If a Google sign-in prompt appears and you did not initiate the request, do not approve it. Reject the request and investigate through your Google Account on a trusted device.
Respond to the actual prompt
On a genuine Google prompt, use No or No, don’t allow when the attempt was not yours. Do not tap Yes merely to stop repeated notifications.
Check whether you initiated a login on another computer or whether you are knowingly helping somebody through a previously configured recovery-contact procedure. These possibilities should be confirmed independently, not assumed because the prompt looks familiar.
Review account activity
- Open Google Account directly.
- Confirm the selected identity.
- Inspect recent security events and the request’s details.
- Review device sessions and unfamiliar sign-in methods.
- Follow the secure-account instructions for activity you do not recognize.
The notification alone does not identify the person responsible or establish every action they completed. Use the event details to distinguish an attempted sign-in from authenticated access or another recovery-related request.
Refuse phone-assisted approval
A caller may claim that approving the prompt cancels a hack or verifies their identity as Google staff. Google’s scam guidance explicitly warns against approving device prompts or sharing codes over such calls.
End the interaction and open the account yourself. Caller ID, an employee name, or a support email does not make the request safe.
If you already approved it
Act promptly. From a trusted device, change the password if accessible, sign out unfamiliar sessions, and review recovery details, passkeys, 2-Step Verification methods, and linked apps. Check Gmail forwarding and filters if access may have been gained.
If you are locked out, use Google’s compromised-account recovery process. For a managed identity, notify the administrator through a known channel. Keep a brief private record of the prompt and any related call, but do not delay containment while trying to identify the attacker yourself.
Official references
- Sign in with Google prompts
- Respond to security alerts
- Google Account Security Scam via Phone Call
- Secure a hacked or compromised Google Account
Reviewed against Google’s official guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.