Ofcom is trying to turn scam ads from a user-risk problem into a platform-duty problem — and the largest online services in the UK are now being told they may have to stop fraudulent adverts before users get hit.
Platforms including YouTube, Instagram and TikTok would need to act against scam adverts under draft measures published by the UK regulator, according to BBC Tech. The proposals sit under the Online Safety Act, and Ofcom says firms that fail to comply once the rules are in force could face penalties of £18m or 10% of global turnover, whichever is greater.
Ofcom’s Scam Ads Plan Turns Online Fraud Into a Big Tech Compliance Problem
The core shift is simple: Ofcom is not treating fraudulent advertising only as something police, banks, or individual users must clean up after the damage is done. It is framing scam ads as a platform governance failure.
That matters because scam adverts do not spread like ordinary one-to-one fraud attempts. Paid distribution can put misleading content in front of large audiences quickly. Ofcom’s draft measures target content that advertises products or services in a way that “misleads or tricks viewers,” including scams posted by repeat offenders and accounts impersonating real businesses.
“For too long, victims have been exposed to scam ads online with tech giants simply not doing enough to combat the fraudsters using their platforms,” said Ofcom online safety director Oliver Griffiths.
MLXIO analysis: the proposal pushes fraud prevention closer to the design of ad systems themselves. If a platform profits from ad distribution, Ofcom’s stance is that it should also carry responsibility for stopping abuse of that distribution.
That is the same broader governance pressure facing large tech platforms across multiple risk categories. As we covered in Key Trends Splitting Tomorrow's Winners From Losers, the winners in tech are increasingly separated not just by product reach, but by how well they manage trust, security and regulatory exposure. The Ofcom plan puts scam advertising squarely in that bracket.
The Numbers Behind the UK Online Scam Ads Crackdown
Ofcom’s scale argument rests on one stark figure: more than half of UK adults have encountered potentially fraudulent ads online, and over a third say they see them often.
That is not a niche abuse pattern. It suggests scam ads have become a routine part of online life for many UK users. The source material points to several forms: adverts that mislead viewers about products or services, accounts impersonating real businesses, and AI-generated imagery used in political or financial-looking narratives.
Recent examples cited by BBC Tech show how varied the problem has become:
| Example cited in source | Platform context | Why it matters |
|---|---|---|
| Portable air conditioning ads described by the UK advertising watchdog as “too good to be true” | Facebook and YouTube | Product claims can exploit seasonal demand and consumer urgency |
| Ads on X using fake AI-generated images of Nigel Farage fighting Bank of England governor Andrew Bailey | X | Synthetic imagery can make false or manipulative ads more attention-grabbing |
The measurement problem remains difficult. Ofcom says users are encountering potentially fraudulent ads, but the source does not say how many led to losses, how many were reported, or how platforms classified them internally.
MLXIO analysis: that gap is important. A platform can remove a scam quickly and still leave users exposed if the same actor reappears through a new account, a new domain, or a slightly altered creative. Ofcom’s focus on banning scam posters and preventing new accounts is aimed directly at that recurrence problem.
How Ofcom Wants Platforms to Police Fraudulent Ads Before Users Click
Ofcom’s draft measures would require stronger action against the people and accounts behind scam adverts, not only the individual ad creative.
The clearest proposed obligations include:
- Banning scammers: platforms would be expected to ban users who post scam ads.
- Blocking re-entry: firms would need to prevent those bad actors from creating new accounts.
- Stopping impersonation: services would need to act against accounts impersonating real businesses.
- Removing fraudulent ads quickly: Category 1 services must swiftly remove reported fraudulent content and minimise how long it remains online.
“Platforms should not drag their heels – they can start making improvements for their users now,” Griffiths said. “And sites and apps that fail to meet their legal duties, once in force, can expect to face serious consequences.”
The strongest part of the proposal is the move from takedown to systems accountability. A takedown-only model waits for harm to surface. Ofcom’s model asks whether the service has systems that reduce user exposure in the first place.
The weakest point is timing and adaptation. Scammers can change accounts, formats and messages faster than formal compliance regimes usually move. Ofcom’s answer is to make repeat abuse harder. Whether that works depends on implementation details not yet settled in the source: how platforms verify advertisers, how they detect linked accounts, and how they avoid over-removing legitimate ads.
