Google said on October 20, 2026 that it will extend its Financial Services Verification program to the United States and Canada in early 2027, requiring advertisers to show they are authorized by regulators or recognized registries before certain financial ads can run. In the US, Google will use the American Bankers Association's registry to verify banks. The announcement gave no start date, no list of covered products and no verification deadline.

In Short

Google will soon check that companies advertising things like bank accounts and credit cards in the US and Canada are real, licensed financial firms before letting their ads show. This matters because the two countries are among Google's largest ad markets and fake bank ads are a common route for scams. Google says the details, including which documents count and when checks start, will come before the rollout in early 2027.

What Google said

The announcement appeared on Google's Ads & Commerce Blog on October 20, 2026, under the title "Expanding our defenses against financial scam ads." It was written by Keerat Sharma, vice president and general manager of Ads Privacy and Safety at Google, and is listed as a two-minute read.

Its subtitle sets the scale: "Building on safeguards that already cover 2 billion internet users globally, we're bringing our Financial Services Verification program to the U.S. and Canada in early 2027."

The starting point, according to Google, is identity. "In both the United States and Canada, more than 97% of the ads people see on Google already come from identity-verified advertisers," the post states. That sentence carries a footnote marker. The footnote's text did not appear in the captured page, which ends with a collapsed "More Information" section, so the methodology behind the 97% figure is not available from the document.

Financial Services Verification, Google wrote, is "a program that currently protects approximately 2 billion internet users across 42 countries from financial scams - the broadest program of its kind." Neither the 2 billion figure nor the "broadest" claim comes with a stated method or comparison.

How the check differs from identity verification

Google draws a line between two layers. The first is general advertiser verification, which confirms who is behind an account. The second is a sector-specific test of whether the advertiser is permitted to offer the service it promotes.

"On top of identity verification, our longstanding first line of defense, Financial Services Verification adds a specialized check to validate an advertiser's credentials," according to the post. "Under this policy, advertisers must demonstrate they are authorized by relevant regulators or recognized registries before running certain financial ads - helping prevent brand impersonation and stopping bad actors from reaching people."

The phrase "certain financial ads" is as specific as the document gets about scope. The only consumer examples in the text come from the section headed "A proven, multi-layered approach to safety": "When you're opening a checking account or looking for a credit card, trust is essential. That's why we're introducing additional protections to ensure these ads come from authorized financial providers."

Checking accounts and credit cards are therefore named as examples, but the post does not say whether loans, mortgages, insurance, investment products, cryptocurrency, debt services or other categories fall inside the North American program. In other markets the scope has been wider. When Google added Ireland, New Zealand, South Korea and Thailand in 2024, the covered services included banking, credit cards, credit and loans, investment, brokerages and day trading, bonds, commodities and futures trading, and insurance. Whether the US and Canadian lists will match is not stated.

Banks first, through the ABA

The most concrete operational detail concerns US banks. "Alongside our ongoing work with financial regulators, we're working in the U.S. with the American Bankers Association to use their dedicated registry to verify authorized banks before ads can run," according to Google.

That is a notable choice of source. In most of the existing 42 markets, Google's verification relies on regulators' public registers, such as the Financial Conduct Authority's register in the UK or national supervisors and pan-European bodies in the EU. Here Google names an industry trade association's registry for banks. The post does not explain what the registry contains, how it is maintained, whether non-member banks can appear in it, or how credit unions, fintech firms partnering with chartered banks, and non-bank lenders would be verified. No US regulator is named.

Canada is at an earlier stage. "In Canada, we're engaging closely with the Canadian Bankers Association as we prepare for our rollout," the post states. "Engaging closely" stops short of the US description; there is no mention of a Canadian registry being used, and no Canadian regulator is named either.

Google also flagged that the two countries will not be handled identically. "Because regulations differ across borders, we're adapting our approach for each country through a phased implementation, protecting consumers while ensuring legitimate institutions can reach the people they serve," according to the post. Financial regulation in both countries is split between federal and state or provincial authorities, which may explain the phased approach, although the document does not say so.

