Losses from hacks and scams surged in April, with one single incident accounting for most of the damage. In April, the crypto sector lost a staggering $364 million to exploits, scams, and hacks, a 1,163% surge from the $28.8 million&#8230;

Losses from hacks and scams surged in April, with one single incident accounting for most of the damage. In April, the crypto sector lost a staggering $364 million to exploits, scams, and hacks, a 1,163% surge from the $28.8 million…

In April, the crypto industry suffered significant losses totaling $364 million due to hacks and scams, marking a dramatic 1,163% increase compared to the previous month. A single major incident was responsible for the bulk of the damages.  

Crypto hack and scam losses total $364m in April: CertiK

Ethena Labs, the team behind the synthetic dollar USDe, has announced a strategic partnership with the TON blockchain. According to a May 1 statement, this move brings both USDe and its yield-generating counterpart, sUSDe, directly into the Telegram ecosystem. Ethena said: &#8220;This represents one of Ethena&#8217;s most meaningful launches to date. [Telegram] Users within [in [&#8230;]
The post <a href="https://cryptoslate.com/ethena-labs-partners-with-ton-to-integrate-usde-into-telegram-ecosystem/">Ethena Labs partners with TON to integrate USDe into Telegram ecosystem</a> appeared first on <a href="https://cryptoslate.com">CryptoSlate</a>.

Ethena Labs, the team behind the synthetic dollar USDe, has announced a strategic partnership with the TON blockchain. According to a May 1 statement, this move brings both USDe and its yield-generating counterpart, sUSDe, directly into the Telegram ecosystem. Ethena said: “This represents one of Ethena’s most meaningful launches to date. [Telegram] Users within [in […]
The post Ethena Labs partners with TON to integrate USDe into Telegram ecosystem appeared first on CryptoSlate.

Ethena Labs has partnered with the TON blockchain to integrate its synthetic dollar USDe and yield-generating sUSDe into the Telegram ecosystem, marking a significant milestone for the project.  

Ethena Labs partners with TON to integrate USDe into Telegram ecosystem

Metaplanet is doubling down on Bitcoin with a planned expansion into the U.S., aiming to raise $250 million and position itself as a global force in corporate Bitcoin adoption. In a May 1 post on X, Metaplanet CEO Simon Gerovich&#8230;

Metaplanet is doubling down on Bitcoin with a planned expansion into the U.S., aiming to raise $250 million and position itself as a global force in corporate Bitcoin adoption. In a May 1 post on X, Metaplanet CEO Simon Gerovich…

** Metaplanet is expanding its Bitcoin-focused strategy by launching a U.S. subsidiary and raising $250 million to grow its Bitcoin treasury, positioning itself as a leader in corporate Bitcoin adoption. CEO Simon Gerovich announced the move in a May 1 post on X.  

Metaplanet to launch U.S. subsidiary and raise $250M to expand Bitcoin treasury

Payments giant Visa is transforming finance by partnering with Stripe’s Bridge to pilot stablecoin-linked cards in Latin America. The push towards real-world crypto utility aligns with the vision for Best Wallet Token’s ($BEST) ecosystem, particularly its planned Best Card feature designed for seamless crypto transactions. As the market embraces easier ways to use digital assets, [&#8230;]

Payments giant Visa is transforming finance by partnering with Stripe’s Bridge to pilot stablecoin-linked cards in Latin America. The push towards real-world crypto utility aligns with the vision for Best Wallet Token’s ($BEST) ecosystem, particularly its planned Best Card feature designed for seamless crypto transactions. As the market embraces easier ways to use digital assets, […]

Visa is collaborating with Stripe’s Bridge to launch stablecoin-linked cards in Latin America, marking a major step toward mainstream crypto adoption. The move could significantly boost the utility and value of Best Wallet Token ($BEST), which is developing its own Best Card feature for seamless crypto transactions.  

