Google scams

Scammers send emails, texts and links that look like they come from Google, to take your password, card details or money. Here is how to tell a fake from the real thing, and how to report one so it gets taken down.

Got a Google message you are not sure about?

Don't click the link in it. Paste the link into ScamX and we'll tell you whether it really goes to Google.

Check the link

The real Google addresses

Google's own sites end in:

  • google.com
  • gmail.com
  • youtube.com

Read the address up to the first single slash: it must end with one of these. An extra word, a different ending or a shortened link means it is not Google, however real the page looks. When in doubt, type the address yourself or use the Google app.

What fake Google messages look like

  • "Google Lotto" and prize messages
  • Fake Gmail tech support
  • Account recovery scams sent by text or shown in the browser
  • Fake Google Ads, AdSense or job offers

What Google says

  • When you are signed in, Google's emails won't ask you to enter that account's password. Check real security alerts at myaccount.google.com/notifications.
  • Don't reply to requests for private information by email, text or phone.
  • Be wary of urgent or too-good-to-be-true messages.

How to report a Google scam

  1. Tell Google. In Gmail, open the message, then choose Report phishing. Or: Report a phishing page to Google Safe Browsing: https://safebrowsing.google.com/safebrowsing/report_phish/.
  2. Get the fake site taken down. Scan the link: the report names the company hosting it and the registrar of its domain, with a ready-written message for each.
  3. Put a warning in front of everyone else. Report the link to Google Safe Browsing and Microsoft SmartScreen.
  4. If you lost money or shared details, call your bank first, then report it to the police or your national fraud line. Where to report in your country.

Google's reporting route checked against Google's own page on 2026-10-10. ScamX is not affiliated with Google.