Fake “Google Security” emails trick users into clicking malicious links.
Experts warn billions of Gmail users are at risk due to weak password habits.
To stay safe, verify alerts via Google directly, check sender ID, and use 2FA.
gmail-account
Online scams are on the rise, and cybercriminals are devising new methods to defraud people. Recently, a new cybercrime has gained a lot of attention, in which scammers discovered a new phishing campaign disguised as official Google security warnings. The fake emails, identified in a recent PTI report, are intended to steal account credentials by exploiting user anxiety via urgent notifications.
The messages, which are often labelled Urgent Security Alert, claim that suspicious activity has been detected on a user’s account and instruct them to click a link to secure it. Instead of leading to Google, the link takes users to malicious websites where attackers try to steal login information and install malware.
With over 2.5 billion Gmail accounts worldwide, experts warn that the scope of potential exposure is enormous. Google previously reported that only about 36% of users regularly update their passwords, a vulnerability that hackers continue to exploit.
How to stay safe
Verify directly with Google: If you receive a suspicious alert, avoid clicking any links in the email. Instead, open a new tab, log in to your Google account, and review the security section.
Check the sender’s address. Phishing emails frequently use fake sender IDs that resemble “Google Security” but are actually jumbled addresses.
Users can report suspicious emails using Google’s phishing reporting tool.
Enable two-factor authentication (2FA): Adding an extra layer of security makes it more difficult for hackers to access your account.
The security experts have urged that you should not click on any suspicious links or enter passwords on unknown websites. If done, it can lead to stolen IDs and compromised personal data. The users are advised to never enter sensitive information unless they find a credible Google domain.
Ashish Singh is the Chief Copy Editor at Digit. He's been wrangling tech jargon since 2020 (Times Internet, Jagran English '22). When not policing commas, he's likely fueling his gadget habit with coffee, strategising his next virtual race, or plotting a road trip to test the latest in-car tech. He speaks fluent Geek.