Google Docs Phishing Email Scam

Date: April 25, 2013 2:09 PM - Views: 153,633 - Comments: 136
Google Docs Phishing Email Scam

Google account users, beware of the phishing email messages below that were designed to steal your Google user name, password or infect your computer with a virus or other malicious computer programs. If you receive any email message appearing as if it came from a friend or family member, asking you to view a document that was uploaded to Google Docs or Google Drive, please delete this message.

This is another malicious attempt by hackers and scammers to steal your Google account information so that they can rob you or sell your information to other scammers.

Here are copies of the "Google Docs or Google Drive Phishing Email" scams



I uploaded this vital newsletter using my google doc. For immediate access CLICK HERE

Sign in with your email.

Please view the document i uploaded for you using Google docs, CLICK HERE and just sign in with your email to view the document its very important

Subject: RE Important Document
Here is the document i told you about,i sent it in a more secured way, CLICK HERE. and log in with your email for immediate access and more information.

Hello, Kindly click the link to view the document I uploaded for you using Google cloud drive. Just Sign in with your email to view the document, it is very important. Thank you, -- Rev. Dr. Karen Serving Humanity Spiritually

Subject: Document
Incoming Google drive document awaiting you

If you click on the link in the email message, you will be taken to the following malicious web pages:

  • http://greensolutionsgp .com/google/google /index.php.htm
  • http://primakoncepts .com/docc/googledrive/contactform.php

Note: cyber-criminals will use other website names, so look out for this same scam on other websites.

This is how the phishing Google Docs page looks

Google Docs Phishing Email

Google Docs Phishing Email

It appears that the website greensolutionsgp .com was hacked and the malicious page "google/google/index.php.htm" was put there by the hackers.

You will be asked to sign in with your Google email address and password. If you enter your Google credentials on this page, it will be stolen by the hackers who have set this page up.

If you have already entered your Google user name and password on this bogus web page or others, please change your Google password right now!!!

There are different versions of this Google phishing scam, so please be on the look out for e-mail messages asking you to view documents in Google Docs or Google Drive.

Remember to leave your comment and read the ones made by others below.

Alert others by sharing this article with them:
Click the following thumb up or down, if you like or dislike this alert:
Rating: Thumb up 1 likes Rating: Thumb down 0 dislikes   

Your feedback is important to us! We invite you to share any information that you have on this article by telling us what you know or ask a question regarding this article, by leaving a comment in the box below.
We will not send a response to your email address, so do not post your email address in your comment. All response will be posted in the comment section below, to be shared with everyone.

Please read the comments made below (if there are any) before posting yours. Someone may have already posted the same comment or question. Duplicate comment or question will be removed.

Enter your comment or question in the box below and click the "Submit Your Comment or Question" button.

You are currently not signed in, but you may still submit your comment or question. But in order to receive comment and other important notifications and alerts, please click here to sign in, or click here to sign up if you have not yet registered.

CommentComments or Questions (136)

The comments on this page do not necessarily reflect the views of Online Threat Alerts. Online Threat Alerts reserves the right not to publish comments that may be deemed libelous, derogatory or indecent.

  • Anonymous: 2 days, 22 hours ago from: Bridgewater, New Jersey, United States

    Google hacking:

    http://podcast /docss/contactform.php


  • Anonymous: 3 days, 5 hours ago from: Boutte, Louisiana, United States

    I opened one of these stupid attachments but didn't log in. Am I still infected? ~

    • info: 3 days, 5 hours ago

      This scam (phishing), steals your information; it doesn't infect your computer with a virus. ~

      • Anonymous: 3 days, 5 hours ago from: Boutte, Louisiana, United States

        Ok thank you, but if I didn't log in is my information still compromised? ~

        • info: 3 days, 5 hours ago

          No, because they need your username and password in order to get into your account. ~

          • Anonymous: 3 days, 5 hours ago from: Boutte, Louisiana, United States

            Thank you so much. This site was a God send. ~

  • Anonymous: 3 days, 22 hours ago from: Islamabad, Islamabad, Pakistan

    I had receive an email from rama krishna

    The email body is:

    "(Good Day!

    I would like to purchase a large quantity of goods with good quality from your company. Please I have attached to this email our company order of your products which we are interested in.

    We would like you to review our order and send us a quotation based on the attached order. Please endeavor to give us your best prices and your mode of payment.

    I wait for your swift response soonest.

    Thanks and Regards",

    and the sender attached the file named "T17list.doc.htm"
    when I open this file a window appears like google login page and asking for google password again.

    I want to know that what is this, is it hacking? phishing? ~

    • info: 3 days, 19 hours ago

      The email is phishing scam attempting to steal your Google account username and password, so that the cyber-criminals behind it can hijack your account.

      If you have attempted to login at the fake Google page, please change your password immediately. ~

  • Anonymous: 4 days, 5 hours ago from: Portsmouth, Portsmouth, United Kingdom

    Got this today.
    Thought I'd share it here before deleting so a search of the text will bring up this site:

    "I tried to contact you yesterday but didn't get a reply. You need to see this report, I uploaded it using google drive because I'm having problems with attachments.

    Please check and get back to me this is very important" ~

  • Anonymous: 1 week, 1 day ago from: Saint Paul, Minnesota, United States

    I received the following and believe it is a scam. The text was attached to an email with no subject:

    -- -- --

    "Dear Winner.
    This Email is to inform you that your email account has just won you ($750, 000.00
    USD) from the Google Gmail Promotion. Online email lottery Power by Google
    A random email balloting of 80 million addresses of the people that are active online,
    among the people that subscribed to GOOGLE MAIL worldwide.

    We have selected 7 winners from 80 million emails, without the winner applying. We
    are congratulating you for being one of the lucky beneficiaries of this annual promotion.

    However you will have to fill and Email the Below Details To: gogm@qq .com
    Full name
    Contact Address
    Telephone Number
    Contact Lottery Events manager
    Submit your information to the Events Manager’s email stated below
    Marta Francisco
    Email Address: gogm@qq .com
    (Events Manager)" ~

    • info: 1 week, 1 day ago

      It is a scam. There is no Gmail lottery, promotion or sweepstakes. ~

  • Anonymous: 3 weeks, 2 days ago from: Stockton, California, United States

    Omg this is what was done to me! I had all these things happen and had at least 6000 stolen. They attacked every means possible an locked me out of all account for a year with no notification.

    They made me prove from 20 different merchants I didnt. Now cant give a accurate account or refund correct amount.

    This is the first I saw of this I downloaded nothing! If anyone else had it happen please reply. Google is aware an wont admit it! Please contact me. ~

  • Anonymous: 3 weeks, 2 days ago from: Mount Juliet, Tennessee, United States

    I received a Google e-mail, stating that I was one of eight Google Promotion winners, who had been randomly chosen and I won $750,000.00. They requested info, such as my name, age, address and country. I did not respond, thinking it is a scam.

    Beware of these types of Phishing scams. ~

    • info: 3 weeks, 2 days ago

      It is a scam. ~

  • Anonymous: 3 weeks, 5 days ago from: United States

    Thank you as I got a phishing Google Docs page and thought it was from my parent company and clicked on the link that took me to sign in my email and password. I did not notice it said greensolutions at the top as shown above, but when I did sign in it took me to my personal settings and the page that lists my phone number and alternate email address and my security question. I closed it out and immediately changed my password 3 times and then changed my security question. Does this phishing now have all my info and now that I changed my password can they still get into my gmail and google accounts? ~

    • info: 3 weeks, 5 days ago

      Changing your password and security questions will prevent them from accessing your account. Since you realized that it was a scam so quickly, I doubt they logged into your account and gather all or most of your information. ~

  • Anonymous: 1 month, 0 week ago from: Ottawa, Ontario, Canada

    I have deleted the app Google Drive, does that get rid of the phishing scam ~

    • info: 1 month, 0 week ago

      Google Drive app doesn't cause phishing scam. ~

  • Anonymous: 1 month, 1 week ago from: United States

    Our users were warned that our Google doc had a virus. No one else has reported this issue but wonder how to check for a virus on a shared Google doc. In this case it is a spread sheet ~

    • info: 1 month, 1 week ago

      You are not able to get a virus from a Google Doc Spreadsheet. ~

  • Anonymous: 1 month, 1 week ago from: Dallas, Texas, United States

    I got the phishing email below. That email address is not mine for Google, but the first part is correct for a vacation site I frequent.

    "Hi xxxxxx,

    Someone recently used your password to try to sign in to your Google Account -
    We prevented the sign-in attempt in case this was a hijacker trying to access your account. Please review the details of the sign-in attempt:

    Monday, February 23, 6:26 PM CST
    IP Address: (107-139-115-36.lightspeed
    Location: xxxxxxx, TX, USA

    If you do not recognize this sign-in attempt, someone else might be trying to access your account. You should sign in to your account and reset your password immediately.

    Reset password

    The Google Accounts team" ~

  • Anonymous: 1 month, 1 week ago from: Cyprus

    I had this email a week or so ago. I clicked on the link to look at the site it directed me to, but didn't fill in any information and just closed the site.

    I thought that would be okay but ever since then I have been getting low memory messages that I have never had before and the computer is running really slowly.

    Just went to use system restore to try and clear it and, surprise, all my restore points are gone.

    Could it be connected to just clicking the link on the email? ~

    • info: 1 month, 1 week ago

      Your computer could have gotten infected by a drive-by-infection or drive-by-download.

      This technique is used by cyber-criminals to infect their victims' computers by asking them (victims) to visit a malicious website.

      The victims do not have to download anything from the malicious website. The website will check the victims' computers and take advantage of any vulnerability it finds.

      So, make sure your computer's operating system and other programs on it are updated.

      Then do a full scan of your computer with the antivirus installed on it. ~

      • Anonymous: 1 month, 1 week ago from: Cyprus

        Thanks for that. I have run scans with both Norton and AVG and deleted everything that they picked up and also ran Malwarebytes and got rid of some more.

        Low memory messages have now gone and everything is running smoothly again, so fingers crossed I got it. ~

  • Anonymous: 1 month, 2 weeks ago from: Santa Monica, California, United States

    I went ahead and filled out the 2nd form that asks for your password, but gave them a phony gibberish password.

    The phony password "worked" and then linked me to a 313 page PDF about business economics.

    I guess the idea is that by actually sending you a generic document you might never know you'd been scammed.

