📧 Google & Email Scams: How to Recognize, Avoid, and Report Them
Your email account is one of the most valuable targets for scammers because it can provide access to banking, social media, cloud storage, shopping accounts, and other services.
Scammers may impersonate Google, banks, government agencies, employers, delivery companies, or people you know to steal passwords, verification codes, money, or personal information.
🚨 Common Google & Email Scams
1. Fake Google Account Security Alert
How it works
You receive an email claiming:
“Suspicious activity detected on your Google Account.”
The email asks you to click a link and “secure” your account.
The link leads to a fake Google login page designed to steal your password.
🚩 Warning Signs
- Urgent security warnings.
- Threats that your account will be deleted.
- Suspicious sender addresses.
- Links that don’t lead to Google’s genuine domain.
🛡️ Protect Yourself
✅ Don’t click the email link.
✅ Open your browser and access your Google Account directly.
✅ Review your security activity from your account settings.
🔑 2. Password Reset Scam
How it works
You receive a message claiming that someone requested a password reset.
The scammer then contacts you pretending to be Google support and asks you to provide the verification code.
Never Share:
❌ Passwords
❌ OTPs
❌ Verification codes
❌ Backup codes
🎣 3. Phishing Email
Phishing emails are designed to look like legitimate communications from trusted organizations.
They may claim:
- Your bank account is blocked.
- Your parcel cannot be delivered.
- Your tax refund is waiting.
- Your subscription is expiring.
- Your account requires verification.
The goal is usually to make you click a malicious link or disclose information.
🚩 Red Flags
- Unexpected emails.
- Urgent demands.
- Suspicious links.
- Requests for confidential information.
- Spelling or formatting inconsistencies.
💰 4. Fake Refund or Payment Scam
You receive an email claiming you’re eligible for a refund or payment.
The scammer asks you to provide:
- Bank details.
- Card information.
- OTP.
- UPI details.
Protect Yourself
Never provide banking credentials through an unsolicited email.
Verify the refund directly through the organization’s official website or app.
💼 5. Fake Job Offer Email
Scammers impersonate recruiters or companies and offer attractive jobs.
They may ask for:
- Registration fees.
- Background verification fees.
- Training payments.
- Personal documents.
- Bank details.
🚩 Red Flags
- Job offered without an interview.
- Guaranteed salary.
- Requests for payment.
- Email sent from a suspicious domain.
Remember
A legitimate employer should not require you to pay money simply to obtain a job.
📦 6. Fake Delivery/Parcel Scam
You receive an email claiming your parcel has been:
- Held by customs.
- Returned.
- Delayed.
- Seized.
- Awaiting payment.
A link is provided to “resolve the issue.”
The link may steal your card information or install malware.
Protect Yourself
Verify the shipment directly through the courier’s official website using the tracking number.
🏦 7. Fake Bank Email
Scammers impersonate banks and claim:
“Your account will be suspended unless you complete KYC.”
They direct you to a fake banking website.
Never provide through an unsolicited email:
❌ Internet banking password
❌ ATM PIN
❌ UPI PIN
❌ OTP
❌ Card CVV
🧾 8. Fake Government / Tax Email
Scammers may impersonate government departments and claim:
- Tax refund available.
- PAN needs verification.
- Account will be blocked.
- Legal action is pending.
- A fine must be paid immediately.
Protect Yourself
Do not click the provided link. Visit the relevant government department’s official website independently.
👨💼 9. Business Email Compromise (BEC)
This scam particularly targets businesses and professionals.
The scammer compromises or impersonates an executive, client, supplier, or lawyer and requests an urgent payment.
For example:
“I’m in a meeting. Please transfer ₹5 lakh to this new account immediately.”
Protect Yourself
⚠️ Never rely solely on email for high-value payment instructions.
Verify the request through a known phone number or another trusted communication channel.
📎 10. Malicious Attachment Scam
An email may contain an attachment disguised as:
- Invoice
- Resume
- Court notice
- Delivery receipt
- Tax document
- Job offer
Opening the attachment may expose your device to malware.
Protect Yourself
Don’t open unexpected attachments, especially from unknown senders.
🎁 11. Fake Prize or Lottery Email
The email claims you’ve won:
- A lottery.
- A car.
- A smartphone.
- A cash prize.
You are then asked to pay taxes, processing fees, or shipping charges.
🚩 Remember
If you never entered a competition, you cannot reasonably have won it.
💳 12. Cryptocurrency & Investment Email Scam
Scammers may send emails promoting:
- Cryptocurrency investments.
- Trading platforms.
- Mining schemes.
- AI trading bots.
- Fake investment opportunities.
They may show fabricated profits and encourage you to deposit more money.
🚩 Warning Signs
- Guaranteed returns.
- “Risk-free” investment.
- Pressure to invest immediately.
- Requests to transfer cryptocurrency to an unknown wallet.
🧑💻 13. Fake Google Support Scam
Scammers may claim to be Google employees or security specialists.
They may tell you:
“Your account has been compromised. Give me your verification code so I can secure it.”
🚨 STOP
Never give your verification code to someone who contacts you unexpectedly.
If you believe your account is compromised, access your Google Account directly and review its security settings.
🔗 How to Check a Suspicious Email
Before clicking anything:
1. Check the sender
Look carefully at the complete email address—not just the display name.
2. Check the link
Hover over the link without clicking it.
Look at the actual destination.
3. Ask yourself:
Was I expecting this email?
If not, be cautious.
4. Don’t let urgency control you
Scammers frequently use:
🚨 “FINAL WARNING”
⚠️ “ACCOUNT WILL BE DELETED”
⏰ “ACT WITHIN 30 MINUTES”
to make you act without thinking.
🔐 Secure Your Google Account
Enable 2-Step Verification
This provides an additional layer of protection if your password is stolen.
Review:
- Recent security activity
- Devices
- Recovery phone number
- Recovery email
- Third-party applications
- Account access permissions
Remove anything you don’t recognize.
🚨 If Your Email Account Has Been Hacked
Immediately:
1. Change your password
Use a strong and unique password.
2. Sign out of unfamiliar devices
Terminate unknown sessions.
3. Secure your recovery information
Check that your recovery email and phone number have not been changed.
4. Enable 2FA
Use an authenticator app or another strong second factor where available.
5. Check email forwarding
Scammers may create forwarding rules that secretly send copies of your emails to them.
6. Secure other accounts
If your email was used to recover other accounts, change those passwords too.
📂 Preserve Evidence
If you have been targeted, save:
📧 Original email
📸 Screenshots
🔗 Suspicious URLs
📎 Attachments
📞 Phone numbers
💬 Related messages
💳 Transaction details
Do not delete evidence before preserving it.
🚨 If You Lost Money
If the scam resulted in financial loss in India:
📞 Call 1930 immediately
Also report the incident through the official:
National Cyber Crime Reporting Portal
Contact your bank or payment provider immediately if a fraudulent transaction has occurred.
🛡️ Quick Email Safety Checklist
Before responding to an unexpected email:
STOP → CHECK → VERIFY → ACT
🛑 STOP — Don’t click immediately.
🔍 CHECK — Examine the sender and link.
📞 VERIFY — Contact the organization independently.
✅ ACT — Only provide information when you’re confident the request is genuine.
🚨 Remember
Google, banks, employers, and legitimate organizations should not need your password, OTP, UPI PIN, or verification code through an unsolicited email.
When an email creates fear, urgency, or excitement, take a moment to verify it independently before taking any action.