Google warns of increase in scams during the holiday season

Gmail, the world's leading email service provided by Google, currently serves more than 2.5 billion users worldwide. With advanced security systems, Gmail is capable of blocking up to 99.9% of unwanted emails, including spam, phishing emails, and malware.

However, despite this impressive rate, 0.1% of malicious emails still make it through the layers of protection. This seemingly small number has the potential to cause serious damage, from stealing personal information, financial fraud, to spreading malware on a large scale.

This requires users to not only rely solely on protection technology, but also equip themselves with knowledge and vigilance to protect themselves against online threats.

"Since mid-November, we've seen a spike in email traffic compared to previous months, making it more challenging than ever to keep people's inboxes safe and protected," Google said in a blog post.

Google predicts that a second wave of attacks will erupt at this time, as attackers continue to adapt their strategies and experiment with new ways to bypass existing security measures.

3 types of scams that are dominating the holiday season

According to Google, there are three types of scams that are dominating the holiday season, including:

1. Invoice fraud:Fraudsters use the trick of sending fake bills, often accompanied by a call to "dispute" an unusual charge. Taking advantage of the victim's confusion, they skillfully manipulate and convince the victim to make a payment. Although not a new form, these scams are persistent and increasingly popular, becoming a worrying threat to users.

2. Celebrity scams:Scammers send fake emails, claiming to be from celebrities themselves or claiming that a celebrity is endorsing a product. These connections often lack logic, but are cleverly designed to feel credible. Playing on the admiration or curiosity of their victims, scammers try to build trust and lure them into scenarios that sound “so real” but are actually elaborate traps.

3. Extortion scam:Victims receive threatening and intimidating emails in which the scammer reveals details such as home addresses, sometimes even attaching actual photos of the location. These messages often come in a variety of forms, but they all revolve around serious threats.

Scammers may threaten physical harm or claim to possess sensitive personal documents that they claim were obtained through a hack. This tactic is intended to create fear and pressure the victim into complying with their demands, such as paying a ransom or providing additional personal information.

Gmail has rolled out advanced AI-based cyber defenses to further protect users. By using large language models (LLMs), the system not only detects more complex spam patterns but also improves spam blocking efficiency by up to 20% compared to before.

Notably, these models are also capable of processing large amounts of information, allowing for the analysis and evaluation of 1,000 times more user-reported fraud cases, significantly improving the ability to detect and prevent online threats.

Gmail's new security features have had a significant impact, helping reduce the number of phishing attempts reported by users reaching inboxes by 35% in the first month of this year's holiday season, compared to the same period last year.

This achievement represents a significant improvement in the ability to detect and prevent online threats, helping to better protect users at a time when fraudulent activities are often on the rise.

In a blog post, Google stressed: "It's vital that you stay vigilant and proactively report any suspicious emails as spam or phishing. This is the first step in protecting yourself and the community from online threats."

4 "golden rule"help users protect themselves from fraudulent behavior

Google has introduced four "golden rules" to help users protect themselves from sophisticated scams:

1. Slow down:Scams are often designed to create a sense of urgency, using phrases like “urgent,” “immediate,” “disable,” or “unauthorized” to pressure victims into reacting without thinking.

2. Check carefully:Take the time to verify the details in the email. Does the content make sense? Is the sender's email address authentic? This careful examination will help you spot any red flags and avoid falling victim to a scam.

3. Stop! Don't send it.:Google says that no trustworthy person or organization will ask you to make a payment or provide personal information right away. Be cautious of any such requests, as they may be a sign of a scam.

4. Report immediately:If you detect any suspicious signs, immediately mark the email as spam so that the system can process it and help protect you and the user community better.

In practice, scammers often deploy two sophisticated scenarios to trick users into revealing login credentials, financial information, or installing malware on their devices.

First scenario:They create urgent situations, such as security warnings or important notifications, to pressure victims into clicking on links, opening attachments, or installing apps they offer.

Second scenario:They prey on greed, luring victims with enticing promises like cash prizes, expensive smartphones, or “too good to be true” deals. These tactics are designed to catch victims off guard and trap them.