Gmail users have been hit with a fresh “red alert” warning over a sneaky new scam that’s out to steal personal data and even hack into accounts. The worrying con uses artificial intelligence (AI) to make the scam look scarily convincing, tricking people into handing over sensitive information.
With Gmail boasting a whopping 1.8 billion users worldwide, this scam is no small-scale operation – and, worryingly, everyone’s at risk. It all starts with a phone call, claiming your account has been compromised. Before you know it, a follow-up email arrives, looking every bit like an official message from Google.
Cybersecurity experts have explained how the fraudsters work. “The goal is to convince the target to provide the criminals with the user’s Gmail recovery code, claiming it’s needed to restore the account,” they warned. And once they get that code, they’ve basically got the keys to your inbox.
One of the latest targets was Microsoft solutions consultant Sam Mitrovic. He received a suspicious notification asking him to approve a Gmail account recovery attempt. Moments later, his phone rang – the caller sounded professional and claimed there had been suspicious activity on his account. But luckily, Sam wasn’t fooled.
“The scams are getting increasingly sophisticated, more convincing, and are deployed at an ever-larger scale,” he said. “People are busy, and this scam sounded and looked legitimate enough that I would give them an A for their effort.”
Unfortunately, not everyone will be as quick to spot the trick. With AI making scams even more convincing, experts are urging people to be extra cautious. FBI Special Agent in Charge Robert Tripp previously warned: “Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike.
“These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data.”
The takeaway? Stay alert. If you get an unexpected Gmail recovery request, don’t approve it. And if someone calls claiming to be from Google, be sceptical – because the tech giant won’t ask for your recovery codes over the phone.
