In order to secure some of the details of our detection, we often send a batch of warnings to groups of at-risk users at the same time, and not necessarily in real-time. Additionally, we never indicate which government-backed attackers we think are responsible for the attempts; different users may be targeted by different attackers.
Security has always been a top priority for us. Robust, automated protections help prevent scammers from signing into your Google account,
Gmail always uses an encrypted connection when you receive or send email, we filter more than
99.9% of spam — a common source of phishing messages — from Gmail, and we show users when messages are from an
unverified or unencrypted source.
An extremely small fraction of users will ever see one of these warnings, but if you receive this warning from us, it's important to
take action on it. You can always take a two-minute
Security Checkup, and for
maximum protection from phishing, enable two-step verification with a Security Key.