The bad actor serves a benign ad to the ad review system, and only serves the scam to real users. It's called "cloaking" - an interesting (but a bit depressing) topic to explore.
The fact the ad platforms are multi-billion dollar companies leans my opinion towards malicious intent.