Fake logins and account theft · stamped DANGER

The fake Google sign-inDANGER

A real scam people fell for this year, next to the real thing. The numbers mark the three things to check: hover or tap one to see what it tells you.

Safe
GSign in – Google Accounts×
https://accounts.google.com/signin/v2
Sign in

Use your Google Account

reception@examplelaw.ca
•••••••••
Forgot email?Next
ScamDANGER
GSign in – Google Accounts×
https://accounts-google.verify-session.top/signin/v2
Sign in

Your office shared an updated document with you. Sign in with your Google Account to view it.

reception@examplelaw.ca
•••••••••
Forgot email?Next

Always check the address.

A copy of Google's sign-in box on an address that isn't accounts.google.com. That address is the only place Google ever asks for your password.

Always checkThe real oneThe scam
1Where it livesCheck firstIs it the real company's or person's own address or number?

accounts.google.com is Google's own sign-in address.

accounts-google.verify-session.top is not google.com. The real name is tucked inside a stranger's domain.

2What it asks you to doDoes it want a password, a payment, a call, or a tap?

It asks for your password, which is normal on Google's own site.

It wants your Google password on a site Google doesn't own.

3How hard it pushesIs there a deadline, a threat, or a surprise charge?

No deadline, no story, no surprise.

A “shared document” is the bait that gets you to type without thinking.

RememberGoogle only ever asks for your password at accounts.google.com. Anywhere else, close the tab.

Would you have spotted it?

10 pairs like this one, three minutes, a score to share. Then find out who in the family is the easy mark.

Take the testNext scam: The wallet upgrade →