I just got an email from Google saying that someone logged in to my account using some different email address?

Question

This got me pretty alarmed:

I immediately checked the devices from which it was accessed but couldn't see any different from what I use usually. Nevertheless, even though I use two-factor authentication, I changed my password immediately.

Now, has any one of you had a similar experience? I thought the "problem" could be related with Google ignoring the dot (.) in the email thus for example [email protected] and [email protected] would come to the same email address. But, someone used the added numbers 33, so this hardly would pass as the same use case.

Anyways, still kind of baffled about it, so would appreciate some insight from more knowledgeable users.

Answer 1

It's hard to tell exactly what you've got here. (I don't speak or read the language. (Slovenian? Croatian?)) I suspect one of two possibilities:

1. Someone logged in (or tried to log in) from an area where you usually aren't. (I might get a message if someone tried to log in from China, when I'm on the East Coast of the U.S.)
2. More likely, I think, is someone has set your email address to be their recovery email or alternate email, and probably by mistake

I think you've done the responsible thing. You're already using two-step authentication and you've changed your password. This probably won't ever come up again. I wouldn't worry any more about it.

Answer 2

If the address is not yours it seems to me it's most likely a phishing attempt. Do not click any links in the email. If you want to check things do so through known good means (eg., typing addresses yourself).