Skip to main content
    Back to GCR Scam Guard

    Google Account Scams: Phishing and Account Takeover

    Last updated: March 2026

    google scam
    gmail phishing
    google account hack
    google voice scam

    Overview

    Google account scams target the billions of people who use Gmail, Google Drive, YouTube, and other Google services. Because a Google account often serves as the central hub for email, cloud storage, photos, and account recovery for other services, compromising it gives criminals access to a victim's entire digital life. Scammers use sophisticated phishing, fake security alerts, and Google Voice verification scams.

    How This Scam Works

    1

    Phishing emails mimic Google security alerts about unauthorized sign-ins or suspicious activity, directing victims to fake Google login pages.

    2

    Google Voice scams trick victims into sharing a Google Voice verification code, which the scammer uses to set up a Google Voice number linked to the victim's phone.

    3

    Fake Google Drive sharing notifications lead to phishing pages when clicked.

    4

    Calendar spam adds events to your Google Calendar with phishing links, exploiting the automatic event acceptance feature.

    Warning Signs

    ⚠Security alert emails with links that do not go to accounts.google.com
    ⚠Requests to share Google verification codes with strangers
    ⚠Unexpected Google Drive sharing notifications from unknown people
    ⚠Calendar events you did not create with suspicious links
    ⚠Emails about Google accounts or services you do not use

    Real Scam Examples

    These are examples of messages used in this type of scam.

    Fake Security Alert

    Someone just signed in to your Google Account from a new Windows device. If this was not you, someone else has access to your account. Review your account now: [Sign In to Review Activity]

    Google Voice Scam

    Hi! I am responding to your listing on Craigslist. Before we meet, I just want to make sure you are a real person. I sent a Google verification code to your phone. Can you just read me that code so I know you are not a bot?

    How to Protect Yourself

    1Use Google's Security Checkup

    Visit myaccount.google.com/security-checkup regularly to review your account security, connected devices, and third-party access.

    2Enable Advanced Protection

    Google's Advanced Protection Program provides the strongest defense against phishing and account takeover. It requires a physical security key for sign-in.

    3Never share verification codes

    Google verification codes are for your use only. No legitimate person or service will ask you to share a code sent to your phone.

    4Check email sender addresses carefully

    Google security emails come from specific addresses like [email protected]. Hover over links to verify they go to google.com before clicking.

    Frequently Asked Questions

    Think you have received a scam like this?

    Paste the suspicious message into our free AI-powered scam analyzer.

    Check a Suspicious MessageI Have Been Scammed

    Related Resources

    Phishing Attacks: The Complete Protection Guide

    Phishing is the most common type of cyberattack, responsible for over 90% of data breaches. These attacks use deceptive ...

    Smishing: How SMS Phishing Attacks Steal Your Data

    Smishing (SMS phishing) uses text messages to trick recipients into clicking malicious links, sharing personal informati...

    Identity Theft: Prevention, Detection, and Recovery

    Identity theft occurs when someone uses your personal information without permission to commit fraud or other crimes. It...

    GCR Scam Guard

    Related Online Scams resource

    PayPal Scam Guide

    Related Online Scams resource

    Amazon Scam Guide

    Related Online Scams resource