Google Account Phishing
Fake Google security alerts and sign-in pages target Gmail and Google Workspace accounts. How to spot them, and how to check your account's real security status.
A Google account often holds email, photos, documents, passwords and phone backups. That makes it a prime target. Phishers send fake "critical security alert" emails and build pages that look exactly like Google's sign-in.
Common Google-themed lures
- "Critical security alert: someone has your password."
- "Your storage is full; your photos will be deleted."
- "[Name] shared a document with you." Sometimes hosted on real Google services. See cloud storage links.
- "Verify your account to avoid suspension."
- Fake Google Pay or Play Store receipts.
How to check
- Open your Google Account yourself at myaccount.google.com and check the Security section and recent activity.
- Genuine Google sign-in happens at accounts.google.com.
- In Gmail, check the sender address and use "Report phishing" for suspicious messages.
Google content can host phishing. A Google Docs or Forms page asking for your password or card details is a scam, even though the address is Google's.
Protect your Google account
- Turn on 2-Step Verification and add a passkey. See setting up passkeys.
- Keep recovery phone and email up to date. See recovery settings.
- Run Google's Security Checkup regularly.
Got a Google alert email? Paste it into CyberWatch AI Scan for a free check.
For more, see how to spot phishing in our complete guide.
Frequently asked questions
How do I check if a Google security alert is real?
Open your Google Account directly (myaccount.google.com) and look at the Security section and recent security activity. Real alerts will appear there.
What does the real Google sign-in page address look like?
It uses accounts.google.com. Any other domain asking for your Google password is fake.
Can a Google Docs or Forms link be phishing?
Yes. Legitimate Google services can host phishing content created by anyone. Judge what the page asks you to do.
Sources
- Avoid and report phishing emails, Gmail Help
- Turn on 2-Step Verification, Google Account Help
- Sign in with a passkey instead of a password, Google Account Help
