AI-Powered Scams Target 2.5 Billion Gmail Users Worldwide

MOUNTAIN VIEW, Calif. — Sophisticated AI-driven phishing scams are targeting Gmail users worldwide, with cybercriminals using advanced voice-mimicking technology and spoofed caller IDs to steal login credentials, according to recent reports.

The scams involve hackers posing as Google support technicians, calling users from numbers that appear legitimate and using convincing American accents. Victims are told their accounts have been compromised and are sent emails from what appear to be genuine Google domains. The attackers then attempt to trick users into sharing account recovery codes.

Zach Latta, founder of Hack Club, narrowly avoided falling victim to one such scam. “She sounded like a real engineer, the connection was super clear, and she had an American accent,” Latta told Forbes. “It was only when I double-checked the details that I realized it was a scam.”

This type of attack is not new. In October 2024, cybersecurity experts warned about similar AI-powered phishing attempts targeting Gmail’s 2.5 billion users. The scams have since evolved, becoming more sophisticated and harder to detect.

Garry Tan, founder of venture capital firm Y Combinator, issued a public service announcement after receiving a convincing phishing call. “They claim to be checking that you are alive and that they should disregard a death certificate filed that claims a family member is recovering your account,” Tan wrote. “It’s a pretty elaborate ploy to get you to allow password recovery.”

Sam Mitrovic, a Microsoft solutions consultant, experienced a similar scam months ago. “The caller introduced himself and said there was suspicious activity on my account,” Mitrovic recounted. “He asked if I had logged in from Germany, which I hadn’t. It was only when I checked my account activity that I realized it was a scam.”

Google has advised users to enable two-factor authentication and regularly check their account activity for suspicious logins. A Google spokesperson said, “We take extra steps to verify your identity with the use of passkeys and smart keys to keep your account secure, even if hackers have your credentials.”

As AI technology continues to advance, experts warn that these scams will only become more convincing. Users are urged to remain vigilant and verify any unsolicited support calls or emails directly through Google’s official channels.