Guides · Accounts and security
Google Ads Phishing Emails: How to Tell a Real One From a Fake
By Josh Croom · October 27, 2026 · 11 min read
A Google Ads phishing email copies Google's look to rush you into clicking a link and typing your login on a fake page. Don't click anything in it; open Google Ads yourself from a bookmark instead, and if the same warning isn't inside your account, delete the email.
An email that wants a click before the weekend
Friday, 4:52 PM. The subject line says your Google Ads account is suspended. There's a red banner, a Google logo and a button that says Resolve now. It says your ads stop at midnight, and you have a weekend of calls riding on them.
That deadline is the whole trick, because a fake email doesn't need to be perfect when it only needs you to click before you think. The check takes thirty seconds: close the email, open Google Ads from your own bookmark, and look for the warning. If your account shows no warning, you can delete the email and get on with your weekend.
How fast a fake email works
Verizon's 2024 Data Breach Investigations Report timed what people do after they open a fake email.
- 21 secondsto click the bad linkmedian, after opening the email
- 28 secondsmore to type in a loginmedian, after the click
- 68%of breaches involved a person's mistakean error, or a scam that worked
Why thieves go after Google Ads accounts
An ad account is tied to a payment method and to a Google login, and both are worth stealing. Google's recovery steps for a hacked account ask you to look for the changes an intruder makes: new users, a new manager account link, higher budgets and automated rules. Google even sets spending limits to zero on any new sub-accounts it finds were created without your permission.
The damage can reach well past the ads. Google's help says that when it believes someone has broken into an ad account, it suspends the account to stop the ads. It may also disable the Google account behind it, and then you can't use Gmail, YouTube or anything else on that login until the problem is fixed.
What a fake alert can look like
Fakes arrive by text as well as email, and most pair a scary claim with a deadline and a link.
Google Ads: Your account is suspended for unpaid charges. Ads stop in 24 hours. Restore access now: google.com.help-desk.net/restore
The signs of a Google Ads phishing email
Most fakes copy emails Google really sends, so the topic alone won't tell you much. Look at what the email asks you to do.
- A deadline: your ads stop tonight, your account closes in 24 hours, or a payment fails unless you act now. Google's help says scammers use emotion to get you to act without thinking.
- A sign-in button: a link to a page that asks for your Google password. Google says that if you're signed in, its emails won't ask you to enter the password for that account.
- A request for private details: a password, a sign-in code, a card number or an ID. Google says it will never send an unsolicited message asking for those.
- An offer of help: a call or email from a specialist who wants to review your account or change your ads while you're on the phone.
- A sender that's close but wrong: an address with google in it that doesn't end in @google.com or @ads.google.com.
The 30-second check
Run these five steps on any email about your ads, your billing or your listing, even one that looks completely normal.
Step 1
Don't click anything
Leave the button, the links and any attached file alone, because a fake sign-in page can look exactly like Google's and a single click just to see can be all it takes.
Step 2
Read the address after the @
A real Google Ads email comes from an address ending in @google.com or @ads.google.com. The part that counts is the very end of the address, so something like google.com.help-desk.net isn't Google, even though it starts with google.com.
Step 3
Check the link without opening it
On a computer, right-click the link, choose Copy link address and paste it into a note, which shows you where the link really goes. If it leads anywhere other than a page on google.com, don't visit it.
Step 4
Open Google Ads yourself
Use your bookmark or type ads.google.com into the address bar yourself, then sign in and look for the same warning before you believe any email.
Step 5
Look in the right place
Each kind of warning has its own spot in Google Ads, from Billing to Admin. If you can't find the warning in its spot, delete the email and report it to Google.
Where a real warning shows up in Google Ads
Sign in on your own, then check the spot that matches what the email claims. These menu names are current as of October 2026.
| The email says | Look here in Google Ads |
|---|---|
| Your ad was disapproved, or has a policy issue | The ad itself, marked disapproved |
| Verify your identity | Billing, then Advertiser verification |
| A payment failed, or your ads are about to pause | Billing |
| Someone new was added to your account | Admin, then Access and security |
| Another admin must approve a change | Admin, then Access and security, on the Security requests tab |
| A strategy call or account review is waiting | Nowhere in the account. Ask the caller to email you from an @google.com address first. |
Real or fake, side by side
Signs of a fake
- It comes from an address that only looks like Google's.
- It gives you hours to act or your ads stop.
- It asks for your password, a code or a card number.
- The warning isn't anywhere inside your account.
Signs of a real one
- It comes from @google.com or @ads.google.com, in the From line and the Return-Path.
- It matches a warning you find yourself after you sign in.
- It never asks you to send a password or code back.
- It still works if you skip the button and sign in on your own.
What about phone calls from Google?
