Is this a New Scammer or a Returning Scammer?
Did my previous attacker contact me again yesterday, or is this a new scammer?
Yesterday (June 2, 2026) I experienced a spear fishing phone call on my Gmail Account.
I know it was a targeted attack, but I don’t know whether it was
a new spear fishing attack or
a continuation of the spear fishing attack I experienced in 2025 in which a caller claimed that I was targeted due to alleged “antisemitism.”1 I lost access to my old gmail account in that fishing attack, had to change all the accounts that were registered to that gmail address, and fended off a $500 withdrawal attempt from my bank account.
Here’s a reconstructed memory of how today’s phishing attempt went down:
Tim: Hello, this is Tim
Scammer: Hello, this is [scammer], with Google trust and safety.
How long has it been since you last accessed you gmail account?
Tim: A year or two. I don’t have access to that account any more.
Scammer: I can see that there is someone in Miami trying to take over this account.
I can disconnect your old gmail account and connect it to a new gmail account.
Do you have any other gmail accounts?
Tim: Yes
Scammer: What is the addresses of your other gmail account?
Tim: I don’t want to divulge that.
Scammer: Click (hangup)
QUESTIONS:
What do you estimate the odds are that this was a brand new spear fishing attempt or a continuation of the previous spear fishing attack (Nov 1, 2025) in which I lost control of the account?
What do you think the attacker was going to do if I gave the attacker the address of my other gmail account? My suspicion is that they would sent me an email with a link to a bogus login form to connect to the old account. After tricking me inito entering my password, they would try to get me to provide 2-factor information as well. They would then have access to all my emails, contacts and they would either take over the account or monitor it, scanning it for sensitive information like banking/passwords. Do you suspect other goals?
I was careful from the beginning of the call not to divulge sensitive information because I was suspicious that Google would call me. I played along because I wanted to see if I could learn what type of attack they were attempting. Is there a better way I could have handled the attack? Hanging up immediately is the other obvious approach.
Do you have any lessons from your own experience with phishing? My theory is that this is standard “meat and potatoes” intelligence when dealing with financial or political targets. Potentially vulnerable groups should be prepared for this challenge.
FOOTNOTES:
Initially, I thought the caller’s listing of “Antisemitism” was unconnected to me, but later I began to see this as, either an allegation against me, or a threat that I may be targeted for speaking out against claims I regarded as extremely damaging phony atrocity propaganda. I had issued an invitation to respond to the questions on the petition but I haven’t gotten anyone to attempt it.