Visa to Introduce First Stablecoin Cards Soon. This Crypto Wallet Token Could Explode

Presales like BTC Bull Token ($BTCBULL) may surge as Galaxy Digital plans a Nasdaq listing on May 16, with the shareholders’ meeting set for May 9. Mike Novogratz, Galaxy Digital CEO and founder, broke the news yesterday on Galaxy’s Newsroom, stating that the move would be ‘value enhancing to the company and our shareholders and [&#8230;]

Presales like BTC Bull Token ($BTCBULL) may surge as Galaxy Digital plans a Nasdaq listing on May 16, with the shareholders’ meeting set for May 9. Mike Novogratz, Galaxy Digital CEO and founder, broke the news yesterday on Galaxy’s Newsroom, stating that the move would be ‘value enhancing to the company and our shareholders and […]

** Galaxy Digital, led by CEO Mike Novogratz, announced plans for a Nasdaq listing on May 16, following a shareholders' meeting on May 9, aiming to enhance company and shareholder value. Meanwhile, Metaplanet raised $250M to support its Bitcoin strategy, potentially boosting interest in presales like BTC Bull Token ($BTCBULL).  

Galaxy Digital Plans Nasdaq Listing and Metaplanet Raises $250M for its Bitcoin Strategy, Fueling Presales like BTC Bull Token

<img src="https://images.cointelegraph.com/images/840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS9zdG9yYWdlL3VwbG9hZHMvdmlldy85MjNlM2NiZDU4OGUyZjFhZWI4YTM5MzI3ZWJhNjc5Ny5qcGc=.jpg"><img src="https://images.cointelegraph.com/images/840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS9zdG9yYWdlL3VwbG9hZHMvdmlldy85MjNlM2NiZDU4OGUyZjFhZWI4YTM5MzI3ZWJhNjc5Ny5qcGc=.jpg" alt="Google subpoena scam: What it looks like and how to avoid it"><div data-ct-widget="explained-block" id="explained-block-189220-5"> <h2 data-ct-widget="explained-block-title"> What is a Google subpoena scam? </h2> The Google subpoena scam is a type of phishing attack where fraudsters impersonate Google to create a false sense of urgency and fear.&nbsp;Typically, you will receive an email that appears to come from no-reply@google.com, claiming to inform you of a subpoena, a formal legal request. The email will often have a subject line like &ldquo;Security Alert&rdquo; or &ldquo;Notice of Subpoena,&rdquo; making it seem urgent and legitimate. These scammers prey on your natural concern about legal matters and data privacy, hoping to trigger a reaction.Inside the email, the <a href="https://cointelegraph.com/news/latest-crypto-phishing-scam-fake-subpoena-alert-from-google">scammers falsely claim</a> that Google has been served with a subpoena requiring the company to turn over your account data, such as emails, documents or search history. The email will then urge you to click on a link to view your &ldquo;case materials.&rdquo; This link typically leads to a fraudulent website, often hosted on Google Sites, which is designed to look like a genuine Google support page. This added layer of legitimacy can easily trick users into believing the request is real.<img alt="The fake subpoena appears to be from a Google no-reply domain" src="https://s3.cointelegraph.com/storage/uploads/view/3fd1c1c31a5eb5ecf67dd059504370ae.jpg" title="The fake subpoena appears to be from a Google no-reply domain">The most concerning part of this scam is that attackers are skilled at <a href="https://cointelegraph.com/news/coinbase-gemini-wallet-phishing-scam-targeting-crypto-users">spoofing</a> Google&rsquo;s email addresses and mimicking the company&rsquo;s official content. By doing so, they can bypass common security checks, such as DomainKeys Identified Mail (DKIM), which normally verifies the authenticity of an email. With this approach, the scam appears convincingly legitimate, making it easy for unsuspecting users to act impulsively &mdash; potentially exposing sensitive data or inadvertently installing malware.Did you know? DomainKeys Identified Mail (DKIM) is an email security standard that verifies whether a message really comes from the domain it claims to be from. It uses cryptographic signatures to protect against email spoofing and phishing attacks &mdash; making your inbox just a little safer every day. <div data-ct-widget="explained-block" id="explained-block-189220-4"> <h2 data-ct-widget="explained-block-title"> How the Google subpoena scam works </h2> Software firm EasyDMARC <a href="https://easydmarc.com/blog/google-spoofed-via-dkim-replay-attack-a-technical-breakdown/" rel="noopener noreferrer nofollow" target="_blank">explained</a> that attackers exploited legitimate Google services to bypass traditional spam filters. They used &ldquo;OAuth&rdquo; applications combined with DKIM workarounds to create emails that could fool even careful users.A DKIM replay attack exploits the way email authentication works, specifically using DomainKeys Identified Mail, which adds a digital signature to an email to verify its authenticity.Steps of the attack:<img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeXkCPpt9y4tji7CB5xfuL22FhdIDMnWeYdFSGjR5qhnnEeXRcqxhb7v_rw7NzwosNWHXGqETjnHPMc4SixS9Jg3t4B2lhBHZGQozvwACTjRdX9EVNu7IsUKInCpO6FZkFf8cIi6A?key=kkVdT3yJzmrySI-V2NAM8pGs" alt="Google subpoena scam: What it looks like and how to avoid it"><ol><li>Attacker receives a legitimate Google email: The attacker intercepts a legitimate email from Google that has a valid DKIM signature, which proves it came from Google.</li><li>Preparing the replay: The attacker saves this email, keeping the DKIM signature intact, and replays it. Since DKIM checks only the email headers and body (if unchanged), the attacker can forward the exact email with its signature intact without modification.</li><li>Sending the spoofed email: The attacker then sends this saved email from a different account (e.g., Outlook), making it look like it&rsquo;s from the original sender (Google).</li><li>Relaying through other servers: The email goes through multiple servers, each adding their own DKIM signature, but the original Google DKIM signature remains untouched and valid.</li><li>Final delivery: The email reaches the victim&rsquo;s inbox, appearing legitimate. Despite being relayed through several servers, the email passes SPF, DKIM and DMARC checks, which makes it look like a valid Google email.</li></ol>The result: The victim is tricked into thinking it&rsquo;s a legitimate message, potentially leading to harmful actions like clicking malicious links or providing sensitive information. This type of attack plays on the trust people place in email authentication methods and shows how attackers can exploit them.Here&rsquo;s how fake Google emails and DKIM replay attacks trick you:<ul><li>Spoofed Google support pages: Clicking the link in the email takes you to a fake Google support page, often hosted on Google Sites, adding another layer of false credibility. The website will urge you to log in to view your &ldquo;case materials.&rdquo;</li><li>Phishing for credentials: If you proceed, you&rsquo;re asked to enter your Google username and password. Once entered, the attackers can gain full access to your account.</li><li>Psychological tricks: Scammers use <a href="https://cointelegraph.com/news/what-is-a-bear-raid-and-how-do-whales-use-them-in-crypto-trading">fear-based tactics</a> &mdash; mentioning lawsuits, law enforcement involvement or threats of account suspension. The urgency they create is designed to make you bypass your usual caution.</li></ul><img alt="How Google subpoena scam works" src="https://s3.cointelegraph.com/storage/uploads/view/9702be889f3711a17ee09cbcb2f2492b.jpg" title="How Google subpoena scam works">Did you know? Google Sites lets anyone with a Google account create websites under the trusted &ldquo;sites.google.com&rdquo; domain. Attackers exploit this by crafting fake login pages and phishing forms, using Google&rsquo;s SSL and brand reputation to deceive users into revealing sensitive information. </div><div data-ct-widget="explained-block" id="explained-block-189220-3"> <h2 data-ct-widget="explained-block-title"> Key signs you&rsquo;re facing a Google subpoena scam </h2> Even though the Google subpoena scam is highly sophisticated, there are still clear red flags you can look for if you know what to watch out for.&nbsp;By recognizing these signs, you can protect yourself from falling victim to <a href="https://cointelegraph.com/learn/articles/what-is-a-phishing-attack-in-crypto-and-how-to-prevent-it">phishing attacks</a>:<ul><li>Fake or spoofed sender addresses: The first thing you should do is examine the sender&rsquo;s email address carefully. Even though these scams may appear to come from a legitimate Google address, small differences in the sender&rsquo;s domain or name can indicate that the email is a spoof. For instance, a Google email may have slight alterations, such as &ldquo;goog1e.com&rdquo; instead of &ldquo;google.com,&rdquo; which are often overlooked by unsuspecting users.