Ask Dave Taylor
  • Facebook
  • Instagram
  • Linkedin
  • Pinterest
  • Twitter
  • YouTube
  • Home
  • YouTube Videos
  • Top Categories
  • Subscribe via Email
  • Ask A Question
  • Meet Dave
  • Home
  • Spam, Scams & Security
  • Google Account Locked & Disabled Email: Legit?

Google Account Locked & Disabled Email: Legit?

January 8, 2020 / Dave Taylor / Spam, Scams & Security / No Comments

I got an email from Google saying that I’ve been violating Google policies and that my account has been locked and disabled. How can I contact Google to ensure that I can restore access to my account? I have hundreds of emails and documents in my account and can’t lose access to them!

Before we go any further with this, take a deep breath. Hold it. Let it out slowly. You’re fine. This is not an email from Google itself, but from a malicious group of hackers using what’s known as a “phishing” attack to try and obtain your account credentials so they can hijack your Google account for their own purposes. The way it works is that they send what looks like a legit email message that warns you of something dire and then require you to respond with login and password credentials to “prove” you have access to the account. Then they log in, change the password without telling you, and you then are indeed locked out of your own account.

While this particular email is related to your Google or Gmail account, these are also quite likely to come from financial institutions because if they can gain access to those, they can transfer actual balances into their own accounts before you regain access, stealing not only your account but your money too. That’s why you sometimes get email from banks warning about account access and security even though you don’t actually bank with that institution! They’re all scams.

Truth is, the vast majority of organizations are so aware of the plague of phishing scam email attacks that they rarely if ever send email any more, and if they do, basically just say “log in to our site, check your account for messages”. In all cases, type in the URL of that organization rather than click a link in an email, however legit it appears. One easy way to protect yourself.

I dug through my spam folder and found a Google “account locked and disabled” email to step you through what’s going on and how to recognize the scam too. Subject “Your Google Account Has Been Locked”:

google account disabled locked spam phishing scam email

On first glance it seems legit: It has my email address embedded in the email, it’s from “Support Team Security” and it doesn’t have any suspicious links to click on, right? But look closer. Look at that return email address, for example. Would Google send an email notification from “support@reply-us.zke.com”? These email messages, typically originating from China, Africa or Eastern Europe, just about always have grammatical hiccups too. “So if you think this is was a mistake.reply us by this email asap.” Uh, what? You can be sure that if Google ever sent you an email notification, it’ll be grammatically correct.

But perhaps you aren’t taking the time to analyze the email message because you’re panicking. Legit. (even though how could you get this email if your Google account was indeed disabled and locked?) So what happens if you Reply to the message as it invites?

Turns out that it’s quite interesting because while it may seem it would go right back to that strange support@ email address, in fact, you find this set of destinations:

google gmail phishing email reply addresses ru romania

What the heck? What’s happening here is that one of these email addresses is the account of the person running the scam, and the others are all just noise to confuse the issue. Think of hiding in a crowd: Which is the bad guy? My guess, if I had to pick one, would be that supp0rting.inter@yandex.ru address, but who knows? Yandex is a popular search engine and email service similar to Google but based in Russia (the .ru domain name).

At this point it’s clear you should simply delete the email and bail, right? I mena, there’s 0% chance Google is going to be using anything even vaguely similar to communicate with you about your account.

But perhaps you don’t. Perhaps you choose to respond, as I did to see what would happen:

bogus response - google phishing attack scam - yandex.ru

Apparently I’m not the only person who fell for this as immediately a couple of the email addresses refused the email with this error:

yandex - message blocked error

Not every address had that, however, so at least one copy was delivered to an inbox (or spam folder) on Yandex. Disappointingly, at this point I have not yet received a response from the actual scammer. If I do, I’ll come back and add it to this article!

The main point here, however, is to be skeptical and always ask yourself “does this look legit? Would this company or organization communicate in this fashion?” and don’t forget that if you do feel it might be legit, you can always type in the URL for that company and go into your account to see if there are any messages pending. On Google, just click on your tiny profile pic on the top right:

google account management access area

A click on “Manage your Google Account” and you’ll be in the right spot to receive any legit notifications from Google.

