Why Bing’s “payment code” autocomplete is flooded by black‑gray industry

Users notice suspicious autocomplete suggestions

Several netizens reported that when they type the Chinese term “收款码” (payment code) into Bing’s search box, the dropdown list is filled with dozens of nearly identical advertising phrases from a particular platform, leading some to suspect malware or a hijacked browser.

Tests confirm the issue originates from Bing, not the client

Security‑circle testing showed the phenomenon is not caused by the user’s computer or browser. The autocomplete list is being artificially inflated by black‑gray‑industry platforms that generate large volumes of fake queries. The same behaviour can be reproduced using Google Chrome to access Bing.

Examples of the spammed suggestions

Suggestion spamming is not new

During the Baidu era, spamming the search‑box dropdown keywords was already a chronic problem. Search‑engine companies typically deploy anti‑spam mechanisms, but the demand from advertisers—who are willing to pay for exposure—keeps the black‑gray market alive.

Why Bing became a target

In recent years, Windows 10/11 ships Microsoft Edge pre‑installed with Bing as the default search engine, dramatically increasing Bing’s user base in China. The larger audience makes Bing an attractive “new frontier” for black‑gray operators. The fact that even a high‑volume term like “收款码” can be cleanly spammed suggests Bing’s anti‑cheat capabilities still lag behind those of Baidu, leaving room for improvement.

Implications for users and providers

For ordinary users, encountering these abnormal suggestions does not indicate a compromised computer; it is simply a symptom of search‑engine spam. The incident also serves as a reminder to search‑engine vendors that security measures must evolve in step with growing user numbers.

Source: Security Circle