Bitcoin Forum

be carful Im talking to any body using  gmail account that is my big  mistake ....  I make all of security steps like receiving sms in my phone number to sing in ... so my account was hacked by someone who bypass my phone number I try to recover my account and I cant log in to my own account  he change evry thing I contact gmail support and that was the email that I recive :

Your Google Account Recovery Request
Hello,
Thank you for completing our account recovery form. We understand that not being able to access your account can be frustrating and we want to help you.

At Google, we take the privacy and security of our users' information very seriously. We only reactivate the accounts when we are sure to return them to their real owner. Unfortunately, based on the information provided, we could not verify that you are the owner of the motivation7000@gmail.com account. Therefore, for security reasons, we can not allow you to access them for the moment.

Can you provide us with additional information to verify that you are the owner of the account?

If this is the case, please access the account recovery form and send another request, providing us with as accurate information as possible. If you are not sure of a date, do not worry and just try to give as close an estimate as possible.
If not, and if you want to create an account, go to the registration page.
Since we do not ask a lot of personal information to our users when they create their account, we have very few ways to verify that you are the owner of a given account. For this, we are obliged to ask you specific questions during the recovery procedure. We do not accept ID because it is not a safe enough method. If you would like more information about our policies, please see the article Recovering Your Account in the Help Center.

We apologize for the inconvenience. Thank you for your cooperation and understanding.

Regards,
Lily
Google Accounts Team

so this 0.40 was all I have he toke evry thing and I cant log in to my own account an advice to thouse who use gmail use aol or hotmail or yahoo d ant be fool like me   infortently .

What was the email address that was used for this email? Upon reading your story there's already something fishy that you should've noticed before giving him your accurate information.


Google will never give you a sort of form request for you to recover something from them and will have a tone of forcing you to give 'close estimation' with your details. I'll guess that the form that was given to you is through a google spreadsheet?

You should be picky about opening a message because spam messages are everywhere once your email got leaked you will receive some random email out of nowhere. It's easy to know if a message is a scam/spam, you just have to look for their email address and do a little research if the email is legit or not. And you should not just trust some messages that asking your personal information to give to them, google will never ask your personal information.

Gmail doesn't allow logins from an unrecognized device. It needs a verification code coming from a recognized device. So even the hacker knows your password, they can't just easily login. By hitting forgot the password, it also needs confirmation via phone, security question or alternate email which you set as recovery email.

Maybe there are some details that you didn't mention.

And where's your BTC0.4 stored prior to hack?

I don't understand if how the hacker stole you 0.4 BTC? Did you send your BTC to your Email?

Since you have the registered number why not provide it as your evidence that you own that email? It's enough to prove that you own that Gmail account.
If they are asking more to recover your account like personal info or documents it's questionable unless if the reply is directly from real google support.

Check some of your device where your email is connected I'm sure it still connected with them if it's logout you can start recover them but in the same device so that Google will recognize your device as the old owner then start to provide your phone number until you receive a new code.

Just try because I have experienced before that I can't recover my account to other devices but I can recover them with my old phone where my email is connected before.

I feel sorry for OP, another phishing attack who strikes...

Each day more and more scams and attacks hit users, so, you must be careful on each step, this was another of those non-cheap lessons, just take it and move on. In the future, if you will secure some btc i would like to recommend you to use a paper wallet.

Its not always so mate. If your gmail account is not connected with your phone number and also without security questions, it is easier for anyone to login once the person have your login details. Hackers always have ways and methods they use and do to obtain login details or login into other people's email accounts. We just have to be vigilant on the internet.

My Gmail doesn't associate with any of my phone numbers. Even I know my password, I can't log-in easily to my Gmail account elsewhere without the approval from one of my recognized device (pc, mobile).

In OP's case, there's lacking information so we can't just conclude what really happen. I believed he was tricked so he must not blame all of this to Gmail. Can't also believed that for a person holding BTC0.4, they should already know some of the basic security dealing with the internet.

No google will ask some proof that you own that Gmail account even you know the login details if your device is not recognized it will ask some question.

I already tried to log in on different devices with different IP but google always asking some question before I can access the Gmail account. Even I provided some of the google questions it will still end up asking for code through SMS to login. Unlike in my old phone which is recognized I can easily access the Gmail account without questions.

You maybe logging in on some devices that you thought it's not connected before. That is why it's not asking some 2step question.

https://i.imgur.com/EEJTYTO.png

I use authentificator on google chrom linked with my email adresse ones you log in from google chrom the app directly start and what s Im wendring about is how they bypass my phone number code confermation i just want you to be sure that gmail is not safe at all even with your sms verification ... is ther any way to contact support live chat directlyto provide all info or to get a stict answer about this my friend ?

This is really scary. Just a few days back, Google asked me to reset my password, and I did just that. This is what happened.

1. First I tried to log-in to Gmail using Chrome incognito mode.

2. I got message: "Suspicious activity in your account"


The email came from no-reply@accounts.google.com

3. I got a message that "Your Google Account has been disabled".


The email came from no-reply@accounts.google.com

4. I reset the password and received the message: "Account recovered successfully".


The email came from no-reply@accounts.google.com

At that time, I didn't had any doubt. But after reading this thread, I am getting scared.

I feel bad for you mate. Losing 0.40 is no joke especially if you are living in a third world country. That is why whenever you are into cryptocurrency, you have to separate your gmail into a division. Like for example, a gmail for businesses outside and a gmail for this forum. Maybe another gmail for exchanges.

I suggest that you reformat your computer and install and update your anti-virus. Make another gmail and make sure that you have a way to recover it. And remember that not even the gmail team would ask for your details. I hope you recover.

You may also read this : https://www.theverge.com/platform/amp/2017/9/18/16328172/sms-two-factor-authentication-hack-password-bitcoin

Can you also post the bitcoin transaction address?  and How did the hacker stole your Bitcoin ? was your bitcoin in an Web Exchange?

Maybe OP said that the hacker bypass his own number, which means the hacker also have the number of OP therefore security codes for log in is also received by the hacker.

I feel sorry for the OP but without enough proof , I will not believe on this claim, unless he also posted transaction address and provide more concrete and verifiable proof.

Sorry to hear that, buddy. But I am wondering whom do you talk with?


When you log in your gmail account with different browser, different  devices or different IP's then google will infomed you with that. If you'll change your password, they will send you a code through sms so I don't really understand how did they hacked your account if you changed your password. Or maybe hacker changed the password as well as the phone number for him to get the code instead.

You can't get back you .4 btc now. Don't you use 2fa if you stored your .4 btc in your wallet? Because hackers can't easily get that if you activated your 2fa for security.

you shouldn't trust any centralized services and never rely on any of them to be secure. there is absolutely no difference between any of these other options you mentioned in that regard. some are better but all share the same unreliability characteristics.
why do you think i chose my avatar. basically Yahoo let the hacker enter my Email account even though my password was ridiculously strong and there was no other way of entering it. and the result was me losing the ability to withdraw from exchanges i was using... those coins were lost for good.

You have ready two browser for your computer, when receive an email you can use other browser for clicking link and use your main browser only for access your exchanger account.

OP,I don't think that using aol,hotmail or yahoo instead of gmail will somehow increase your security.
The problem isn't in the email service provider.It's in your security settings and the way you are using your email.I think this is some kind of social engineering attack(maybe phishing) with bypassing 2-factor authentication.
Also,keeping a big amount of BTC in only one wallet is a big mistake.

It's not Google's fault here. What happen is that his gmail account was hack but we don't know if he had set up 2FA (but he says he received sms) so I'm confused as to how he was hacked, unless the hacker had his physical phone taken (or lost) to be able to login.

With regards to losing .4 BTC, I'm assuming all his information is on that email and that's how the hacker was able to login on exchanges and stole his BTC. But we need more clarification from the OP.

This is even a tell sign that something fishy is about to happen. I think it's advisable to avoid any site offering an email account without a "recovery email" to it. This is always easy come, easy go.

I would say Aha, and this is the mistake you did before. You install authenticator in the google chrome which is not recommended. You should install it in other places like the old smartphone which has not to be used. I heard that in the past google chrome addon to have bugs, and that makes the hacker can find a way to access your login and password.

So far, Gmail, Yahoo, or big email provider always secure their member's email, and they add some features to protect the members. They add phone verification, SMS verification, and else so it could minimize the hacker to hack the email. Besides that, the email provider will not allow someone signs in from the unknown devices without any verification.

I don't know if Google has a live support chat because so far, we need to send them the email about the problem we have, and we should follow their guidance to recover the account.

It is a good lesson for every people, never install authenticator to the browser even if they give the addon to be used inside the email because that is too risky. And the hacker will find a way to hack the account.

I don't really understand why the 0.4 BTC you have is lost when your Gmail is hacked. as long as you keep it in the exchanger, or in a wallet like blockchain or soft wallet I think the bitcoin that you have is still safe. after all, when you have all the data about Gmail you have, I think you still have a chance to access it. apart from that many people suggest using 2fa to strengthen the security of hackers.

Yeah, like my old gmail was connnected only to another email, I know that 2FA is the most secure way these days but until today I don't have it for my email because I always worry about what happens when I lose my device then what? And because my work keeps changing IP I always have to request a new password, having an old email only I know about with a difficult password is enough for me. Sorry to hear about your story OP.

Sorry for your loss, mate. 0.4 BTC is quite an important amount of money.

To avoid these situations in the future, I highly recommend you to use a hardware wallet. (Ledger Nano, Trezor etc.)
Phishing attacks become more are more often nowadays unfortunately.

I have gmail account for years and a lot of accounts are linked to that email but have never ever lost any funds so please don't blame them when there is no need of it. Maybe everything happened through your mobile phone? Someone hacked it or your friend who you couldn't imagine did that? Just asking, not directly making anyone guilty but in this life there is possibility of everything. Otherwise there is no way someone could pass google verifications without knowing very important things or having access on your things.

I have seen several Gmail accounts for sale for bitcoin on the DarkNet, so I guess it is not difficult to hack these accounts. Anyone can create some Gmail accounts and say they hacked it, but to link the criminal activities linked to that bought account to your own IP address, might just be stupid. 

In any way, once you login from a different IP with these accounts, it gets logged and the owner of that account gets a warning send to his 2FA option. The crux of the matter is that centralized services like this are being hacked and you should always enable 2FA options to block people from using it, if you are using it with financial services.  ::)

saving your private keys on your email is a bad idea because emails are prone to hacking , phisings , malware and any other online threats  plus its also a hassel to access it   .  you can just save your private key on your device for easier and more safer practice .  i think the op have been hacked not because of private keys but because someone login his accounts ?( it could be trading account or crypto wallet )  but how can someone have an access on his phone ? if he is the one that holds it ?  it could be that the hacker is one of his friends or family member

You really cannot blame google for the hack and it is still not clear how you lost your coins, but the possibility is that someone had access to your session cookies and then changed your security settings in gmail but that did not explain how you lost your 0.4BTC, it is from your wallet stored in your computer or from an online wallet. Google specifically ask for sensitive information when you approach them to recover your account, sometimes your most used IP address as well as your recently used mail address to sent mail and so on. Really sad for your loss and make sure you have a premium antivirus software and anti spyware software to avoid these breaches.

Without a doubt, OP has become a victim of a phishing scam, I recently got a text message from a "supposed paxful" number which claimed that my account would be closed if i didn't verify some details. i logged in and they got my password but unknown to the person i had 2FA activated he couldn't do a thing with my coins. Later i got a message from the real PAXFUL website saying that someone logged into my account from Nigeria.

Obviously I am also concerned about what happened to you about your e-mail account at gmail, so far it is usually very safe if we do according to the rules made. about your BTC I just feel there is confusion why it can be hacked just because of your email, whereas usually the exchanger is enough to protect it from being hacked by adding protection that is quite difficult to hack, for example providing 2FA etc.

He didn't really said how he lost that 0.40 btc. Its just how he was compromised which is still unclear which online wallet or an exchange where he use his email that is accessed by the hacker. One certain information he said that isn't quite right is that gmail doesn't allow anyone to access the email in any other device.  He should just check who has access to his desktop or laptop because its possible that someone could just do it while you are away.

Wallets like coinbase or blockchain can be accessed by anywhere if we know the username and password but security login guard will block if we login in from unknow device for that we just need to click the link send on gmail that is why OP lost the funds I guess.

OP but you can try other recovering methods like answering security questions or confirming your old mobile number!

GMAIL is not the problem.

Problem was your lack of security measures, if you have registered in any exchanges with your gmail account then you have to have minimum security which is 2FA applications, app is better than sms because sms can be faked if they know your phone number.

Additional advice: do not use the same password as your emails in other pages!

I doubt that there can be hacked telephone numbers to be used to change your gmail. because to my knowledge the number is impossible to duplicate.
there must be an error that you cannot find out, so can use your telephone number to change your gmail.
even though gmail has made quite reliable protection.

About your btc which also has an impact because your Gmail has been changed, this also should not be taken if you add protection provided by each exchanger.
because the exchanger has made such a protection if properly done in addition to our own mistakes.

From the information we have, i could bet OP was using an online channel, and another deduction is that OP has the same password on his wallet and on his mail...

Another theory is an inside job, someone has access to his PC or his Phone and hack him that way.