</li><li>Urgent language and threats: Scammers will often try to pressure you into acting quickly by using urgent language and threats of legal action. They may claim that your account is at risk of being suspended or that you must act immediately to avoid severe consequences. Google does not use scare tactics like this in emails.</li><li>Requests for sensitive information: One of the biggest signs of a phishing attempt is a request for sensitive information, such as your Google account password, <a href="https://cointelegraph.com/learn/articles/what-is-two-factor-authentication-2fa">two-factor authentication (2FA)</a> code or personal financial details. Google will never ask for this information via email.</li><li>Poor grammar or formatting: While scammers have gotten better at mimicking official communication, many still make mistakes. Look for inconsistent wording, odd phrasing or formatting errors. These can often reveal a scam.</li><li>Suspicious links: Before clicking any link in an email, hover over it with your mouse to preview the URL. If the link looks suspicious or unfamiliar, don&rsquo;t click on it. Often, scammers use disguised URLs that lead to fake websites.</li><li>Lack of proper legal process: Real subpoenas are issued through proper legal channels. They are never delivered via an email that asks for personal information or a quick action.</li></ul> </div><div data-ct-widget="explained-block" id="explained-block-189220-2"> <h2 data-ct-widget="explained-block-title"> Received a Google subpoena email? Here&rsquo;s how to stay safe </h2> If you receive an email that claims to be from Google about a legal subpoena or any other suspicious notification, it&rsquo;s important to remain calm and avoid reacting hastily.&nbsp;Phishing attacks, like the Google subpoena scam, often rely on creating a sense of urgency to trick users into making mistakes. Here&rsquo;s <a href="https://cointelegraph.com/explained/victim-of-a-crypto-scam-heres-what-to-do-next">what you should do immediately</a> to protect your personal information and accounts:<ul><li>Do not click any links: Avoid interacting with the email. Don&rsquo;t open attachments, click links or reply.</li><li>Verify the request: Visit Google&rsquo;s support site directly (not through any link in the email) and check if there are any notifications related to your account.</li><li>Report the scam: In the UK, forward the suspicious email to report@phishing.gov.uk or Google&rsquo;s own reporting channels, and in the US, notify the Federal Trade Commission (FTC) at reportfraud.ftc.gov or forward to spam@uce.gov.</li><li>Update your security settings: Immediately change your Google account password and enable 2FA or <a href="https://cointelegraph.com/learn/articles/multi-factor-authentication-mfa-in-cryptocurrency">passkeys for an extra layer of protection</a>.</li><li>Contact your bank: If you shared any financial details (e.g., credit card numbers, bank account information or payment credentials), act quickly. Call your bank or financial institution using the official number on the back of your card or its verified website. Inform them of the potential scam and any compromised information. Request to monitor your account for suspicious activity, freeze or cancel affected cards, or issue new ones if necessary. Review recent transactions for unauthorized charges and dispute any fraudulent activity promptly.</li><li>Report to authorities: If you believe you have fallen victim, report the incident to Action Fraud or call 101 if you&rsquo;re based in the UK. File a complaint with the FTC at<a href="http://www.ftc.gov/complaint" rel="noopener noreferrer nofollow" target="_blank"> www.ftc.gov/complaint</a> or report to the Federal Bureau of Investigation&rsquo;s Internet Crime Complaint Center (IC3) at<a href="http://www.ic3.gov" rel="noopener noreferrer nofollow" target="_blank"> www.ic3.gov</a> if you are based in the US.</li></ul> </div><div data-ct-widget="explained-block" id="explained-block-189220-1"> <h2 data-ct-widget="explained-block-title"> How Google notifies users about legal requests </h2> When it comes to legal requests such as subpoenas, court orders or search warrants, Google takes privacy and security seriously. The company has a strict procedure in place to ensure that requests for user data are valid, lawful and processed through proper channels.&nbsp;Unlike the tactics employed by scammers, Google&rsquo;s approach is both transparent and secure. Here&rsquo;s how the real process works when it comes to legal requests for your data:<ul><li>Google checks the request carefully: If law enforcement (e.g., police or court) requests your data, Google thoroughly reviews the request to ensure it&rsquo;s valid and lawful.</li><li>Google may notify you: Unless they&rsquo;re not allowed (e.g., due to a court order), Google will let you know before sharing your information. This notice won&rsquo;t come in a random email asking for your password.</li><li>Official notifications only: If there&rsquo;s a real legal issue, you&rsquo;ll see a message in your Google Account dashboard (like in the &ldquo;Security&rdquo; section when you log in) or through an official Google email from a verified address, not a suspicious or random one.</li></ul><img src="https://s3.cointelegraph.com/storage/uploads/view/5f7aa5fa6b1ccda3d40dfdfe84de2038.jpg" alt="Google subpoena scam: What it looks like and how to avoid it">Did you know? Government agencies worldwide request user data from Google, but each request is carefully reviewed to ensure it complies with the law. Google shares details of these requests in its <a href="https://transparencyreport.google.com/?hl=en_US" rel="noopener noreferrer nofollow" target="_blank">Transparency Report</a>, and how they respond <a href="https://policies.google.com/terms?hl=en-US" rel="noopener noreferrer nofollow" target="_blank">depends</a> on whether your service provider is Google LLC (US) or Google Ireland Limited (Ireland). </div><div data-ct-widget="explained-block" id="explained-block-189220-0"> <h2 data-ct-widget="explained-block-title"> How to avoid falling victim to Google subpoena scams </h2> To avoid falling victim to Google subpoena scams, stay calm, avoid clicking any links or attachments, and verify any legal claims directly through Google&rsquo;s official support channels.Phishing scams are constantly evolving, but you can significantly reduce your risk by following some best practices, including:<ul><li>Stay skeptical: Always question unexpected emails, especially those involving legal action or urgent threats.</li><li>Inspect carefully: Click the dropdown next to the sender&rsquo;s name to see the full email address and domain.</li><li>Hover before clicking: Hover your cursor over any links to preview the URL without actually clicking.</li><li>Enable 2FA: Adding an extra layer of security to your Google account can stop scammers even if they steal your password.</li><li>Use advanced spam filters: Tools like spam blockers, domain verification tools (like Who.is) and secure email gateways can help flag suspicious emails.</li><li>Regular security audits: Periodically review your Google Account&rsquo;s security settings and connected third-party apps.</li><li>Stay updated: Subscribe to trusted cybersecurity newsletters or Google&rsquo;s security updates to stay informed about new threats.</li><li>Educate yourself and others: Sharing knowledge about scams with friends, family and coworkers can help build a collective defense.</li></ul> </div></div>

