Ask HN: Malicious Gmail activity on my personal account

1 points by fosco 8 hours ago

I’ve been receiving emails about not deliverable email sent to my gmail account to TLDs within googles service, based on error they successfully sent from my actual account but it did not arrive because the account didn’t exist in that TLD.(I’ve already changed password which I already do frequently)

Can I pay for my gmail account so it’s associated with credit card? What can I do to protect? I’ve already had an account stolen from me when gmail was invite only and it impacted family members sending emails to me still on accident due to saved history on their end. I really do not want to lose this one

FrankWilhoit 8 hours ago

In most such cases as this, they did not "successfully send from your actual account", they just spoofed the headers.

  • fosco 5 hours ago

    I was hoping that was case but the problem is the message id of the email appears as if google generated it from mx.google.com

    Perhaps I don’t know enough here? This would not be the first time a google account was stolen and I’d like to protect what I have, despite having repeatedly tried and having facility members with threads and emails as proof google offered zero help to resolve or even close the account from the their so senders would at least be notified I didn’t get it