My email is listed as recovery email for an unknown Google account
I just received a "New sign-in" notification email from Google, saying
Hi
UNKNOWN_PERSON
,Your Google Account
UNKNOWN_ACCOUNT@gmail.com
was just used to sign in fromSOME_BROWSER
onSOME_OS
Where UNKNOWN_PERSON
and UNKNOWN_ACCOUNT
are total strangers to me. They have no resemblance to mine and even belong to a different culture.
The email also explains:
You received this message because
MY_EMAIL_ADDR
is listed as the recovery email forUNKNOWN_ACCOUNT@gmail.com
. IfUNKNOWN_ACCOUNT@gmail.com
is not your Google Account, click here to disconnect from that account and stop receiving emails.
Where MY_EMAIL_ADDR
is my email address, to which the message was sent.
While clicking the disconnect link seems the obvious action, I am not sure that this is enough. It seems unlikely that my address was added as recovery email by mistake, so I am wondering if UNKNOWN_PERSON
or someone else had any malicious intent
The disconnect link doesn't look like a phishing one; it is in this form:
https://accounts.google.com/AccountDisavow?adt=SOME_HASH