What is a Google subpoena scam?            
            
                
The Google subpoena scam is a type of phishing attack where fraudsters impersonate Google to create a false sense of urgency and fear. 
Typically, you will receive an email that appears to come from no-reply@google.com, claiming to inform you of a subpoena, a formal legal request. The email will often have a subject line like “Security Alert” or “Notice of Subpoena,” making it seem urgent and legitimate. These scammers prey on your natural concern about legal matters and data privacy, hoping to trigger a reaction.
Inside the email, the scammers falsely claim that Google has been served with a subpoena requiring the company to turn over your account data, such as emails, documents or search history. The email will then urge you to click on a link to view your “case materials.” This link typically leads to a fraudulent website, often hosted on Google Sites, which is designed to look like a genuine Google support page. This added layer of legitimacy can easily trick users into believing the request is real.

The most concerning part of this scam is that attackers are skilled at spoofing Google’s email addresses and mimicking the company’s official content. By doing so, they can bypass common security checks, such as DomainKeys Identified Mail (DKIM), which normally verifies the authenticity of an email. With this approach, the scam appears convincingly legitimate, making it easy for unsuspecting users to act impulsively — potentially exposing sensitive data or inadvertently installing malware.
Did you know? DomainKeys Identified Mail (DKIM) is an email security standard that verifies whether a message really comes from the domain it claims to be from. It uses cryptographic signatures to protect against email spoofing and phishing attacks — making your inbox just a little safer every day.
                    
