Real Google emails that are actually a scam
Scammers found a way to make Google's own system send real, signed emails, then wrote the scam into the subject line. It usually comes with a phone call from someone claiming to be Google support.
What is happening
A criminal feeds their own text into Google's automated no-reply and support systems, and Google sends it back to you as a real, signed email. It passes every spam and security check because it genuinely is from Google. The scam is in the subject line, which the scammer wrote. It is paired with a phone call so the email and the caller say the same thing, and that agreement is what makes it feel real. The goal is to get you to read out a verification code, use a "temporary password," or move money.
How the scam works
- Impersonating Google support
- Using Google's own email system to send real, signed messages
- Hiding the scam in the subject line
- A phone call and an email backing each other up
- Stealing a verification code
Red flags to watch for
- A "no-reply" email that somehow replied to you
- A caller and an email telling you the exact same thing
- A password shown in the subject line of an email
- Being asked to read a verification code out loud
- Pressure to act right now
What to do
Never share or read back a code that was sent to you. No real company will ever ask.A real company never emails you a working password in a subject line.Two channels agreeing (a call and an email) is not proof. It can be one scammer running both.Hang up and reach the company yourself, using the number on your card or their official app.
If this reached you
Related reading: Sentinel Vault Insights