Have you ever received a random call or text asking for a verification code you didn’t request? If so, you might’ve been the target of the Google Voice authentication scam, it might seem harmless, but it's the start of a growing scam.
This tactic tricks people into giving up access that scammers use to impersonate them or carry out other fraud. It allows fraudsters to hijack your phone number and use it to make domestic and international calls—you don’t even need a Google Voice account to get scammed. Simply sharing your number online, like in a marketplace listing or a missing pet ad, can make you a target.
HERE IS HOW GOOGLE VOICE AUTHENTICATION SCAMS WORK:
You post your actual phone number on some online platform. It is common for scammers to target victims who use popular marketplace apps or websites to post items for sale. There have also been reports of people being targeted in other online locations, including sites where you post about lost pets.
The scammer contacts you via text or email acting as if they are really interested in buying that couch or think Fluffy, your missing cat, is found. They say they just need to make sure you are legitimate, so they don’t get scammed. They say they will send you an authentication code from Google to confirm that you are a real person and not a bot. You will receive that authentication code in the form of a voice call or a text message. They ask you to repeat that number to them.
What they are doing is setting up a Google Voice account in your name using your real phone number as verification. Once set up, they can use that Google Voice account to conduct any number of scams against other victims that won’t come back directly to the scammer. They can also use that code to gain access to, and take over, your Gmail account.
If you do get scammed, check Google’s website for information for information how to take back control of that virtual voice account.
HERE ARE SOME TIPS TO AVOID GETTING SCAMMED IN THE FIRST PLACE:
- Never share a Google verification code with others.
- Only deal with buyers, sellers, and Fluffy-finders in person. If money is to exchange hands, make sure you are using legitimate payment processors.
- Do not give out your email address to buyers/sellers conducting business via phone.
- Scammers often create a sense of urgency, do not let someone rush you into a sale. If they are pressuring you to respond, or risk serious consequences, they are likely trying to manipulate you into acting without thinking.
- Slow down and verify the facts before making any decisions.
- Double-check suspicious accounts or transactions. Use multi-factor authentication (MFA) for your Metro accounts to increase security.
RECENT CYBER FRAUD TO WATCH FOR
Hackers are now using artificial intelligence (AI) to pull off convincing scams like deepfakes and voice cloning. With deepfakes, they mix real and fake information from the internet to create fake identities that can trick identity checks. These fake profiles are then used to open new accounts or take over existing ones. Voice cloning lets scammers copy someone’s voice using just a few seconds of audio. They might pretend to be a family member in trouble and pressure you to send money right away.
To stay safe, never send money based on a phone call alone. Verify the caller’s identity by contacting them directly or consulting other family members. Metro will never call, or text asking for your personal information or send links you need to click.
HOW TO SPOT WHEN YOU'RE BEING SCAMMED
We believe the more informed you are, the easier you will recognize scams and know how to stop fraudsters in their tracks. Visit our fraud protection page regularly for current scams facing consumers, and insights on how to protect your identity, personal information, your loved ones, and your money.
If you believe you are the victim of an online scam, report it to the FBI’s Internet Crime Complaint Center at www.ic3.gov or call your local FBI office.
