GOLDEN RULES:
- Slow it down - Scams are often designed to create a sense of urgency. Take time to ask questions and think it through.
- Spot check - Do your research to double check the details you are getting. Does what they’re telling you make sense?
- Stop! Don’t send - No reputable person or agency will ever demand payment or your personal information on the spot.
Google will never call you about your account security. Any unsolicited phone call, text, or email claiming to be from Google Security stating that your account has been compromised or hacked is always a scam. Google also never sends emails to verify callers. Any messages, even if sent from legitimate Google domains, that claim to validate a caller's identity are fraudulent.
Scammers frequently spoof calls, posing as Google Account Security or Support to steal passwords, bypass two-factor authentication, or trick you into approving fraudulent logins. To seem legitimate, they may impersonate actual employees using publicly available information, or even open real Google support cases linked to your account to back up their fabricated claims.
Follow these steps to ensure your account remains safe:
- Never share codes or passwords: Google will never call you to discuss your account security, ask for passwords, or ask you to read a verification code or approve a device prompt over the phone.
- Verify yourself: If you receive a suspicious alert, do not interact with the caller. Instead, check your Google Security Checkup manually.
- Review activity: Check your Google Account security settings to review recent activity in your account, and make sure no unauthorized person has accessed your account.