    I hope they choke on my phony password! ~

  • Anonymous: 1 month, 2 weeks ago from: Santa Monica, California, United States

    I fell for the first step where they ask for your gmail address and phone number. But that took me to a second step where they asked for my password. I didn't fall for that one. Do you think I'm ok, or is there some nefarious use they can make from my gmail address and mobile phone number? ~

    • info: 1 month, 2 weeks ago

      You are ok if you did not give them your password. We recommend that you use Google "2-Step Verification" process to protect your account.
      Click here for information. ~

  • Anonymous: 2 months, 2 weeks ago from: Kuwait

    I got this message:


    Check out vital attached documents that I sent to you via Google Docs. To access the documents CLICK HERE to register with your email address and password.

    Regards," ~

  • Anonymous: 2 months, 3 weeks ago from: Anaheim, California, United States

    I believe I was just a victim of this e-mail? Is this real?? Help!!

    "Hello Customer,

    Considering the highly improved database. Many of your messages are placed on pending until you restore update. Thanks for the understanding.

    Gmail Care Center" ~

    • info: 2 months, 3 weeks ago

      It is a scam. Do not follow the instructions in the email. ~

  • Anonymous: 2 months, 3 weeks ago from: United Kingdom

    Here is another loan scam:

    "End your financial worries today:

    I can smile with this God Fearing man I received a loan of $55,000.USD and two of my colleagues have also received loans from this man without any difficulty. I advise you not to choose the wrong person if you actually apply for a cash loan for your project and any other. I publish this message because Andres Williams made me feel blessed with his loan.

    It is through a friend I met this honest and generous God fearing man who helped me get this loan fund to regulate your life, You needed financial help, You are stuck, No access to bank credit, or do not have the benefit of a bank, you need to finance your construction, real estate development, creating your own business up your personal business, you have seen and need to make money, a bad credit or need money to pay bills or debts. So I advise you out there to kindly contact and meet you for the services you ask of him.

    His contact address: ( andresloanfirm07@live .com )
    Contact him for more information, be clear and honest." ~

  • Anonymous: 2 months, 3 weeks ago from: Rochester, New York, United States

    Received an email from dannymelo79@rogers .com stating support from google my picture had been repaired. I did not click on it as I have no pictures. ~

  • Anonymous: 2 months, 3 weeks ago from: Sugar Land, Texas, United States

    I got one today as well. From a school fine arts director. This is the link it was sending me to to open it. However, I didn't put in my gmail account. I tried to use my aol account but it never loaded the document. Shall change my passwords ASAP.
    http://xsdesigning. in/review/drive /contactform.php ~

  • Anonymous: 3 months, 0 week ago from: Gold Coast City Council., Queensland, Australia

    I got this message, purportedly from someone in my contacts list:
    - - - - -
    "Drew used Google Docs sending you a document.For immediate access

    The Google Docs Team

    Questions? Take a quick tour or visit the Google Docs Help Center. Please note this is an automated message -- we won't see it if you Reply to this."
    - - - - -

    It took me to a site - frayanmusic. com - and asked for email address and mobile phone number. ~

  • Anonymous: 3 months, 2 weeks ago from: Sacramento, California, United States

    I just got one (I think) from "drivegooogle .com" ~

  • Anonymous: 3 months, 2 weeks ago from: Meadville, Pennsylvania, United States

    So, if I have received this email from a contact that I know, and who is in my contacts, does this mean that the hackers have already compromised my contact list to send me messages from someone that is known to me? Or does it mean that the sender's account has been compromised? ~

    • info: 3 months, 2 weeks ago

      They are using a technique called Email Spoofing. Email Spoofing allows someone to send an email message from an account and let it appears as if it was sent from another.

      For example:

      You can send an email message from your account and change the "From" email address to "". Now, the person who receives the email message will think it came from the president at the Whitehouse, although the email was sent from your account.

      Click here for more information about Email Spoofing. ~

  • Anonymous: 3 months, 2 weeks ago from: Melbourne, Victoria, Australia

    I just received the following email from a recognized contact in my Gmail. Her email was sent BCC so it may have gone to her entire contact list.

    Subject: Morning


    I've sent a file via Google Doc to you,please view [File] online

    The [File] was hyperlinked to the address
    - http://www.desertsportswear .com/Memo/new google doc/indexa2aa.html

    I opened the email to view the message and I did click on the link, but I did not proceed any further after viewing the bogus looking page and did not enter any sensitive information (usernames or passwords etc).

    After looking up what to do at various sites (like this one), I immediately took the precaution of changing my Google password anyway.

    If I didn't enter any sensitive info (but only browsed to the linked page from the email), is my Google account still at risk?
    --- --- --- ~

  • Anonymous: 3 months, 3 weeks ago from: Toronto, Ontario, Canada

    I got this spam. Then I ran the google account security settings/security

    I found that some one signed into my gmail from another town.

    I changed the password but wonder if the hackers were found yet? ~

  • Anonymous: 3 months, 4 weeks ago from: Ottawa, Kansas, United States

    Received email - GMAIL "You have 4 messages that must be read." View full header was viewed and there was NO gmail sender.

    IP source came from 212.193.250 .122 and was sent by Eblane .com

    Hostname was rdr.nichost .ru and ISP was ROSNIROS (Russian Inststute for Public Networks). ~

  • Anonymous: 4 months, 1 week ago from: Gig Harbor, Washington, United States

    I deleted my Google Account.I changed my gmail to a yahoo email. Google still suspended my g mail. Since then, I get notifications and pop up saying "Google Account Required.

