Recently I have been receiving "Google Verification Codes" that I never requested and for password recovery of the google accounts that are not mine however are similar to mine. It might be possible that a user added a wrong email address (mine) as his/her recovery email, however, the frequency of receiving these emails and in different time spans is suspicious and makes me wonder if there would be another explanation. Could this be an attempt to hack me in some way? if yes how? I cannot think of any way.

P.S. Yesterday I received two verification codes one for a google account and before that one for a Microsoft account (apparently a Gmail that is used as a Microsoft account).

P.P.S. Google two-factor authentication is active.

  • 2
    Did you check the activity on your google profile? Do you see any suspicious login attempts there?
    – GACy20
    Jul 21, 2022 at 10:28
  • @GACy20 I don't think if login attempts get reported in the google security activity. If you mean changing passwords or logged-in device all is normal. Indeed what I tried to explain in the question is kind of the contary, that is I might be able to attemp to login to that email address with the verification code.
    – Kepler
    Jul 21, 2022 at 10:38
  • Are you sure these messages are from Google and not someone pretending to be Google?
    – Laurel
    Jul 21, 2022 at 15:16
  • @Laurel good point! But yes I am sure they are from noreply@google
    – Kepler
    Jul 21, 2022 at 15:50
  • I don't know about gmail, but microsoft logs attempts and you can see it in the security pages in your account.
    – moo
    Jul 24, 2022 at 18:50

2 Answers 2


No, I do not see a potential security risk for your account.

Those two step verification codes are used for login purposes and to be entered after supplying the password. You won't be able to do anything without the password, and the password won't help much without those codes. Usually there are backup codes exactly for this purpose (unable to retrieve the sent codes), but in case whoever set this up did not write those down.. Things like that happen. As your email is probably noted as recovery address now, you get password recovery notifications as well (after the person realized the dumpster fire it created).

As long as it ain't your account, there is no indication of compromise. Someone apparently screwed up big time with his account. What to do about it? I do not know about Microsoft, but in Google emails there should be a link to unsubscribe from notifications about the account.

  • 1
    Thanks, well I fully agree with you answer and this was my understanding as well, I wanted to be sure though, beacuse it seems that MORE THAN ONE PERSON screwed up big time with their account! but I guess that happens !!! I already unsubscribed from some of them.
    – Kepler
    Jul 25, 2022 at 9:17

I've been seeing this as well (I received 21 emails between 7:36 - 10:11 am today, some in Arabic). They are usually accompanied by "Someone added you as their recovery email" from [email protected].

That email says: "If you don’t recognize this account, it’s likely your email address was added in error. You can remove your email address from that account. Disconnect email"

While normal phishing warnings apply, you can use the Disconnect email link to make sure that the email is no longer connected to your account. I don't know if it helps, but I've been doing it each time, after verifying that the email did come from Google.

  • 1
    Welcome to the community. Ugh, correct me if I'm wrong, but I think that "Disconnect email" link might be the actual phishing... Mar 23 at 10:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .