Fake Google Account Recovery Support Scam
Scammers pose as Google support agents on social media or forums to help people 'recover' locked Google accounts, extracting backup codes and recovery details that enable a genuine takeover instead.
Part of: Fake Customer Support Scams
Last reviewed: 7 June 2026
When someone is locked out of their Google account, they often turn to search engines, forums, or social media for help. Scammers monitor these channels and position themselves as helpful support experts ready to solve the problem. The fake recovery helper positions themselves as the solution to an account problem — in reality, each step of the 'recovery' is designed to extract information the attacker needs.
This scam is notable because it can work even when the victim's account is not under any actual threat — the scammer creates the anxiety they then pretend to resolve. The victim, grateful for the help, completes the attacker's takeover while believing they are securing their own account.
Backup codes and recovery contacts are the specific targets: with either one, an attacker can complete a genuine password reset and lock the real owner out permanently.
How this scam works on the Google brand
Google's real account recovery is entirely self-service at accounts.google.com/signin/recovery. Google does not provide personal support through direct messages on social media or third-party platforms. The recovery process uses trusted devices, registered recovery email addresses, and phone numbers — it does not ask you to provide backup codes to any support agent.
Fake support is found on social media (Twitter/X, Reddit, Facebook groups) where victims post about account issues. A scammer posing as a 'Google expert' reaches out via reply or DM. They walk the victim through a 'recovery procedure' that includes requesting backup codes, asking them to add the attacker's email as a recovery address, or directing them to a fake Google recovery page.
Once the attacker has a backup code or has been added as a recovery contact, they initiate a genuine password reset and lock the real owner out.
Common red flags
- Someone on social media or a forum claims to be a Google support agent and offers to help
- The helper asks for your Google account backup codes
- You are asked to add an email address you do not recognise as a recovery option
- The recovery process involves a page that is not accounts.google.com
- The helper claims Google affiliation but communicates through a personal social media account
- The recovery process seems unusually quick — genuine Google recovery can take days
How to protect yourself
- Use only accounts.google.com/signin/recovery for Google account recovery
- Never share Google backup codes with anyone, regardless of the reason given
- Do not add unfamiliar email addresses as recovery options at anyone's request
- Store your Google backup codes securely offline — they are as powerful as your password for recovery
- Follow official Google recovery prompts patiently — they are designed to verify your identity securely
How to report it
- Report the fake support account on the social media platform where it appeared
- Forward related phishing emails to [email protected]
- Report to the FTC at reportfraud.ftc.gov (US) or Action Fraud actionfraud.police.uk (UK)
- If your account was taken over, begin official recovery at accounts.google.com/signin/recovery
Frequently asked questions
Does Google provide live human support for personal account recovery?
Google's account recovery for standard personal accounts is handled through automated systems at accounts.google.com. Google does not provide personal support agents through social media DMs or forums. Any individual claiming to be Google support on a forum or social platform is not official Google support.
What are Google backup codes and how should they be stored?
Backup codes are one-time emergency codes generated in myaccount.google.com > Security > Two-step verification. Store them offline in a secure location such as a printed document kept somewhere safe. Never share them with anyone — they are as powerful as your password for the purpose of account recovery.
How long does genuine Google account recovery take?
Google's identity verification process can take anywhere from a few minutes to several days depending on what information you can provide. Be patient and follow the official prompts — rushing the process by trusting social media 'helpers' carries significant risk of permanent account loss.