A: Are you getting multiple codes you did not request for Google Account recovery/password resets?

READ ALL of this before posting:  Please ONLY use the blue "Reply" option:  

A)  What:
Since the start of September users have been reporting receiving multiple verification codes from Google that they did not request, as though someone is trying to access the users's Google Accounts.

Other users are getting messages telling them that "their" Google Account passwords have been changed or even that "their" Google Accounts have been deleted.

Note that Google is aware of the issue and I will update here when I hear anything. 

B)  Why:
Some third party companies appear to have suffered data leaks which have resulted in (primarily) mobile phone number lists being leaked to the troublemakers.  These troublemakers are probably doing this to make money from the sending of the codes/messages, nothing more.  Meaning-  they are not trying to get access to your (unknown to them) Google Accounts.

Note that this is not something which you or Google can stop, since your number is already leaked and "out there".

In the case of this being Google Account recovery codes-  please be reassured by the fact that you are getting the recovery codes sent to you, which means that the troublemaker is not getting them.

C)  What you should do:
Review your security carefully, running a security check-up here:  https://myaccount.google.com/security-checkup (and enable two-step verification!) and make sure that you have active virus detection/removal software.  

D)  Posting a reply:
Share only the short answers to five questions in that specific order, and using "Reply" (do not use "Add a comment"):
  1. What are you getting?  Recovery codes?  Or notifications of password changes or Google Account deletions?
  2. What country are you in?
  3. What language is the message in?
  4. Who is your mobile provider?
Anything else is off topic and will be treated as such, thanks for understanding.

______________________________________________________________________

Please use this option if you are going to post a reply:



Locked
Informational notification.
This question is locked and replying has been disabled.
Community content may not be verified or up-to-date. Learn more.
Last edited Nov 28, 2023
Recommended Answer
a)  Thank you so much to everyone contributing their info on this issue addressed by this thread.  Thank you also for bearing with me on the formatting of your reply and using "Reply" and not "Add a Comment".  It makes a huge difference to Google and I.


b)  In review:
  • It appears that Australian users have not seen activity in this regard since the end of September.
  • The activity has shifted to the UK (with one exception-  one user is in Iceland). 
  • The new activity seems to be more spread out across the main UK mobile networks (and is always in English).
  • The activity appears to have nothing to do with users's Google Accounts, but is more about using their leaked phone numbers to make money from.  Nasty.

c)  Current Advice:  Since this is still not impacting on users's Google Accounts and it is not something which can be fixed by users's mobile phone networks or by Google, it is still best to-
  1. do a security check-up (see Step 1 here:  https://support.google.com/accounts/answer/46526),
  2. install and use good anti-virus software, and-
  3. seriously consider two-step verification (also under Step 1 in the link above).
I advocate two-step verification for Google Accounts (check out Passkey!), because if Google do tighten security again in response, many users could find themselves locked out of their Google Accounts if Google find it necessary to ramp up security in future.


d)  Final Note:  I am going to close this thread for the time being, having passed on everyone's generously shared data to Google, but assure you that I will still be monitoring the situation and may reopen the thread to allow more data to be shared.
Last edited Nov 10, 2023
Diamond Product Expert SusanneS. recommended this
Helpful?
All Replies (105)
Text/SMS
Australia
(Sounds like it might be related to that recent AU data breach 😬)

Ah-  tell me more?  This, I hadn't heard of and you could be right as this is really odd...
Oct 23, 2023
  1. How are you getting the codes?  By email or SMS/text? Text - 3 in 4 hours
  2. Where in the world are you?  Country only please. - UK
  3. What language is the message in? - English
  4. Does the code itself start with "G-", yes or no? yes
  5. If by SMS/text-  who is your mobile provider (do not answer this if you get emails) - Plusnet
Oct 24, 2023
Sms
Uk
English
Yes
EE
Oct 23, 2023
Text
England
English
Yes
EE
Oct 23, 2023
Text
England 
English 
Yes 
Ee
Oct 24, 2023
  1. SMS/TEXT
  2. UK
  3. ENGLISH
  4. YES
  5. 02
Oct 23, 2023
SMS
UNITED KINGDOM
ENGLISH
Yes
EE
Oct 24, 2023
1 SMS
2 England, UK
3 English
4 Yes
5 Three
Oct 24, 2023
  1. SMS/text
  2. England/UK
  3. English
  4. Codes start with "G" followed by a number
  5. O2 is my mobile provider
Oct 24, 2023
1. SMS
2. England, UK
3. English
4. Yes
5. O2
Oct 24, 2023
1. By text message
UK
English
G- Yes
Plusnet 

I have now started getting them from a other place with no Google logo
14 messages since Sunday
Oct 24, 2023
1. SMS 
2. United Kingdom
3. English
4. Yes
5. Lyca

14 messages since last night.
Oct 24, 2023
SMS/text
UK
English
Yes
Sky

Multiple messages for the past 2 days
a)  Thank you so much to everyone contributing their info on this issue addressed by this thread.  Thank you also for bearing with me on the formatting of your reply and using "Reply" and not "Add a Comment".  It makes a huge difference to Google and I.


b)  In review:
  • It appears that Australian users have not seen activity in this regard since the end of September.
  • The activity has shifted to the UK (with one exception-  one user is in Iceland). 
  • The new activity seems to be more spread out across the main UK mobile networks (and is always in English).
  • The activity appears to have nothing to do with users's Google Accounts, but is more about using their leaked phone numbers to make money from.  Nasty.

c)  Current Advice:  Since this is still not impacting on users's Google Accounts and it is not something which can be fixed by users's mobile phone networks or by Google, it is still best to-
  1. do a security check-up (see Step 1 here:  https://support.google.com/accounts/answer/46526),
  2. install and use good anti-virus software, and-
  3. seriously consider two-step verification (also under Step 1 in the link above).
I advocate two-step verification for Google Accounts (check out Passkey!), because if Google do tighten security again in response, many users could find themselves locked out of their Google Accounts if Google find it necessary to ramp up security in future.


d)  Final Note:  I am going to close this thread for the time being, having passed on everyone's generously shared data to Google, but assure you that I will still be monitoring the situation and may reopen the thread to allow more data to be shared.
Last edited Nov 10, 2023
Diamond Product Expert SusanneS. recommended this
To all those subscribed to this thread-  I believe that the codes are being sent because of the troublemakers making money from the sending of codes by SMS to mobile phones (that is why there are only very few email addresses impacted), and not because the troublemakers are trying to access Google Accounts that they don't know anything about.  

I hope this helps reassure users that, though really annoying, it is not a risk to Google Accounts as long as my recommendations in C) are put into practice.  


Hi everyone-  just a heads up as this seems to be morphing.  Some users now receive multiple messages about "their" Google Accounts being deleted or having their passwords reset, but these Google Accounts are all unknown to the users receiving notification.  


Sorry folks, but due to the spammers on this thread I am forced to lock it.  Again.  :'(
Mar 23, 2024
Problem. I have reset my mobile I am not able to recover my gmail account. And the problem was caused by the two-factor code.
Please help me to recover my Gmail account
false
15362246652207256746
true
Search Help Center
true
true
true
true
true
70975
false
false
Search
Clear search
Close search
Main menu