Be careful and stay safe out there!

Pro Tip: I’ve been writing about online scams and security for many years. Please check out my online security help tutorials while you’re here on the site. Thanks! 

About the Author: Dave Taylor has been involved with the online world since the early days of the Internet. Author of over 20 technical books, he runs the popular AskDaveTaylor.com tech help site. You can also find his gadget reviews on YouTube and chat with him on Twitter as @DaveTaylor.

Let’s Stay In Touch!

Never miss a single article, review or tutorial here on AskDaveTaylor, sign up for my fun weekly newsletter!
Name: 
Your email address:*
Please enter all required fields
Correct invalid entries
No spam, ever. Promise. Powered by FeedBlitz
Please choose a color:
Starbucks coffee cup I do have a lot to say, and questions of my own for that matter, but first I'd like to say thank you, Dave, for all your helpful information by buying you a cup of coffee!
gmail spam, google account spam, google phishing, google policies, google spam, online safety, phishing attack

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Search

Recent Posts

  • How to Check Energy Recommendations on your Windows Laptop
  • How Do I Customize New Tab Windows in Safari for Mac?
  • Can AI-Generated ChatGPT Text Be Accurately Identified?
  • How to Perform a Microsoft Account Security Audit and Checkup
  • How Can I Customize My Linux Dock / Taskbar?

On Our YouTube Channel

How to: Replace a Switchbot Door Sensor Battery

EMEET Luna vs INNOTRIK Studio Bluetooth Speakerphones -- DEMOS & REVIEW

Categories

  • AdSense, AdWords, and PPC Help (106)
  • Amazon, eBay, and Online Shopping Help (163)
  • Android Help (226)
  • Apple iPad Help (147)
  • Apple Watch Help (53)
  • Articles, Tutorials, and Reviews (346)
  • Auto Tech Help (15)
  • Business Advice (200)
  • ChromeOS Help (31)
  • Computer & Internet Basics (778)
  • d) None of the Above (166)
  • Facebook Help (383)
  • Google, Chrome & Gmail Help (188)
  • HTML & Web Page Design (247)
  • Instagram Help (49)
  • iPhone & iOS Help (623)
  • iPod & MP3 Player Help (173)
  • Kindle & Nook Help (99)
  • LinkedIn Help (88)
  • Linux Help (173)
  • Linux Shell Script Programming (89)
  • Mac & MacOS Help (911)
  • Most Popular (16)
  • Outlook & Office 365 Help (33)
  • PayPal Help (68)
  • Pinterest Help (54)
  • Reddit Help (19)
  • SEO & Marketing (82)
  • Spam, Scams & Security (95)
  • Trade Show News & Updates (23)
  • Twitter Help (220)
  • Video Game Tips (66)
  • Web Site Traffic Tips (62)
  • Windows PC Help (947)
  • Wordpress Help (206)
  • Writing and Publishing (72)
  • YouTube Help (47)
  • YouTube Video Reviews (159)
  • Zoom, Skype & Video Chat Help (62)

Archives

Social Connections:

Ask Dave Taylor


Follow Me on Pinterest
Follow me on Twitter
Follow me on LinkedIn
Follow me on Instagram


AskDaveTaylor on Facebook



microsoft insider mvp


This web site is for the purpose of disseminating information for educational purposes, free of charge, for the benefit of all visitors. We take great care to provide quality information. However, we do not guarantee, and accept no legal liability whatsoever arising from or connected to, the accuracy, reliability, currency or completeness of any material contained on this site or on any linked site. Further, please note that by submitting a question or comment you're agreeing to our terms of service, which are: you relinquish any subsequent rights of ownership to your material by submitting it on this site. Our lawyer says "Thanks for your cooperation."
© 2023 by Dave Taylor. "Ask Dave Taylor®" is a registered trademark of Intuitive Systems, LLC.
Privacy Policy - Terms and Conditions - Accessibility Policy