Google Docs or Drive Phishing Email Scams

Google Docs or Drive Phishing Email Scams

Google and other online email account users should beware of the phishing email messages or posts like the ones below that were created by cyber criminals to steal their accounts' usernames, passwords, infect their computers with a virus, ransomware or other malware. Recipients of unexpected email messages or posts appearing as if they came from a legitimate organization, friend or family member asking them to view a document that was uploaded to Google Docs or Google Drive, are asked to delete the messages or posts. And, should not follow the instructions in them.

This is simply because this is another malicious attempt by cybercriminals and scammers to steal the recipients' Google, Hotmail, Outlook, MSN, Yahoo and AOL account information, so that they can gain access to them. With access to their victims' accounts, cyber criminals will hijack and use them fraudulently.

Google users who have already been tricked by the phishing scam are asked to change their password immediately before their accounts are hijacked and used fraudulently or maliciously.

A List of Google Docs or Google Drive Phishing Email Scams

Subject: Important meeting tomorrow
From: ramya ramya (ramyaarose90@gmail.com)
Sent: Mon 7/25/16 4:17 PM

Attachments: Agenda for next meeting.html (6.5 KB)

HI ,

I’ve attached a Draft_Agenda.pdf for our emergency meeting tomorrow, Please view it and let me know if any changes/additions are required.

Thanks,

--Forwarded Message Attachment--

Login your email address below to view the document.

Email Address
Email Password

Passwords are case sensitive

Submit

To access our online secured documents page,you are required to login your email address.

Unauthorized Access is prohibited.

From: Brian Harris bharris2@sbcsc.k12.in.us
Date: Thursday, June 30, 2016
Subject: VIEW DOCUMENT

Hello

I've Shared a secure file Document attached with Google icon

CLICK DOCUMENT

Regards
Brian Harris
Private Group Communication Service
©2016 Google - Terms & Privacy

Subject: You have PDF docs to read

Please find attached document i uploaded through Google Doc Share Application.

for additional security Log in with your email account to view it.

View Document»

Important Doc.PDF

Memo.PDF

Payment info.PDF

View slide show (3)

Download all as zip

Regards,

Subject: 16102015_Proposal_ Letter.pdf16102015_ Proposal_Letter.pdf

Hello, Please find the attached for your attention. I tried to upload and send earlier but got an error message “The file you are trying to send exceeds the 25MB attachment limit” So i had to send it using Google Drive.

Open

Subject: IMPORTANT DOCS

Hello,

Please find newly attached documents, I have uploaded via Google drive Box Files Share Application.

VIEW DOCUMENT

Regards

Subject: Important files

i tried sending you a document yesterday, but i am not sure you received it, i just attached it again for your review and comments. It is password protected, so you must sign in with your email address e-mail to view the files

Subject: Please relate to the document
I have tried to send you this documents but I don't know why it's not going through. It may be due to large file attached. I decided to send it via secured
Google Doc
CLICK HERE

Subject: Rick Mitchell shared "important/update.pdf" with you via Google Drive
Rick Mitchell used Google Drive to share a file with you!

Subject: document

I have shared a file with you via Google Docs App.

Find it below for your quick review and perusal.

Click DOWNLOAD (http://investor-webcast.com/E-Drive4Google--KM12/) to view shared document.

Google Docs

Welcome to Google Docs. Upload and Share Your Documents Securely Sign in with your email address to view or download attachment Access your documents secure...

View on investor-webcast.com

Preview by Yahoo

Regards,

Subject: VITAL NEWSLETTER

Hello,

I uploaded this vital newsletter using my google doc. For immediate access CLICK HERE

Sign in with your email.

Hello,
Please view the document i uploaded for you using Google docs, CLICK HERE and just sign in with your email to view the document its very important

Subject: RE Important Document
Hello,
Here is the document i told you about,i sent it in a more secured way, CLICK HERE. and log in with your email for immediate access and more information.

Hello, Kindly click the link to view the document I uploaded for you using Google cloud drive. Just Sign in with your email to view the document, it is very important. Thank you, -- Rev. Dr. Karen Serving Humanity Spiritually

Subject: Document
Incoming Google drive document awaiting you

Please refer to the document I've shared with you using Google Drive App.

CLICK HERE TO VIEW THE SHARED DOCUMENT

Recipients who have clicked on the link in the email message or post, will be taken to the following malicious web pages and ask to sign-in with their Google or other email accounts credentials:

  • http://greensolutionsgp.com/ google/google /index.php.htm
  • http://primakoncepts.com/ docc/googledrive/contactform.php

Note: cyber-criminals will use other website names, so look out for this same scam on other websites.

Fake Google Docs or Drive Login Pages

Google Docs Phishing Email

Google Docs Phishing Email

It appears that the website: greensolutionsgp.com was hacked and the malicious page "google/google/index.php.htm" was put there by the hackers to ask their potential victims to sign in with their Google email address and password. But, if potential victims enter their Google credentials on the fake Google page, it will be sent to the cybercriminals behind the scam.

Again, recipients of the same phishing scam who have already entered their Google username and password on the bogus web page that they were taken to, are asked to change their Google password immediately! There are different versions of the Google Docs or Drive phishing scam, so please be on the lookout for e-mail messages or posts asking to view documents in Google Docs or Google Drive.

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search Search engine.

Note: Some of the information in samples on this website may have been impersonated or spoofed.
Was this article helpful?  +
  • YesLike (2)
  •       
  • NoDislike (0)   
Share this with others:
Facebook
WhatsApp
Twitter
Reddit
Pinterest
Line Me
Save
Donate

Comments, Questions, Answers, or Reviews

Comments (Total: 221)

To protect your privacy, please remove sensitive or identifiable information from your comments, questions, or reviews. We will use your IP address to display your approximate location to other users when you make a post. That location is not enough to find you.

Your post will be set as anonymous because you are not signed in. An anonymous post cannot be edited or deleted, therefore, review it carefully before posting. Sign-in.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

  • January 10, 2019 at 3:32 AM by an anonymous user from: London, England, United Kingdom

    Got one today from a company I have only SEARCHED FOR! And that is not even in my address book. Worrying!

  • May 12, 2018 at 10:08 AM by an anonymous user from: Fremont, California, United States

    I got one like this today:

    "Hi,

    I am sending you this document through Drop box as I cannot send through attachment. I am having problem attaching document to email. Please login with your email address to find the attached document for your expedite. Please view the document below and let me know as soon as possible. Apology for the inconvenience

    View Document

    Thank you...

    Anita"

  • February 23, 2018 at 11:30 AM by an anonymous user from: Irvine, California, United States

    Is there a way to retrieve email contacts after this happens

  • September 28, 2017 at 3:22 AM by an anonymous user from: Dudley, England, United Kingdom

    'Chris Daverston asks to share a file with you, via "The SecureTeam File".' Another scam.

  • September 8, 2017 at 4:57 AM by info

    Here is another scam:

    "- Oorspronkelijk bericht -

    Van: Google Drive <no_reply@google.com.br>

    Datum: 08-09-17 06:48 (GMT 01:00)

    Onderwerp: New Message Google Drive

    google drive icon

    Google Drive

    A file was shared with you Via Google drive.

    Kindly download the attachment via Google drive."

  • May 31, 2017 at 11:28 AM by an anonymous user from: Sunnyvale, California, United States

    Got one today. Do I need to change just my gmail password or passwords for everything?

    • May 31, 2017 at 11:51 AM by info

      If you did not click on the link and attempt to sign-in to the page that you were taken to, there is no need to change your passwords.

  • May 4, 2017 at 12:53 PM by info

    Here is another scam:

    "- Forwarded Message -

    From: "rhonda.cook@cvcsd.com" <rhonda.cook@cvcsd.com>

    Sent: Wednesday, May 3, 2017 2:54 PM

    Subject: Rhonda Cook has shared a document on Google Docs with you

    Rhonda Cook has invited you to view the following document:"

  • May 3, 2017 at 3:04 PM by an anonymous user from: Fort Collins, Colorado, United States

    This just happened to me.

  • April 2, 2017 at 12:34 PM by an anonymous user from: Corpus Christi, Texas, United States

    "Incoming Docs Shared Via Google Docs

    You have a pending incoming docs shared with you via Google docs

    Click to open: e-Document

    Google Docs makes it easy to create, store and share online documents, spreadsheets and presentations."

    Is this a scam?

    • April 2, 2017 at 3:15 PM by info

      Yes, it is a scam.

  • March 19, 2017 at 5:11 AM by an anonymous user from: Hereford, England, United Kingdom

    Is a google message from www.pettocus regarding the google browser being heavily damaged by 4 virus a scam?

    • March 19, 2017 at 8:57 AM by info

      Yes, it is a scam.

  • February 23, 2017 at 7:46 AM by an anonymous user from: Raleigh, North Carolina, United States

    I received this message that I thought was from my boss, "I'm having problem with my email outlook; I don’t know if you have received the email I sent to you earlier. I have meeting shortly, so check and get back to me. Kind regards". There was no attachment to click on, just this message that I replied to on my gmail. What is the fallout from this kind of scam? Except getting my name and e-mail address which they already had since they e-mailed me.

    • February 23, 2017 at 10:58 AM by info

      The trick is to get you to respond, to confirm that you have received their message. Once they have confirm that you have receive their message, they will attempt to trick you into visiting phishing that steal personal and financial information, or malicious websites that infect computers or mobile devices with viruses or malware. Or, trick you into sending money, personal or financial information.

