2 min read

FBI Warns Users of Google Voice Authentication Scams

Silviu STAHIE

January 10, 2022

Ad One product to protect all your devices, without slowing them down.
Free 90-day trial
FBI Warns Users of Google Voice Authentication Scams

The US Federal Bureau of Investigation has issued a warning about a new wave of Google Voice authentication scams tricking people into giving attackers their Gmail credentials.

Google Voice is a service that lets people set up a virtual phone number, which customers can use for both domestic and international calls. It can even send and receive text messages. But attackers can also use this functionality to trick people into volunteering information that eventually leads to criminals gaining access to their Google services. What’s worse is that you don’t even need a Google Voice account to be targeted.

If you have ever posted your phone number anywhere online, threat actors can access it. People post their phone numbers when they’re trying to sell something, for example. Some recent reports indicate that people who posted announcements about lost pets have been targeted as well.

“The scammer contacts you via text or email. He is really interested in buying that couch or thinks he found Fluffy,” explained FBI in their advisory. “He says he just needs to make sure you are legitimate so he doesn’t get scammed. He says he will send you an authentication code from Google to confirm that you are a real person and not a bot.”

“You will receive that authentication code in the form of a voice call or a text message. He asks you to repeat that number to him.”

The attacker is doing something else with the authentication code – he’s setting up a fake Google Voice account for use in various other frauds, making it very difficult to trace to the actual criminal. Moreover, the attacker can use the same authentication code to access Gmail or other Google services.

Google offers advice on reclaiming the Google Voice account if you get scammed. The FBI also listed advice on how to avoid getting scammed in the first place:

Here are some ways to avoid getting scammed in the first place:

· Never share a Google verification code with others.
· Only deal with buyers, sellers and Fluffy-finders in person. If money is to exchange hands, make sure you are using legitimate payment processors.
· Don’t give out your email address to buyers/sellers conducting business via phone.
· Don’t let someone rush you into a sale. If they are pressuring you to respond, they are likely trying to manipulate you into acting without thinking.

tags


Author



Right now

Top posts

Threat actors impersonate Canadian gas retailer to deliver malicious OneNote phishing campaign, Bitdefender Labs warns

Threat actors impersonate Canadian gas retailer to deliver malicious OneNote phishing campaign, Bitdefender Labs warns

January 26, 2023

2 min read
Spammers phish eager vacationers with travel-themed lures, Bitdefender Antispam Lab warns

Spammers phish eager vacationers with travel-themed lures, Bitdefender Antispam Lab warns

January 19, 2023

4 min read
Enhance your cyber resilience and privacy on Computer Security Day in four easy steps

Enhance your cyber resilience and privacy on Computer Security Day in four easy steps

November 29, 2022

2 min read
How to monitor your online privacy during your Thanksgiving trip

How to monitor your online privacy during your Thanksgiving trip

November 22, 2022

3 min read
Just your yearly dose of Black Friday spam: Cybercrooks get ahead of the game to steal shoppers’ info

Just your yearly dose of Black Friday spam: Cybercrooks get ahead of the game to steal shoppers’ info

November 16, 2022

6 min read
Bitdefender VPN in 2022: the new, the improved, and the soon-to-be

Bitdefender VPN in 2022: the new, the improved, and the soon-to-be

November 14, 2022

5 min read

FOLLOW US ON

SOCIAL MEDIA


You might also like

Meta Pays Out Bounties for Account Takeover and Two-Factor Authentication Bypass Exploits Meta Pays Out Bounties for Account Takeover and Two-Factor Authentication Bypass Exploits
Silviu STAHIE

January 31, 2023

1 min read
Hackers steal 10 million customer details from JD Sports Hackers steal 10 million customer details from JD Sports
Graham CLULEY

January 30, 2023

2 min read
North Korean Hackers Tried to Launder $100 Million in Crypto Stolen in 2022 North Korean Hackers Tried to Launder $100 Million in Crypto Stolen in 2022
Silviu STAHIE

January 25, 2023

1 min read