Spurious confirmation codes

[Yankee313]

For over a week my phone has been receiving Google Messenger verification codes via text, and now, YouTube codes. Clearly a scammer is attempting access. I have not responded "stop" or anything to avoid tipping them off that they have a "live" number etc. in case it's a bot. But I do not wish my phone number or Google account to be compromised. Google has been entirely unresponsive. Any help appreciated.

[Leanne_T]

Hi there @Yankee313

Thanks for coming here.

Have you changed your password for Google and YouTube?

Do you have 2-Step Verification set up for your Google account?

Thanks.

Leanne.

[Yankee313]

I change my Google password periodically, but have not made a change recently, nothing that corresponds with these messages. Yes, I use two-factor authorization. These "notifications" in question come from (3) different sources: "Google," "JibeRCS," and phone number +44 7537 452590. 

I absolutely do NOT want to change my Google or YouTube passwords at this point in case that's the intent of these messages - a ploy to capture my new info. I'm also not responding "stop" either, in case this is a bot trolling for "live" numbers.

[Leanne_T]

Hi @Yankee313

Thanks for coming back to me.

Could you let me know what the message says, do they all say the same from the different numbers?

Thanks.

Leanne.

[Yankee313]

There are two types, Messenger and YouTube; Messenger code format is identical among the (3) senders; the YouTube codes were sent from "Google" in the same message thread as many other Messenger codes. Having changed my Google password previously, if memory serves, Messenger code texts appear to be consistent with the Google 2FA process.

The messages read as follows:

Your Messenger verification code is Gxxxxxx

or

xxxxxx is your YouTube verification code

To be clear, I have replaced the numbers with x's herein. The (2) YouTube codes do not use a letter prefix, start with 4, and are both identical, being sent within seconds of each other; the Messenger codes all have a G prefix followed by what appear to be completely random 6-number codes.

See screenshot below:

[Yankee313]

More info: though I use several Google products, I do not now nor have ever used Messenger or Jibe. 

Though I believe it's more likely this situation may be a relatively crude attempt to find "live" phone numbers (trying to elicit a response like "stop"), I have concerns that, however unlikely, someone may have gained admin access at either Google, or EE, intending to scrape my info as I enter password(s) and/or change them. I am not accessing MyEE on my phone due to this concern. There have been cases that once login info has been captured, phone service has been "slammed," users locked out of email and banking info, etc.

[Christopher_G]

Thanks @Yankee313

I've sent you a private message to get some information from you.

Please take a look and get back to me.

Chris

[Blessing444]

I’m literally experiencing the same thing , every time I block the numbers a new one comes..?

[Jon_K]

Hi @Blessing444.

Welcome to the community.

Have you ever used this service, or this type of service in the past?

Have you changed any of your passwords recently?

Jon