What the announcement leaves out

For advertisers trying to plan 2027 budgets, the gaps are larger than the disclosures. The post does not give:

  • an exact start date beyond "early 2027", or a date when policy enforcement begins;
  • a verification window, such as the 30 days Google has used elsewhere;
  • the consequences of not verifying, such as restricted ads or account suspension;
  • the list of financial products and services covered;
  • the documents, licences or registration numbers required;
  • whether a third-party verification vendor will be involved;
  • any exemptions, for example for government entities;
  • regulators or registries other than the American Bankers Association's.

Google's answer is that the material will follow. "Ahead of our planned rollout in early 2027, we'll provide country-specific information for advertisers, including accepted registries, required credentials and onboarding instructions," the post states. "Once verification opens, advertisers will be notified if and when they need to complete the process, ensuring businesses have the guidance they need to comply before policy enforcement begins."

The phrase "if and when" suggests not every financial advertiser will be asked at the same moment, which matches how earlier waves worked: activation depended on when each account was notified. The document does not mention the Google Ads interface, account settings or the advertiser verification page by name as the place where the process will run.

At the time of writing on October 21, 2026, Google's help page titled "Financial Services Verification: Relevant Regulators and Enforcement Dates", which the blog post links on the words "42 countries", still listed 42 countries and did not mention the United States or Canada. That is consistent with the post's statement that country-specific information will come later.

Links in the post

PDF text extraction drops hyperlinks, so PPC Land checked the link annotations in the captured page. The body of the post links to:

  • the Advertising Policies Help page "Advertiser verification" (support.google.com/adspolicy/answer/9703665), on "identity-verified";
  • the Advertising Policies Help page "Financial Services Verification - Australia" (support.google.com/adspolicy/answer/15332527), on a link area covering the sentence with the footnote marker. Why the Australia page is linked there is not explained, and it may be the footnote's destination;
  • "Financial Services Verification: Relevant Regulators and Enforcement Dates" (support.google.com/adspolicy/answer/12390454), on "42 countries";
  • Google's 2021 UK blog post on protecting people from financial fraud, and its post on EU financial advertiser verification, on the sentence about the UK and the European Union;
  • Google's 2025 Ads Safety Report, on "catch over 99% of policy-violating ads";
  • Google's post on the Global Signal Exchange.

No US or Canada-specific policy page is linked.

Five years from the UK to North America

Google describes itself as "the first major platform to require this type of verification, starting in the United Kingdom in 2021 and most recently expanding across the European Union."

The path between those two points has been gradual. Google launched financial services verification in the UK on September 6, 2021, then moved to Australia, Singapore and Taiwan in August 2022. Brazil, France, Germany, India, Indonesia, Portugal and Spain followed in January 2023, Italy and Türkiye in November 2023, and Ireland, New Zealand, South Korea and Thailand on November 7, 2024. Malaysia came in April 2026. On June 23, 2026, Google extended the program to 24 more EU and EEA countries, taking the total to 42, with most enforcement beginning July 23, 2026 and a 30-day window after which unverified advertisers had their financial services ads restricted. That June announcement was also signed by Sharma.

If both new markets go live, the program would cover 44 countries. That figure is PPC Land's arithmetic; Google did not state a new total.

The UK rules have also tightened since launch. From February 2024, FCA-registered firms had to add a Google Ads user whose email matched the FCA-registered address, instead of verifying with public email domains such as Gmail. Debt services, previously handled by a separate certification, were folded into the financial services verification program in six countries from June 2, 2025. And Google has made clear that lying in the process is treated harshly: in November 2025 it added an example to its Circumventing Systems policy stating that submitting false verification information leads to account suspension.

What makes the North American move different is the size of the two markets. Until now, US financial advertisers have been subject to identity verification and to category-specific rules, such as those for cryptocurrency or prediction markets limited to CFTC-regulated platforms, rather than a general licence check for financial services.

