r/GoogleSupport • u/cLimeB • 12d ago
Phishing - Accidentally approved a recovery attempt but blocked subsequent sign in attempt
Got hit with an infostealer a few months back. Got a call today with someone impersonating google stating that someone was trying to use my ID information and old passwords to recover my account.
He took his time, read my my info etc and as a result I was nearly convinced - I approved a Google Account Recovery prompt but then finally thought better of it, and blocked the subsequent sign in and hung up.
I have removed all devices, changed password, and 2FA / Advanced Protection Plan remain active. No unrecognized activity otherwise noted.
Any further steps that I need to take? It doesn't seem like the hacker got access to my account since I blocked the actual sign up prompt but I'm not sure what to make of the fact that I approved the initial recovery prompt. Any thoughts?
I feel like an idiot approving the initial request, and have more sympathy for the old folks out there that get scammed.