    It linked me back to Google Account, which I deleted and wants me to login. I've looked for a few days wanting to know if its really from Google? I was told by Google help that if I log back into account, it will be hell to get it off again. I will check the senders link. Thank you ~

  • Anonymous: 4 months, 1 week ago from: Minneapolis, Minnesota, United States

    Just received one today...from a known contact, reading:

    "I've just attached a document that needs to be shared with you in the below Google Drive.

    Open 11282014-0930.pdf below to view.

    Document 11282014-0930.pdf

    Please review and write me back on it, as it is very important and secured as well.

    Google Drive Logo for Google Drive

    Yikes. ~

  • Anonymous: 4 months, 1 week ago from: Waltham, Massachusetts, United States

    Here is one I received from noreply.docsalerts@gmail .com

    Subject: You have 1 Doc shared with you

    "You have a pending incoming docs shared with you via Google docs
    Click to open: File (hyperlink is to: http://vextm .com/sos.php)

    Google Docs makes it easy to create, store and share online documents, spreadsheets and presentations." ~

  • Anonymous: 5 months, 0 week ago from: Ann Arbor, Michigan, United States

    I received an email (copied below) supposedly from a friend. Looked suspicious so I didn't do the click thing. The friend said she never sent anything like this.

    --- ---


    I've Shared a confidential Document attached with Google Drop Box.


    Thanks! ~

  • Anonymous: 5 months, 3 weeks ago from: Brooklyn, New York, United States

    I received an email telling me google stopped access into my account last night and that I should change my password. Do you send this kind of email? ~

    • info: 5 months, 3 weeks ago

      Please use the 'Contact Us' form to send the email to us so we can analyse it. ~

  • Anonymous: 5 months, 3 weeks ago from: Hayward, California, United States

    I received an email saying it contained a confidential document from a private mediator. When I tried to view it sent me to a Microsoft website that asked for the email type and my password. ~

  • Anonymous: 5 months, 4 weeks ago from: Doha, Ad Dawhah, Qatar

    I received an e-mail like this from a friend; do this mean his e-mail account has been hacked? ~

    • info: 5 months, 4 weeks ago

      No. There is a technique called email spoofing used by cyber-criminals and spammers, to trick people into believing that an email message came from someone, although the message was not sent from that person's email account. Click here for more information. ~

  • Anonymous: 5 months, 4 weeks ago from: Brookville, Indiana, United States

    I just got one of this. Did not open it thankfully, but they are using a new address,

    Here is the link in my email: http://madwaystudio web_config/Documentss /account-login-shareing -docss/index.php

    Just an FYI.

    John. ~

  • Anonymous: 6 months, 0 week ago from: United Kingdom

    Great advice. Thanks ~

  • Anonymous: 6 months, 1 week ago from: Antigua and Barbuda

    why did the message disappear from my inbox, when I wanted to delete it? ~

  • Anonymous: 6 months, 1 week ago from: Saint Augustine, Florida, United States

    I stupidly opened the Google docs email and input my user name and password. As soon as I realized what I had done, I changed my password but now all my new emails are going into my trash box and not my inbox. Can you help? ~

    • Anonymous: 6 months, 1 week ago from: Sweden

      Hi, they also added filters. Go to Settings > Filters and you'll see some filters that automatically puts the e-mails in thrash. ~

  • Anonymous: 7 months, 3 weeks ago from: Houghton, Michigan, United States

    Does it affect iPhones? I opened the email and entered my address but not the password. Them I closed the browser and deleted both messages - I got two of them. And emptied the trash ~

    • info: 7 months, 3 weeks ago

      This is a phishing scam designed to steal your username and password. So, it doesn't matter which device you are on. ~

  • Anonymous: 7 months, 4 weeks ago from: Spanish Fork, Utah, United States

    I received an email stating that my google mail was terminating. see address below:
    no-reply click on a link
    Obviously, I am not clicking on a link.

    I am sure that such is not valid and even with a hybrid goggle address I would be nervous.

    Please advise if this email address above is valid and has anything to do with goggle.

    J. Carroll ~

    • info: 7 months, 4 weeks ago

      The email is a scam. ~

  • Anonymous: 9 months, 1 week ago from: New Westminster, British Columbia, Canada

    Received one today:
    Subject: Hello

    You have a pending incoming docs shared with you via Google docs
    Click to open:? ? e?-?Statement ??
    Google Docs makes it easy to create, store and share online documents, spreadsheets and presentations.

    Link took me to: http://residentiesaa googledocs/ googledrives/ ~

  • Anonymous: 11 months, 0 week ago from: Traverse City, Michigan, United States

    Make sure you check your gmail settings under "Forwarding", to make sure that your emails are not being forwarded to a different account. ~

  • Anonymous: 11 months, 1 week ago from: Kitchener, Ontario, Canada

    I got stung by one too and the link was to
    http://viewwwinng.altervista .org/index.php ~

  • Anonymous: 11 months, 1 week ago from: Edgewood, New Mexico, United States

    Beware of this:
    Subject: Please review

    You have received a new document via Googledoc.

    Click Here to review your secure document.