  • February 23, 2017 at 6:51 AM by an anonymous user from: Didcot, England, United Kingdom

    I had an email like this today:

    "I tried sending you this important document earlier but noticed the failure delivery due to some technical problems so I had to re-send it via Google doc attachment for you to view it. Please login with your correct details to view the document"

    The link in the message points to the hacked website:

    http://kb.lawofcure .com/edited/edited/

  • December 20, 2016 at 7:16 PM by an anonymous user from: Atlanta, Georgia, United States

    This was the link to a document sent to me (I am a real estate agent and some one sent me to their pre-approval letter to review) - It just felt wrong - I did not log in but wanted to share:

    myrealestategoogldrive.atspace .cc

  • November 29, 2016 at 5:55 PM by info

    Received the following via email message:

    I received a scam in my inbox recently and confirmed it was fake and/or malicious thanks to your site. Thankfully, I'm wise enough to know what they look like and tend to save family and co-workers from handing out their bank account numbers to princes in Nigeria. I wanted to send you the email I received because the link (I NEVER clicked on it) is one that you do not have listed on your site, though the wording is very similar. Just hoping to help other people who copy and paste this stuff, especially since it is in Spanish and might not raise any flags to someone living in say, Los Angeles.

    I have copied and pasted the email bodies below with dates and times. I have not included the other person's email as I'm sure it is an innocent person who was hacked and could not find anything related when I searched it online. The first email he sent to my boss, Kari, who passed it to me to handle.

    Email thread:

    "From:[REDACTED]

    Sent: Monday, November 28, 2016 1:32 PM

    Subject: Kitchen Remodeling...

    Hello my name is Pedro Santos, i will like to know if you are available for kitchen remodel for my new home i just bought. Please get back to me so i can go ahead and send you more info about the job with the measurement. I will be paying in cash or with a check. Regards, Pedro."

    - - -

    On Mon, Nov 28, 2016 at 3:23 PM

    I sent this email however, in the email thread, it reads:

    On Tue, Nov 29, 2016 at 12:23 AM

    Katie wrote: "Hi Pedro: Kari sent me your email regarding your new home kitchen remodel. A few questions to get us started:

    1) Do you already have keys to the new home?

    2) What is the address?

    3) What are your goals with the kitchen remodel? (ie cabinets, flooring, backsplash, etc.)

    4) Do you have a deadline everything must be completed by? Let me know so I can help you get started in the right direction.

    His response Mon, Nov 28, 2016 at 7:55 PM Pacific Standard Time (my time zone):

    "Thank you for getting back to me. I have sent you the measurement and samples for you to review and get back to me with the price quote and more. I sent it to you via secure Adobe document, click Here and sign in with your email to view it. Regards."

    He did not sign his name and "Here" is a hyperlink with this address that I have copied:

    http://tallercastillocr .com/adobee/sonto/sonto/index.html

    IMPORTANT WARNING: I HAVE NOT CLICKED THIS LINK AND DO NOT KNOW WHAT IT LEADS TO. LINK PROVIDED FOR YOUR REFERENCE, RESEARCH AND PLATFORM FOR WARNING OTHERS. You may contact me if you have questions."

  • November 26, 2016 at 1:13 PM by an anonymous user from: Hesperia, California, United States

    This has happened to me... should I change all passwords?

    • November 26, 2016 at 2:20 PM by info

      Yes, immediately.

  • October 16, 2016 at 8:39 PM by an anonymous user from: Marietta, Georgia, United States

    Another I believe:

    "Hello,

    Check here to see what I sent using doc

    Thanks"

  • September 12, 2016 at 5:40 PM by info

    Here is another malicious email:

    "From: Svetlana Trefilova <svetlana.trefilova@gmail.com>

    Date: Mon, Sep 12, 2016 at 12:20 PM

    Subject: KindlptionsDoc.Secured.docy see attached

    Attachment: ptionsDoc.Secured.doc, Doc.Secured.pdf

    In response to this please see enclosed document.

    Best Regards,

    Svetlana"

  • September 10, 2016 at 3:15 PM by an anonymous user from: Pomona, California, United States

    This virus wants to erase the name of my contact on my phone after I call or text that person. Any advice?

    • September 10, 2016 at 10:25 PM by info

      Install an antivirus software on your mobile device, and do a full scan.

  • August 18, 2016 at 10:34 AM by an anonymous user from: Denver, Colorado, United States

    Here is a scam that I received:

    "Dear Google User,

    You have been selected as a winner of the Google Anniversary for using Google services. Find attached email with more details.

    Congratulations,

    Matt Brittin

    CEO of Google

    ©2016 Google Incorporation ®"

  • July 26, 2016 at 12:17 AM by info

    Here is another scam:

    - start of scam -

    Subject: Important meeting tomorrow

    From: ramya ramya (ramyaarose90@gmail.com)

    Sent: Mon 7/25/16 4:17 PM

    Attachments: Agenda for next meeting.html (6.5 KB)

    HI,

    I’ve attached a Draft_Agenda.pdf for our emergency meeting tomorrow, Please view it and let me know if any changes/additions are required.

    Thanks,

    -Forwarded Message Attachment-

    Login your email address below to view the document.

    Email Address

    Email Password

    Passwords are case sensitive

    Submit

    To access our online secured documents page,you are required to login your email address.

    Unauthorized Access is prohibited.

    The Intranet Website Management Center requires Internet Explorer 6.0 or greater

    © 2016 Microsoft Terms Privacy & cookies Developers English (United States)

    - end of scam -

  • May 27, 2016 at 8:20 AM by an anonymous user from: Houston, Texas, United States

    This is one I just got from "Google Support" ( the actual address is edwarderivera@ shrinenet.org):

    Google

    We have sent you a message:

    5/27/2016

    4 broken emails has been recovered and re-sent to you.

    View emails

    We hope you found this message to be useful. However, if you'd rather not receive future e-mails of this sort, please opt-out here.

  • May 26, 2016 at 8:27 AM by an anonymous user from: Iowa City, Iowa, United States

    AS of 25 MAY 2016, this phishing scam is still alive and well and stealing credentials. The last example used a "tiny url..." link to take the user to the false sign-in page for Google Docs.

  • May 24, 2016 at 2:17 AM by an anonymous user from: London, England, United Kingdom

    It's just happened to me :(

  • May 11, 2016 at 8:09 PM by an anonymous user from: Newark, New Jersey, United States

    Here's another:

    "Subject: SHARED DOCUMENT

    Date: May 9, 2016 at 2:10:12 PM EDT

    I've been trying to attach this document to you, but that I had to send it back through Google Doc. Click SHARED DOCUMENT See

    Cheers"

  • May 10, 2016 at 8:51 PM by info

    Here is another scam:

    "From: PaNache Designer Jewelry <panachejewelry1@ gmail.com>

    Date: Mon, May 9, 2016 at 10:30 AM

    Subject: DOC

    You have a pending incoming docs shared with you via Google docs

    Click to open: eStatement

    Google Docs makes it easy to create, store and share online documents, spreadsheets and presentations."

  • April 27, 2016 at 12:56 PM by an anonymous user from: Hereford, England, United Kingdom

    The email message below is still doing the rounds this time though school Chromebooks:

    "FYI Please find the enclosed document referred to the subject."

    ​​

    • April 28, 2016 at 4:32 AM by an anonymous user from: Blackpool, England, United Kingdom

      We have just had our organisation targeted with this exact scam!

  • April 26, 2016 at 8:10 AM by an anonymous user from: Zoersel, Flanders, Belgium

    I have received this new one:

    "Subject : Invitation

    Kindly find the file I uploaded for you HERE (http://Tiffany.nl/document/

    etc"

  • March 21, 2016 at 9:55 AM by an anonymous user from: London, England, United Kingdom

    Here is another scam:

    "FYI, I have enclosed document referred to the mail subject."

  • March 14, 2016 at 9:19 PM by an anonymous user from: Pontiac, Michigan, United States

    The message I received in my Gmail was short and sweet, and from someone I had just had a business meeting with. I clicked on the link and signed in.. no document so I replied to the sender. Not hearing back from her in a few hours, I changed my passwords, but I am worried about what else I should do. My computer is a Mac. Suggestions?

    "Please find the Attached Confidential Signed Agreement,

    Kindly review the Approval.

    This Document is protected.

    Thanks"

    • March 14, 2016 at 9:33 PM by info

      The email message is phishing scam that steals usernames and passwords, so changing your password is only thing that you need to do.

  • March 8, 2016 at 10:11 AM by an anonymous user from: Edmonton, Alberta, Canada

    Here is a message I received:

    "Hello,

    How are you? Please re-examine the documents attached for you in my Adobe drive, it is protected and I granted you access to view them, check the Cloud Here and login with your email to access documents. Kindly keep it confidential and share your thoughts..

    Thanks and regards,"

  • January 4, 2016 at 6:43 PM by an anonymous user from: Wallingford, Connecticut, United States

    Email says the following:

    "I'm trying to send you some documents through attachment, but it is multiple, so I had to save it online and

    shared. Please view [documents] online

    Thanks

    url actually takes you to http://tinyurl.com/z3h9ptw."

    Then, you are asked to log in with your google login to read the messages. When you do, you go to an arts web site.

    I changed all my google and associated passwords afterward. And, scanned with windows defender. Do you have any other recommended actions?

    Thank you

    • January 4, 2016 at 7:17 PM by info

      You have done more than enough.

  • January 4, 2016 at 6:37 PM by an anonymous user from: Wallingford, Connecticut, United States

    I received this today from a client, and unfortunately clicked on the url (documents) - it took me to an arts foundation web site at http://tinyurl.com/23h9ptw. This was before I noticed the additional address line for "undisclosed recipients." That has been my clue before. So, now spent the last 4 hours scanning with Defender and resetting my google and all associated website login info. Message is below.

    Any other action recommended?

    "I'm trying to send you some documents through attachment, but it is multiple, so I had to save it online and shared. Please view [documents] online

    Thanks "

  • January 4, 2016 at 3:56 PM by info

    Received the following from an anonymous user:

    "Just received this. Unfortunately clicked on it. Going now to change Google pw/log in.

    From: Cynthia Boado [mailto:cb2893@ nyu.edu]

    Sent: Monday, January 4, 2016 3:18 PM

    Subject: I SENT YOU A FILE

    I'm trying to send you some documents through attachment, but it is multiple, so i had to save it online and

    shared. Please view [documents] online

    Thanks"

  • December 2, 2015 at 7:11 PM by an anonymous user from: San Jose, California, United States

    Hello,

    Recently I received an email stating:

    "Subject: VIEW DOCUMENT

    Body: hello I've shared a secure file document attached with Google icon

    Regards...

    This seems fishy :( I didn't click on it because I'm unsure."

    • December 2, 2015 at 8:09 PM by info

      The link in the email message goes to a malicious file that will infect your computer with a virus or Trojan horse. So, please delete any email message similar to the one above.

  • November 30, 2015 at 4:24 AM by an anonymous user from: Dublin, Leinster, Ireland

    Here is another fake and phishing Google Docs or Drive email message:

    "Subject: Find Attached Documents For Your Attention

    Please refer to the important document I've shared with you using Dropbox App.

    Click here view

    TT Scan0283.pdf

    Sign in to access shared documents"

  • November 19, 2015 at 4:47 AM by info

    Here is another Google Drive phishing scam:

    "Subject: 16102015_Proposal _Letter. pdf16102015_Proposal _Letter.pdf

    Hello, Please find the attached for your attention. I tried to upload and send earlier but got an error message “The file you are trying to send exceeds the 25MB attachment limit” So i had to send it using Google Drive.

    Open"

  • November 14, 2015 at 12:18 AM by an anonymous user from: San Diego, California, United States

    I'm a realtor, another 'realtor' sent me an offer for a cash buyer on a company listing. She attached the offer in the email.

    It was a google doc link. I didn't suspect anything except she was sending an offer to purchase to the wrong agent. So I forwarded the offer to the correct agent. I tried to open the doc but it wasn't there..so I don't know what happened...maybe they hacked me, I don't know.

    It was weird but I just thought she was being an idiot. If it was an attempt at a hack it may have worked.

    • November 14, 2015 at 7:22 AM by info

      Do a full scan of your computer with the antivirus software installed on it.

  • October 15, 2015 at 12:09 PM by CherylK from: Tucson, Arizona, United States

    Totally fell for this. Downloaded and attempted to open the DWG file, but since it's a CAD file could not open it (thankfully). Then got info on FB from emailer that it was a scam. Deleted everything and changed emails. Am I infected? How can I tell? And if I downloaded on a PC at work, is it going to infect Macs at home?

    Email below:

    "From: X*X

    Sent: Thursday, October 15, 2015 7:27 AM

    Subject: document

    I have shared a file with you via Google Docs App.

    Find it below for your quick review and perusal.

    Click DOWNLOAD (http://investor-webcast.com/E-Drive4Google-KM12/) to view shared document.

    Google Docs

    Welcome to Google Docs. Upload and Share Your Documents Securely Sign in with your email address to view or download attachment Access your documents securel...

    View on investor-webcast.com

    Preview by Yahoo

    Regards,"

    • October 15, 2015 at 12:37 PM by info

      All you had to do was to change your email address password and scan your computer for malware. This because the link in the email goes to a fake or phishing Google Docs websites.

      There is no sure way to tell if your computer is infected, so the best thing to do, is to do a full scan of your computer with the antivirus installed on it.

      Most of the links we have seen so far, only infect computers running Microsoft Windows. But, cyber-criminals are very smart and may already have some malicious software to infect Macs.

  • August 28, 2015 at 6:51 AM by an anonymous user from: Greenville, South Carolina, United States

    I was tricked by this, and put in my aol login and cell phone number - is this just a google issue or do they have my info now from aol and cell phone - what can they do with my cell phone number?

    • August 28, 2015 at 7:57 AM by info

      The scam has nothing to do with Google.They got your information because they tricked you into sending it to them by disguising themselves as Google. Please change your AOL password. And, the only thing they can do with your cellphone number, is to call you and attempt to trick you into sending more information, or money.

  • August 15, 2015 at 8:38 AM by an anonymous user from: Orlando, Florida, United States

    Here is another malicious email that you should delete if you have received it:

    "Hello:

    You will find two documents for you to carefully go through them using google-Doc online, please let me know your opinion

    Click sign-in to view, The file is too large so I couldn't attach it.

    Kind regards."

  • July 31, 2015 at 1:37 PM by an anonymous user from: New York, United States

    If my password is changed will my account be safe or will the hackers use it in some way?

    • July 31, 2015 at 2:18 PM by info

      Yes, your account will be safe, because changing your password will boot the cyber-criminals out of it. Also, you may use Google 2-Step verification process, which will make your account even more secured. <a href="/article/2012/12/15/what-is-google-2-step-verification/">Click here</a> for information.

  • July 7, 2015 at 11:30 AM by info

    If you have received the following email message, please do not follow the instructions in it; delete it instead.

    "Spreadsheet: You have new interesting investment broadcast shared with you Via Google docs

    Click to open: Shared File"

  • July 7, 2015 at 11:02 AM by an anonymous user from: Brighton, England, United Kingdom

    What is Google doing about it?

  • July 1, 2015 at 9:24 AM by an anonymous user from: Toronto, Ontario, Canada

    I fell for the scam, but put in the incorrect password into the fake login. I changed my password anyway.

    I replied to the fake email asking to send the so-called urgent document as an attachment. Needless to say, if one is sent back I won't be opening it!

    Is my account still at risk? What's the best way to ensure you've actually contacted the person whose account has been compromised if the only contact info you have is their email?

    • July 1, 2015 at 10:19 AM by info

      Your account is not at risk, but never respond to those malicious email messages. This is because you are indicating to the cyber-criminals that your email account is active, so they will continue to send you more malicious emails.

      There is no other way of contacting someone who's email account has been compromised.

  • July 1, 2015 at 12:43 AM by an anonymous user from: Minsk, Minsk City, Belarus

    Hi,

    I got an email from my acquaintance:

    -

    "Subject: Please view these files I uploaded for you using Google drive

    Body: I have securely uploaded a files for you using Google Drive.

    Visit www.google.com/drive and sign in using your email to view.

    Thank You

    <real credential from user>"

    -

    I didn't expect that it was spam and opened the link. Then my friends received the same the same email from me with my contacts.

    How I can stop these emails? (I've already changed my password)

    Thank you.

    • July 1, 2015 at 7:56 AM by info

      You cannot stop the emails. But you may filter them by marking them as junk or spam.

      Educating people about those emails is currently the only solution.

  • June 30, 2015 at 11:35 PM by an anonymous user from: Auckland, New Zealand

    I just received an email from my university and it shows the same thing but their using a different website. I was suspicious so I didn't log-in. I replied to the email though, will that harm me or my computer?

    • July 1, 2015 at 7:52 AM by info

      No, it will not harm your computer but you should not respond to those emails.

      Responding will only tell the cybercriminals that your email address is active, so they will continue to send you more malicious emails.

  • June 22, 2015 at 10:52 AM by an anonymous user from: Ashburn, Virginia, United States

    I got an email from an old coworker with an Adobe PDF attachment -supposedly-but it took me to Google and had me sign in, which I did, but then realized that it wasn't a google address and immediately changed my password.

    • June 22, 2015 at 11:18 AM by info

      We recommend that you use <a href="/article/2012/12/15/what-is-google-2-step-verification/">Google 2-Step Verification</a>. This will help protect your account by preventing cyber-criminals from gaining access to your account, even if they were able to get a hold of your username and password.

  • June 17, 2015 at 9:35 AM by an anonymous user from: Taipei City, Taiwan, Taiwan

    Message says:

    - -

    "Kindly refer to the secured project document

    More PDF copies would be forwarded to you later in the day

    Thanks"

    - -

    It's from one of my friends email. I think is a scam, I clicked on the link, Google Chrome said Phishing attack ahead. "martijncornelissen.com" was the website blocked.

    • June 17, 2015 at 12:01 PM by info

      It is a scam.

  • June 12, 2015 at 11:24 AM by an anonymous user from: Austin, Texas, United States

    I unfortunately fell for this, but I put in my Hotmail account information. Can they still access that or just Google account info? I did try to change my password but it's making me wait until my security feature is updated! Frustrating!

    • June 12, 2015 at 11:43 AM by info

      They can only access the account that you have provided the information for. So, if you have given them your Hotmail information, they won't be able to access your Google.

  • May 21, 2015 at 4:30 PM by an anonymous user from: Sandton, Gauteng, South Africa

    Hi, I got a LinkedIn message from someone in my network... It seemed legit so I have entered my email and password...

    - - -

    "Greetings,

    Hope you have being well? Consider this a heads up, there is a Business opportunity that should interest you and I'm considering a partnership with you if you're interested.

    Kindly review the secured uploaded Documents on Drop Box and details on the links to have a better understanding of what it entails: http://dropboxsecuredoc. aprendadigital.com/-/"

    • May 21, 2015 at 4:41 PM by info

      The email is a phishing scam. Please change your password immediately.

      • May 21, 2015 at 4:49 PM by an anonymous user from: Sandton, Gauteng, South Africa

        Thanks, This is scary - I got the message via LinkedIn - and this was one of my contacts in LinkedIn, so I obviously clicked on the link, which I never normally do, but everything seemed legit - On the LinkedIn website, from a LinkedIn contact in my network, etc - and this was about a business opportunity - so I obviously clicked on the link to read more...

        I have updated my password - hopefully not too late. I use the same password for many sites, so I will have to update ALL of the passwords. Thanks!

  • May 20, 2015 at 9:24 AM by an anonymous user from: Pontiac, Michigan, United States

    I just received an e-mail from Google beta saying I have won a money, randomly chosen, for using google search engine an accillary sevices.

    The email ask for information ( name address etc...) gives a number to call Gary Hardy...I thought you should know... Gail

  • May 19, 2015 at 10:42 AM by an anonymous user from: Edinburgh, Scotland, United Kingdom

    This was the message I received in my e-mail from a friend:

    "How are you doing today Please find document on google doc, Very important for you to see, please click here."

    I clicked on it but nothing opened. Is my laptop still at risk?

    • May 19, 2015 at 10:44 AM by info

      No. Your computer will only get infect if you download and open a malicious file.

  • May 10, 2015 at 1:27 PM by an anonymous user from: New York, United States

    If I clicked on the link but did not enter my password or ID, am I safe.

    • May 10, 2015 at 5:57 PM by info

      Yes.

  • May 4, 2015 at 10:19 AM by an anonymous user from: Newark, New Jersey, United States

    I received a email saying someone whom I do not know "Ellen Catlin shared "files" with you" in a dropbox. All I have to do is verify my email address, sounds fishy to me what do you think?

    • May 4, 2015 at 1:06 PM by info

      Yes, it is a scam.

  • April 29, 2015 at 6:08 AM by an anonymous user from: Canberra, Australian Capital Territory, Australia

    I sent a new email back to the email address of my colleague to check if it was from him. The spammer replied saying YES.

    Beware it looks as though they are also able to intercept email which is worrying. I clicked on the link and sure enough it took me to Google docs via a suspicious website address that I noticed in the address bar.

    I didn't provide my details to them within Google docs.

    I am hoping I am safe.

    • April 29, 2015 at 9:04 AM by info

      Once you didn't provide them with any information, you are OK, otherwise, change your password immediately.

  • April 4, 2015 at 10:03 AM by an anonymous user from: Kuwait City, Al Asimah, Kuwait

    How can I change my password?

    • April 4, 2015 at 10:07 AM by info

      <a href="https://www.google.com/settings/passwordchange" target="_blank">Click here to change your Google password.</a>

  • March 31, 2015 at 12:48 PM by an anonymous user from: Jackson, New Jersey, United States

    I did enter my email address and password; it has already started sending the same email to people in my address book, what now? and what is it trying to do?

    • March 31, 2015 at 12:59 PM by info

      The purpose of the email is to use your account to send the same email messages to your friends so they will fall for the same scam also. Change your password immediately and share this article with your friends and family.

      Remember, they will have access to your email account and will be able to use it fraudulently, if you do not change your password.

  • March 27, 2015 at 12:47 PM by an anonymous user from: Babylon, New York, United States

    Google hacking:

    http://podcast.com.br/busy/mine /docss/contactform.php

  • March 27, 2015 at 5:47 AM by an anonymous user from: New Orleans, Louisiana, United States

    I opened one of these stupid attachments but didn't log in. Am I still infected?

    • March 27, 2015 at 6:10 AM by info

      This scam (phishing), steals your information; it doesn't infect your computer with a virus.

      • March 27, 2015 at 6:13 AM by an anonymous user from: New Orleans, Louisiana, United States

        Ok thank you, but if I didn't log in is my information still compromised?

        • March 27, 2015 at 6:18 AM by info

          No, because they need your username and password in order to get into your account.

          • March 27, 2015 at 6:21 AM by an anonymous user from: New Orleans, Louisiana, United States

            Thank you so much. This site was a God send.

  • March 26, 2015 at 1:30 PM by an anonymous user from: Islamabad, Pakistan

    I had receive an email from rama krishna <krama442@gmail.com>

    The email body is:

    "(Good Day!

    I would like to purchase a large quantity of goods with good quality from your company. Please I have attached to this email our company order of your products which we are interested in.

    We would like you to review our order and send us a quotation based on the attached order. Please endeavor to give us your best prices and your mode of payment.

    I wait for your swift response soonest.

    Thanks and Regards",

    and the sender attached the file named "T17list.doc.htm"

    when I open this file a window appears like google login page and asking for google password again.

    I want to know that what is this, is it hacking? phishing?

    • March 26, 2015 at 3:50 PM by info

      The email is phishing scam attempting to steal your Google account username and password, so that the cyber-criminals behind it can hijack your account.

      If you have attempted to login at the fake Google page, please change your password immediately.

  • March 26, 2015 at 6:32 AM by an anonymous user from: London, England, United Kingdom

    Got this today.

    Thought I'd share it here before deleting so a search of the text will bring up this site:

    "I tried to contact you yesterday but didn't get a reply. You need to see this report, I uploaded it using google drive because I'm having problems with attachments.

    Please check and get back to me this is very important"

  • March 22, 2015 at 9:20 AM by an anonymous user from: Greenwood Village, Colorado, United States

    I received the following and believe it is a scam. The text was attached to an email with no subject:

    - - -

    "Dear Winner.

    This Email is to inform you that your email account has just won you ($750, 000.00

    USD) from the Google Gmail Promotion. Online email lottery Power by Google

    A random email balloting of 80 million addresses of the people that are active online,

    among the people that subscribed to GOOGLE MAIL worldwide.

    We have selected 7 winners from 80 million emails, without the winner applying. We

    are congratulating you for being one of the lucky beneficiaries of this annual promotion.

    However you will have to fill and Email the Below Details To: gogm@qq.com

    Full name

    Contact Address

    Age

    Telephone Number

    S*x

    Occupation

    Country

    STATE

    Contact Lottery Events manager

    Submit your information to the Events Manager’s email stated below

    Marta Francisco

    Email Address: gogm@qq.com

    (Events Manager)"

    • March 22, 2015 at 9:39 AM by info

      It is a scam. There is no Gmail lottery, promotion or sweepstakes.

  • March 7, 2015 at 11:44 AM by an anonymous user from: Modesto, California, United States

    Omg this is what was done to me! I had all these things happen and had at least 6000 stolen. They attacked every means possible an locked me out of all account for a year with no notification.

    They made me prove from 20 different merchants I didnt. Now cant give a accurate account or refund correct amount.

    This is the first I saw of this I downloaded nothing! If anyone else had it happen please reply. Google is aware an wont admit it! Please contact me.

  • March 7, 2015 at 10:32 AM by an anonymous user from: Gallatin, Tennessee, United States

    I received a Google e-mail, stating that I was one of eight Google Promotion winners, who had been randomly chosen and I won $750,000.00. They requested info, such as my name, age, address and country. I did not respond, thinking it is a scam.

    Beware of these types of Phishing scams.

    • March 7, 2015 at 10:45 AM by info

      It is a scam.

  • March 4, 2015 at 4:41 PM by an anonymous user from: Pueblo, Colorado, United States

    Thank you as I got a phishing Google Docs page and thought it was from my parent company and clicked on the link that took me to sign in my email and password. I did not notice it said greensolutions at the top as shown above, but when I did sign in it took me to my personal settings and the page that lists my phone number and alternate email address and my security question. I closed it out and immediately changed my password 3 times and then changed my security question. Does this phishing now have all my info and now that I changed my password can they still get into my gmail and google accounts?

    • March 4, 2015 at 5:08 PM by info

      Changing your password and security questions will prevent them from accessing your account. Since you realized that it was a scam so quickly, I doubt they logged into your account and gather all or most of your information.

  • February 28, 2015 at 9:29 AM by an anonymous user from: Lincoln, Ontario, Canada

    I have deleted the app Google Drive, does that get rid of the phishing scam

    • February 28, 2015 at 8:50 PM by info

      Google Drive app doesn't cause phishing scam.

  • February 26, 2015 at 7:14 PM by an anonymous user from: Little Rock, Arkansas, United States

    Our users were warned that our Google doc had a virus. No one else has reported this issue but wonder how to check for a virus on a shared Google doc. In this case it is a spread sheet

    • February 26, 2015 at 10:06 PM by info

      You are not able to get a virus from a Google Doc Spreadsheet.

  • February 24, 2015 at 9:22 AM by an anonymous user from: Richardson, Texas, United States

    I got the phishing email below. That email address is not mine for Google, but the first part is correct for a vacation site I frequent.

    "Hi xxxxxx,

    Someone recently used your password to try to sign in to your Google Account - rummeljac69@gmail.com.

    We prevented the sign-in attempt in case this was a hijacker trying to access your account. Please review the details of the sign-in attempt:

    Monday, February 23, 6:26 PM CST

    IP Address: 107.139.115.36 (107-139-115-36.lightspeed .rcsntx.sbcglobal.net)

    Location: xxxxxxx, TX, USA

    If you do not recognize this sign-in attempt, someone else might be trying to access your account. You should sign in to your account and reset your password immediately.

    Reset password

    Sincerely,

    The Google Accounts team"

  • February 21, 2015 at 3:50 AM by an anonymous user from: Nicosia, Cyprus

    I had this email a week or so ago. I clicked on the link to look at the site it directed me to, but didn't fill in any information and just closed the site.

    I thought that would be okay but ever since then I have been getting low memory messages that I have never had before and the computer is running really slowly.

    Just went to use system restore to try and clear it and, surprise, all my restore points are gone.

    Could it be connected to just clicking the link on the email?

    • February 21, 2015 at 4:39 AM by info

      Your computer could have gotten infected by a drive-by-infection or drive-by-download.

      This technique is used by cyber-criminals to infect their victims' computers by asking them (victims) to visit a malicious website.

      The victims do not have to download anything from the malicious website. The website will check the victims' computers and take advantage of any vulnerability it finds.

      So, make sure your computer's operating system and other programs on it are updated.

      Then do a full scan of your computer with the antivirus installed on it.

      • February 23, 2015 at 9:42 AM by an anonymous user from: Aglantzia, Nicosia, Cyprus

        Thanks for that. I have run scans with both Norton and AVG and deleted everything that they picked up and also ran Malwarebytes and got rid of some more.

        Low memory messages have now gone and everything is running smoothly again, so fingers crossed I got it.

  • February 18, 2015 at 12:45 PM by an anonymous user from: Chicago, Illinois, United States

    I went ahead and filled out the 2nd form that asks for your password, but gave them a phony gibberish password.

    The phony password "worked" and then linked me to a 313 page PDF about business economics.

    I guess the idea is that by actually sending you a generic document you might never know you'd been scammed.

    I hope they choke on my phony password!

  • February 18, 2015 at 11:40 AM by an anonymous user from: Chicago, Illinois, United States

    I fell for the first step where they ask for your gmail address and phone number. But that took me to a second step where they asked for my password. I didn't fall for that one. Do you think I'm ok, or is there some nefarious use they can make from my gmail address and mobile phone number?

    • February 18, 2015 at 11:44 AM by info

      You are ok if you did not give them your password. We recommend that you use Google "2-Step Verification" process to protect your account.

      <a href="/article/2012/12/15/what-is-google-2-step-verification/">Click here for information</a>.

  • January 19, 2015 at 6:38 AM by an anonymous user from: Kuwait City, Al Asimah, Kuwait

    I got this message:

    "Hello,

    Check out vital attached documents that I sent to you via Google Docs.to access the documents CLICK HERE to register with your email address and password.

    Regards,"

  • January 14, 2015 at 2:51 PM by an anonymous user from: Los Angeles, California, United States

    I believe I was just a victim of this e-mail? Is this real? Help!

    "Hello Customer,

    Considering the highly improved database. Many of your messages are placed on pending until you restore update. Thanks for the understanding.

    Regards,

    Gmail Care Center"

    • January 14, 2015 at 3:16 PM by info

      It is a scam. Do not follow the instructions in the email.

  • January 13, 2015 at 5:20 PM by an anonymous user from: London, England, United Kingdom

    Here is another loan scam:

    "End your financial worries today:

    I can smile with this God Fearing man I received a loan of $55,000.USD and two of my colleagues have also received loans from this man without any difficulty. I advise you not to choose the wrong person if you actually apply for a cash loan for your project and any other. I publish this message because Andres Williams made me feel blessed with his loan.

    It is through a friend I met this honest and generous God fearing man who helped me get this loan fund to regulate your life, You needed financial help, You are stuck, No access to bank credit, or do not have the benefit of a bank, you need to finance your construction, real estate development, creating your own business up your personal business, you have seen and need to make money, a bad credit or need money to pay bills or debts. So I advise you out there to kindly contact and meet you for the services you ask of him.

    His contact address: ( andresloanfirm07@live.com )

    Contact him for more information, be clear and honest."

  • January 10, 2015 at 9:05 PM by an anonymous user from: Canandaigua, New York, United States

    Received an email from dannymelo79@rogers.com stating support from google my picture had been repaired. I did not click on it as I have no pictures.

  • January 9, 2015 at 5:24 PM by an anonymous user from: Dallas, Texas, United States

    I got one today as well. From a school fine arts director. This is the link it was sending me to to open it. However, I didn't put in my gmail account. I tried to use my aol account but it never loaded the document. Shall change my passwords ASAP.

    http://xsdesigning.in/review/drive /contactform.php

  • January 4, 2015 at 5:45 PM by an anonymous user from: Gold Coast, Queensland, Australia

    I got this message, purportedly from someone in my contacts list:

    - - - - -

    "Drew used Google Docs sending you a document.For immediate access

    VIEW|DOCUMENT

    Thanks,

    The Google Docs Team

    Questions? Take a quick tour or visit the Google Docs Help Center. Please note this is an automated message - we won't see it if you Reply to this."

    - - - - -

    It took me to a site - frayanmusic.com - and asked for email address and mobile phone number.

  • December 25, 2014 at 5:34 PM by an anonymous user from: Ashburn, Virginia, United States

    I just got one (I think) from "drivegooogle.com"

  • December 23, 2014 at 1:12 PM by an anonymous user from: Meadville, Pennsylvania, United States

    So, if I have received this email from a contact that I know, and who is in my contacts, does this mean that the hackers have already compromised my contact list to send me messages from someone that is known to me? Or does it mean that the sender's account has been compromised?

    • December 23, 2014 at 4:00 PM by info

      They are using a technique called Email Spoofing. Email Spoofing allows someone to send an email message from an account and let it appears as if it was sent from another.

      For example:

      You can send an email message from your account and change the "From" email address to "president@whitehouse.gov". Now, the person who receives the email message will think it came from the president at the Whitehouse, although the email was sent from your account.

      <a href="/article/2013/1/28/what-is-email-spoofing/">Click here for more information about Email Spoofing</a>.

  • December 22, 2014 at 9:18 AM by an anonymous user from: Melbourne, Victoria, Australia

    I just received the following email from a recognized contact in my Gmail. Her email was sent BCC so it may have gone to her entire contact list.

    -

    Subject: Morning

    Message:

    Good

    I've sent a file via Google Doc to you,please view [File] online

    Thanks

    -

    The [File] was hyperlinked to the address

    - http://www.desertsportswear.com/Memo/new google doc/indexa2aa.html

    I opened the email to view the message and I did click on the link, but I did not proceed any further after viewing the bogus looking page and did not enter any sensitive information (usernames or passwords etc).

    After looking up what to do at various sites (like this one), I immediately took the precaution of changing my Google password anyway.

    If I didn't enter any sensitive info (but only browsed to the linked page from the email), is my Google account still at risk?

    - - -

  • December 18, 2014 at 6:37 AM by an anonymous user from: Toronto, Ontario, Canada

    I got this spam. Then I ran the google account security www.google.com/ settings/security

    I found that some one signed into my gmail from another town.

    I changed the password but wonder if the hackers were found yet?

  • December 8, 2014 at 10:52 PM by an anonymous user from: Mission, Kansas, United States

    Received email - GMAIL "You have 4 messages that must be read." View full header was viewed and there was NO gmail sender.

    IP source came from 212.193.250 .122 and was sent by Eblane.com

    Hostname was rdr.nichost .ru and ISP was ROSNIROS (Russian Inststute for Public Networks).

  • December 2, 2014 at 1:56 PM by an anonymous user from: New York, United States

    I deleted my Google Account.I changed my gmail to a yahoo email. Google still suspended my g mail. Since then, I get notifications and pop up saying "Google Account Required.

    It linked me back to Google Account, which I deleted and wants me to login. I've looked for a few days wanting to know if its really from Google? I was told by Google help that if I log back into account, it will be h**l to get it off again. I will check the senders link. Thank you

  • December 2, 2014 at 1:43 PM by an anonymous user from: Minneapolis, Minnesota, United States

    Just received one today...from a known contact, reading:

    "I've just attached a document that needs to be shared with you in the below Google Drive.

    Open 11282014-0930.pdf below to view.

    Document 11282014-0930.pdf

    Please review and write me back on it, as it is very important and secured as well.

    Google Drive Logo for Google Drive

    Yikes.

  • December 2, 2014 at 6:13 AM by an anonymous user from: Hartford, Connecticut, United States

    Here is one I received from noreply.docsalerts@gmail.com

    Subject: You have 1 Doc shared with you

    "You have a pending incoming docs shared with you via Google docs

    Click to open: File (hyperlink is to: http://vextm.com/sos.php)

    Google Docs makes it easy to create, store and share online documents, spreadsheets and presentations."

  • November 8, 2014 at 2:38 PM by an anonymous user from: Livonia, Michigan, United States

    I received an email (copied below) supposedly from a friend. Looked suspicious so I didn't do the click thing. The friend said she never sent anything like this.

    - -

    Hello

    I've Shared a confidential Document attached with Google Drop Box.

    CLICK DOCUMENT

    Thanks!

  • October 18, 2014 at 4:25 PM by an anonymous user from: Washington, District of Columbia, United States

    I received an email telling me google stopped access into my account last night and that I should change my password. Do you send this kind of email?

    • October 18, 2014 at 6:26 PM by info

      Please use the 'Contact Us' form to send the email to us so we can analyse it.

  • October 17, 2014 at 3:18 PM by an anonymous user from: San Jose, California, United States

    I received an email saying it contained a confidential document from a private mediator. When I tried to view it sent me to a Microsoft website that asked for the email type and my password.

  • October 14, 2014 at 5:39 PM by an anonymous user from: Doha, Baladiyat ad Daw?ah, Qatar

    I received an e-mail like this from a friend; do this mean his e-mail account has been hacked?

    • October 14, 2014 at 5:49 PM by info

      No. There is a technique called email spoofing used by cyber-criminals and spammers, to trick people into believing that an email message came from someone, although the message was not sent from that person's email account. <a href="/article/2013/1/28/what-is-email-spoofing/" target="_blank">Click here for more information</a>.

  • October 14, 2014 at 8:10 AM by an anonymous user from: Fort Wayne, Indiana, United States

    I just got one of this. Did not open it thankfully, but they are using a new address,

    Here is the link in my email: http://madwaystudio.com.ve/~madwayst/ web_config/Documentss /account-login-shareing -docss/index.php

    Just an FYI.

    John.

  • October 10, 2014 at 1:32 PM by an anonymous user from: London, England, United Kingdom

    Great advice. Thanks

  • October 9, 2014 at 4:18 AM by an anonymous user from: Piggotts, Antigua, Antigua and Barbuda

    why did the message disappear from my inbox, when I wanted to delete it?

  • October 6, 2014 at 5:00 PM by an anonymous user from: Jacksonville, Florida, United States

    I stupidly opened the Google docs email and input my user name and password. As soon as I realized what I had done, I changed my password but now all my new emails are going into my trash box and not my inbox. Can you help?

    • October 8, 2014 at 3:15 PM by an anonymous user from: Solna, Stockholm, Sweden

      Hi, they also added filters. Go to Settings > Filters and you'll see some filters that automatically puts the e-mails in thrash.

  • August 27, 2014 at 10:18 AM by an anonymous user from: Negaunee, Michigan, United States

    Does it affect iPhones? I opened the email and entered my address but not the password. Them I closed the browser and deleted both messages - I got two of them. And emptied the trash

    • August 27, 2014 at 10:46 AM by info

      This is a phishing scam designed to steal your username and password. So, it doesn't matter which device you are on.

  • August 18, 2014 at 3:31 PM by an anonymous user from: Spanish Fork, Utah, United States

    I received an email stating that my google mail was terminating. see address below:

    no-reply <cnb @dju.com> click on a link

    Obviously, I am not clicking on a link.

    I am sure that such is not valid and even with a hybrid goggle address I would be nervous.

    Please advise if this email address above is valid and has anything to do with goggle.

    J. Carroll

    • August 18, 2014 at 3:39 PM by info

      The email is a scam.

  • July 11, 2014 at 9:40 PM by an anonymous user from: Vancouver, British Columbia, Canada

    Received one today:

    Subject: Hello

    Message:

    You have a pending incoming docs shared with you via Google docs

    Click to open:? e?-?Statement?

    ?

    Google Docs makes it easy to create, store and share online documents, spreadsheets and presentations.

    Link took me to: http://residentiesaa nzee.be/images/ googledocs/ googledrives/

  • May 23, 2014 at 3:30 PM by an anonymous user from: Kalamazoo, Michigan, United States

    Make sure you check your gmail settings under "Forwarding", to make sure that your emails are not being forwarded to a different account.

  • May 19, 2014 at 7:23 PM by an anonymous user from: Woodstock, Ontario, Canada

    I got stung by one too and the link was to

    http://viewwwinng.altervista.org/index.php

  • May 19, 2014 at 10:12 AM by an anonymous user from: Huntsville, Alabama, United States

    Beware of this:

    -

    Subject: Please review

    You have received a new document via Googledoc.

    Click Here to review your secure document.

    Link: www.fabbricanove.com/index.php

  • May 9, 2014 at 2:44 AM by an anonymous user from: The Hague, South Holland, Netherlands

    They tried it with me as well, i just got this e-mail on my company mailadrfess, like they want to purchase products! I didn't fall for it... Watch out!

    -

    Hello Mark,

    I appreciate your response, i'm trying to send you some of the documents through attachment, but it is multiple, so i had to save it online and shared. Click the following link to download the file(s):

    http://www.google.com/drive /globalinvestments/files2014 /purchase-order002#.pdf

    Please inform me if you can meet up with the needed supply quantity and forward your quotation or proforma invoice to me or you upload it through the same link above.

    Hoping for an anticipated business cooperation,

    Thank you.

    Robert Hao

    Sales - Department

  • May 8, 2014 at 9:29 AM by an anonymous user from: London, England, United Kingdom

    Does this just affect Gmail accounts?

    • May 8, 2014 at 10:33 AM by info

      No, if you put any other email address username and password on the phishing or fake website, it will be stolen and used to hijack that account.

  • May 4, 2014 at 3:05 PM by an anonymous user from: Elmhurst, Illinois, United States

    Got one today - 5/4 looks like this:

    On the subject line: An Important Document was sent to you from your Bank

    Viewer

    Use Google Docs to quickly view documents online without leaving your browser.

    -

    Hello!

    An Important Document was sent to you by your Financial Institution through Google Docs Viewer.

    To view this document, please follow our secure web server link below and sign in with your email address.

    To Get Started, :

    Click Here

    Sincerely,

    The Gmail Team

    Google Docs

    Copyright © 2014 Google Docs. All rights reserved.

  • April 23, 2014 at 12:47 PM by an anonymous user from: Sydney, New South Wales, Australia

    I gave out my google password. They emailed my Contacts. Now half my Contacts list on all devices are missing. When I click Restore Contacts to one week ago in My Google Account after first changing my password, the missing half return only and the other half of my Contacts disappear that I had previously. How do I regain my full contacts list on windows laptop and iphone and ipad? Thank you

  • April 19, 2014 at 8:11 PM by dtaylor from: New York, United States

    Someone set up a Google Apps account and somehow connected it to my gmail account a got access all of my contacts and past emails. Then they added an alphabetical letter to the middle of my business email address (which they must have gotten from my past emails) and sent out emails to all of my gmail contacts with this fake email address that has one extra letter in it. The fraudulent email contains a link to a supposedly google drive app and the email heading states "Follow-up Shared Doc!"

    Before doing this they sent a fraudulent email to my broker and asked them to wire money to two foreign bank accounts.

    Am I right to assume that they did not get access to my computer, only my gmail account? I have done a few scans and nothing turns up.

    Thank you.

    DT

    • April 20, 2014 at 2:24 AM by info

      Change your passwords immediately.

  • April 16, 2014 at 12:46 AM by an anonymous user from: Ross-on-Wye, England, United Kingdom

    I was shocked to see a message sent by my email-id. How do they get access to ur email account? Are there any ways to stop them?

  • April 14, 2014 at 11:15 AM by an anonymous user from: Ashburn, Virginia, United States

    I have been sent these emails,never opened them because I was suspicious,now my contact list is being sent this email from me. How is that happening?

    • April 14, 2014 at 12:58 PM by info

      The emails probably are not being sent from your email account.

      Maybe the emails that the persons on your contact list are receiving, were sent from some other email account, but the sender spoofed his/her email address.

      Email spoofing allows someone to change the "From" address of an email message, to make it appears as if it came from someone else.

      Here is an example:

      I can send an email message to you, and change the "From" address to "president@whitehouse.gov". So, when you receive the email message it will appear as if it came from the Whitehouse, instead of me.

      But, if they are still sceptical, please change your email address password.

  • April 4, 2014 at 2:55 PM by an anonymous user from: Toronto, Ontario, Canada

    The scam go to or points to: http://www.untouchedworlds.com/pay/Google_Doc/secure Login.htm

    Please kindly check the Document i sent you via Google Document.

    And get back to me.

    VIEW ORIGINAL DOCS HERE

    And log in with This email.

    It is very important.

    Regards.

    Ronald L Korf, CEO

    Korf Continental, Korf Auto Group | www.korfautogroup.com

    Ford Lincoln Chevrolet Buick GMC Chrysler Dodge Jeep Ram

    500 West 8th Avenue, Yuma, CO 80759

    (T 970-848-5361 | C 970-396-5275)

    rlk@korfauto.com ronkorf@outlook.com

  • April 1, 2014 at 11:51 AM by an anonymous user from: Nether Providence Township, Pennsylvania, United States

    OK, so if I already clicked, etc., and already changed my email password, I should be ok, right?

    • April 1, 2014 at 11:58 AM by info

      Yes, you should be ok.

  • March 27, 2014 at 8:00 AM by an anonymous user from: Berlin, Germany

    Here is another one of these scams:

    -

    "Just Uploaded Some Files For You Using Google Docs

    Kindly Click On Here To View The File I Upload For You.

    Best Regards."

    Link points to http://fullform.co.in/Hub/gdocs/index.htm

  • March 23, 2014 at 5:53 AM by an anonymous user from: Melbourne, Victoria, Australia

    I have received one of these emails and deleted it but i when I send it to my trash and then delete the trash it appears again. How do I remove it permanently.

  • March 19, 2014 at 9:24 PM by an anonymous user from: Newark, New Jersey, United States

    All my email contacts were deleted and the scam was sent to them. I have changed my password and secured my account but I get credit card bills, bank statements etc sent to my email account. Are they in danger? What should I be looking out for?

    • March 20, 2014 at 12:19 AM by info

      Once you have changed your email address password, you should be ok.

  • February 27, 2014 at 2:41 PM by an anonymous user from: Ashburn, Virginia, United States

    Noticed that my gmail security said: logged in from Dublin, CA with the following IP address: 108.200.178.199

    That was not legit!

  • February 27, 2014 at 8:21 AM by an anonymous user from: Denver, Colorado, United States

    I have been receiving these and have contacted Google, and they advise me to click on the links and then click the "report abuse" link at the bottom of the page.

    That's right, Google support says to click on the links! I responded and say "do you really recommend that I click on links in a phishing email? If so, there is a problem with your system". They don't respond.

    Thanks Google

  • February 26, 2014 at 11:59 AM by an anonymous user from: Salem, Oregon, United States

    Please note that the scammers/phishers will examine your gmail files and addressbook and forward the scam to all your contacts. Furthermore, they will examine your contacts and if they find a useful one, like the one to your broker or financial adviser, they will try to obtain money from your accounts, posing as you.

  • February 21, 2014 at 1:15 AM by an anonymous user from: New York, United States

    I am usually pretty savvy to email scams, trojan horses, etc. but this one caught me off guard. After entering my email and password, I was sent to Google Template Gallery. I've not used this feature and there was nothing except the stock templates. At that point, I finally got suspicious and "Googled" the phrase in the incoming email. That brought me to this page and the awareness that I'd been "Phished". I immediately went back to my accounts and changed passwords.

    Thanks for being here and keeping watch.

  • February 17, 2014 at 9:19 AM by an anonymous user from: Toronto, Ontario, Canada

    we are receiving messages such as : you have shared documets with (name). <br/>we are confused as we have not shared documents.. nor do we know who (name) is.

  • February 13, 2014 at 6:26 PM by info

    From: Gmail Team <no-reply @securegmail.com>

    Date: 12 February 2014 13:13:57 GMT

    Subject: Google Document

    You have a pending incoming docs shared with you via Google docs

    Click to open: eStatement.pdf

    Google Docs makes it easy to create, store and share online documents, spreadsheets and presentations.

    Google®

    -

    The link goes to phishing website: cafesevda.com/google/index.htm

  • February 8, 2014 at 11:03 PM by an anonymous user from: Muscat, Oman

    Today I received the same. Thanks for information about it.I am pasting below the spam message from one of my friend.<br/>I sent you a document via Google drive, follow the link Click Here and just sign in with your email to view it.<br/>Thanks

  • February 5, 2014 at 6:39 PM by an anonymous user from: Salt Lake City, Utah, United States

    Just got this email from someone I know, there were email addresses in the distribution list that could have come from their computers, including my email address. I sent a 'reply all' with a warning not to open it and a link to this blog.

  • February 3, 2014 at 7:14 AM by an anonymous user from: Montreal, Quebec, Canada

    Hi received a similar email from a previous employer:<br/><br/>-<br/>Hello,<br/><br/> I've uploaded an attachments to a Google Drive in a secure way to view a document CLICK HERE to view, its very important.<br/><br/>Thanks.<br/>-<br/><br/>Link points to hxxp://www.espezia.com.ar/bin/gdocs/index.htm<br/><br/>I was suspicious so I forwarded the email directly to my previous employer to have them confirm the email was legit and seconds after I got an email from them saying it was alright to open it.<br/><br/>Looks like the account is hacked and they can even respond to email! Beware!

  • February 2, 2014 at 1:56 AM by an anonymous user from: Phoenix, Arizona, United States

    Phishing scams are everywhere. If you happen to click on a link from a suspicious e-mail, always check the URL in your address bar. An e-mail from google should send you to a URL that contains "google.com" That is their domain and everything pertinent to your privacy should go through that. Everything else should be completely disregarded. This is the same for any large, reputable company. Beware of this for banking too, which is a very popular place for phishing scams!

    • March 11, 2014 at 5:37 AM by an anonymous user from: Charlottesville, Virginia, United States

      Google.com proves nothing. It just means that the phisher got a google address too.

  • January 29, 2014 at 2:25 PM by an anonymous user from: Hilo, Hawaii, United States

    Well, I couldn't find a place on Google to report this email. Google needs to make it easier for people to quickly report stuff and then send out alerts to users. My bank has an email address that starts with spoof.bankname_url@...to quickly forward this c**p to their security dept.

  • January 28, 2014 at 3:36 PM by an anonymous user from: Holland, Michigan, United States

    This is pretty amusing to watch; someone in my school has a compromised account and sent it to every person in the school. Since then, numerous accounts have been compromised as well, with more emails sent. I am just facepalming at how gullible my co-students are. As an avid internet user, I know all about phishing and related methods, so I'm wondering how people don't notice the obvious signs.

  • January 27, 2014 at 5:43 PM by an anonymous user from: Kahului, Hawaii, United States

    We have 3 gmail accounts hacked by the google docs scam. I have reset passwords, but cannot reopen my gmail. All pertinent communications are lost!

  • January 24, 2014 at 8:45 AM by an anonymous user from: Boston, Massachusetts, United States

    Received email from GOOGLESECURITYALERTS @gmailteam .on,I roost.com

    Stating my email acct and password were recently used on another computer, mobile device or other location. Then it has a line to click on to verify.

    Question. Is this legit, who used my acct, or should I immediately delete.

    Thanks

    • February 13, 2014 at 6:35 PM by info

      The email message that you have received is a phishing scam.

    • January 24, 2014 at 11:17 AM by info

      Can you please send the email message to us. Our contact information is located on the "Contact Us" page.

  • January 10, 2014 at 3:31 PM by an anonymous user from: New York, United States

    I received this e-mail, but I did not open because I suspected it was a scam. But the hacker used my yahoo user name. What is really worry is that these people are sending the same message to all my contacts.

  • January 9, 2014 at 12:50 PM by an anonymous user from: Washington, District of Columbia, United States

    Strangely I've received two of these emails and when I replied to ask if it was genuinely sent from the user I received the reply: <br/>"Yes log on to see the document.<br/><br/>Thanks". <br/><br/>Even with this reply I didn't risk opening them since the people sending the request were not close acquaintances.

  • January 8, 2014 at 9:21 AM by an anonymous user from: Toronto, Ontario, Canada

    Just received:<br/><br/>"Hi,<br/><br/>Please view this Document I uploaded for you using Google Doc.<br/>Click Here and sign in your email to see the important document Secured Verified Page.<br/><br/>Thanks."<br/><br/>From: Jermal Alleyne <alleyne.q @gmail.com>

  • December 28, 2013 at 12:27 AM by an anonymous user from: Fairview, Utah, United States

    I received a slightly modified version of the email today from a business acquaintance's Hotmail account. The "Click here" text linked to this Chinese company's website: hxxp://ez-agogo.com/documented<br/><br/>Subject: Document<br/><br/>"Please view the document i uploaded for you using Google docs.<br/> <br/>Click here just sign in with your email to view the document its very important.<br/> <br/>Thank you"

  • December 15, 2013 at 5:18 PM by an anonymous user from: Newark, New Jersey, United States

    Mine came from:

    adtechdirect.com/googleattachment shared doument/

  • December 13, 2013 at 11:53 AM by an anonymous user from: West Nyack, New York, United States

    Just got this one. Here is where it takes you to:<br/>hxxp://gmasti.net/ncdoc<br/>then redirects you to hxxp://www.himalayanrock.com/images/nrb.jpg

  • December 12, 2013 at 3:40 PM by an anonymous user from: Dallas, Texas, United States

    New phishing email address www.para-fiestas.com/js/slideshow/ googledcmnt/index.html

    Pretending to be google drive. Worded exactly as described above

  • December 6, 2013 at 2:03 AM by an anonymous user from: Washington, District of Columbia, United States

    I received an email today saying i have to upgrade my gmail account now for security reasons it asked me to reply with email address password d.o.b country or territory and alternate email and password. It said if i dont respond in 24 hours my account will be suspended if i dont do it within 2 week it would be deleted. they were doing it to find out which accounts were active or not

  • December 5, 2013 at 10:36 AM by an anonymous user from: Toronto, Ontario, Canada

    Very helpful!

  • December 3, 2013 at 8:40 AM by an anonymous user from: Washington, District of Columbia, United States

    Hi.. I received such a message and it looked so real.. It was not until I clicked on the steps and got nowhere that I thought it might not be real. Then I hit reply and found that it was her old address (which did not show up). I did change my passwords that I had put in.. Is there anything else I can do?

  • November 25, 2013 at 5:26 AM by an anonymous user from: Frankfurt, Hesse, Germany

    I just fell for this. I entered my email and password. I will change the password now. Will that be enough though?

  • November 15, 2013 at 6:39 AM by an anonymous user from: Mullingar, Leinster, Ireland

    Received such an email from helengatenby(at)gmail.com to my private email address. I do not know this person.

  • November 11, 2013 at 10:31 PM by info

    The "Dear Gmail.com Email Owner" message below is another Gmail phishing scam. <a href="/article/2013/11/11/we-are-upgrading-our-system-to-reduce-spam-phishing-gmail-scam/" target="_blank">Click here to read about it</a>.

  • November 11, 2013 at 6:28 PM by an anonymous user from: Perth, Western Australia, Australia

    Is the following a scam or genuine?<br/><br/><br/>Dear Gmail.com Email Owner,<br/><br/>We are upgrading our Email system to enable us reduce the occurrence of Spam. You are to click on the Link below to Upgrade your Email.<br/><br/>hxxp://www.byfocal.com/forms/forms/form1.html<br/><br/>Signed<br/>IT Service!<br/>System Administrator ®

  • November 11, 2013 at 11:11 AM by info

    Opening the email will not affect you. The only way you will be affected, is if you enter your username and password on the phishing or fake website.

  • November 11, 2013 at 4:03 AM by an anonymous user from: Melbourne, Victoria, Australia

    i opened this email. it looked really genuine and it even said who it was from, someone I knew, but it didn't sound like their style of email. Because I opened this email, will it send a copy to all my contacts?

  • November 1, 2013 at 2:18 PM by info

    Changing your password is the only thing than you can do. Ensure that you use a very strong password. A password that is not easily guessed.

  • November 1, 2013 at 12:03 PM by an anonymous user from: Santa Clara, California, United States

    Ok so what do you do if you did click on the link and enter your info? I got it from a client and in haste I opened it. It's a little different than the one shown above but it's definitely a phishing thing. It sent an email to all my contacts. I changed my password but what else do I need to do now? Help!

  • October 31, 2013 at 7:49 PM by info

    Opening the email will not do anything to your computer. Entering your username and password on the fake website after clicking on the link in the email message is a problem.

  • October 31, 2013 at 12:07 PM by an anonymous user from: North Vancouver District, British Columbia, Canada

    I opened the e-mail but did not click on the link. This should not be a problem right?

  • October 29, 2013 at 9:50 PM by an anonymous user from: Auckland, New Zealand

    Thank you for this. I received an email from someone I don't even know and it made me suspicious. It all looks very authentic but I still felt something wasn't right especially when it asked me to input my email and password so I did a quick search and sure enough this article came up and confirmed my suspicions. It's pretty scary because a few years ago I was more naiive and might have fallen for it. Thankfully back then these sorts of things weren't as prevalent as they are now but there are many other people who would fall victim to it including possibly the person who sent it to me because they are a real person. I google searched them and found their Facebook, website, a newspaper article and their linked in page.

  • October 8, 2013 at 9:59 PM by info

    Yes, you should be safe if change your password. Please check to ensure that your alternate email addresses are correct. If the scammers change the alternate email to theirs, they will be able to reset your password.

  • October 8, 2013 at 9:49 PM by an anonymous user from: Caracas, Distrito Federal, Venezuela

    Please, i am so worry about this. I'm safe as long as I change my email password. I changed it inmmediatly

  • October 3, 2013 at 8:01 PM by an anonymous user from: Raleigh, North Carolina, United States

    I have a mac and I saw this come into my email so I did not open it up but I did send it to trash. Then my laptops curser started to jump around and it would fly between the one window i was on and the weather and time one Mac have. I had not control so I shut it down and did a full startup and reboot. Then I went into utilities to repair. I also deleted my trash my google trash and mac trash. I think I am good. BUT just after this happened my home phone rang and it was a recording telling me it was Allegacy Fed. Credit Union, and that I needed to call 866 872 3684 as soon as possible. So I got my Mac clean and started to do some digging. So it can happen to Mac and <br/>windows I am sure. I am worried because my old HP won't start up even when I go into safe mode, it acts like it wants to then reverts back to the Dos screen. <br/>But I think my Mac is good.

  • October 1, 2013 at 2:14 AM by info

    You only need to change the password of the user names that you have entered. If you didnt enter the username and password on the phishing website for your other accounts, there is no need to change their passwords.

  • September 30, 2013 at 6:57 PM by an anonymous user from: Greenfield, California, United States

    Just to clarify - I'm safe as long as I change my email password. No need to change other passwords correct?

  • September 22, 2013 at 12:48 PM by an anonymous user from: Toronto, Ontario, Canada

    The real risk with this scam is for people who, (like myself), are stupid enough to enter the username and password to their Google or Gmail accounts. There's a very, very serious risk for people who use services like "GOOGLE WALLET", which is an online payment service, just like PayPal that you use access and use using your Google account details. <br/>I am a user of Goggle Wallet, but I was lucky not to have signed in to their fake sign in page with that particular account information. All they got from me was access to all of my contacts, who they sent the hoax message to and no doubt they'll have collected a few new suckers from my list of contacts. I sent EVERYONE in my address book an email warning them to change their password IMMEDIATELY if they inadvertently gave out their information.

  • September 13, 2013 at 6:30 PM by an anonymous user from: Denver, Colorado, United States

    New website doing the same thing. Here is the email I got...<br/><br/>From: Google Team (googleteams @usa.com) Microsoft SmartScreen classified this message as junk.<br/>Sent: Fri 9/13/13 4:38 PM<br/>To: XXXXXXXXXX<br/>Microsoft SmartScreen marked this message as junk and we'll delete it after ten days.<br/><br/>You have a secured document sent to you by me at Google Docs.<br/><br/>To have access to the document please login with your e-mail address by following the link below.<br/><br/>Read now >>> hxxp://www.itweakly.com/google/doc/drive/index.htm<br/><br/>Each Document is Independently Owned and Operated by Sender of this message.<br/>Google Drive.<br/>©2013 Google Incorp. All Rights Reserved.

  • August 29, 2013 at 11:11 AM by info

    Although it may appear as if the email was sent from your account, it was not. The cybercriminals behind these scams use a technique called Email Spoofing. <a href="/article/2013/1/28/what-is-email-spoofing/" target="_blank">Click here to read about this technique</a>.

  • August 29, 2013 at 8:59 AM by an anonymous user from: Philadelphia, Pennsylvania, United States

    so if you were the one who's email account sent it, do you have to do anything?

  • August 26, 2013 at 2:41 AM by an anonymous user from: Rajahmundry, Andhra Pradesh, India

    Please convey this info to mail.yahoo.com and hotmail.com as i have received mails in this both accounts. Saying:<br/><br/>-<br/>Receipant name,<br/><br/>I have send you a document click here and get the documents.<br/>-

  • August 26, 2013 at 2:36 AM by an anonymous user from: Rajahmundry, Andhra Pradesh, India

    I have received two mails from www.monquathuvi.com/googledocs/index.htm

  • July 30, 2013 at 6:03 PM by an anonymous user from: Boston, Massachusetts, United States

    I just received a very similar email directing me to this phishing site:<br/>hxxp://k-webshop.com/sale/gogdocs1/index.htm

  • July 30, 2013 at 12:45 PM by an anonymous user from: Moncks Corner, South Carolina, United States

    Anything needed beyond change of pasword

  • July 18, 2013 at 6:35 AM by info

    Maybe cybercriminals were able to gain access to your account by tricking you into entering your account user name and password on a phishing or fake website.<br/><br/>With access to your account, they may have accessed your contacts' names and email addresses.<br/><br/>I recommend that you change your email password.

  • July 18, 2013 at 3:34 AM by an anonymous user from: Cape Town, Western Cape, South Africa

    I understand the email spoofing part of the scam, what I don't get is how they target contacts in your address book? If it's pure spoofing, where do they get my contacts? I have run virus scan, nothing found.

  • July 15, 2013 at 11:24 AM by an anonymous user from: London, England, United Kingdom

    Hi I have just received email today gmail will stop if I don't re register to get rid if dormant accounts<br/>Al*b@gmail.com I have not replied

  • July 12, 2013 at 2:44 PM by an anonymous user from: Buenos Aires, Buenos Aires F.D., Argentina

    So, can I fix it with only changing my passwords?<br/>Thank you!

  • June 24, 2013 at 2:04 PM by info

    Although the email appeared as if came from your wife's email account, it was not. Scammers use a technique called email spoofing, where they alter an email message to make it appear as if it came from someone else.

    <br/>

    I could use this technique to send an email to you from my email address and change the "From" address to make the email appear as if it came from the "president@whitehouse.gov".

    <br/>

    Currently, it is virtually impossible to stop these scammers from sending these emails to you.

    <br/>

    <a href="/article/2013/1/28/what-is-email-spoofing/" style="text-decoration:underline">Click here to read more about email spoofing</a>.

  • June 24, 2013 at 1:21 PM by an anonymous user from: Kingston, St. Andrew, Jamaica

    Good day, I got the email but it was coming from my wife's email account. She said she sent no such email so i guess she got one of those viruses that use your email to spam all their contacts.

    I would like to fix this but not sure what to look for or even how to start.

    Is this a worm/virus, if so how do I get rid of it / stop her account from spamming all her contacts.

Comments Show More Comments (220)

Write Your Comment, Question, Answer, or Review

Google Docs or Drive Phishing Email Scams