Adsense Extortion Attempt

How do I work this out with Google

[Chrispcritters]

For the last several days I've been seeing 10x my normal revenue due to someone generating 1000's of clicks on ads on my search channel. I notified the AdSense team immediately through the contact us (a pain in itself). Today I received an extortion letter indicating they'd stop if I pay them half the money. Otherwise they'd continue and get my account banned. What is the suggested way to contact and work with Google on this so that I don't get my account banned?

[edited by: incrediBILL at 3:59 pm (utc) on Dec. 7, 2009]
[edit reason] fixed typo [/edit]

[Chrispcritters]

If someone does local changes to the DNS results they could direct traffic for my domain to any server. I don't see how Google could tell if it was really my server or not. I think the "Allowed Sites" only prevents a certain amount of attacks/fraud.

The first pass I did didn't show anything out of the ordinary in my logs or directory structure. I'll have to go back over it all with a fine tooth comb.

Santa, this year I'd like to have someone from Google respond to me concerning this extortion attempt. I've been real good. Pretty please?

[Leosghost]

read your sticky ..

[AdSenseAdvisor]

I've followed up with Chrispcritters separately, since I can't discuss account-specific information publicly.

ASA

[Chrispcritters]

Thanks Leosghost and ASA.

[Roseb44170]

Please let us know if things went well. I know you can't discuss specifics but just letting us know if you're able to keep your Adsense account. As a matter of fact this would be good to know in case if others are getting "blackmailed" too!

[Chrispcritters]

I want to take care not to go outside any T&C's. My account is still active and has been addressed in a manner that I believe is reasonable. Hopefully there will not be any future happenings - not an experience I want to go through again.

Thanks Santa.

[purplecape]

Any advice for how others could avoid this problem, or how best to address it if it occurs?

[Chrispcritters]

I want to do some testing on the "allowed sites" functionality first, but I would say for sure to use that. I'd also report unusual surges in clicks if you can't otherwise explain it. I'd also pass along any extortion letters you get ;)

[wyweb]

I've followed up with Chrispcritters separately...

You rock ASA.

[Chrispcritters]

The email provider was nice enough to shut down the email account based on my reports.

[HuskyPup]

Congrats...for the moment:-)

[IanCP]

The email provider was nice enough to shut down the email account based on my reports

If it came from a jurisdiction which has a "real" police force, then I'd also contact them.