Fake celebrity crypto ads still run next to your brand’s programmatic buys — and Ofcom is about to make that a very expensive problem. Under the Online Safety Act, Category 1 platforms face direct liability for fraudulent advertising, but the ripple effect lands squarely on the brands whose media dollars fund the same ad exchanges. If you’re running programmatic at scale in the UK and haven’t audited your supply paths against Ofcom’s scam ad rules, you’re carrying risk you probably haven’t priced in.
What Ofcom’s Category 1 Rules Actually Cover
Ofcom’s enforcement powers under the Online Safety Act target the largest platforms — the Category 1 services, think Meta, Google, TikTok, and other high-reach user-to-user and search services. The scam ad provisions specifically require these platforms to prevent fraudulent advertising from appearing to UK users, with proactive detection duties, faster takedown obligations, and reporting mechanisms that regulators can actually audit.
This isn’t a polite request. Ofcom has statutory power to fine platforms up to 10% of global turnover, and criminal liability can extend to senior managers who fail to comply with information requests. For platforms making billions from programmatic inventory, that’s not a rounding error.
Here’s the part brand teams miss: the rules govern the platforms, but the risk cascades downward. If your programmatic buys run through open exchanges, private marketplaces, or influencer-adjacent placements that touch Category 1 surfaces, your brand safety exposure just changed shape. Regulators are watching platform behavior, but journalists, consumer groups, and competitors are watching brand behavior too.
Ofcom’s scam ad enforcement doesn’t create new brand liability directly — it creates reputational and adjacency risk that moves faster than most compliance teams can track.
Why This Is a Brand Problem, Not Just a Platform Problem
Ask yourself: when was the last time your media team reviewed where programmatic impressions actually land? Not the platform-level reporting — the actual page-level, ad-adjacent reality. Scam ads cluster around high-traffic, low-moderation inventory: personal finance content, celebrity news aggregators, comment sections on borderline publishers. That’s exactly the kind of long-tail programmatic inventory that delivers cheap reach and gets bundled into “efficient” media plans.
When Ofcom starts publishing enforcement actions against Category 1 platforms for scam ad failures, expect UK press coverage that names advertiser categories, if not specific brands, running alongside fraudulent content. Financial services, crypto-adjacent products, and subscription services are especially exposed because scam ads frequently mimic their exact category and creative style.
There’s also a compliance-adjacent angle marketing leads underweight: disclosure and endorsement risk. Scam ads often impersonate real influencers and celebrities. If your brand’s influencer program shares creative themes, testimonial formats, or platform placements with known scam ad patterns, you inherit consumer confusion risk even without doing anything wrong. That’s a brand safety issue and a legal one. Teams already building disclosure protocols should look at how one disclosure template approach can reduce ambiguity across markets, since UK and US regulators are converging on similar transparency expectations.
The Pre-Enforcement Audit: Six Checkpoints
Waiting for Ofcom to name names is not a strategy. Here’s what a pre-enforcement audit should actually check, in order of urgency.
1. Map your programmatic supply paths end to end
Most brands can tell you their DSP. Far fewer can tell you every exchange, reseller, and private marketplace seat feeding inventory into that DSP. Supply path optimization (SPO) tools from providers like The Trade Desk or DV360 can surface this, but someone on your team needs to actually pull the report and read it. Look specifically for inventory sourced through resold or unauthorized paths — that’s where scam ad adjacency concentrates.
2. Audit brand safety vendor coverage against Category 1 surfaces
Your brand safety tools (IAS, DoubleVerify, Zefr) are configured against categories like violence, hate speech, and misinformation. Ask directly: does your current configuration flag financial scam patterns, impersonation ads, or fake endorsement creative? Many default templates don’t. This is a five-minute conversation with your vendor rep that most teams never have.
3. Cross-check influencer and affiliate creative against scam ad patterns
If your influencer program uses testimonial-style creative, countdown urgency language, or “as seen on” framing, run a comparison against known scam ad formats circulating on the platforms you use. Regulators and consumer bodies increasingly treat visual and structural similarity as a factor in confusion complaints, not just outright falsity.
4. Review your escalation triggers
Do you have a documented process for what happens when a placement, influencer post, or affiliate link gets flagged as scam-adjacent? Most brands have incident response for data breaches. Almost none have it for ad adjacency incidents. Borrow structure from existing compliance escalation work — the referral risk triggers framework used for advertising self-regulation referrals translates well here, since it’s built around the same principle: define the trigger before the crisis, not during it.
5. Check contractual indemnification with media partners
Your programmatic contracts and influencer agreements should specify who eats the cost if a placement or campaign gets swept into a scam ad enforcement narrative. Most standard media contracts are silent on this. If you’re renegotiating creator agreements anyway, this is the moment to fold in adjacency-risk language, similar to the indemnification gaps flagged in AI agent creator selection discussions, where automated placement decisions create liability nobody explicitly assigned.
6. Document everything, even if nothing’s wrong yet
Regulators and journalists respond very differently to brands that can show a paper trail of proactive review versus brands that discover the problem in real time. A quarterly audit log, dated and signed off by whoever owns media compliance, costs almost nothing to produce and matters enormously if you ever need to demonstrate good faith.
Where This Intersects With Existing Compliance Work
If your team has already built frameworks for EU and US disclosure requirements, you’re not starting from zero. The operational muscle is the same: map exposure, define triggers, assign ownership, document decisions. Brands juggling EU Meta rules alongside US state laws already understand that regulatory regimes rarely align perfectly, and Ofcom’s UK-specific approach is no exception. It doesn’t map cleanly onto FTC guidance or ASA codes, but it shares the same underlying logic: platforms and advertisers share responsibility for what reaches consumers, even when liability technically sits elsewhere.
