Didn't believe this was a thing until I actually saw it myself.

I bank at a small, local credit union. I recently cleared my autocomplete settings so plugged their name into #Google to get back to their homepage.

The Sponsored result IS NOT my bank's website. But is skinned the same. 100% a #phishing site served as a Google ad above the legitimate business website.

This is a major problem, my friends.