Scammers Will Try to Trick You Into Filling Out Google Forms. Don't Fall for It

"These forms can be created in minutes, with clean and clear formatting, official-looking images and video, and-most importantly of all-a genuine Google Docs URL that your web browser will see no problem with. Scammers can then use these authentic-looking forms to ask for payment details or login information. It's a type of scam that continues to spread, with Google itself issuing a warning about the issue in February."

"These scams can take a variety of guises, but they'll typically start with a phishing email that will try to trick you into believing it's an official and genuine communication. It might be designed to look like it's from a colleague, an administrator, or someone from a reputable organization. The apparent quality and trustworthiness of this original phishing email is part of the con. Our inboxes are regularly filled with requests to reset passwords, verify details, or otherwise take action."

Google Forms can be used legitimately for surveys, events, and contact forms, but the platform can also be abused for phishing. Scammers can design authentic-looking forms with official formatting, images, video, and genuine Google Docs URLs to request payment or login information. Phishing campaigns often begin with convincing emails that mimic colleagues or reputable organizations and may arrive from hijacked accounts. These emails exploit urgency and routine security prompts to trick recipients. High-profile targets and institutions have been affected, and such attacks can evade standard email malware protections, increasing risk to users and organizations.

Read at WIRED