Didn't believe this was a thing until I actually saw it myself.
I bank at a small, local credit union. I recently cleared my autocomplete settings so plugged their name into #Google to get back to their homepage.
The Sponsored result IS NOT my bank's website. But is skinned the same. 100% a #phishing site served as a Google ad above the legitimate business website.
