Google sends real security alerts, and attackers imitate them. The safest way to investigate an unexpected warning is to open Google Account directly and review the corresponding activity.
Check the account before interacting with the message
- Open your known Google Account page on a trusted device.
- Confirm the full account address.
- Open Security & sign-in and review recent security activity.
- Inspect the event’s time, device, and location together.
- If it was not yours, follow the account’s secure-account procedure.
A familiar sender name, logo, or subject is not sufficient authentication. Avoid calling a number supplied in an alarming message or entering a password on a page reached through an unfamiliar link.
Understand what a genuine alert can mean
Google says it sends alerts about important actions such as a new-device sign-in, suspicious activity such as unusual sending volume, and blocked sensitive actions.
A blocked attempt is different from a successful sign-in. Read the event rather than concluding from the word Security that somebody definitely entered the mailbox. Equally, do not dismiss an unfamiliar successful action because the account still opens normally.
If the event was yours
Compare it with a recent new phone, browser, app login, or trip. Confirm only activity you recognize. A location is approximate and should be assessed with the device and timing.
If it was not yours or you remain uncertain about access, use the account’s security review. Change the password when appropriate and inspect sessions, recovery details, and sign-in methods.
Recognize an alert used to support a phone scam
Google’s scam guidance warns about callers claiming that a message or support case proves they are genuine. Do not give them verification codes or approve a device prompt. Investigate through the account yourself.
Google can send legitimate automated verification messages for actions you request. That does not make a caller entitled to receive their contents. If you cannot sign in, use official account recovery; if the identity is managed, contact the administrator through a known channel.
Official references
- Respond to security alerts
- Secure a hacked or compromised Google Account
- Google Account Security Scam via Phone Call
Reviewed against Google’s official guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.