Some scams start with a call from someone who says they work for Google Ads. The caller might offer a strategy session, warn you about a problem with your account or ask you to share your screen. Google's help says to ask the caller to send you an email first, and if the caller really works for Google, that email comes from an address with @google.com in both the From line and the Return-Path.
Until you've checked, don't give out a password, a sign-in code or a card number, and never let anyone change the account while you're on the phone. A real problem will still be waiting after you hang up and sign in on your own.
Google Ads Specialist?
Unknown number · wants to review your account
What to do if you already clicked
Move fast and start with the password, because a thief who still has it can undo every other fix.
Step 1
Change your Google password now
Do it from a page you open yourself, never from a link in the email. Then sign out of your other devices from your Google account's security settings, so any session a thief opened with your password ends as well.
Step 2
Check your recovery phone and email
Make sure both still belong to you, because a thief who changes them can lock you out. Google's help says outdated or wrong recovery details can make it much harder to get back into your Google Ads account.
Step 3
Look for people and links you don't know
In Google Ads, open Admin, then Access and security, and check both the Users tab and the Managers tab. Remove any person or manager account that doesn't belong there.
Step 4
Write down every change you didn't make
Open your change history and note the time of each change you don't recognize, like a new user, a new manager link, a raised budget or a new rule. Google asks for those times when you report a hacked account.
Step 5
Report it to Google
Use the compromised account report in Google Ads Help as soon as you can. Google may suspend the account while it secures it, and its help says it pauses only the campaigns the intruder created or changed.
Would a fake email fool your team?
Answer five quick questions about how your team handles Google emails today. Your answers stay on your device.
Does everyone who gets Google emails open Google Ads from a bookmark, not a link?
Is 2-Step Verification on for every admin login?
Do at least two people on your own team have Admin access?
Would your team ask a caller who says they're from Google to email first?
Do you know where a real billing or policy warning shows up in the account?
Your team has the right habits. Share the 30-second check with anyone new who gets Google emails, because new staff are the ones who haven't heard it yet.
You're close. Fix the first question you answered No this week, and start with 2-Step Verification if it's off.
Start today with two fixes: turn on 2-Step Verification for every admin, and save a bookmark to ads.google.com on each computer.
Lock it down this week
Tick each one off as you go. Your ticks stay on this device.
0 of 6 done
How to report a fake
Google Ads Help has a form for a suspicious email or call, and it connects you with a specialist. Separate forms take the address of a suspicious webpage or report a company that sells Google Ads services. To report a link, copy its address without clicking it and paste that into the form.
If you shared a password with a helper before you knew better, our guide on how to give someone access to Google Ads shows the safe way to add them as a user instead.
How we handle Google emails for our clients
We ask you to add us as a user on each Google tool, so we have no reason to ask for your Google password or a sign-in code. If a message in our name asks for one, don't answer it until you've checked with us by phone. When we run your ads, we work in the account every week and read its billing and policy warnings inside Google Ads, where Google posts them.
If you'd like someone to look over who can get into your account today, book a call with Miguel. He'll walk through your setup with you, and our PPC audit checklist shows what else we check in an account review.
Questions people ask
How do I know if a Google Ads email is real?
Don't use the email's button. Open Google Ads yourself from a bookmark and look for the same warning inside your account. Google says its emails come from @google.com or @ads.google.com, and it never sends an unsolicited message asking for your password.
What email address does Google Ads use?
Google says a real Google Ads email has @google.com or @ads.google.com in both the From address and the Return-Path. An address that only contains the word google somewhere, like google.com.help-desk.net, doesn't come from Google.
What should I do if I clicked a Google Ads phishing link?
Change your Google password from a page you open yourself, sign out of your other devices and check your recovery phone and email. Then look for unknown users and manager links under Admin, then Access and security, and report the account to Google if you find changes you didn't make.
Does Google Ads call businesses?
Sometimes, so a call alone doesn't tell you much. Google's help says to ask the caller to send you an email, because a real Google rep's email comes from an @google.com address in both the From line and the Return-Path. Don't share a password or a code during the call, and don't let anyone change your account while you're on the phone with them.
How do I report a Google Ads phishing email?
Use the form for suspicious emails and calls in Google Ads Help. For a fake website, copy the link address without clicking it and paste it into Google's form for reporting a webpage.
See how we run Google Ads accounts
Read next
- Call Log Template: What to Write Down From Every CallA ready-to-copy call log, the one question to ask every caller, and how to sort wrong numbers.
- ChatGPT Custom Instructions Examples: Make Each Fix Only OnceEight custom instructions examples to copy, and a four-line card that carries your fixes into every chat.
- ChatGPT Prompt Templates: Write the Weekly Ask Once and Save ItCopy-ready ChatGPT prompt templates for the jobs you run every week, and how to save each one.