    Link: www.fabbricanove .com/index.php ~

  • Anonymous: 11 months, 2 weeks ago from: Netherlands

    They tried it with me as well, i just got this e-mail on my company mailadrfess, like they want to purchase products! I didn't fall for it... Watch out!

    Hello Mark,
    I appreciate your response, i'm trying to send you some of the documents through attachment, but it is multiple, so i had to save it online and shared. Click the following link to download the file(s): /globalinvestments/files2014 /purchase-order002#.pdf

    Please inform me if you can meet up with the needed supply quantity and forward your quotation or proforma invoice to me or you upload it through the same link above.

    Hoping for an anticipated business cooperation,
    Thank you.

    Robert Hao
    Sales - Department ~

  • Anonymous: 11 months, 3 weeks ago from: United Kingdom

    Does this just affect Gmail accounts? ~

    • info: 11 months, 3 weeks ago

      No, if you put any other email address username and password on the phishing or fake website, it will be stolen and used to hijack that account. ~

  • Anonymous: 11 months, 3 weeks ago from: Forest Park, Illinois, United States

    Got one today -- 5/4 looks like this:

    On the subject line: An Important Document was sent to you from your Bank

    Use Google Docs to quickly view documents online without leaving your browser.


    An Important Document was sent to you by your Financial Institution through Google Docs Viewer.
    To view this document, please follow our secure web server link below and sign in with your email address.

    To Get Started, :

    Click Here


    The Gmail Team
    Google Docs

    Copyright © 2014 Google Docs. All rights reserved. ~

  • Anonymous: Apr 23, 2014 from: Lakemba, New South Wales, Australia

    I gave out my google password. They emailed my Contacts. Now half my Contacts list on all devices are missing. When I click Restore Contacts to one week ago in My Google Account after first changing my password, the missing half return only and the other half of my Contacts disappear that I had previously. How do I regain my full contacts list on windows laptop and iphone and ipad? Thank you ~

  • dtaylor: Apr 19, 2014 from: New York, New York, United States

    Someone set up a Google Apps account and somehow connected it to my gmail account a got access all of my contacts and past emails. Then they added an alphabetical letter to the middle of my business email address (which they must have gotten from my past emails) and sent out emails to all of my gmail contacts with this fake email address that has one extra letter in it. The fraudulent email contains a link to a supposedly google drive app and the email heading states "Follow-up Shared Doc!"

    Before doing this they sent a fraudulent email to my broker and asked them to wire money to two foreign bank accounts.

    Am I right to assume that they did not get access to my computer, only my gmail account? I have done a few scans and nothing turns up.

    Thank you.
    DT ~

    • info: Apr 20, 2014

      Change your passwords immediately. ~

  • Anonymous: Apr 16, 2014 from: United Kingdom

    I was shocked to see a message sent by my email-id. How do they get access to ur email account? Are there any ways to stop them? ~

  • Anonymous: Apr 14, 2014 from: Philadelphia, Pennsylvania, United States

    I have been sent these emails,never opened them because I was suspicious,now my contact list is being sent this email from me. How is that happening? ~

    • info: Apr 14, 2014

      The emails probably are not being sent from your email account.

      Maybe the emails that the persons on your contact list are receiving, were sent from some other email account, but the sender spoofed his/her email address.

      Email spoofing allows someone to change the "From" address of an email message, to make it appears as if it came from someone else.

      Here is an example:
      I can send an email message to you, and change the "From" address to "". So, when you receive the email message it will appear as if it came from the Whitehouse, instead of me.

      But, if they are still sceptical, please change your email address password.


  • Anonymous: Apr 4, 2014 from: Arnprior, Ontario, Canada

    The scam go to or points to: http://www.untouchedworlds .com/pay/Google_Doc/secure Login.htm

    Please kindly check the Document i sent you via Google Document.
    And get back to me.
    And log in with This email.
    It is very important.

    Ronald L Korf, CEO
    Korf Continental, Korf Auto Group |
    Ford Lincoln Chevrolet Buick GMC Chrysler Dodge Jeep Ram
    500 West 8th Avenue, Yuma, CO 80759
    (T 970-848-5361 | C 970-396-5275) ~

  • Anonymous: Apr 1, 2014 from: Swarthmore, Pennsylvania, United States

    OK, so if I already clicked, etc., and already changed my email password, I should be ok, right? ~

    • info: Apr 1, 2014

      Yes, you should be ok. ~

  • Anonymous: Mar 27, 2014 from: Oldenburg, Niedersachsen, Germany

    Here is another one of these scams:

    "Just Uploaded Some Files For You Using Google Docs

    Kindly Click On Here To View The File I Upload For You.

    Best Regards."

    Link points to .in/Hub/gdocs/index.htm ~

  • Anonymous: Mar 23, 2014 from: Caroline Springs, Victoria, Australia

    I have received one of these emails and deleted it but i when I send it to my trash and then delete the trash it appears again. How do I remove it permanently. ~

  • Anonymous: Mar 19, 2014 from: Hazlet, New Jersey, United States

    All my email contacts were deleted and the scam was sent to them. I have changed my password and secured my account but I get credit card bills, bank statements etc sent to my email account. Are they in danger? What should I be looking out for? ~

    • info: Mar 20, 2014

      Once you have changed your email address password, you should be ok. ~

  • Anonymous: Feb 27, 2014 from: Oakton, Virginia, United States

    Noticed that my gmail security said: logged in from Dublin, CA with the following IP address:
    That was not legit! ~

  • Anonymous: Feb 27, 2014 from: Denver, Colorado, United States

    I have been receiving these and have contacted Google, and they advise me to click on the links and then click the "report abuse" link at the bottom of the page.

