Scammers exploit Gmail’s latest update: report

Scammers are exploiting a recent Google update designed to let users replace their email address while keeping the old one as an alias, according to a report by the Daily Mail citing cybersecurity experts.

The feature, rolled out earlier this month, allows users to create a new Gmail address without losing access to existing emails, files or linked services. However, security researchers say cybercriminals are using the change as a hook for phishing campaigns that attempt to trick users into handing over their account credentials.

Fraudulent emails circulating in recent weeks claim that a recipient’s Gmail address has been changed or requires security confirmation. The messages appear credible because they are sent from legitimate-looking Google addresses, including no-reply@accounts.google.com. Recipients are urged to confirm a new address or verify their account, often under the threat of suspension or loss of access.

The links included in these messages redirect users to fake websites hosted on sites.google.com, which closely mimic Google’s official login and security pages. If users enter their details, attackers can gain access not only to Gmail but also to connected Google services such as Drive, Photos and Calendar, as well as third-party apps linked through Google sign-ins, as per the Daily Mail report.

Cybersecurity experts say phishing emails linked to the scam often show warning signs, including generic greetings, urgent language designed to prompt quick action, and requests to enter passwords via email links. These tactics are intended to bypass caution by creating a sense of immediacy.

In February 2026, cybersecurity researcher Jeremiah Fowler disclosed a database containing 149 million compromised credentials found online. Gmail accounted for the largest share, with an estimated 48 million exposed, followed by Facebook, Instagram, Yahoo Mail, Netflix and Outlook, alongside accounts linked to services such as iCloud, .edu, OnlyFans, TikTok and Binance.