Security warning of the week (Patreon)

Fake Google numbers call me now about five times a day. I never answer my phone btw. But they are really desperate to get into my Google account and it actually has me a little bit concerned because the cadence at which they are ramping up. The hacking attempts are really quite unbelievable but what took me back even further was the following

I had a lengthy conversation yesterday with someone claiming to be from Google's security team—obviously a scammer. I wanted to gauge their skill, and it was a fascinating, extended exchange. What stood out was how polished and intelligent the scammer sounded, like a Fortune 100 vice president (they even fooled Mark Cuban the Billionaire). This scammer will easily deceive many people. Below are ways to expose fake Google scammers:

How to ID Fake Google Scammers:

1. Ask for Specific Verification Details: Legitimate Google representatives will never call unsolicited. Ask the caller for their employee ID, department name, and a callback number. Scammers often hesitate or provide vague responses. You can say, “Can you provide your Google employee ID and the official Google contact number for your department?” Then, verify independently via Google’s official website (support.google.com).

2. Request Case or Ticket Number: Scammers often claim there’s an urgent issue with your account. Ask, “What’s the case or ticket number for this issue?” Legitimate companies use tracking numbers for support cases, but scammers typically can’t provide one or will dodge the question.

3. Challenge Their Knowledge of Google Services: Ask technical questions about Google’s systems that a real employee would know. For example, “Which specific Google security protocol is my account violating?” or “Can you explain how Google’s 2FA authentication process works in detail?” Scammers often rely on generic tech jargon and may fumble when pressed for specifics.

   REM EVERYONE USE 2FA like a YUBIKEY...

4. Test with Fake Information: If they claim your account is compromised, provide a fake Google account email or a nonexistent domain. Say, “My account is fakeuser123@googlemail.com; can you confirm the issue?” Scammers may proceed without noticing, revealing they’re not accessing real Google systems.

5. Ask for Written Confirmation: Request an official email from a @google.com domain summarizing the issue. Scammers avoid this because they can’t use Google’s official domain. Say, “Please send me the details from your official Google email address.” If they refuse or offer a generic email (e.g., gmail.com), it’s a red flag.

6. Question Their Urgency: Scammers push urgency to pressure you. Ask, “Why does this need to be resolved immediately?” or “Can I call Google support directly to handle this?” Legitimate reps won’t mind; scammers may get defensive or insist you stay on the line.

7. Check Their Contact Method: Google rarely initiates contact via phone, especially for security issues. Ask, “Why are you calling instead of emailing me through Google’s official channels?” Scammers may claim your email is “compromised,” but Google typically communicates via verified emails or your account’s security settings.

Red Flags to Watch For:

• Unsolicited Calls: Google WILL NEVER cold-call you about account issues or even care if your account is hacked. THEY DO NOT GIVE A SHIT

• Requests for Sensitive Info: Scammers will ask for passwords, 2FA codes, or remote access to your device. Google nor anyone else would ever request these.

• Non-Google Domains or Numbers: If they direct you to a website or email not ending in @google.com or support.google.com, it’s fake.

• Emotional Manipulation: They may use fear (e.g., “Your account is being hacked right now!”) to rush you into action.