Google Warns of Rising Gmail Scam Tactics

JAKARTA — Gmail scam attempts are getting sharper, and Google is telling users to stay alert. The threat is growing because attackers are now using artificial intelligence, or AI, to write fake emails that look polished, convincing, and hard to tell apart from legitimate messages.

Google says Gmail’s systems already block more than 99.9 percent of dangerous emails, including phishing, malware, and spam. But the attack volume keeps moving fast. For billions of Gmail users, one wrong click can lead to account theft, personal data loss, and access to other services linked to the inbox.

Gmail scam attacks are harder to spot

Google, as quoted by Forbes, said it is now rolling out AI models to strengthen Gmail’s defenses. The company is also using new large language models, or LLMs, trained specifically to fight phishing, malware, and spam. With 2.5 billion Gmail users, the attack surface is enormous. Huge scale. And that is why this warning matters.

The problem is that scam techniques have evolved too. In the past, fake emails often looked sloppy: broken grammar, odd logos, or suspicious sender addresses. Now the picture is different. Attackers can draft messages that resemble bank alerts, workplace notifications, or even internal company emails. McAfee says AI is a double-edged sword. It helps security teams, but it also gives cybercriminals a new tool.

“As AI becomes more accessible, cybercriminals are using it to create more convincing and personalized scams that are harder to detect,” McAfee said. That sounds simple, but the impact is real. Fake emails can now use company names, customer service language, and even the tone of government institutions.

Spam is still flooding inboxes

Another threat comes from spam. Data from Mailmodo shows spam messages account for more than 46.8 percent of global email traffic. That is a huge number. It means nearly half of the world’s email traffic consists of unwanted messages, some of them harmful. In this environment, email providers have to work much harder to separate real messages from fake ones.

The high spam volume has also changed how many companies communicate. Some organizations are now leaning on other channels such as Teams, Slack, WhatsApp, and Telegram for daily coordination. Email is still used, but no longer as the only communication gate. That matters for regular users too, because an email address is now often the key to many services, from online shopping to banking apps.

In Indonesia, the situation is not much different. Many people use Gmail for work, school, digital subscriptions, and administrative needs. One email address is often used everywhere. Once it leaks, the risk spreads quickly. Attackers can try password resets, take over social media accounts, or slip in through fake links that look official.

Email aliases can add another layer

To reduce the risk of email address abuse, some tech companies have started offering email alias features. Apple introduced Hide My Email first, allowing users to create random addresses for sign-ups without revealing their main email. The model is simple. The real address stays hidden. Only a forwarding address is shared with the other side.

Google is also developing a similar feature called Shielded Email. Findings from Android Authority suggest the feature would let users create alias addresses that can be used once or for limited purposes. All incoming messages to the alias are forwarded to the main Gmail inbox. The real address remains hidden. For users who often sign up for promotions, apps, or new websites, that kind of barrier can be useful.

But aliases are not the only answer. Security experts still say protection has to come from several sides at once. Google claims its latest AI model can detect spam 20 percent better than before and analyze 1,000 times more user spam reports each day. Even so, clearer labeling of harmful emails and user education are still needed. Technology alone is not enough if users remain careless.

What users should do

The most basic step is still the same: do not click random links, even if the email appears to come from an official institution. Check the sender’s address. Watch the domain. If there is an urgent request to enter data or log in, open the official website manually instead of using the email link. It is simple, but it often saves users from phishing traps.

Users can also create a separate email address for public use, such as signing up for forums, giveaways, newsletters, or apps they do not fully trust yet. The main address should be reserved for important matters. That approach keeps digital traces cleaner and reduces the chance of data being spread across third-party databases with uncertain security standards.

Google has put AI at the front line of Gmail defense. But scammers are moving fast too. That is the problem. Protection is getting smarter on one side, while fake emails are becoming more convincing on the other. For users, caution remains the last and most important layer. One fake message that gets through can open the door to many accounts at once.

Quick summary: Google says Gmail scam attacks are becoming more advanced as criminals use AI. Gmail blocks more than 99.9 percent of harmful emails, but spam and phishing are still widespread. Users are advised to use email aliases, verify senders, and avoid clicking links carelessly. Global spam still makes up more than 46.8 percent of email traffic.

Short FAQ:
Q: Is Gmail safe to use? A: Yes, but not immune. Google still needs user vigilance.
Q: What is Shielded Email? A: A Google alias-email feature designed to hide your main address.
Q: Why are fake emails more dangerous now? A: AI makes them cleaner, more personal, and harder to spot.