    That's right, Google support says to click on the links! I responded and say "do you really recommend that I click on links in a phishing email? If so, there is a problem with your system". They don't respond.

    Thanks Google ~

  • Anonymous: Feb 26, 2014 from: Happy Valley, Oregon, United States

    Please note that the scammers/phishers will examine your gmail files and addressbook and forward the scam to all your contacts. Furthermore, they will examine your contacts and if they find a useful one, like the one to your broker or financial adviser, they will try to obtain money from your accounts, posing as you. ~

  • Anonymous: Feb 21, 2014 from: Berkeley, California, United States

    I am usually pretty savvy to email scams, trojan horses, etc. but this one caught me off guard. After entering my email and password, I was sent to Google Template Gallery. I've not used this feature and there was nothing except the stock templates. At that point, I finally got suspicious and "Googled" the phrase in the incoming email. That brought me to this page and the awareness that I'd been "Phished". I immediately went back to my accounts and changed passwords.

    Thanks for being here and keeping watch. ~

  • Anonymous: Feb 17, 2014 from: Canada

    we are receiving messages such as : you have shared documets with (name).
    we are confused as we have not shared documents.. nor do we know who (name) is. ~

  • info: Feb 13, 2014

    From: Gmail Team
    Date: 12 February 2014 13:13:57 GMT
    Subject: Google Document

    You have a pending incoming docs shared with you via Google docs

    Click to open: eStatement.pdf

    Google Docs makes it easy to create, store and share online documents, spreadsheets and presentations.


    The link goes to phishing website: cafesevda .com/google/index.htm ~

  • Anonymous: Feb 8, 2014 from: Muscat, Masqat, Oman

    Today I received the same. Thanks for information about it.I am pasting below the spam message from one of my friend.
    I sent you a document via Google drive, follow the link Click Here and just sign in with your email to view it.
    Thanks ~

  • Anonymous: Feb 5, 2014 from: Salt Lake City, Utah, United States

    Just got this email from someone I know, there were email addresses in the distribution list that could have come from their computers, including my email address. I sent a 'reply all' with a warning not to open it and a link to this blog. ~

  • Anonymous: Feb 3, 2014 from: Châteauguay, Québec, Canada

    Hi received a similar email from a previous employer:


    I've uploaded an attachments to a Google Drive in a secure way to view a document CLICK HERE to view, its very important.


    Link points to hxxp://www.espezia

    I was suspicious so I forwarded the email directly to my previous employer to have them confirm the email was legit and seconds after I got an email from them saying it was alright to open it.

    Looks like the account is hacked and they can even respond to email!!! Beware!!! ~

  • Anonymous: Feb 2, 2014 from: Scottsdale, Arizona, United States

    Phishing scams are everywhere. If you happen to click on a link from a suspicious e-mail, always check the URL in your address bar. An e-mail from google should send you to a URL that contains "" That is their domain and everything pertinent to your privacy should go through that. Everything else should be completely disregarded. This is the same for any large, reputable company. Beware of this for banking too, which is a very popular place for phishing scams! ~

    • Anonymous: Mar 11, 2014 from: Petersburg, Virginia, United States proves nothing. It just means that the phisher got a google address too. ~

  • Anonymous: Jan 29, 2014 from: Kihei, Hawaii, United States

    Well, I couldn't find a place on Google to report this email. Google needs to make it easier for people to quickly report stuff and then send out alerts to users. My bank has an email address that starts with spoof.bankname_url@... to quickly forward this crap to their security dept. ~

  • Anonymous: Jan 28, 2014 from: Zeeland, Michigan, United States

    This is pretty amusing to watch; someone in my school has a compromised account and sent it to every person in the school. Since then, numerous accounts have been compromised as well, with more emails sent. I am just facepalming at how gullible my co-students are. As an avid internet user, I know all about phishing and related methods, so I'm wondering how people don't notice the obvious signs. ~

  • Anonymous: Jan 27, 2014 from: Kailua Kona, Hawaii, United States

    We have 3 gmail accounts hacked by the google docs scam. I have reset passwords, but cannot reopen my gmail. All pertinent communications are lost! ~

  • Anonymous: Jan 24, 2014 from: Plymouth, Massachusetts, United States

    Received email from GOOGLESECURITYALERTS @gmailteam .on,I roost .com

    Stating my email acct and password were recently used on another computer, mobile device or other location. Then it has a line to click on to verify.
    Question. Is this legit, who used my acct, or should I immediately delete.

    Thanks ~

    • info: Feb 13, 2014

      The email message that you have received is a phishing scam. ~

    • info: Jan 24, 2014

      Can you please send the email message to us. Our contact information is located on the "Contact Us" page. ~

  • Anonymous: Jan 10, 2014 from: Bronx, New York, United States

    I received this e-mail, but I did not open because I suspected it was a scam. But the hacker used my yahoo user name. What is really worry is that these people are sending the same message to all my contacts. ~

  • Anonymous: Jan 9, 2014 from: Beltsville, Maryland, United States

    Strangely I've received two of these emails and when I replied to ask if it was genuinely sent from the user I received the reply:
    "Yes log on to see the document.