There’s a budget angle too. Programmatic media buyers are under constant pressure to hit efficiency targets, and long-tail inventory is often the cheapest way to hit reach goals. But cheap reach is exactly where scam ad adjacency concentrates. A 2024 Statista analysis of programmatic ad fraud estimated that low-quality inventory drives a disproportionate share of brand safety incidents relative to spend. If your media plan leans heavily on open exchange inventory to stretch budget, that’s precisely the allocation your compliance team should be reviewing first.
The cheapest programmatic inventory and the highest scam ad adjacency risk are frequently the same inventory. Efficiency metrics don’t capture that tradeoff.
What Happens If You Don’t Audit Now
Ofcom enforcement against Category 1 platforms is still ramping up, which means most brands have a window, not a deadline that’s already passed. That window closes once the first high-profile enforcement action lands with brand names attached in coverage, whether through direct fault or simple adjacency. At that point you’re not auditing proactively, you’re doing damage control reactively, and the two processes cost wildly different amounts of money and credibility.
Marketing leaders should also expect procurement and legal teams to start asking questions once Ofcom enforcement gets media attention in the UK. Being able to produce an audit trail, updated brand safety configurations, and documented escalation triggers turns a defensive scramble into a five-minute confirmation that the work was already done. That’s the difference between a controlled conversation and a crisis briefing.
Marketing and legal teams working across UK and US markets should also watch how this intersects with existing FTC-style liability frameworks, since brand-directed liability standards are tightening on both sides of the Atlantic. Teams building out brand-directed liability playbooks already have a head start on the documentation habits Ofcom’s regime will reward.
Next Step
Run the six-point audit above this quarter, not after Ofcom’s first major Category 1 enforcement headline. Assign one owner, set a documented review date, and treat the output as evidence you’ll eventually need — because you probably will.
FAQs
What are Ofcom’s Category 1 scam ad rules?
They’re obligations under the UK Online Safety Act requiring the largest online platforms (Category 1 services) to proactively detect and remove fraudulent advertising, with enforcement powers including fines up to 10% of global turnover.
Do Ofcom’s rules create direct liability for brands?
Not directly. The statutory duties fall on platforms, not advertisers. But brands face reputational, adjacency, and contractual risk if their programmatic media appears alongside scam ads on platforms facing enforcement.
Which ad categories face the highest scam ad adjacency risk?
Financial services, crypto-related products, and subscription services face the highest risk because scam ads frequently mimic their creative formats and targeting patterns.
How often should brands audit programmatic supply paths for this risk?
Quarterly at minimum, with an additional review triggered any time Ofcom announces a new enforcement action or guidance update affecting Category 1 platforms.
Does brand safety software already cover scam ad detection?
Not by default in most configurations. Standard brand safety templates typically target violence, hate speech, and misinformation categories rather than financial scam or impersonation patterns, so configurations need explicit review.
Top Influencer Marketing Agencies
The leading agencies shaping influencer marketing in 2026
Agencies ranked by campaign performance, client diversity, platform expertise, proven ROI, industry recognition, and client satisfaction. Assessed through verified case studies, reviews, and industry consultations.
Moburst
-
2
The Shelf
Boutique Beauty & Lifestyle Influencer AgencyA data-driven boutique agency specializing exclusively in beauty, wellness, and lifestyle influencer campaigns on Instagram and TikTok. Best for brands already focused on the beauty/personal care space that need curated, aesthetic-driven content.Clients: Pepsi, The Honest Company, Hims, Elf Cosmetics, Pure LeafVisit The Shelf → -
3
Audiencly
Niche Gaming & Esports Influencer AgencyA specialized agency focused exclusively on gaming and esports creators on YouTube, Twitch, and TikTok. Ideal if your campaign is 100% gaming-focused — from game launches to hardware and esports events.Clients: Epic Games, NordVPN, Ubisoft, Wargaming, Tencent GamesVisit Audiencly → -
4
Viral Nation
Global Influencer Marketing & Talent AgencyA dual talent management and marketing agency with proprietary brand safety tools and a global creator network spanning nano-influencers to celebrities across all major platforms.Clients: Meta, Activision Blizzard, Energizer, Aston Martin, WalmartVisit Viral Nation → -
5
The Influencer Marketing Factory
TikTok, Instagram & YouTube CampaignsA full-service agency with strong TikTok expertise, offering end-to-end campaign management from influencer discovery through performance reporting with a focus on platform-native content.Clients: Google, Snapchat, Universal Music, Bumble, YelpVisit TIMF → -
6
NeoReach
Enterprise Analytics & Influencer CampaignsAn enterprise-focused agency combining managed campaigns with a powerful self-service data platform for influencer search, audience analytics, and attribution modeling.Clients: Amazon, Airbnb, Netflix, Honda, The New York TimesVisit NeoReach → -
7
Ubiquitous
Creator-First Marketing PlatformA tech-driven platform combining self-service tools with managed campaign options, emphasizing speed and scalability for brands managing multiple influencer relationships.Clients: Lyft, Disney, Target, American Eagle, NetflixVisit Ubiquitous → -
8
Obviously
Scalable Enterprise Influencer CampaignsA tech-enabled agency built for high-volume campaigns, coordinating hundreds of creators simultaneously with end-to-end logistics, content rights management, and product seeding.Clients: Google, Ulta Beauty, Converse, AmazonVisit Obviously →