Google Verification Code Phishing

May 31, 2017 11:07 AM

For the past week or so, I've been getting two to three Google Verification code emails a day, using in the morning. I've already got two step verification and I've changed my password, but is there anything else I can be doing to make this stop?
posted by Old Man Wilson to Computers & Internet (6 answers total)

You can report email as phishing to Google, in the upper right hand corner of the email, there's an arrow pointing downward, and one of the choices in the dropdown is Report Phishing.

It would be very weird if the Google Verification code requests were real since that would mean that Google is accepting the password; which you've said you've changed, so I also think it's phishing.

You can check the Recently used Device page: https://myaccount.google.com/device-activity?pli=1 if you want to check to see if there's any activity you don't recognize (which, if it's phishing you shouldn't). The Secure Your Account link just takes you to a password reset though. I'm not sure if it reports anything suspicious.
posted by DarthDuckie at 2:03 PM on May 31, 2017

Is it possible some idiot is confused about their email address, and keeps trying to log in to yours, then hitting the "forgot your password?" link when they can't?
posted by Cheese Monster at 2:18 PM on May 31, 2017 [1 favorite]

I regularly receive invites to fancy corporate dinners in Colorado and confirmation of travel plans in Germany that are really intented for some other Phil. The last time I tried to correct the issue I was thanked with several attempts to change my password.

That's a long-winded way of saying could it be what Cheese Monster suggested?
posted by phil at 6:23 PM on May 31, 2017 [1 favorite]

I missed the edit window while I was searching my messaging history. I can't find any emails. All correspondence looks to be from the 22000 short code. Is your second factor a phone number or the authenticator app?
posted by phil at 6:33 PM on May 31, 2017

I keep getting batches of 2FA notifications on my cell phone for Facebook every so often. I finally just gave up and delete them when they come.

(I use Authy for multiple sites.)
posted by Samizdata at 10:24 PM on May 31, 2017

Response by poster: Thanks for the responses, everyone. I had considered the mistaken request, too - but i guess I also wondered how useful it was for someone to get a verification code sent to an email address they couldn't get access to. Nothing today, so maybe my problem is solved!
posted by Old Man Wilson at 12:58 PM on June 1, 2017