
Don’t give into temptation, even if the email ‘urges’ you to do so. Never click on any links or buttons or download any files.If you spot any mistakes, it’s a good indication that it’s a phishing email. Does it have any grammatical errors? What about the writing style? Is it formal enough to pass for Google? Legitimate companies usually painstakingly proofread emails they send to users. Did the email come from a legitimate Google account? Hover over the sender but don’t click on it or reply to the email.

Are you using a new device? Did you use a new device at work or borrow a friend’s device to log in? Or maybe your VPN launched automatically, and Google recognizes a new IP address? If so, the email might be a legitimate false alarm.

However, the button that would normally lead to your Google security page here is spoofed.


However, hackers wouldn’t be hackers if they wouldn’t find ways to exploit a trustworthy security feature and turn it into a phishing attack.
