Phishing attacks

A phishing website or message tries to trick you into revealing personal information by appearing to be from a legitimate source, such as a bank, social network, or even Google. If you receive a suspicious message, do not provide the information requested. We've included some tips to help you recognize phishing and keep your account secure.

If you think you may have encountered a phishing site, please report the suspicious site to us.

Recognize phishing attacks

You should always be wary of any message that asks for your personal information or messages that refer you to a web page asking for personal information. If you receive this type of message, especially from a source claiming to be Google or Gmail, please don't provide the information requested. Google will never send unsolicited messages asking for your password or personal information, or messages containing executable attachments.

Messages or websites phishing for information might ask you to enter the following types of personal information:

  • Usernames and passwords
  • Social Security numbers
  • Bank account numbers
  • PINs (Personal Identification Numbers)
  • Full credit card numbers
  • Your mother’s maiden name
  • Your birthday

Learn more about how to protect yourself from phishing