Email Account Recovery Scam - What Is The Angle?

For a year or two now, every few months I've been getting a gmail account recovery email to an old Hotmail account I own. No consistent rhythm to when it occurs.

The weird thing is I don't own the Gmail account, but it IS my name, and similar to a Gmail account I do actually own.

So to illustrate the scenario, let's say my name is Joseph Smith:
- my actual Gmail account is [email protected]
- my Hotmail account is [email protected] (ie. a shortened version of my first name + something unrelated)
- the Gmail account for which I've been receiving recovery emails to is [email protected] (this account was registered before I registered my own)

FTR, my name is quite uncommon, even globally from what I can tell. It's incredibly unlikely that someone out there has both a Gmail similar to mine AND a Hotmail account with a very similar random suffix as mine, so as to accidentally set up their Gmail with my Hotmail as the recovery account.

My first assumption was a phishing scam, but the email headers look legit, sender is [email protected].

The whole scenario seems really off and I'm simply assuming scam, but I cannot figure out what the play is or how it works.

Any ideas?

Comments

  • +1

    Delete.

    Move on (after lockdown).

    • I did the first 5 or so times. The persistence after this long is what has me curious.

  • +1

    if they are asking you to reply to the email with a password its prob to see if that password is a master key (same password for the account you've sent the email to them on)

    failing that, and you've replied they now know you are a dummy and could try again by asking you to verify secret question/answer etc and they've built a profile

    if its a link they have sent it could be mal/spyware

    jeff bezos clicked a link on his phone and that's how all his private info got leaked (evidence of him cheating)

    if it's consistent it could be because it's personal, eg partner fishing for info or access to social media. the only way to narrow down that list is to kill everyone in your life one by one and if the emails stop you know you've found the culprit

  • +1

    you should be able to reset the password on the joesmith gmail account, then you can login and remove your hotmail account as the backup.

  • Block the senders email address. Fixed.

Login or Join to leave a comment