It can be really disheartening to see one assets being wiped out because of some unscrupulous individuals and this is the case here. The way forward here is for you to understand how you were compromised in the first place. The next is to then focus on using offline wallets because those are the ones not connected to your email address neither do any form of confirmation need which can be intercepted by hackers against you.

you should have been given a recovery form , fill it in and you should be given back the access to the account after it is reviewed
I have no idea how could they have bypassed your phone verification
but gmail is one of the safest emails if secured properly , it was your fault for not taking all the necessary steps
gmail offers secondary recovery email. 2fa phone verification , security logs etc.
but this should serve as a lesson , do not click any links from your email , even if they look legit
you were hacked by one of those fishing links , most likely and surrendered your login details to the hackers yourself
or had a very easy password , i.e. any password under 12 symbols

I am guessing your Gmail holds the private key to the wallet your btc is stored? or connected to google doc that has your pk (same thing i do only that i try not to expose this email online), otherwise how can the hacker transfer btc from a gmail account!
for next time sake, you should abide by all suggestion given above to secure your account, and also it is adviceable to frequently change password, 0.4 btc is no small amount to loss like that, best of luck.

And as for those who says gmail can not be access from any other device, i don't know how true is that because i do access my gmail from different devices other than the main device, only thing they do is send a security alert mail to you warning of a possible sign-in from another device.

It's very sad man, I hope you can gain more money than 0.4 BTC that you lost

I already have been hacked, but in a regular bank, hackers get my phone number and they received a lot of things, and they stole 2k form my account, but it was an error of my bank and the Phone provider, thanks God I received my money back

Be careful guys, it's not wise to have sms verification nowadays

Nice catch mate and indeed,I  did some error accessing my email before and I asked for recovery and google did not asked for something like that because what google will look for is the number you used creating the email and that’s all,and also there are some secret questions you need to answer for verification but they will not ask you for extra info because that’s an obvious scam or hacking attempt

Its impossible for someone with different ip address to have an access to your email, even if they know your password, they should know every details to take over the account ownership. I guess someone have access to your PC or your Phone, thats why you lose your ownership of your email

That is extremely important. Remember to revoke trust from any devices you trusted before. It could lead to very dangerous situation as could happen here.
Other explaination is just phishing.

In this kind of incidents, we need to be more careful into our gmail account.
Most of the time hacker can only able to hack our account once we've been fall into his trap,
and what trap is that? of course the phishing site, were it is his open gate for us to steal our email.

When you attempt to reset your password on a gmail/google account, you will be asked a series of questions, such as when you created the account, the google services associated with the account, the dates you started using the services and the last password you remember.

I have used throwaway gmail accounts to register for what I believed to be shady websites in the past, didn’t use a password manager, and have had to reset my gmail passwords in the past. I suspect they use some kind of regex comparison to your answers, and the accuracy required likely varies depending on how much information you provide and how long ago the registration date is.

Thanks man for warning us, and I am sorry about the loss of your money, you should not have relied on just sms alone, I believe that Gmail has about 3 or 4 security guard system and despite sms, I still use authenticator on my account, and secondly, the only way that the hacker would have seen that your email is because it has probably been used for a cryptocurrency related registration also, maybe campaigns and any other crypto sit, but you should have created a separate email that only you have access to for your wallets.

If you don’t link the mail to any other account, the there is no way that you will lose your account and your money to scammers, also on your wallet too, learn to activate 2fa authenticator factor, it really helps a lot.

If you are advising people to use dinosaur-age email services like yahoo and aol the you gotta be the biggest joker around here. I personally have an ugly experience where i got locked out of yahoomail and i have no clue why upto today.

You should instead be advising people to use 2FA on their Gmails. That is one of the best ways of safe guarding your account.
Sorry for your loss thou.

So, your devices got compromised and you lost access to your mail account.

How is this related to you losing BTC ? Did you store your private keys / mnemonic code via email ? That would be a huge blunder.
Or how could it be related to your mail account ? I assume you didn't use a proper wallet ?

Anyway, you should make sure that your devices are no longer compromised. Somehow an attacker gained access to your passwords and obviously also your device. Make sure to format any drive and reinstall an OS.
I guess you already changed all passwords (from a clean device) ?

I guess you got here to the point. This could happen if every other mail service. Probably same passwords and not setup all the available security options.

aol and hotmail email services are even worse than yahoo
I lost my password at yahoo mail and wasn't able to recover access no matter what I did
guess they have some weird policies in regards to the countries you open your account with
in any case  , do not blame the game, blame the player - gmail is one of the most secure email services out there if used properly
hope next time you do not repeat your mistakes and and don' make the new ones , like opening an aol email account or something  ;)

Funny how so many of these sort of posts never make sense and are never written by people with very good English skills.

1. You actually haven't told us anything.
2. You don't even know your own account info
3. How does a copy-paste of their reply help us to help you?

Why you didnt make any action upon recieving a message from google?  If you do not made an action and disregard that message google will accept the unkown login on your account.