebook and Instagram users to phishing websites, after which they were directed to download Android apps disguised as pornographic apps.
The government said it had observed an increase in financial fraud that involved “malicious Android applications masquerading as pornography apps”.
It said the apps secretly accessed users’ information stored on their phones, including bank PINs, and subsequently transferred funds without the owners’ authorisation.
An estimated $2.4 billion was lost to cyber scams in 2025 as perpetrators targeted the country’s booming digital payment platforms, according to official figures.
The ads, which used sexually explicit video thumbnails to garner clicks, were still active despite the Indian authorities’ earlier advisory.
According to the news outlet, one of the ads remained active and, when clicked upon, directed users to download “Movexa.apk” outside an official app store.
In its advertising policies, Meta states that ads “must not contain adult nudity and sexual activity” and must not promote products, services, schemes or offers using identified deceptive or misleading practices, including those meant to scam people out of money or personal information.
This comes weeks after the Indian government directed the tech giant to disable advertisements on Instagram that promote child abuse material.
It also gave Meta one week to explain how the materials were allowed on Instagram.
In its defence, Meta said it has “a zero-tolerance policy for soliciting or sharing” content that facilitates or promotes child sexual abuse and that it deploys advanced AI technology to detect such materials.
The Indian government had also directed Google to remove accounts on its Firebase platform over rising financial fraud.
We have recently deactivated our website's comment provider in favour of other channels of distribution and commentary. We encourage you to join the conversation on our stories via our Facebook, Twitter and other social media pages.
More from Peoples Gazette

Agriculture
FG tasks ECOWAS on leveraging financing strategies for agroecology
The federal government has urged stakeholders in the agriculture and finance sectors in the West Africa region to leverage financing strategies to enhance agroecology practices

Politics
Katsina youths pledge to deliver over 2 million votes to Atiku
“Katsina State is Atiku’s political base because it is his second home.”

Sport
Everton bid for Monaco striker Folarin Balogun
Everton’s move for Balogun followed Beto’s £15 million move to Serie A side Fiorentina.

Heading 3
DHQ says troops killed 324 terrorists, rescued 610 kidnap victims in August
Mr Onoja said the month of August witnessed a marked improvement in operational effectiveness.

Heading 2
Closing arguments begin in trial over Tupac’s assassination
Tupac was shot multiple times and died six days later at the age of 25.

World
Meta pulls Facebook, Instagram ads using porn to steal users’ bank credentials
Indian authorities said the ads directed Facebook and Instagram users to phishing websites.

Lagos
Lagos govt calls for grassroots action to reduce maternal deaths
The commissioner said maternal mortality remained a major concern for families and society.

States
Tinubu confirms rescue of abducted NYSC members in Kogi
According to the president, those responsible will face the full weight of the law.