            
                How the Google subpoena scam works            
            
                
Software firm EasyDMARC explained that attackers exploited legitimate Google services to bypass traditional spam filters. They used “OAuth” applications combined with DKIM workarounds to create emails that could fool even careful users.
A DKIM replay attack exploits the way email authentication works, specifically using DomainKeys Identified Mail, which adds a digital signature to an email to verify its authenticity.
Steps of the attack:


Attacker receives a legitimate Google email: The attacker intercepts a legitimate email from Google that has a valid DKIM signature, which proves it came from Google.
Preparing the replay: The attacker saves this email, keeping the DKIM signature intact, and replays it. Since DKIM checks only the email headers and body (if unchanged), the attacker can forward the exact email with its signature intact without modification.
Sending the spoofed email: The attacker then sends this saved email from a different account (e.g., Outlook), making it look like it’s from the original sender (Google).
Relaying through other servers: The email goes through multiple servers, each adding their own DKIM signature, but the original Google DKIM signature remains untouched and valid.
Final delivery: The email reaches the victim’s inbox, appearing legitimate. Despite being relayed through several servers, the email passes SPF, DKIM and DMARC checks, which makes it look like a valid Google email.

The result: The victim is tricked into thinking it’s a legitimate message, potentially leading to harmful actions like clicking malicious links or providing sensitive information. This type of attack plays on the trust people place in email authentication methods and shows how attackers can exploit them.
Here’s how fake Google emails and DKIM replay attacks trick you:

Spoofed Google support pages: Clicking the link in the email takes you to a fake Google support page, often hosted on Google Sites, adding another layer of false credibility. The website will urge you to log in to view your “case materials.”
Phishing for credentials: If you proceed, you’re asked to enter your Google username and password. Once entered, the attackers can gain full access to your account.
Psychological tricks: Scammers use fear-based tactics — mentioning lawsuits, law enforcement involvement or threats of account suspension. The urgency they create is designed to make you bypass your usual caution.


Did you know? Google Sites lets anyone with a Google account create websites under the trusted “sites.google.com” domain. Attackers exploit this by crafting fake login pages and phishing forms, using Google’s SSL and brand reputation to deceive users into revealing sensitive information.
                    
            
                Key signs you’re facing a Google subpoena scam            
            
                
Even though the Google subpoena scam is highly sophisticated, there are still clear red flags you can look for if you know what to watch out for. 
By recognizing these signs, you can protect yourself from falling victim to phishing attacks:

Fake or spoofed sender addresses: The first thing you should do is examine the sender’s email address carefully. Even though these scams may appear to come from a legitimate Google address, small differences in the sender’s domain or name can indicate that the email is a spoof. For instance, a Google email may have slight alterations, such as “goog1e.com” instead of “google.com,” which are often overlooked by unsuspecting users.
Urgent language and threats: Scammers will often try to pressure you into acting quickly by using urgent language and threats of legal action. They may claim that your account is at risk of being suspended or that you must act immediately to avoid severe consequences. Google does not use scare tactics like this in emails.
Requests for sensitive information: One of the biggest signs of a phishing attempt is a request for sensitive information, such as your Google account password, two-factor authentication (2FA) code or personal financial details. Google will never ask for this information via email.
Poor grammar or formatting: While scammers have gotten better at mimicking official communication, many still make mistakes. Look for inconsistent wording, odd phrasing or formatting errors. These can often reveal a scam.
Suspicious links: Before clicking any link in an email, hover over it with your mouse to preview the URL. If the link looks suspicious or unfamiliar, don’t click on it. Often, scammers use disguised URLs that lead to fake websites.
Lack of proper legal process: Real subpoenas are issued through proper legal channels. They are never delivered via an email that asks for personal information or a quick action.
                    
