I just received a "New sign-in" notification email from Google, saying
Your Google Account
UNKONWN_ACCOUNT@gmail.comwas just used to sign in from
UNKONWN_ACCOUNT are total strangers to me. They have no resemblance to mine and even belong to a different culture.
The email also explains:
You received this message because
MY_EMAIL_ADDRis listed as the recovery email for
UNKONWN_ACCOUNT@gmail.comis not your Google Account, click here to disconnect from that account and stop receiving emails.
MY_EMAIL_ADDR is my email address, to which the message was sent.
While clicking the disconnect link seems the obvious action, I am not sure that this is enough. It seems unlikely that my address was added as recovery email by mistake, so I am wondering if
UNKONWN_PERSON or someone else had any malicious intent
The disconnect link doesn't look like a phishing one, it is in this form: