Google Chat makes staying connected and working together easy, but with so many people flocking to the platform, scammers are taking advantage of it too. They’ll try all sorts of tricks to get you to share personal information or part with your hard-earned money—like pretending to be someone you know or offering fake opportunities. Understanding how they operate is key to protecting yourself online. Be cautious, especially when you get random messages or suspicious links, and always use trusted online security like Avira Free Security.
What are Google Chat scams, and why should you care?
Let’s start with a quick look at the Google Chat platform. It’s Google’s answer to Slack and was once called Google Hangouts—and with good reason. It’s where users of Google Workspace can congregate online in named groups called “spaces”. Whether you want to send instant messages, share files, images, and videos or set up meetings, Google Chat has become a go-to chat and communications tool. It’s easy to see why it’s popular: Fans of other Google services, like Google Docs, Google Sheets, and Gmail appreciate that Google Chat integrates seamlessly with its other products. And the big name of the Google mothership can’t hurt. Google emphasises the robust security and privacy features of its products, promising that “your content is stored securely in our world-class data centres. Data is encrypted in transit and at rest”. (See Google Chat Help to understand the basics of privacy in Google Chat.) So far, so good, but where trusting users gather, fraudsters soon follow…
Love Google Chat? Remember that the platform ticks many boxes that make it desirable for scammers too:
- A huge pool of potential victims that feel secure with the Google brand. (And we do mean huge: Over 3 billion people use the Google Workspace ecosystem, which includes the Google Chat app).
- It’s convenient and highly accessible: Anyone with a Gmail account can enter Google Chat.
- Cybercriminals can quickly generate multiple fake identities and preserve their anonymity.
- Google’s file-sharing tools make it easy for scammers to send malicious links, attachments and phishing content to their targets.
How do scammers use Google Chat to contact their targets?
Scammers deploy various tactics to reel in their victims on Google Chat. They sometimes use other channels, like social media, to build up relationships with their targets before moving the conversation to Google Chat. At other times, they take a “spam” approach, casting their net wide with thousands of unsolicited messages, hoping that one will trigger the right response.
Google Chat’s quick, direct messaging feature helps make communications seem intimate and safe with little effort from the scammer. Plus, the platform’s real-time nature makes it difficult for users to step back and think as critically as they need to. Let’s see how scammers’ favourite methods are designed to take advantage of the platform.
What are the most common Google Chat scams?
There are few things in life you can truly rely on—but scammers relentlessly conjuring up strategies to trick users is certainly one of them. Being aware of common scams can help you safeguard yourself.
Phishing scams
“Hi! I just got a message from Google saying that your account needs to be verified, or it’ll be deactivated soon. Click here to verify your account [link]. Don’t wait. This is urgent!”
Phishing scams are a type of social engineering attack and a hot fraudster favourite. You’ll receive a message that looks like it’s from someone you know or a company you trust, containing a link that leads to an official-looking website.
How it works: If you’re tempted to click on the link—beware—you’ll be directed to a fake website that’s designed to look just like the real thing (e.g.: your bank or mobile phone provider). Here, you’ll be asked to enter your username, password, or other personal details, which the scammer will steal and usually use to commit other fraud, like identity theft.
Impersonation scams (including tech support scams)
“Hello, this is Google Support. We’ve detected suspicious activity in your account. To prevent it from being hacked, please contact us right away at this number [phone number] or click this link to start a remote session.”
Impersonation scams occur when a scammer creates a profile pretending to be someone else, like a trusted company representative, and claims that there’s an urgent problem with your account. Scammers also impersonate friends or family members to ask for your help.
How it works: They’ll try and pressure you into immediate action and may ask for sensitive information like your credit card details. In tech support scams, they often request remote access to your computer to “fix” a non-existent problem. If you click the link or call the number, they might install malware on your device, steal your credentials, or even ask for payment to help you. If they’re pretending to be a friend, look out for requests for money because they urgently need a plane ticket or other help.
Bogus giveaways
“Congratulations! You’ve been chosen as one of the 15 lucky winners of our exclusive giveaway! Get a brand-new Apple watch for FREE! Simply send us your shipping details and email address by clicking the link below and claim your prize! Don’t wait—this offer expires soon!”
This looks like great news: You’re told that you’ve won something valuable, like a new gadget or gift card. The message looks official, sounds urgent, and often includes flashy emojis.
How it works: Once the scammers have lured you in with an “amazing” offer, they’ll ask for your personal details or an upfront payment for processing fees or shipping costs. If you give them what they want, you won’t hear from them again—the prize never arrives (or you’ll receive a fake product), and the scammer vanishes along with your money. If you’re very unlucky, they might also use your personal details to steal your identity.
