Hackers are targeting Google users with phishing scams that send fake security email notifications, which are designed to look like alerts you would receive from Google to steal your credentials. With approximately 2.5 billion Gmail users, that is a useful scam. The best advice is to learn how to recognize and avoid these scams in order to protect yourself.
Scammers will often send an email that masquerades like a Google alert, notifying users that there is “suspicious activity” on their account. The emails look legitimate, but they aren’t. Clicking on the email links automatically goes to a fake Google website that looks legitimate before they steal your login credentials. Some fake websites will even infect your device with malware. Hackers will use panic and fear to discourage Google users from doing their homework. Hackers know that fear causes users to act quickly and mistakes are made quickly.
There are approximately 2.5 billion Gmail users. Only 36% of users will change their passwords regularly. Scammers know users do not practice password hygiene. Fake security alerts are old techniques used to phishing credentials from users. When users fall for scams, they are at risk of loosing devices. Running to act quickly without checking does no good to protect your accounts and devices.
Look at the email sender’s email address. A Google email always comes from an @google.com email domain. A scammer will usually have random letters or number in the email address, look to verify. Look for horrible grammar and perfect punctuation. The more urgent and fear based the messaging, there is a good chance it might be phishing a scam. Fake alerts may push you to act quickly, but always confirm before you click.
If you get an email notification don’t panic. First, open a new tab in your browser and manually go to www.google.com. Log into Google manually and check your account activity in the Security section. You should always have two-factor authentication (2FA) enabled.This increases the level of protection. Hackers have a harder time circumventing 2FA.
Don’t click on suspicious links. They will lead to fake login pages. Don’t brush off obvious warning signs. An odd address or a letter or two typo is a scam. Don’t share passwords if you’re not certain. Never enter your credentials unless you’re on Google’s webpage.
You should enable 2FA on your Google account. 2FA adds an additional factor (you must confirm a second time that it’s you accessing the account). It’s very easy to use; you use your either the phone number and/or an authentication app. Using two-factor authentication will prevent hackers from accessing your account even if they know your password. It’s a simple, easy protective mechanism.
You can manage your Google account security by going to myaccount.google.com directly. Check your recent logins in Security, and see if you see any odd devices or locations. Change your password as necessary. Make sure you choose a strong and unique password. Don’t reuse passwords from other sites so you don’t leave a door open.
Hover your mouse over links to see the URL they take you to. Confirm they actually lead to google.com. Change your password(s) every 6 months. Use a password manager to keep you safe. Report any suspect emails to Google. Stop sharing personal, non-authorized information on social media and on the web.
Scammers are coming up with new tricks every day. Many users fall to the fake Google alerts. If you’re diligent and keep your data secure, you’re ‘golden.’ Set it and forget it only applies to the safe/protected accounts. There is nothing safer than checking in and keeping your account safe and secure. (You can stop hackers before they start!)
Fake Google security alert emails have been on the rise. Check the addresses of senders and avoid any suspicious links.
Also Read: FASTag Fraud Alert: How To Protect Your Account From Online Scams