For a parallel in tech governance, MLXIO has tracked how large companies manage strategic access and reputational risk in Apple Grabs Sun Valley Access — But No Deal Signal. The Ofcom case is different, but the theme is similar: Big Tech’s operating choices now carry regulatory consequences beyond product performance.
Category 1 Platforms Face the Toughest Fraud-Ad Duties
Ofcom has published a list of services it believes should face the toughest additional requirements for fraudulent ads under the Online Safety Act’s categorisation regime.
The proposed Category 1 list includes:
Facebook, Instagram, Pinterest, Quora, Reddit, Roblox, Snapchat, TikTok, WhatsApp, X and YouTube.
These are described by Ofcom as the UK’s largest and most popular platforms. Under the OSA, Category 1 services face additional transparency and accountability requirements. For scam ads, that means systems to prevent users from encountering fraudulent ads, faster removal once reported, and efforts to minimise exposure time.
Ofcom is also monitoring Apple’s iMessage, Meta’s Messenger, Threads and Wikipedia as potential “emerging Category 1 services.”
That monitoring list matters because it shows Ofcom is not treating the category as static. Services can grow into heavier obligations. MLXIO analysis: for platforms near the boundary, the regulatory risk is not only current status but future classification.
Which? Welcomes the Move but Attacks the Timeline
Consumer group Which? welcomed Ofcom’s publication as a “significant step” toward holding tech firms accountable for profiting from fraud that harms users.
But its concern is timing. Rocio Concha, head of policy and advocacy at Which?, said the regulator’s timeline “leaves consumers unprotected until 2027 at the earliest.”
“This is very problematic at a time when breakneck advances in AI are making scams more sophisticated than ever,” Concha said.
That criticism cuts to the central tension in the proposals. Ofcom is building a formal rulebook. Scam operators are already active.
The consultation runs until 2 October, with Ofcom seeking views from industry and the public. That process is necessary for durable rules, but it also creates a lag between identifying harm and enforcing obligations.
MLXIO analysis: the most important near-term test is whether major platforms voluntarily tighten scam-ad controls before the legal duties bite. Ofcom has explicitly said they can start improving now. If they wait, the proposals become evidence that platforms needed compulsion to act.
The Liability Question Ofcom Has Not Yet Settled
The BBC source does not say how fraud losses should be divided between platforms, banks, payment firms, telecoms providers or victims. It also does not detail any reimbursement framework tied to scam ads.
That absence matters. Ofcom’s current focus is platform conduct: preventing exposure, removing fraudulent content, and penalising non-compliance. It is not yet a full answer to who ultimately pays when a scam begins with an online advert and ends with financial loss.
MLXIO analysis: enforcement will decide whether this becomes a serious operating constraint or another compliance layer. If penalties are rare or slow, large platforms may treat the rules as manageable process risk. If Ofcom pursues visible cases and ties failures to system design, scam-ad controls could become a core part of digital advertising operations in the UK.
The Next Phase Is Enforcement, AI Abuse and Platform Evasion Tests
Ofcom’s proposals will not eliminate online scam ads. They could, however, change the incentives for the biggest platforms: fraudulent advertising would no longer be something to remove after users complain, but a risk the service must actively design against.
The evidence to watch is practical:
- Consultation outcome: whether the final measures preserve strong duties after the 2 October consultation closes.
- Platform behaviour: whether named services begin tightening scam-ad controls before enforcement starts.
- Repeat-offender controls: whether bans actually stop scammers from returning under new accounts.
- AI misuse: whether synthetic images and impersonation campaigns become a stress test for Ofcom’s framework.
- Penalty appetite: whether Ofcom is willing to use the £18m or 10% of global turnover threat when firms fall short.
The proposal’s signal is already clear. In the UK, scam ads are being moved from the margins of content moderation into the centre of platform accountability. Whether users see fewer fraudulent ads will depend less on the wording of the rules than on how hard Ofcom forces the largest services to make fraud prevention part of the ad business itself.
Impact Analysis
- Ofcom’s proposal would make major platforms directly responsible for tackling scam adverts in the UK.
- The rules could force services like YouTube, Instagram and TikTok to redesign ad checks and enforcement systems.
- Large potential penalties raise the financial stakes for tech firms that fail to stop fraudulent ads.