    Even with this reply I didn't risk opening them since the people sending the request were not close acquaintances. ~

  • Anonymous: Jan 8, 2014 from: Canada

    Just received:


    Please view this Document I uploaded for you using Google Doc.
    Click Here and sign in your email to see the important document Secured Verified Page.


    From: Jermal Alleyne ~

  • Anonymous: Dec 28, 2013 from: Richfield, Utah, United States

    I received a slightly modified version of the email today from a business acquaintance's Hotmail account. The "Click here" text linked to this Chinese company's website: hxxp://ez-agogo .com/documented

    Subject: Document

    "Please view the document i uploaded for you using Google docs.

    Click here just sign in with your email to view the document its very important.

    Thank you" ~

  • Anonymous: Dec 15, 2013 from: Salt Lake City, Utah, United States

    Mine came from:

    adtechdirect .com/googleattachment shared doument/ ~

  • Anonymous: Dec 13, 2013 from: Elmwood Park, New Jersey, United States

    Just got this one. Here is where it takes you to:
    hxxp://gmasti .net/ncdoc
    then redirects you to hxxp://www.himalayanrock .com/images/nrb.jpg ~

  • Anonymous: Dec 12, 2013 from: Muskogee, Oklahoma, United States

    New phishing email address www.para-fiestas .com/js/slideshow/ googledcmnt/index.html
    Pretending to be google drive. Worded exactly as described above ~

  • Anonymous: Dec 6, 2013 from: Poplar Grove, Illinois, United States

    I received an email today saying i have to upgrade my gmail account now for security reasons it asked me to reply with email address password d.o.b country or territory and alternate email and password. It said if i dont respond in 24 hours my account will be suspended if i dont do it within 2 week it would be deleted. they were doing it to find out which accounts were active or not ~

  • Anonymous: Dec 5, 2013 from: Toronto, Ontario, Canada

    Very helpful!!!!! ~

  • Anonymous: Dec 3, 2013 from: Lancaster, South Carolina, United States

    Hi.. I received such a message and it looked so real.. It was not until I clicked on the steps and got nowhere that I thought it might not be real. Then I hit reply and found that it was her old address (which did not show up). I did change my passwords that I had put in.. Is there anything else I can do? ~

  • Anonymous: Nov 25, 2013 from: Potsdam, Brandenburg, Germany

    I just fell for this. I entered my email and password. I will change the password now. Will that be enough though? ~

  • Anonymous: Nov 15, 2013 from: Ireland

    Received such an email from helengatenby(at) to my private email address. I do not know this person. ~

  • info: Nov 11, 2013

    The "Dear Email Owner" message below is another Gmail phishing scam. Click here to read about it. ~

  • Anonymous: Nov 11, 2013 from: Perth, Western Australia, Australia

    Is the following a scam or genuine?

    Dear Email Owner,

    We are upgrading our Email system to enable us reduce the occurrence of Spam. You are to click on the Link below to Upgrade your Email.

    hxxp://www.byfocal .com/forms/forms/form1.html

    IT Service!
    System Administrator ® ~

  • info: Nov 11, 2013

    Opening the email will not affect you. The only way you will be affected, is if you enter your username and password on the phishing or fake website. ~

  • Anonymous: Nov 11, 2013 from: Ivanhoe, Victoria, Australia

    i opened this email. it looked really genuine and it even said who it was from, someone I knew, but it didn't sound like their style of email. Because I opened this email, will it send a copy to all my contacts? ~

  • info: Nov 1, 2013

    Changing your password is the only thing than you can do. Ensure that you use a very strong password. A password that is not easily guessed. ~

  • Anonymous: Nov 1, 2013 from: Walnut Creek, California, United States

    Ok so what do you do if you did click on the link and enter your info? I got it from a client and in haste I opened it. It's a little different than the one shown above but it's definitely a phishing thing. It sent an email to all my contacts. I changed my password but what else do I need to do now??? Help! ~

  • info: Oct 31, 2013

    Opening the email will not do anything to your computer. Entering your username and password on the fake website after clicking on the link in the email message is a problem. ~

  • Anonymous: Oct 31, 2013 from: Vancouver, British Columbia, Canada

    I opened the e-mail but did not click on the link. This should not be a problem right? ~

  • Anonymous: Oct 29, 2013 from: Auckland, Auckland, New Zealand

    Thank you for this. I received an email from someone I don't even know and it made me suspicious. It all looks very authentic but I still felt something wasn't right especially when it asked me to input my email and password so I did a quick search and sure enough this article came up and confirmed my suspicions. It's pretty scary because a few years ago I was more naiive and might have fallen for it. Thankfully back then these sorts of things weren't as prevalent as they are now but there are many other people who would fall victim to it including possibly the person who sent it to me because they are a real person. I google searched them and found their Facebook, website, a newspaper article and their linked in page. ~

  • info: Oct 8, 2013

    Yes, you should be safe if change your password. Please check to ensure that your alternate email addresses are correct. If the scammers change the alternate email to theirs, they will be able to reset your password. ~

