Fake Google Drive Shared Document Scam
If you received a email that looks like a Google Drive "someone shared a document with you" notification from an unknown sender, you are looking at one of the most repeated scam patterns of the year. These messages succeed because they impersonate something familiar and pile on urgency, pushing you to open the document and enter Google credentials on a fake login screen before you have time to verify with the real source.
The real Google does not contact customers this way - and even when Google does send you a legitimate notice, you can always confirm by opening drive.google.com directly and checking Shared with me instead of acting on the message itself. FakeOrLegit is not affiliated with Google; this guide is independent consumer-safety information.
Below we walk through the warning signs you can check yourself, the exact steps to take if you have already engaged, and the most common follow-up questions we see in our checker.
Warning signs
- The sender address is not the brand's official domain - look at the FULL address after the @ symbol, not the display name.
- The email contains a link or button. The destination URL is usually visible on hover and almost never matches the real brand.
- Urgency or fear language pushes a deadline within 24 hours. Real organizations almost never time-bomb account actions that fast.
- There is a request for payment, login credentials, a verification code, or sensitive identifiers (SSN, full DOB, full card number). None of these are ever needed to resolve a legitimate notice.
- Spelling, grammar, or formatting is slightly off in places a real brand would catch. Scammers iterate but rarely match design systems exactly.
- The wording matches scam reports posted on Reddit's r/scams or in recent local-news headlines. A quick search of the exact phrase is one of the fastest checks you can do.
- The message references Google but the link or sender is not on Google's official domain. Google-related actions should always be confirmed inside Google's official app or website.
What to do
- Do not click any link or button. Hover-preview reveals the real destination on desktop; long-press on mobile.
- Forward the email to the brand's official abuse address if known, then delete it from your inbox.
- Run any link from the message through FakeOrLegit. The checker matches the URL against our heuristics and brand-impersonation database.
- If you already entered credentials, change the password and turn on two-factor authentication immediately. Sign out of all other sessions.
- If you already paid by credit card, dispute the charge with your bank within 60 days. Speed matters - earlier disputes win more often.
- Report to the FTC at reportfraud.ftc.gov. If you lost money, also file a local police report so an official case number exists.
- Watch for follow-up scams referencing the same Google pretext. Scammers often re-contact under a "refund" or "support" persona within 24-72 hours.
FAQ
Run a check now
If a specific link or message triggered this guide, paste it for an instant risk report.
Related guides
Fake PayPal Invoice Scam: How It Works
Fake PayPal invoices for products you never bought are designed to make you call a fraudulent support number. Here are the red flags.
Fake PayPal Payment Failed Email
A fake "PayPal payment failed" email tries to scare you into clicking a link to update billing. Here is how to spot it.
Fake Amazon Account Locked Email or Text
Amazon "account locked" scams are everywhere. Here is how to spot the fake and protect your account.
Fake Amazon Order Confirmation Scam
Scam emails confirm a big Amazon order you never placed, then push you to call a fake support number. Here is the playbook.
Fake Amazon Prime Billing Scam
Fake Amazon Prime renewal or billing emails ask you to verify a charge. Here is what to do instead.
Disclaimer
FakeOrLegit provides automated risk signals based on publicly observable patterns. We do not guarantee that any site, email, or message is safe or unsafe. Always use your own judgment, and contact the real institution directly to verify any request before sharing personal or payment information.
FakeOrLegit is not affiliated with Google. Google did not send and does not endorse this analysis.