The first thing to note is that this is a valid, signed email - it really was sent from no-reply@google.com. It passes the DKIM signature check, and GMail displays it without any warnings - it even puts it in the same conversation as other, legitimate security alerts. pic.twitter.com/GxlFR6ccLG

A developer reported the scam after noticing a slight discrepancy in the email address. The scam passed Google’s own DKIM checks.

Gmail users worldwide have been advised to stay vigilant as cleverly designed phishing scams are already slipping past the tech giant’s own security systems and catching people off guard.