Is the Google Security Alert Scam real or a scam?

This is a confirmed scam. Do not click any links, do not provide personal information, and do not send money. This is a phishing scam that impersonates Google.

What should I do if I received the Google Security Alert Scam?

Do not respond or click any links. Block the sender, report the message as spam, and delete it. If it came via text message, forward it to 7726 (SPAM).

What if I already fell for the Google Security Alert Scam?

Change your passwords immediately, contact your bank if you shared financial information, place a fraud alert on your credit, and file a report with the FTC at ReportFraud.ftc.gov.

How do I report the Google Security Alert Scam?

Report it to the FTC at ReportFraud.ftc.gov, the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, and your local law enforcement. If it impersonated a specific company, report it to that company as well.

Google Security Alert Scam: Is It a Scam?

Very High Prevalence Type: Phishing Impersonates: Google

Yes, this is a scam. Do not click any links or provide personal information.

Scammers send emails mimicking Google's security alert format, warning that someone has accessed your account from an unknown device. The fake alert directs you to a phishing page designed to capture your Google login credentials.

How This Scam Works

You receive an email that looks like a standard Google security notification, complete with Google branding and a map showing a login from a suspicious location. The email warns that someone signed into your account and urges you to 'Review Activity' immediately. Clicking the link takes you to a fake Google sign-in page. Once you enter your credentials, the scammers gain access to your Gmail, Google Drive, Google Photos, and any other connected Google services. They may also intercept two-factor authentication codes by prompting you to enter them on the fake site in real time.

Red Flags to Watch For

Sender address is not from google.com or accounts.google.com
The sign-in location and device details seem fabricated or overly alarming
Link URL does not point to accounts.google.com
Email asks you to enter your password through the link rather than directing you to your account settings
Subtle misspellings like 'Googel' or 'G00gle' in the email body

Example Scam Messages

Subject: Security alert: New sign-in on Windows Someone just signed in to your Google Account from a new Windows device. Device: Windows PC Location: Moscow, Russia Time: February 8, 2026, 3:42 AM If this wasn't you, your account may be compromised. Review your account activity immediately. [Review Activity Now] --- Subject: Critical security alert for your Google Account We detected a sign-in attempt from an unrecognized device. If this wasn't you, someone else may have your password. Secure your account now: google-security-check.com/verify

What to Do If You Received This

Do not click links in the email
Go to myaccount.google.com/security directly in your browser
Review recent security events under 'Recent security activity'
If a real alert, Google will also show it when you log in normally
Report the email as phishing in Gmail

What to Do If You Fell For It

Change your Google password immediately at myaccount.google.com
Enable or verify two-factor authentication
Review and remove unfamiliar devices at myaccount.google.com/security
Check for unauthorized email forwarding rules in Gmail settings
Review third-party app access and revoke suspicious apps
Check for changes to your recovery phone and email

How to Report This Scam

Report as phishing in Gmail using the three-dot menu
Report to the FTC at ReportFraud.ftc.gov
File a complaint with FBI IC3 at ic3.gov
Forward scam texts to 7726 (SPAM)

Last updated: February 10, 2026