I think a better parallel would be "your bank's website has advertisements and one of them says 'click here to pay off your credit cards' but it's actually just

I think a better parallel would be "your bank's website has advertisements and one of them says 'click here to pay off your credit cards' but it's actually just a phishing attempt" That said, I wouldn't call such a scenario a hack.