Source: malwarebytes.com 4/22/25
[ACSOL note: We registrants can be fearful of law enforcement and this scam plays on our fears.]
Cybercriminals are abusing Google’s infrastructure, creating emails that appear to come from Google in order to persuade people into handing over their Google account credentials.
This attack, first flagged by Nick Johnson, the lead developer of the Ethereum Name Service (ENS), a blockchain equivalent of the popular internet naming convention known as the Domain Name System (DNS).
Nick received a very official looking security alert about a subpoena allegedly issued to Google by law enforcement to information contained in Nick’s Google account. A URL in the email pointed Nick to a sites.google.com page that looked like an exact copy of the official Google support portal.
It baffles me how people still fall for this stuff.
The basic rule that law enforcement will never contact you for a warrant by any other means than IN PERSON. End of story.
Phone, mail and email are all scams.
As with those scam calls, no LE is going to prewarn you about such things. If LE was after your info and did in fact have a court warrant that was issued to Google, you definitely wouldn’t be notified of this.
Wonder if law enforcement has ever used this trick?
I do wish those emails saying I won 5 million were real, i’d donate to advocacy groups.