            
                Received a Google subpoena email? Here’s how to stay safe            
            
                
If you receive an email that claims to be from Google about a legal subpoena or any other suspicious notification, it’s important to remain calm and avoid reacting hastily. 
Phishing attacks, like the Google subpoena scam, often rely on creating a sense of urgency to trick users into making mistakes. Here’s what you should do immediately to protect your personal information and accounts:

Do not click any links: Avoid interacting with the email. Don’t open attachments, click links or reply.
Verify the request: Visit Google’s support site directly (not through any link in the email) and check if there are any notifications related to your account.
Report the scam: In the UK, forward the suspicious email to report@phishing.gov.uk or Google’s own reporting channels, and in the US, notify the Federal Trade Commission (FTC) at reportfraud.ftc.gov or forward to spam@uce.gov.
Update your security settings: Immediately change your Google account password and enable 2FA or passkeys for an extra layer of protection.
Contact your bank: If you shared any financial details (e.g., credit card numbers, bank account information or payment credentials), act quickly. Call your bank or financial institution using the official number on the back of your card or its verified website. Inform them of the potential scam and any compromised information. Request to monitor your account for suspicious activity, freeze or cancel affected cards, or issue new ones if necessary. Review recent transactions for unauthorized charges and dispute any fraudulent activity promptly.
Report to authorities: If you believe you have fallen victim, report the incident to Action Fraud or call 101 if you’re based in the UK. File a complaint with the FTC at www.ftc.gov/complaint or report to the Federal Bureau of Investigation’s Internet Crime Complaint Center (IC3) at www.ic3.gov if you are based in the US.
                    
            
                How Google notifies users about legal requests            
            
                
When it comes to legal requests such as subpoenas, court orders or search warrants, Google takes privacy and security seriously. The company has a strict procedure in place to ensure that requests for user data are valid, lawful and processed through proper channels. 
Unlike the tactics employed by scammers, Google’s approach is both transparent and secure. Here’s how the real process works when it comes to legal requests for your data:

Google checks the request carefully: If law enforcement (e.g., police or court) requests your data, Google thoroughly reviews the request to ensure it’s valid and lawful.
Google may notify you: Unless they’re not allowed (e.g., due to a court order), Google will let you know before sharing your information. This notice won’t come in a random email asking for your password.
Official notifications only: If there’s a real legal issue, you’ll see a message in your Google Account dashboard (like in the “Security” section when you log in) or through an official Google email from a verified address, not a suspicious or random one.


Did you know? Government agencies worldwide request user data from Google, but each request is carefully reviewed to ensure it complies with the law. Google shares details of these requests in its Transparency Report, and how they respond depends on whether your service provider is Google LLC (US) or Google Ireland Limited (Ireland).
                    
            
                How to avoid falling victim to Google subpoena scams            
            
                
To avoid falling victim to Google subpoena scams, stay calm, avoid clicking any links or attachments, and verify any legal claims directly through Google’s official support channels.
Phishing scams are constantly evolving, but you can significantly reduce your risk by following some best practices, including:

Stay skeptical: Always question unexpected emails, especially those involving legal action or urgent threats.
Inspect carefully: Click the dropdown next to the sender’s name to see the full email address and domain.
Hover before clicking: Hover your cursor over any links to preview the URL without actually clicking.
Enable 2FA: Adding an extra layer of security to your Google account can stop scammers even if they steal your password.
Use advanced spam filters: Tools like spam blockers, domain verification tools (like Who.is) and secure email gateways can help flag suspicious emails.
Regular security audits: Periodically review your Google Account’s security settings and connected third-party apps.
Stay updated: Subscribe to trusted cybersecurity newsletters or Google’s security updates to stay informed about new threats.
Educate yourself and others: Sharing knowledge about scams with friends, family and coworkers can help build a collective defense.

The article explains the Google subpoena scam, a phishing attack where fraudsters impersonate Google to create urgency and fear through fake legal notices. Victims receive deceptive emails appearing to be from Google, often with alarming subject lines like "Security Alert" or "Notice of Subpoena," tricking them into taking harmful actions.  

Trending Topics

Crypto hack and scam losses total $364m in April: CertiK

Was this article worth reading? Share it

Bring the Pulse of the World to Your Phone

Stay in the Loop

U.S News

Will the unlocking of 40 million Trump meme coins significantly impact the crypto market?

Bring the Pulse of the World to Your Phone

Stay in the Loop