Google Warns of Rising Gmail Scam Tactics as AI Fuels Phishing
Google warns that Gmail scam tactics are getting smarter with AI. Here’s how users can stay safer from phishing and spam.
JAKARTA — Google Warns of Rising Gmail Scam Tactics as cybercriminals use artificial intelligence to make fake emails look cleaner, sharper and far more believable. The company says Gmail already blocks more than 99.9 percent of dangerous messages, but the volume and sophistication of attacks keep rising.
That matters for billions of users who rely on Gmail for work, banking, school and online accounts. One convincing message can still trigger a password reset, expose personal data or open the door to other services tied to the inbox.
AI is changing the shape of Gmail scam attempts
Google, as quoted by Forbes, said it is rolling out AI models to strengthen Gmail’s defenses. The company is also using new large language models, or LLMs, trained to spot phishing, malware and spam faster than older filters.
The scale is huge. Google says Gmail has 2.5 billion users, which gives scammers a massive target and gives the company an equally massive job. Huge scale. Huge pressure. Every day, attackers test new ways to slip past filters and land in inboxes that users trust too easily.
In the past, many scam emails were easy to dismiss. They had awkward spelling, broken formatting or strange sender addresses. That is changing. AI tools now let attackers draft emails that look like bank notices, payroll alerts or internal company requests. They can copy tone. They can copy style. They can even fake the urgency.
McAfee said AI cuts both ways. Security teams can use it to improve detection, but criminals can also use it to create better traps. “As AI becomes more accessible, cybercriminals are using it to create more convincing and personalized scams that are harder to detect,” the company said.
Spam is still crowding inboxes
The threat is not just about one fake email. It is also about volume. Data from Mailmodo shows spam makes up more than 46.8 percent of global email traffic. That means nearly half of all email flying across the internet is unwanted, and some of it is built to steal credentials or plant malware.
When inboxes are flooded, users get tired. They stop checking carefully. That is where phishing works best. A message that looks routine can slip through when people are rushing between meetings or tapping through mail on a phone screen. For businesses, this raises the risk of account compromise and fraud. For ordinary users, it can mean losing access to photos, contacts, shopping profiles or payment apps tied to their Google account.
Google says its latest AI model can detect spam 20 percent better than before and analyze 1,000 times more user spam reports each day. The company wants its filters to catch threats before they reach the inbox, not after a user has already clicked.
Why email aliases are getting attention
One reason the problem keeps growing is simple: email addresses get reused everywhere. People hand them out for sign-ups, newsletters, apps and online stores, then the same address ends up in databases they never see again. Once that address is exposed, the spam starts piling up.
That is why email aliases are drawing more attention. Apple introduced Hide My Email first, letting users generate random addresses for sign-ups while keeping their main address private. Google is working on a similar feature called Shielded Email, according to findings reported by Android Authority. The idea is straightforward. A user creates an alias, messages go to the main Gmail inbox, and the real address stays hidden.
For users who sign up for promos, loyalty programs or apps they do not fully trust, that extra layer can reduce exposure. It also makes it harder for one leaked address to become the entry point for a wider scam campaign.
Still, aliases only go so far. Google’s filters can block most dangerous mail, but the last line of defense is still the user. Scam emails now look polished enough to pass a quick glance. A fake invoice, a fake delivery notice or a fake account warning can be enough to trick someone who is moving fast.
The safest habit is still the oldest one: check the sender, inspect the domain and avoid clicking links from urgent-looking emails. If a message claims your account needs attention, open the website directly instead of using the email link. That extra step takes seconds. It can prevent a much bigger mess.
In Indonesia, where many people use Gmail for jobs, subscriptions and public services, the risk spreads quickly once an address is exposed. Attackers can try password resets, target social accounts or reuse the same email in phishing chains that look official enough to fool a busy user. Google says its defenses are improving, but the company also admits the fight is now happening on two fronts: smarter filters and smarter scams.
The company’s warning lands at a time when email remains deeply embedded in daily life. And with spam still accounting for more than 46.8 percent of global email traffic, the fight over the inbox is nowhere near over.
