How to stop scam emails in a parent's Gmail

Step 1: Report phishing and spam

Reporting does two things: it moves the message out of the inbox, and it helps Google catch similar emails.

1. Report phishing (computer)

   Open the email. Next to Reply, click More, then Report phishing.

2. Report spam (computer)

   Select one or more emails and click Report spam at the top. They move to the Spam folder.

3. Report spam (iPhone Gmail app)

   Open the email. At the top right, tap More, then Report spam.

Step 2: Block senders who keep coming back

1. Block a sender

   On a computer, open the email. Next to Reply, click More, then Block followed by the sender's name. Future emails from them go to Spam.

2. Unsubscribe from real newsletters

   In the iPhone Gmail app, tap the Menu icon, then Manage subscriptions, then Unsubscribe next to a sender. Google notes this feature is still rolling out.

Step 3: Check for filters and forwarding a scammer may have added

If someone has ever gotten into your parent's account, they may have set it up to forward mail or delete warnings. Google's own security tips say to check both.

1. Open settings

   On a computer, open Gmail, click the Settings gear, then See all settings.

2. Check forwarding

   On the Forwarding and POP/IMAP tab, make sure mail is not forwarded to an address you do not recognize.

3. Check filters

   On the Filters and Blocked Addresses tab, look for any "Forward to" filter to an unknown address, and any "Delete it" filter your parent did not create.

4. Check who has access

   On the Accounts and Import tab, check "Grant access to your account" and "Send mail as" for anything unfamiliar.

Step 4: Use filters to keep important mail visible

Filters can also help. For example, you can make sure emails from their real bank are starred so they stand out. In Gmail on a computer, click the search options icon in the search box, enter the sender, click Create filter, choose an action like Star it, and click Create filter again.

Filters are built on a computer. Google's help page does not cover creating them in the phone app.

Step 5: Turn on 2-Step Verification and run Security Checkup

For the full setup, including recovery options and passkeys, see how to set up Gmail safely for an elderly parent.

1. Run Security Checkup

   Go to myaccount.google.com/security-checkup and follow the recommendations. Google suggests doing it regularly.

2. Turn on 2-Step Verification

   At myaccount.google.com, choose Security & sign-in, then under "How you sign in to Google" choose Turn on 2-Step Verification.

3. Pick a strong second step

   Google prompts on their phone or a passkey are easier and safer than text message codes. Google says text codes are the least resistant to phone-number hacks.

Step 6: Teach the Gmail warnings

• If Gmail shows a warning, do not click links or open attachments. Google says to be careful with unknown senders even without a warning.
• If a friend's email shows This message could be a scam, their account may be hacked. Click Report this suspicious message and tell the friend by phone, not email.
• Google emails will never ask for your password. Neither will Google in a call or message.

What Gmail can't do on its own

Gmail's filters stop a huge amount of junk. But the most dangerous scam emails are often written one at a time, look real, and land in the inbox. When one gets through, your parent is the only one who sees it, often while feeling rushed or scared.

That is the gap OwlGuardian fills. It uses AI to scan your parent's incoming Gmail and moves suspicious messages to quarantine before they see them. You, as their Trusted Contact, get an alert and choose to release or keep each email. You only see flagged emails, never normal mail. Your parent sees nothing different in Gmail, and can open the app any time to see what was held.

Questions people ask