Gmail scams
Gmail-targeted phishing uses fake Google 'security alerts', shared-doc lures, and storage warnings to capture your login and 2FA.
Want to check a specific Gmail message? Use the Gmail scam checker →
How scams appear on Gmail
Gmail-targeted phishing borrows Google's own look. Fake 'critical security alert' messages, shared-document invitations, and storage-full warnings all funnel you to a sign-in page that captures your password and the two-step code that follows. Because the lures copy genuine Google notifications closely, the safest move is to ignore the link and review activity directly inside your account. The aim is full access to an inbox that often unlocks every other account.
Common Gmail scam examples
Sanitised examples - placeholders only, never real links or data.
Example only: Google: critical security alert - review activity: [fake-link removed]
Example only: A document was shared with you - sign in to view: [fake-link removed]
Red flags on Gmail
- A 'security alert' or invoice pushing you to a login link
- Sender address or domain that isn't the real one
- Unexpected attachments or 'enable content' prompts
- Urgency, threats, or too-good offers
How to verify safely
- Open accounts via the official app or an address you type yourself.
- Hover/long-press links to see the real destination before tapping.
- Verify unexpected invoices or requests with the sender directly.
How to report inside Gmail
- Use Gmail's 'Report phishing' from the message menu.
- Check sign-in activity and turn on 2-Step Verification.
- Verify shared documents inside Drive, not via the email link.
How to protect your Gmail account
- Turn on app-based two-step verification for your email.
- Use a unique password and a password manager.
- Review forwarding rules and recent sign-ins for anything unfamiliar.
Related Gmail scam messages you can check
- Is this OTP / verification code request a scam?
- Is this Meta Business Support warning a scam?
- Is this PayPal invoice email a scam?
- Is this crypto recovery agent message a scam?
- Is this sextortion 'hello pervert' email a scam?
- Is this DHL customs duty payment scam a scam?
- Is this Amazon package delivery problem text a scam?
- Is this warehouse hold package scam a scam?
- Is this fake parking fine message a scam?
- Is this PayID buyer payment scam a scam?
- Is this Zelle payment pending scam a scam?
- Is this Cash App payment pending scam a scam?
Related scam-type hubs
Related red flags
Glossary terms
Got a message like this?
Check it to see the specific red flags and what to do next.
Check a messageSources
Frequently asked questions
How do I know if a Gmail message is a scam?
Check it against the red flags above and verify through the official app or website you open yourself. When in doubt, don't click, pay, or share codes.
How do I report a scam on Gmail?
Use Gmail's 'Report phishing' from the message menu.
Last reviewed: 2026-06-15.