Force redirected ads hide code in the ad pixels itself, giving scammers access even if the user doesn’t click the ad.