A sophisticated new scam is making waves among Gmail users, employing clever tactics to steal personal information through fake account recovery requests. IT consultant and tech blogger Sam Mitrovic recently shared his unsettling experience with this deception, shedding light on how easily unsuspecting users can become victims.
How the Scam Unfolds
The scheme begins innocently enough with an unexpected notification on your phone or email, prompting you to approve a Gmail account recovery request that you never initiated. In Mitrovic’s case, the request appeared to originate from a different country—specifically, the United States. If you decline the request, as Mitrovic did, the scammers escalate their tactics by placing a phone call from what looks like an official Google number about 40 minutes later.
During the call, the scammer adopts a professional, American-sounding voice, claiming to alert you to suspicious activity on your Gmail account. They may ask if you’ve logged in from a foreign location, which heightens your concern and makes it more likely that you’ll trust them. The caller ID can even display a number resembling that of a Google office, lending an air of authenticity to the interaction.
Once they have your attention, the scammer claims that someone has accessed your account and downloaded sensitive information. To reinforce their deceit, they follow up with an email that seems to come from Google but is actually a spoofed message designed to look credible. Their ultimate goal is to convince you to approve the account recovery request, granting them full access to your Gmail account.
How to Safeguard Your Gmail Account
Mitrovic emphasizes the importance of vigilance in navigating this scam. Here are some crucial steps Gmail users can take to protect themselves:
- Ignore Unsolicited Recovery Requests: If you receive a recovery notification out of the blue, do not approve it. This is a key indicator that your account may be targeted.
- Verify Suspicious Phone Calls: Google seldom contacts users directly unless you’re engaged with their Business services. If you receive a dubious call, hang up and verify the number independently.
- Examine Email Addresses Carefully: Spoofed emails can appear authentic, but small discrepancies in the “To” field or domain name can expose them as fakes.
- Review Security Activity Regularly: Check your Gmail account’s security settings and recent activity for any unfamiliar logins. You can do this by navigating to the “Security” tab in your account settings.
- Inspect Email Headers: For tech-savvy users, examining the original email headers can help determine whether an email was genuinely sent from a Google server.
By following these precautionary measures and remaining vigilant, Gmail users can guard against this emerging AI-driven scam. The main takeaway is clear: always exercise caution and double-check any unusual activity on your account.
ALSO READ: Xiaomi Set To Launch Generative AI Features On Smartphones In India: What To Expect?