Why fake financial ads are the target

The scale of the problem in the US is documented by regulators. On October 19, 2026, the Federal Trade Commission told Congress that Americans aged 60 and over reported $1.059 billion in investment scam losses in 2025, with $148 million lost through online ads and pop-ups and losses for business impersonation scams highest when the scammers posed as banks. The FTC did not separate search ads from other online advertising.

Search ads themselves are a known route. Earlier this month, an analytics engineer described how a Google search ad for "cloud console" led him to a fake Google login page hosted on sites.google.com. That case involved technology credentials rather than banking, but the mechanics of phishing through paid placements are the same ones financial impersonators rely on.

Google's own post leans on its automated defenses as the other half of the system. "In 2025, Gemini helped our systems catch over 99% of policy-violating ads before they ever served, blocking bad ads in real time," according to the post. Google's 2025 Ads Safety Report said 8.3 billion ads were blocked or removed and 24.9 million advertiser accounts suspended, including 602 million ads removed for scam-related violations. The 99% figure describes the share of blocked ads stopped before serving, not the share of all scam ads that were caught; ads that slip past detection entirely are, by definition, not in that count.

The post also points to the Global Signal Exchange, "where we share information across tech, finance, and law enforcement to stop fraud." Google unveiled the exchange in October 2024 with the Global Anti-Scam Alliance and the DNS Research Federation.

Regulatory pressure elsewhere

Verification of financial advertisers is moving from voluntary platform policy towards formal requirement in some markets. In the UK, Ofcom's draft fraudulent advertising codes, opened for consultation on July 10, 2026, would require financial services advertisers to show they hold the appropriate legal permissions, with fines of up to £18 million or 10% of global revenue once in force. Meta has run its own checks in selected markets, including verification against India's securities regulator from June 2025.

No comparable US or Canadian rule is cited in Google's post. The program described is a Google policy, and the American Bankers Association and Canadian Bankers Association are industry groups, not regulators.

Why it matters for advertisers and agencies

For banks, card issuers and other financial brands running search and display campaigns in North America, the change adds a gate that has not existed before: proof of authorization, checked against a registry, before ads in the relevant categories can serve. For agencies managing many such accounts, earlier rollouts suggest each advertiser and each country requires its own submission. In the June 2026 EU expansion, verification in one country did not carry over to another, so a lender advertising in both the US and Canada may face two separate processes, although Google has not confirmed that for North America.

The bigger questions are about the edges. A chartered bank listed in a trade association's registry has an obvious path. Less clear is how Google will treat fintech apps that offer accounts through partner banks, credit unions regulated by separate bodies, state-licensed lenders, comparison sites and affiliates that advertise financial products they do not provide, and brokers. Those categories are where malvertising and impersonation often sit, and they are also where legitimate businesses could be caught by a check designed around banks.

Until Google publishes the country-specific pages it has promised, the only firm facts are the destination, the year, and the American Bankers Association's role. Everything else - the start date, the window, the penalty and the scope - remains to be set.

Timeline

Summary

Who: Google, through Keerat Sharma, vice president and general manager of Ads Privacy and Safety, working with the American Bankers Association in the US and engaging with the Canadian Bankers Association in Canada. Financial advertisers in both countries are affected.

What: Google will extend Financial Services Verification, a check that advertisers are authorized by regulators or recognized registries before running certain financial ads, to the US and Canada. US banks will be verified using the American Bankers Association's registry. Covered products, required documents, the verification window and penalties have not been published.

When: Announced on October 20, 2026. The rollout is planned for early 2027, with no exact start or enforcement date given.

Where: The United States and Canada, adding to the 42 countries where the program already runs, including the UK, the EU and EEA, Australia, India and others.

Why: Google says the aim is to prevent brand impersonation and stop scammers from reaching people through financial ads, adding a credentials check on top of identity verification, which already covers advertisers behind more than 97% of ads seen on Google in both countries.