Consumer Rights · Scam Alert · October 30, 2026, 6:27 AM CDT
Key Facts
- Kucoin issued a new alert: Casa Co-founder Warns of New Google Phishing Scam Using Google Infrastructure
- Huo Xing Finance reports that Jameson Lopp, co-founder and Chief Security Officer of self-custody service Casa, posted on X that a new Google phishing technique has emerged, in which attackers abuse Google’s own infrastructure to send emails.
- How it reaches victims: Email.
- Tactics the source describes: Spoofs a trusted phone number or sender.
HIGH THREAT VECTOR
Report to FBI Internet Crime Complaint Center (IC3) →
Casa Co-founder Warns of New Google Phishing Scam Using Google Infrastructure.
Huo Xing Finance reports that Jameson Lopp, co-founder and Chief Security Officer of self-custody service Casa, posted on X that a new Google phishing technique has emerged, in which attackers abuse Google’s own infrastructure to send emails.
He stated that clicking the goo.gl link in the email redirects users to a phishing login page, and included a screenshot of the email in his post. The post was published on October 29.[1]
What the Scam Looks Like
How to Protect Yourself
- Caller ID can be faked. If a call claims to be from an official office, hang up and call the office back on its published number.
How to Verify This Yourself
Read the original alert directly at Kucoin — that page is the primary source for everything above.
References
Investigative methodology: this update was produced by scripts/scam_monitor.py from a real Kucoin alert — not a language model. The quoted text above is verbatim from the source; any message or description shown in the illustration is quoted or copied from the source itself (see its caption); when the source does not publish the scam’s wording, none is shown or invented. Protection tips are matched from a fixed keyword list, not generated per story.

