Hackers using AI-driven scams have developed sophisticated methods to target Gmail users, despite Google’s ongoing efforts to improve account security. With over 2.5 billion active Gmail users, the platform remains a popular target for cybercriminals.

One recent incident involving Sam Mitrovic, a Microsoft solutions consultant, encapsulates the growing threat of AI-powered phishing scams designed to trick even experienced users.

Mitrovic reported that the attack began with a fake account recovery attempt, followed by a phone call from someone claiming to be Google support. The caller tried to create a sense of urgency by stating that Mitrovic’s account had been compromised, prompting him to verify his identity.

The scam was designed to appear legitimate, using spoofed phone numbers and fake support emails. During the call, Mitrovic realized the voice was generated by AI, which clued him into the fraudulent nature of the interaction.

This attack illustrates how hackers increasingly leverage AI to manipulate and deceive users. By using realistic-sounding voices and spoofed phone numbers, these scams can easily catch people off guard. Mitrovic’s experience serves as a reminder that Google does not contact users unexpectedly to resolve account issues, a key detail that potential victims should keep in mind.

Additionally, there have been reports of scammers using Google Forms to mimic official account recovery documents, further lending credibility to their schemes. These scams often employ cloned login portals or other deceptive techniques to steal user credentials and bypass security measures like two-factor authentication.

Google has responded by continuing to bolster its security measures, such as introducing passkey support for its Advanced Protection Program. It has also partnered with multiple agencies to fight back against scams:

“Today we are announcing a new partnership with the Global Anti-Scam Alliance (GASA) and DNS Research Federation (DNSRF) to launch the Global Signal Exchange (GSE). The GSE is a new project with the ambition to be a global clearinghouse for online scams and fraud bad actor signals, with Google becoming its first Founding Member.”

Gmail users are encouraged to stay vigilant, avoid rushing into responses to suspicious communications, and regularly check account activity to identify any unauthorized access attempts.