New AI Scam Targets Gmail Users

Aakhir Tak – In Shorts

A new AI scam is targeting Gmail users, tricking them into approving fake account recovery requests to steal personal data. This scam uses deceptive tactics to manipulate users. IT consultant Sam Mitrovic shares his encounter and insights on this fraudulent scheme.

Aakhir Tak – In Depth

A sophisticated scam has emerged targeting Gmail users, aiming to steal personal data by tricking individuals into approving fake account recovery requests. IT consultant and tech blogger Sam Mitrovic recently detailed his experience with this scam, highlighting its clever tactics that easily deceive users.

The scam begins with an unexpected notification on your phone or email, prompting you to approve a Gmail account recovery request you did not initiate. The recovery request often originates from a different country, in Mitrovic’s case, the United States. If you decline the request, as Mitrovic did, the scammers make a second move—about 40 minutes later, you receive a phone call from what appears to be an official Google number.

The call is extremely convincing. The caller uses a professional, polite, American-sounding voice to inform the target about suspicious activity on their Gmail account. They may ask if you have logged in from a foreign country, raising alarm and making the user more likely to believe them. The caller ID might even display a number appearing to be from a Google office, enhancing the scam’s legitimacy.

Once the scammer has the user’s attention, they claim someone has accessed the account and downloaded sensitive information. They often follow up with an email that appears to be from Google but is actually spoofed. The goal is to convince the victim to approve the account recovery request, giving the scammers full access to their Gmail account.

Mitrovic emphasizes the importance of vigilance in protecting against this scam. Here are steps Gmail users can take to stay safe:

• Do not approve recovery requests: If you receive a recovery notification unexpectedly, do not approve it. This could be the first sign that your account is targeted.
• Verify phone calls claiming to be from Google: Google rarely calls users directly unless you are involved with Google Business services. If you receive a suspicious call, hang up and verify the phone number.
• Check email addresses carefully: Spoofed emails may look like they are from Google, but small details can indicate they are fake.
• Review recent security activity: Regularly check your Gmail account’s security settings and review recent activity for any unfamiliar logins.
• Inspect email headers: For tech-savvy users, checking the original email headers can reveal whether an email was sent from a legitimate Google server.

By following these steps and remaining alert, Gmail users can protect themselves from this growing AI-based scam. The key takeaway is to be cautious and double-check any unusual activity on your account.

Aakhir Tak Editor-in-Chief

See Full Bio