"Google will never send an unsolicited message asking you to provide your password or other sensitive information by email or through a link. If you're asked to share sensitive information, it's probably an attempt to steal your information."
Is email from Google legitimate?
For example, legitimate emails from Google will read '@google.com'. If the domain name (the bit after the @ symbol) matches the apparent sender of the email, the message is probably legitimate. The best way to check an organisation's domain name is to type the company's name into a search engine.
How do I know if my Google security alert is real?
Check for suspicious account activity
- Go to your Google Account.
- On the left navigation panel, click Security.
- On the Recent security events panel, click Review security events.
- Review your recent activity and look for unfamiliar locations or devices.