Investment scams
“Hello, we’re reaching out to you with an exclusive opportunity to invest in a new cryptocurrency that promises a guaranteed return of 150% within a month and minimal risk! This is a limited-time offer, so act fast! To get started, send your investment of $500 to this wallet address immediately.”
These messages generally claim to be from successful investors sharing a valuable opportunity with you and urging you to send money quickly.
How it works: Scammers use high-pressure tactics and promise huge returns with minimal risk. Fake websites and fabricated testimonials are all valuable tools, and they’ll try to convince you that the opportunity is as lucrative as it is legitimate. Send money and the scammer will disappear along with your dreams of raking in a fortune.
Job offer scams
“Hi [your Name], we’ve reviewed your resume and are excited to offer you the position of Remote Marketing Coordinator. You’ll need to pay a $200 background check fee to complete the process. Once we confirm your payment, you’ll be sent the official offer letter.”
These employment scams take advantage of job seekers by offering them attractive, fictitious jobs and demanding quick action to secure their new role.
How it works: Scammers reach out as recruiters or hiring managers. They ask for money upfront for things like background checks, visas, and training materials (which is never a legitimate part of the hiring process!). Once you pay, your new career won’t materialise.
Keep in mind: Fraudsters don’t just stick to one method—they can reach out through various channels. If you get a call from someone claiming to be an employer, it could be a telephone scam.
Romance scams
“Hi [your Name], I’ve been thinking about you all day. I know we haven’t met in person yet, but I feel such a deep connection with you. Things are really difficult at the moment and I would love it if you could help me out. My mum needs surgery for her cancer, and if you could send $500, it would really help me out. I’ll pay you back as soon as I can.”
Lonely and looking for love or companionship? Fraudsters will exploit that by building a romantic connection before swooping in with their real intentions (money).
How it works: Fake romantic relationships aren’t built in a day, and scammers slowly build trust with targets via dating apps or social media before moving over. Some Google Chat scams may be born as WhatsApp scams, for example. After some emotional back-and-forth, they invent a crisis (like a medical emergency or financial problem) and ask you for money. Once they receive the funds, they either disappear or see how many more lies they can invent to ask for more money.
What are the key warning signs of a Google Chat scam?
Have you spotted a pattern yet? Whether it’s a romance or investment scam, Google Chat scams share many similar characteristics. We’ve summed them up here to help you spot a scam with ease. If you answer “yes” to any of these questions, run. The chances are high that the sender is not, in fact, your beloved cousin stuck in Ibiza with no money—or that your new online Prince Charming suddenly needs gallbladder surgery.
- Is it an unsolicited message?If it’s completely unexpected, especially from someone you don’t know, be on high alert.
- Is it urgent, urgent, URGENT?Are you being asked to act right now? Scammers love to rush you into making bad decisions.
- Is it a sudden request for money? Does a friend really need £500 for a plane ticket, or is “tech support” asking for payment to “secure” your account? Friends probably wouldn’t contact you on Google Chat like this—and neither would a legitimate company.
- Are they insisting on personal details?If the person you’re chatting with says they need your confidential information, such as your address, financial details, or login credentials, it’s a red flag.
- Does the message contain random links? “Click this link to claim your prize!” No thanks. Links to promises and prizes that sound too good to be true are just shortcuts to your personal details, wallet, or malware. Don’t fall for them.
- Is the language inconsistent or strange? If the message has grammar and spelling mistakes, sounds weird, or doesn’t quite match the way the person you know normally sounds, be suspicious. Trust your instincts.
- Are they always unable to video chat? Is 22-year-old Anna really 55-year-old Axel? The sender is most likely avoiding voice and video calls to hide their true identity. Deceiving victims by using a fake identity is called spoofing.
- Are they being secretive? “Don’t tell anyone, it’s a surprise!”. If the conversation is all cloak-and-dagger, it’s most likely a scammer trying to cover their tracks. Real people are rarely mysterious.
- Are messages emotionally manipulative? Don’t communicate with anyone who seems to be playing on your emotions by, for example, declaring their love or needing sympathy, especially if you’ve only just connected with them.
- Are you being promised fast, easy money? An amazing investment that promises great returns or a high-paying job abroad that requires few skills are common scams.
- Are the profiles too perfect? A picture-perfect life, profile photos that look suspiciously amazing and interests that mirror yours too well could be signs of catfishing or other scams.
In essence, scammers mimic the communication style of the people or companies you trust, making it easier to manipulate their victims. Always be cautious when meeting anyone online, even if you think you know them.
What should you do if you receive a suspicious message on Google Chat?
