Verify codes from gd by email without me trying to login

here are pics

weird ... in my settings I see no unwanted session attempts...

I changed pwd just in case.

cant see how someone got my pwd..

anything like this happened to u? I mean it's kinda hard to hack android for chrome pwd no?

It’s your wife.

johnn said:

It’s your wife.

Click to expand...

helpful as always huh heheh

Changing password would not harm anyway. Most likely, somebody was calling GD asking about a domain which is no more theirs, and which resides @ your account. Happened to me a few times. And, of course, 2FA is a must. Not to say that I like google stuff, but this authenticator app is more or less practical. Hardware usb key - imo this option is somewhat complicated (and a mechanical failure is always possible), and sms codes are not reliable by default, especially internationally...

this is just email code..not auth app... which I'm not even sure where I picked cause settings only show with app and sms...

I called gd .. the rep said he did himself and saw happen a ton of times that reps mistype cust numbers when sending these out manually.. I thought it was all automation but ok...

alcy said:

I called gd .. the rep said he did himself and saw happen a ton of times that reps mistype cust numbers when sending these out manually.. I thought it was all automation but ok...

Click to expand...

Sounds very sketchy, as those emails are definitely auto-generated, and far more likely it was a Bad Actor calling up saying "Me lost me password and me phone, please you help" and it went to a certain stage before the GD CSR figured out the scam.

And to all you boys & girls smiling proudly at this 2FA technological terror you've constructed, because in the real world it means absolutely nothing if a scammer goes straight to the source and fools someone.

No one is out there in a black hat and hoodie trying to hack your account digitally, these are poor people sitting in a 3rd world "hive" physically calling every bank, credit card company and registrar in the world, all day and every day, using basic info they've dredged up from the dark web to try and gain access to your assets.

Then all this - this 2FA that you think is so impenetrable, you can just kiss all that goodbye!