Platform page
Google scams
Google scams abuse the search engine's authority and the ubiquity of Google accounts. Fake Google Business verification calls, search ad phishing, and Gmail account takeover attempts are the most common patterns.
Common searches
Watch for
- A caller claims to be from Google and threatens to remove your business listing.
- A sponsored search result leads to a site that mimics a real company but has a different URL.
- An email claims your Google account will be deleted unless you verify immediately.
- A Google Forms or Google Docs link is used to collect sensitive personal information.
IRS gift card payment scam
A caller impersonating an IRS agent threatens arrest or legal action unless you pay a supposed tax debt immediately with gift cards purchased from a retail store.
Hang up — the IRS never demands payment by gift card. This is always a scam.
Taxpayers
U.S.
Google Play Store clone app scam
Malicious clone apps on Google Play copy the branding and functionality of popular apps to harvest user data, inject ads, or install additional malware.
Download apps only from verified developer accounts and check that the developer matches the official company
Android users
U.S.
fake VPN app scam
Malicious apps posing as free VPN services actually log user browsing data, inject ads, or route traffic through servers controlled by the scammer.
Use only well-established VPN providers with transparent privacy policies and third-party security audits
Smartphone users
U.S.
fake photo editor app scam
Scam photo editing apps lure users with free filters and features, then demand expensive subscriptions, harvest photos, or install adware on the device.
Check app permissions before installing and deny access to data the app does not need for its core function
Smartphone users
U.S.
fake QR scanner app scam
Malicious QR code scanner apps request excessive permissions and display aggressive ads or install malware, despite smartphones having built-in QR scanning capability.
Use your phone built-in camera QR scanning feature rather than downloading a third-party scanner app
Smartphone users
U.S.
fake antivirus app scam
Bogus antivirus apps display fake threat warnings to scare users into purchasing premium versions or granting device administrator permissions that enable data theft.
Use antivirus apps only from established security companies such as Norton, Bitdefender, Malwarebytes, or Kaspersky
Smartphone users
U.S.
fake fitness tracker app scam
Fraudulent fitness and health apps collect sensitive biometric and health data under the guise of step counting or workout tracking, then sell or exploit this data.
Use fitness apps from established developers like Apple Health, Google Fit, Strava, or Fitbit
Smartphone users
U.S.
SEO guarantee scam
An SEO company guarantees first-page Google rankings for a fixed fee, collects payment, and delivers either nothing, black-hat tactics that get the site penalized, or fabricated reports.
Be skeptical of any SEO company that guarantees specific rankings — legitimate agencies discuss strategy, not guaranteed outcomes.
Small business owners
U.S.
cloud hosting invoice scam
A fake invoice claiming to be from AWS, Google Cloud, or another hosting provider demands payment for services, targeting companies that use multiple cloud vendors.
Verify all cloud invoices by logging directly into your provider's billing console — AWS, Google Cloud, and Azure all have online billing dashboards.
Small business owners
U.S.
advertising invoice scam
A fake invoice for advertising services — such as a Yellow Pages listing, online directory, or Google Ads — is sent to businesses that never authorized the purchase.
Read every invoice carefully, including fine print — look for disclaimers indicating it is a solicitation, not a bill.
Small business owners
U.S.
shared document notification phishing scam
A fake notification claims someone has shared a document with you via Google Drive, OneDrive, or Dropbox, leading to a credential-harvesting login page.
Hover over the link to inspect the URL before clicking — legitimate shares come from official domains.
Office workers
U.S.
calendar invite phishing scam
Attackers send calendar invitations containing phishing links in the event description or location field, which automatically appear in the victim's calendar.
Change your calendar settings to not automatically add events from email invitations.
Office workers
U.S.
search ad to fake site scam
Scammers buy search engine ads for popular services, placing fake websites above legitimate results where they capture login credentials and payment information.
Skip sponsored search results and scroll to organic listings, or type the URL directly into your browser.
All consumers
U.S.
Google Business Profile verification scam
Scammers posing as Google contact business owners claiming their Google Business Profile needs immediate verification or will be removed from search results.
Know that Google does not charge for business profile verification and rarely makes unsolicited calls about it.
Small business owners
U.S.
Gmail account recovery phishing scam
A phishing email or notification claims someone is trying to access your Gmail account, directing you to a fake Google login page to steal your credentials.
Go directly to myaccount.google.com/security to review recent security activity — never use links from emails.
Gmail users
U.S.
Google Ads billing scam
Advertisers receive fake Google Ads billing notifications about failed payments or suspicious charges, leading to phishing pages that steal account credentials.
Check your billing status directly at ads.google.com — never through email links.
Digital marketers
U.S.
Google Voice verification code scam
A person you are communicating with online asks you to share a Google Voice verification code, then uses it to create a Google Voice number linked to your account for future scams.
Never share verification codes with anyone — they are meant only for you.
Online sellers
U.S.
fake Google review extortion scam
Scammers threaten to flood a business with fake negative Google reviews unless the business pays a fee, or offer to remove existing negative reviews for a price.
Do not pay — report the fake reviews to Google through your Business Profile by flagging each one as inappropriate.
Small business owners
U.S.
Google Calendar invite spam scam
Scammers send unsolicited Google Calendar invitations containing phishing links or fake prize notifications that automatically appear on the victim's calendar.
Change your Google Calendar settings to only show invitations you have explicitly accepted.
Gmail users
U.S.
Google Workspace admin phishing scam
IT administrators receive fake Google Workspace notifications about policy changes, license issues, or security alerts, leading to admin credential theft.
Access the admin console directly at admin.google.com — never through email links.
IT administrators
U.S.
Google Maps business listing scam
Scammers create or hijack Google Maps business listings with fake phone numbers, intercepting calls meant for legitimate businesses to redirect customers or steal information.
Always verify a business phone number by checking their official website before calling a number from Google Maps.
Consumers
U.S.
Chrome extension malware scam
Malicious Chrome extensions disguised as useful tools steal browsing data, inject ads, or capture credentials from every website the victim visits.
Review installed extensions regularly at chrome://extensions and remove any you do not recognize or no longer use.
Chrome users
U.S.
YouTube monetization scam
Fake emails claim to be from YouTube's Partner Program, asking creators to verify their monetization status through a phishing link that steals their Google account credentials.
Check monetization status directly in YouTube Studio at studio.youtube.com — not through email links.
YouTube creators
U.S.
Related platforms