I had a thought when it first started happening that it was IP harvesting through a confirmation click on the users ( you ) part.
Also, my phone browser Puffin I use updated itself to have pesky doubleclick style ads at the bottom of every screen.
Btw, what's a good browser for the phone? (older samsung) Please don't suggest "Brave"