Google Warns of Surge in Sophisticated Scams Exploiting Its Brand
Google has issued a warning about a surge in sophisticated scams exploiting its brand to trick users into revealing personal information or handing over money. These scams, often presented as convincing pop-ups, emails, or messages, can lead to account takeovers and financial loss.
Scammers are abusing Google's infrastructure and exploiting its reputation to make their schemes more believable. They use tactics such as countdown timers and urgent language to pressure victims into acting quickly. Fake prize schemes, like 'Google Day' or 'Google Anniversary' giveaways, have been circulating online, promising rewards to unsuspecting users.
Behind these Google Tag scams are criminal groups using AI-generated deepfake videos and photos of celebrities or public figures to promote fraudulent investment schemes. Google's Trust & Safety teams have been combating such fraud. Two common account takeover paths are cookie/session theft and Adversary-in-the-Middle (AitM) phishing. To enhance security, Google and the broader ecosystem have rolled out passkeys and implemented Device Bound Session Credentials (DBSC).
Compromised Google accounts can lead to losing access to services like Gmail, YouTube, Drive, and Photos. Google warns that it doesn't run lotteries or prize programs and provides a path to report brand abuse. Users are advised to be cautious of any unsolicited messages promising rewards or asking for personal information, as there's no such thing as official 'Google Day' giveaways or sweepstakes.
