3

I have a Gmail account of the form my.name@gmail.com. I just got email from Google saying there was a new sign-in half an hour ago on Internet Explorer (which I haven't used in the last few days) to myname1234@gmail.com. I have two factor authentication set up, and didn't get any corresponding text message.

Is it the case that this is actually a different account, Google recognizes the account name with the extra digits as different for sign-in purposes, and it's just a bug in the notification system that it truncated the digits when deciding whether I needed to be notified? Or is there something going on that I need to worry about?

migrated from superuser.com Nov 4 '15 at 20:47

This question came from our site for computer enthusiasts and power users.

  • 1
    Were you using the TOR (The Onion Router) browser or another VPN? Because if you are logged in via a normal connection but then launch TOR/VPN and go to the same site, the fact you are on a different IP would trigger that Google alert. – JakeGould Nov 4 '15 at 0:36
  • 1
    Could just be SPAM. Honestly too broad without headers or details and I know you might not want to share too many specifics but just need to point that out. – JakeGould Nov 4 '15 at 0:38
  • 1
    @Ramhound My email address should be in my profile, and my name is rather obvious given that, so neither was exactly a secret before now :) – rwallace Nov 4 '15 at 1:08
  • 1
    @Tyson Okay, pastebin.com/PgnBStPZ – rwallace Nov 4 '15 at 1:12
  • 3
    The headers look legit, the account with numbers after the name appears to me to be a different gmail account that is somehow linked to your account. Are you certain you never created that account (I recently found a long forgotten one I created in 2006 still working) – Tyson Nov 4 '15 at 1:23
1

Two possibilities spring to mind.

The first is that this is a (spear-)phishing attempt. Someone is trying to trick you into giving up the credentials for your account. That the name doesn't match wouldn't surprise me; would-be online scammers don't have to be smart.

Since you say the email headers look legit, I think another possibility is that the owner of myname1234@gmail.com has added your email address as their recovery address. (See this page from Gmail Support.)

Now, I thought Google sent a confirmation message to the target address to be sure it's under the control of the owner of the other account, but perhaps not. (Maybe this was from before that measure was put in place or you confirmed it in error.)

If this is the case I don't know how you fix it short of using it to reset the password on that other account, sign in, and remove it. Perhaps an email to that account asking them to fix it would work.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.