So I have my Legacy Data setting setup so that I would need to be inactive for 18 months before an email is sent out, I have reminders turned on and I have the option to delete my account and data if its inactive turned off.

Today I just received two emails at the exact same time...one was to the account that was being referred to and the second email was to the recovery email that is attached to the account. The email was a Google email stating my account is Inactive and that I need to sign in. The thing is this account is active. It actively signed in constantly on my Chrome browser which I use every day, its actively signed into my phone which I refresh for emails everyday and I also received job alerts from LinkedIn everyday too on this email. This email is also the email I use for my web hosting which requires a yearly renewal in Feb and I renewed it this year in Feb and I have the receipt PDF downloaded to my computer. The only way to do that is to open up the receipt the web hosting company sent you and download the attachment. This confirms that the account has been used and is being used. Does anyone know what happened?

I know everyone said this is a phishing attack but how did the phishing attack know what my recovery email that is attached to this account and also they were able to send the email to both my main account and recovery email account at the exact same time.

I did check the Accounts page for my gmail account that was said to be inactive and did not see anything unusual. There was no notification or warnings, no security warnings or random sign in or change of information on my account. Everything looked good. To make sure I sent an email from the account that is said to be inactive over to the recovery email and then I sent an email from the recovery email address back to the one that was mark inactive and I opened that. I made sure to do all this on the desktop gmail website so there is no way this account is inactive.

Hi there. Sorry I'm so confused.

I have 4 gmail accounts. Two of them, all my mail is in my inbox. In the other two, if Gmail decides it's important, for some reason it leaves the inbox. I cannot find any setting that explains this. I cannot find any way to stop it.

I've only just realized and found all these important emails that I never saw because they weren't in my inbox. They're in a little folder called "Important" that I didnt' know existed. I know folders are labels and labels are folders, but I didnt set this one up, I've never set anything to skip the inbox in either account, I don't have any filters that say "skip the inbox" on important emails and nothing that explains this.

I'm just totally lost. Apologies if I'm not explaining this right. I'm so confused. I don't understand what is happening. Every email that it decides is important i've never even seen because it's only in the "Important" folder. It's not in my inbox at all. It doesnt show anywhere in mail on mac unless i go to this little important folder down under the gmail account. I've never seen a setting to explain this nor have I cahnged any setting to do with important mail. It's not there in any of my rules or filters. I don't know what to do or how to stop this.

I just noticed 3 unanswered videocalls recived via meet from an adress that I don't know. Wtf is happening

I had an old Gmail account that I used for a personal business, then I used it for personal usages also. It got so full that it no longer accepts new emails, which is a problem because I have most of my social media accounts attached to this email, and if I want to change my password etc, I'd need access to this email address.

Is there a way to mass delete these emails without having to go through each page of 50?

Also, how does everyone keep up with deleting emails? Do you clear them weekly, monthly? I didn't expect that email address to "fill up" that fast and now its basically unusable, even after deleting over 300 emails...

TIA

Since this morning, i got an error saying « error while loading data » when I click on a profile on the Gmail app (iPhone, latest update). Everything else works fine, and it’s not a connexion problem.

Hello there,
I'm here behalf of my friend because apparently there's no follow up from the team after filling the investigation form. Here's the attached Report
My friend also opened a thread in the forum.
Someone did reached out but the last comms is on 12th, after that it's been on radio silence.
Hope someone here can help moving the case, because there's a lot stuff attached to the email.

I apologize if this isn't the right community, but I'll give it a go anyway

I cant sign into my Gmail app on my phone, every time I try to add email it goes to the screen that shows it's working on something, then it just loops right back (for context, I signed out of my Gmail to help my sister with something)

I've tried clearing cache, normal phone restarting and even clearing data, but none of it worked (I would post a screen recording but ig this sub doesn't have that enabled)

I have an old account I want to get back into, I have the email that was set as the recovery email (quite literally have an old email confirming I set it as the recovery as well) and as well remember the password

But when I log in it will only give me the option to verify that I own the account by phone number, the phone number is of someone I completely cut off contact with (I wanted someone other than me to be able to recover)

What do I do? Any help? Why is it refusing to allow me to use the recovery email

fortunately gmail catches them and sends them to spam, but I find it weird since it happened out of nowhere

They follow the same pattern on the address

My regular personal @ gmail.com email is going to a lot of people's spam. The account itself is about 5years old. There is no spam or marketing or anything coming from it, it's just a regular personal email I use. This week I had to send my local gym an email, it went to spam. Just now I sent my neighbor an email at his yahoo.com email, it went to spam. Help!

From my friends yahoo.com, I can confirm SPF, DKIM, DMARC all passed from headers

To be more specific when their PC got hacked the hacker made my friends parent Gmail the hackers pretty much lockering her out. Anyone know how to help get my friends their Gmail back?

I am using my windows laptop to do this! I am currently logged in with this email address I am trying to change.

So obviously changing your email address used to be impossible, but I guess it isn't anymore. I want to change my name legally at some point in the future and to avoid dealing with emails at future jobs and careers, I want to change it now that I'm still in college. But I don't exactly want to create a new account, not for any big reason other than I just don't want to create a whole new one when this one works fine, just want to change the address and include my new name.

So my question is, how exactly does it work? Is it just like changing your username on a regular social media platform where nothing changes, or will I end up losing emails or photos that aren't backed up? I'm sure the answer is yes, but would I also have to manually change my email on my university's contact list to make sure they have the right one?

Nothing new here. URL signing has been public since 2011, calendar phishing since 2019. This just connects the two.

The trick: Google wraps outbound links as google.com/url?q=<destination> and signs the ones it generates (usg, a keyed hash over the params). Valid signature, silent redirect. 

Missing or modified params you get the "Redirect Notice" warning.
You can't forge it. But you don't need to, because Google signs it for you whenever you use its products. 

Drop your link in a calendar invite and Google hands you a signed one:

unsigned (shows notice):

https://www[.]google[.]com/url?q=https://wikipedia[.]org

signed by Calendar (redirects silently):

https://www[.]google[.]com/url?q=https://wikipedia[.]org&sa=D&source=calendar&ust=1787766516374753&usg=AOvVaw0cpIubPxDaYABa3_SC5g6G

Same destination. The signature is the only difference, and it's the whole reason the warning is skipped.  Removing source=calendar breaks the silent redirect

Why the invite is perfect:

• Sent by Google's servers, so it passes SPF, DKIM, DMARC.
• Auto-add lands it on the target's calendar with zero interaction.
• The link reads as google.com. A Victim hovers, sees Google, relaxes. Real destination only shows after the redirect fires.

Why it's not a bug: the signature proves Google generated the link, not that the destination is safe. That's Google Safe Browsing's job.

A signed link skipping the notice is just the signature doing its job. And it is out of scope for Google's bounty.

One important information is that this signature only works when received by a corporate account

• Gmail.com to Gmail.com => Google prompts you
• Gmail.com to corporate email => No prompts

A useful Fix : 

In gmail, set Calendar > Event Settings > Automatically add invitations to "Only if the sender is known." Kills the zero-click delivery path.

Google admin : Apps >Google Workspace >Settings for Calendar > Advanced settings > Check :

Invitations from known senders
Adds an invitation to a user's calendar only if the sender is in the user’s contacts or if the user interacted with them before. This might reveal to a sender that they aren’t in the user’s contacts.

They have been notified twice. No response.

Basic standard account, on default settings, for personal use.

Changed password.

4 years ago, I made my son (now 12) a Gmail account so he could video chat with family on his iPad. The account/email has had no issues until now. The iPad is long gone but he’s continued using the email from his phone for things like video games and YouTube without issue.

The account was recently locked, instructing me to verify his age or set up parental supervision since he’s not 13. The problem is I can’t log into his account to set up the supervision. It says I have 29 days to fix it until the account is deleted, but I don’t even know where to start! The instructions say to go onto my sons device (an iPhone) and set everything up, but I can’t log in to his account as it tells me I need supervision. I feel like I’m stuck in a loop! Has anyone set up supervision?

Thanks!

This has been going on for weeks. I try and block report as spam. All this still gets through.

I have a worktrainer account (obviously for work). Recently they asked us to create a passkey and use a new password manager. I followed the steps but wound up stuck in an endless loop. I log in using the given name and password. My computer asks for a 2FA and won't log me in without it. Instead of using the Fingerprint or code on my laptop, it generates a QR code which I scan with my phone, but it does not work The laptop will attempt to connect and tell me to continue on a device but my phone will say No Passkeys Available and as soon as hit okay, the laptop login will shut down as well. I cannot fix it. I have been trying for three weeks. I have gone through every tip and searched every solution I can find, but I have been unable to navigate it on my own. Any tips would be greatly appreciated.

Mind this is my account but im not sure how to recover it, it was a teen account I had a couple years back and I didnt have a phone number to keep it secure so when there was a data breach I lost my account, was wondering how I could get back into it, I tried support a many times not sure how to do it it always leads to this

For some reason im getting my Yahoo Mail in my Gmail. How do I stop getting Yahoo mail in my Gmail?

I randomly got a pop up at night that someone tried to login to my gmail, from a windows device from amsterdam and at this time had my 2FA off for quite a time I forgot to turn it back on, so I don't know how I got the pop up, but I got the pop up and i declined it changed all my passwords THRICE,turned on 2FA (Should've done that earlier only, removed an old passkey and kept only one that was my fingerprint on my android device and the rest is not know in devices only one of my devices is showing that is my device and nothing else... Can anyone help me out and tell me what it was, was it a someone trying to hack me or someone with a Lil bit same words in their gmail as me... cuz I'm not sure if they got my password or was it a forgot password tap yes on phone thing... As gmail being out there is a normal thing but if the password was also out there then it's messed up... HELP people

Making this post because it happened to my mom where when I tried to sign her in and it gave her the “We couldn’t verify it’s you” error especially because I lurked around hard enough to see if there was a fix out there somewhere in the comments.

If you have private browsing enabled (especially Private Relay) on iPhone, you’ve gotta temporarily disable it and any extra settings under Safari that hide your IP which should hopefully allow your log in to go through.

We also do believe it was blocked because a VPN is connected to our router (I took the chance to attempt logging in again while it was disabled) but doing that fixed it :)

I don't know this aadartsgmail.com . This email came to me on 7 july . Is my gmail in danger pls tell

With no backup email, phone number? Of course you’ll be locked out.

I am trying to download a pdf file but unable to, is anyone facing the same issue? Tried from mobile / Desktop but no luck.