A genuine Google notification only confirms that Google delivered a sharing notice. It does not establish that the document owner, document contents, or links inside the file are trustworthy.
Real platform, unsafe content
Attackers can share a file from a real Google account, place a malicious link inside the document, and let Google send the notification. Traditional sender checks may look clean.
Before opening
- Ask whether you know the person who shared it.
- Confirm through a separate channel if the document was unexpected.
- Open Google Drive directly and inspect the owner’s full address.
- Do not follow login, payment, download, or phone-number instructions inside an unfamiliar file.
If you already clicked
If you only viewed a Google document, the risk may be limited. If you entered credentials, approved an application, downloaded a file, or ran anything, disconnect and contact IT immediately.
This page provides general security guidance, not a guarantee that any individual message is safe. When money, passwords, remote access, or sensitive records are involved, verify through a separate trusted channel.