  • Anonymous: Oct 8, 2013 from: Venezuela

    Please, i am so worry about this. I'm safe as long as I change my email password. I changed it inmmediatly ~

  • Anonymous: Oct 3, 2013 from: United States

    I have a mac and I saw this come into my email so I did not open it up but I did send it to trash. Then my laptops curser started to jump around and it would fly between the one window i was on and the weather and time one Mac have. I had not control so I shut it down and did a full startup and reboot. Then I went into utilities to repair. I also deleted my trash my google trash and mac trash. I think I am good. BUT just after this happened my home phone rang and it was a recording telling me it was Allegacy Fed. Credit Union, and that I needed to call 866 872 3684 as soon as possible. So I got my Mac clean and started to do some digging. So it can happen to Mac and
    windows I am sure. I am worried because my old HP won't start up even when I go into safe mode, it acts like it wants to then reverts back to the Dos screen.
    But I think my Mac is good. ~

  • info: Oct 1, 2013

    You only need to change the password of the user names that you have entered. If you didnt enter the username and password on the phishing website for your other accounts, there is no need to change their passwords. ~

  • Anonymous: Sep 30, 2013 from: United States

    Just to clarify - I'm safe as long as I change my email password. No need to change other passwords correct? ~

  • Anonymous: Sep 22, 2013 from: Toronto, Ontario, Canada

    The real risk with this scam is for people who, (like myself), are stupid enough to enter the username and password to their Google or Gmail accounts. There's a very, very serious risk for people who use services like "GOOGLE WALLET", which is an online payment service, just like PayPal that you use access and use using your Google account details.
    I am a user of Goggle Wallet, but I was lucky not to have signed in to their fake sign in page with that particular account information. All they got from me was access to all of my contacts, who they sent the hoax message to and no doubt they'll have collected a few new suckers from my list of contacts. I sent EVERYONE in my address book an email warning them to change their password IMMEDIATELY if they inadvertently gave out their information. ~

  • Anonymous: Sep 13, 2013 from: Aurora, Colorado, United States

    New website doing the same thing. Here is the email I got...

    From: Google Team (googleteams Microsoft SmartScreen classified this message as junk.
    Sent: Fri 9/13/13 4:38 PM
    Microsoft SmartScreen marked this message as junk and we'll delete it after ten days.

    You have a secured document sent to you by me at Google Docs.

    To have access to the document please login with your e-mail address by following the link below.

    Read now >>> hxxp://www.itweakly .com/google/doc/drive/index.htm

    Each Document is Independently Owned and Operated by Sender of this message.
    Google Drive.
    ©2013 Google Incorp. All Rights Reserved. ~

  • info: Aug 29, 2013

    Although it may appear as if the email was sent from your account, it was not. The cybercriminals behind these scams use a technique called Email Spoofing. Click here to read about this technique. ~

  • Anonymous: Aug 29, 2013 from: King Of Prussia, Pennsylvania, United States

    so if you were the one who's email account sent it, do you have to do anything? ~

  • Anonymous: Aug 26, 2013 from: India

    Please convey this info to and as i have received mails in this both accounts. Saying:

    Receipant name,

    I have send you a document click here and get the documents.
    --- ~

  • Anonymous: Aug 26, 2013 from: India

    I have received two mails from www.monquathuvi .com/googledocs/index.htm ~

  • Anonymous: Jul 30, 2013 from: New York, New York, United States

    I just received a very similar email directing me to this phishing site:
    hxxp:// ~

  • Anonymous: Jul 30, 2013 from: Charleston, South Carolina, United States

    Anything needed beyond change of pasword ~

  • info: Jul 18, 2013

    Maybe cybercriminals were able to gain access to your account by tricking you into entering your account user name and password on a phishing or fake website.

    With access to your account, they may have accessed your contacts' names and email addresses.

    I recommend that you change your email password. ~

  • Anonymous: Jul 18, 2013 from: Johannesburg, Gauteng, South Africa

    I understand the email spoofing part of the scam, what I don't get is how they target contacts in your address book? If it's pure spoofing, where do they get my contacts? I have run virus scan, nothing found. ~

  • Anonymous: Jul 15, 2013 from: United Kingdom

    Hi I have just received email today gmail will stop if I don't re register to get rid if dormant accounts
    Al* I have not replied ~

  • Anonymous: Jul 12, 2013 from: Argentina

    So, can I fix it with only changing my passwords?
    Thank you! ~

  • info: Jun 24, 2013

    Although the email appeared as if came from your wife's email account, it was not. Scammers use a technique called email spoofing, where they alter an email message to make it appear as if it came from someone else.

    I could use this technique to send an email to you from my email address and change the "From" address to make the email appear as if it came from the "".

    Currently, it is virtually impossible to stop these scammers from sending these emails to you.

    Click here to read more about email spoofing. ~

  • Anonymous: Jun 24, 2013 from: Kingston, Saint Andrew, Jamaica

    Good day, I got the email but it was coming from my wife's email account. She said she sent no such email so i guess she got one of those viruses that use your email to spam all their contacts.

    I would like to fix this but not sure what to look for or even how to start.

    Is this a worm/virus, if so how do I get rid of it / stop her account from spamming all her contacts. ~

Send this article to someone via email:
Email address:
Like our Facebook page at:
Follow us on Twitter at:
Follow us on Google+ at:
Follow us on Pinterest at: