Unsuspecting cryptocurrency users have lost over $4 million to phishing websites promoted using Google Ads.