Dear AdWords Customer,Your ads have stopped running because we were unable to process your billing information.
To activate your account and start running your ads, enter your billing information.In order to activate your account and start running your ads, enter your billing information.
Pease sign into your account at [adwords.google.com...] and update your billing information.Once your account is reactivated and your billing information has been processed,
any your ads and campaigns can begin running immediately on Google.
NOTE: The anchor text appears legit, however the URL which you are fowarded to is actually [a dot.cn domain]
[edited by: buckworks at 11:13 pm (utc) on April 10, 2008]
[edit reason] removed specifics [/edit]
I guess the message from Google is essentially that even someone as large as they are is unable to get these sites taken down quickly.
Looking in the change history, they were doing weird stuff before whacking content bids up to $160 cpc in the last few days.
The ex client didn't spot it as they weren't looking at their account like we would have. It's one good way to get clients back though. Worked a treat.
Google spotted them as fraudulent (emailed us) and didn't charge the client in the end. Scary when you look at the figures and what they were doing there though.
It looks like an official email from Google, the return address / sender address appears official and the landing page is identical to the Google Adwords sign in page.
What's really interesting about this one is that its a HTML email that LOOKS like a plain text one - therefore its very easy to assume that the link is a plain text one, going to the address shown. Very sneaky.