Google Email Scam: Fake Google Alerts Fuel 2FA Phishing and Account Takeovers

Crypto traders are being warned about a Google Email Scam that impersonates legitimate Google security emails. The phishing messages reportedly mimic real account-recovery and review prompts, increasing trust. A key tactic is hidden or abnormal formatting. Attackers use tactics such as large blank spacing to push malicious links out of the visible email preview. If clicked, the Google Email Scam can trigger fake login pages to steal passwords and session cookies, and it can also harvest 2FA approvals and codes. Once an exchange or wallet account is compromised, funds may be moved quickly. Recovering losses is often difficult because blockchain transactions are typically irreversible. Law-enforcement and major firms are escalating action. The report says Coinbase, Microsoft, and Europol participated in operations targeting the Tycoon 2FA phishing network, which allegedly sends millions of malicious emails per month. Binance also reported blocking 22.9 million phishing/scam attempts in Q1 2026, helping protect about $1.98B in user funds. On the defense side, Ethereum’s ERC-7730 Clear Signing standard aims to make wallet transaction approvals clearer before authorization. Market impact: this is mainly a security overhang. The Google Email Scam is unlikely to change token fundamentals near term, but it can raise headline risk and prompt tighter user security behavior.