Don’t suffer in silence! Always report suspicious and inappropriate messages, plus any abuse or spam, to Google to limit potential damage and help protect others. You can block and report single users, a space, or a conversation. Find out more about how to report and block someone in Google Workspace here (There’s also a handy video).
Google also offers suspicious message alerts. You’ll receive a warning if a message you receive is similar to messages that have been used to steal personal information. You can confirm that it is indeed suspicious by tapping “Report”. Here’s what happens next: “When you report a message to Google, the text of the message is shared with and stored by Google. If the sender isn’t one of your contacts, an identifier for the sender is shared. Your report is not linked to you or to identifiers, such as your name or phone number”. (Google suspicious message alerts, status January 2025).
Top 10 tips to help you avoid Google Chat scams
Google Chat may be a newer messaging system, but there’s been no reason for scammers to reinvent the wheel. They use the same tried-and-tested tactics across multiple platforms.
And so should you. Always follow these rules to stay safer online and help protect yourself from identity theft.
- Never click on suspicious links or attachments: Only open links from people you know and trust. Learn to spot malicious links by looking out for these clues: Links with typos, URLs filled with symbols or random characters like hyphens, and domain names that are just an IP address made up of numbers. Scammers can embed dangerous URLs inside of legitimate-looking links, text, and images. Top tip: You can see what’s hidden by hovering your mouse over these links.
- Don’t disclose personal information: Whether it’s a love interest or someone claiming to be your long-lost cousin, never hand over personal details to someone you meet online.
- Be cautious with seemingly harmless details: Scammers can use details like your date of birth or the name of your first pet to guess your passwords.
- Always verify the identity of the sender: Whether it’s a stranger insisting they know you or someone claiming to represent an organisation, always ask identifying questions and do your research. If it’s a business prospect, check the email and Google the organisation to see if the patterns of the email match.
- Be suspicious of high-pressure tactics: If a sender demands that you act immediately, don’t! Whether it’s an emergency payment or a sudden “problem” with your account, never act without doing your research.
- Ignore offers that seem too good to be true: Chances are that you didn’t win that million-pound house or hit the jackpot. And no one is giving you a free iPad for completing their survey. Don’t click on links provided—scammers are most likely trying to steal your information or inject malware into your system.
- Enable two-factor authentication: Add an extra layer of online security by enabling two-factor authentication that requires another code beyond just a username and a password. If a hacker steals your password, they’ll also need your phone to gain access to your online account.
- Never share passwords: No legitimate organisation will ever ask for them. Double-check the authenticity of a website before entering your login details. Top tip: Always create strong, unique passwords and store them in a password manager, like Avira Password Manager—you can get it alone, but why? It’s included with Avira Free Security.
- Adjust your privacy settings: This helps you control who can see your profile information. Regularly review your settings to make sure that they still reflect the level of privacy you want. Here’s how to understand the basics of privacy in Google Chat.
- Never send money to unverified recipients (and don’t use unsecured channels): Untraceable and unreliable payment systems can make it easier for scammers to steal your money—and you won’t have protection if the transfer goes wrong. Plus, without encryption, sensitive financial information (like account numbers) can be exposed.
Have you fallen victim to a Google Chat scam? Here’s what to do (fast)!
Is it too late, and you think you may already be a victim of a Google Chat scam? Take these steps right away.
- Scan your device for malware: If you clicked on a link or opened a suspicious attachment, use your anti-virus solution to run a scan to help identify and remove malware.
- Notify Google:Ignoring the chat might keep you safer, but it won’t block the sender nor help others stay safer. So, report every suspicious message.
- Secure your accounts: If you think you’ve shared login information, update your passwords with stronger options. It’s a good idea to start with your Google accounts and then follow up with social media sites and bank accounts. Unchecked data breaches can have far-reaching consequences.
- File a report with the relevant authorities: In the UK, contact Action Fraud by calling 0300 123 2040 or reporting online through the Action Fraud website. If you’re in the US, report the scam to the Federal Trade Commission.
- Monitor your accounts: Check your online accounts, bank accounts, and credit reports over the next few months for suspicious activity.
Build your online fortress with multiple defence layers
Don’t let a single wrong click compromise your data and online identity. A solution that offers robust, multiple layers of online security can help shield you from hackers and online threats. Avira Free Security blends powerful antivirus, a password manager, a software updater, a VPN, and more. Protect all your devices with Free Security for Windows, the security solution for Mac, the security app for iOS devices, or the antivirus app for Android phones and tablets. With Avira, no device is left out in the cold.
Like many online platforms, Google Chat helps keep us in touch and more productive. But no safeguards are infallible. Avoiding risky behaviour online (like talking to strangers—your mother was right!) and deploying trusted online security tools
Google is a trademark of Google LLC.
This post is also available in: German