Google Phishing Scams

There have been numerous Google Drive phishing emails coming through our directory. This happens when one staff person receives an email with a link that brings them to a web page, and asks them for their Google credentials. The site looks like Google, but it isn't. It is just a submission form for Google credentials, disguised as a login page. The crooks get their credentials, then they can log in to Google as the victim, and send all of the victim's contacts the same message.

Tips on how to spot these scams:

-If you're reading your email, you're already logged into Google, therefor, you won't be asked to authenticate again just to look at documents.

-Check the address bar for the little lock and the "https:..." in front of the URL for the web page. Most crooks won't pay for a secured site. But, some do, so you'll want to make sure the address begins with "https://drive.google.com..." Addresses like googledrive.com, are not Google.

-If you're not expecting documents from people, call them and ask for clarification.