Gmail Users Beware: New AI-Driven Scam Steals Personal Data

A new AI-driven social-engineering campaign targets Gmail users by sending spoofed account recovery notifications and follow-up phone calls using realistic American-sounding AI voices and caller ID spoofing to convince victims to approve account recovery requests, enabling account takeover; the report details the scam flow, real-world observations, red flags (spoofed headers, unfamiliar recovery requests, Google rarely calls regular Gmail users), and recommended user defenses such as not approving unexpected recovery requests, verifying caller identity, checking email headers, and reviewing account security activity.