Recently, a dangerous new scam has emerged targeting Gmail users, and it’s something we all need to watch out for. According to a report from PC Magazine, scammers are using sophisticated tactics, including AI-driven deepfakes, to impersonate Google support representatives and trick people into handing over sensitive account credentials.

 

The scam typically starts with a fake Gmail account recovery attempt, followed by a call from someone claiming to be Google support. The scammer may sound highly convincing, but remember: Google will never call you directly about account recovery or request account information over the phone. Instead, Google sends notifications of suspicious activity via email and leaves the next steps to the account owner.

 

So how can you protect yourself?:

1. Activate Two-Factor Authentication (2FA): Adding a second layer of security can go a long way. A hardware security key is the most secure form of 2FA, but using an app-based authentication method, like Google Authenticator, is also effective.

2. Verify Links and Email Sources: If you receive an email with suspicious links, don’t click them. Verify that any web address (URL) leads to a legitimate Google domain—like “google.com”—and look out for subtle misspellings or extra characters, which scammers often use to trick users.

3. Stay Alert to “Spear Phishing” Tactics: Unlike typical phishing, which casts a wide net, spear phishing is highly targeted. Scammers may send an email and follow up with a call that sounds professional. This two-pronged approach can make the scam seem more legitimate.

 

Lastly, remember that unsolicited calls from any company’s tech support team are often a red flag. To verify a communication, go to the company’s official website and call their customer support line directly instead of responding to unknown numbers or emails. Staying vigilant can help keep your Gmail account, and personal information, safe from these latest scams.