Even search engines can get suckered by internet scams. With a little sleight of hand, con artists can dupe them into giving top billing to fraudulent websites that prey on consumers, making unwitting accomplices of companies such as Google, Yahoo and Microsoft.

Online charlatans typically try to lure people into giving away their personal or financial information by posing as legitimate companies in "phishing" emails or through messages in forums such as Twitter and Facebook.

But a new study by security researcher Jim Stickley shows how search engines also can turn into funnels for shady schemes. Stickley created a website purporting to belong to the Credit Union of Southern California, a real business that agreed to be part of the experiment.

He then used his knowledge of how search engines rank websites to achieve something that shocked him: His phony site got a No. 2 ranking on Yahoo's search engine and landed in the top slot on Microsoft's Bing, ahead of even the credit union's real site. Google, which handles two-thirds of US search requests, didn't fall into Stickley's trap. His fake site never got higher than Google's sixth page of results, too far back to be seen by most people.

The company also places a warning alongside sites that its system suspects might be malicious. But even Google acknowledges it isn't foolproof. Some recession-driven scams have been slipping into Google's search results, although that number is "very, very few," said Jason Morrison, a Google search quality engineer.

On one kind of fraudulent site, phony articles claim that participants can make thousands of dollars a month simply for posting links to certain websites. Often, the victims are asked to pay money for start-up materials that never arrive, or bank account information is requested for payment purposes.

"As soon as we notice anything like it, we'll adapt, but it's kind of like a game of Whac-A-Mole," he said. "We can't remove every single scam from the internet. It's just impossible." In fact, Google said that it is suing a company for promising "work at home" programs through websites that look legitimate and pretend to be affiliated with Google.

Stickley's site wasn't malicious, but easily could have been. In the year and a half it was up, the 10,568 visitors were automatically redirected to the real credit union, and likely never knew they had passed through a fraudulent site.