That Phone Call From Google Is Probably a Scam

Wait 5 sec.

You probably know by now not to pick up or respond to the barrage of communication from numbers you don't recognize—this gets easier as smartphones roll out more robust scam detection and spam prevention features. But you are less likely to be suspicious of a call from a contact you recognize, whether that's a friend, family member, or organization you do business with. Scammers know this, and they're capitalizing on your trust with a trick known as caller ID or phone number spoofing, an attempt to convince you to hand over personal information—like bank account numbers and login credentials—or send them money, or both. Scammers can pretend to call you from a number you trustCaller ID spoofing involves manipulating the contact information that appears on your phone when you receive a call, so the number or name matches that of someone you know. The mechanics of phone spoofing vary, but at its most basic level, the method simply requires scammers to know the caller's number, the recipient's number, and the relationship between the two as well as access to an app that can trick caller ID. In one of the latest examples, users on Reddit report receiving calls that, according to both the name and number that show up on caller ID, are from Google. The person on the other end calmly alerts the recipient to suspicious activity, such as unauthorized login attempts, on their account and requests that they engage with a push notification to verify their information. Another version of the ruse is that someone is trying to fraudulently add your email as a recovery address on their Gmail account. In either case, hackers are attempting to collect your login credentials and hijack your account. There are plenty of even more alarming iterations of phone spoofing, from callers impersonating family members begging for money in an emergency to those pretending to represent government agencies demanding payment for services. Money transfer scams may also involve caller ID spoofing so you think you're talking to either your bank or federal officials (both are scary and neither are real). How to fight caller ID spoofingYou probably won't be able to prevent caller ID spoofing entirely—at least for now. But you can identify these scams as they roll in and practice good digital hygiene to minimize the risk that your information will be compromised. Avoid giving out your phone number where possible, and minimize the personal data you share online. As with any scam, eliciting strong emotions and giving a sense of urgency are red flags. Attackers may threaten you or pose as a friend or family member in danger to induce fear and pressure you to act quickly. They may also say something that sounds too good to be true. Or they'll alert you to some type of security issue that needs to be resolved ASAP. You should always be wary of any request for payment or personal information. It's safe to assume that trusted organizations, including the IRS, the FTC, and Google, will not call you out of the blue to demand money or login credentials. Even if the company name or associated number appears on your caller ID, you shouldn't engage in the conversation, press any buttons, or provide any data. Hang up right away and call the person back directly using contact information you trust, such as a phone number you've found on an official website.