Ofcom Proposes Rules Making Big Tech Liable for Scam Ads

What happened

Ofcom, the UK's independent communications regulator, has proposed new rules that would make large technology platforms directly accountable for tackling fraudulent advertisements appearing on their services. The announcement marks a significant regulatory escalation, shifting responsibility for scam ad proliferation away from individual consumers and financial institutions and squarely onto the platforms that host and profit from digital advertising inventory.

Under the proposed framework, major technology companies — including search engines and social media platforms — would be required to take proactive steps to detect, prevent and remove scam advertisements before they reach users. The move falls under Ofcom's expanding remit following the Online Safety Act, which granted the regulator broader powers to hold platforms to account for harmful content, including financially motivated fraud.

Why it matters

Scam advertisements are not merely a fraud problem — they are a customer experience failure at scale. When a consumer encounters a fraudulent ad on a trusted platform, the psychological damage extends well beyond the immediate financial loss. The platform's implicit endorsement effect — the cognitive shortcut by which users assume that advertised content has been vetted — is weaponised against them. This is a textbook case of trust erosion: once a customer is deceived via a channel they believed was safe, their confidence in digital services broadly, including legitimate brands advertising on the same platforms, is measurably diminished.

For service designers and CX leaders, the regulatory direction of travel is instructive. Ofcom's intervention signals that the duty of care is migrating upstream — from the point of consumer harm back to the point of content distribution. Organisations that rely on digital advertising to acquire customers should treat this as a prompt to audit their own platform partnerships and consider how their brand is perceived in environments where scam content has historically appeared alongside legitimate offers.

The Renascence take

Most commentary on this announcement will focus on compliance burdens for Big Tech. That misses the more consequential story: regulators are beginning to codify what behavioural economics has long demonstrated — that platform design choices are not neutral, and that the architecture of attention shapes consumer vulnerability.

Ofcom's proposed rules are, at their core, a service-design mandate dressed in regulatory language. The implicit argument is that platforms have engineered environments optimised for engagement and ad revenue, and that this same engineering capability must now be directed toward user protection. For customer-obsessed operators, the lesson is not to wait for regulation: audit every touchpoint where third-party content or advertising intersects with your customer's journey, because your brand absorbs the reputational cost of the environment it appears in, regardless of who placed the harmful content. The question to ask is not "are we compliant?" but "would a customer who was defrauded here ever trust us again?"