Crypto scam alert: 5 things to know about the new Google Forms fraud, says Kaspersky

Attackers are using the platform’s credibility to bypass email filters, and also the victim’s unfamiliarity with its format to lure them into divulging sensitive wallet credentials

by Gulf Business

July 31, 2025

google forms crypto scams alert_kaspersky_Getty Images for illustrative purposes

Image: Getty Images/ For illustrative purposes

Kaspersky researchers have flagged a new scam campaign targeting cryptocurrency users by abusing the legitimacy of Google Forms.

Here’s what you need to know:

1. The scam starts with a fake Google Forms confirmation

Attackers are using Google Forms – a free tool typically used for surveys – to trigger automated confirmation emails. These emails appear to come from Google itself, tricking users into thinking they’ve received a legitimate crypto transaction alert.

The form usually includes only one field: the user’s email address.

2. Emails mimic crypto exchange notifications

The phishing emails are carefully designed to look like alerts from a cryptocurrency exchange. They mention a pending crypto payout and urge users to click a link before the offer “expires.”

This manufactured urgency pushes recipients to act without verifying the source.

3. Clicking the link takes you to a scam site

If the user clicks the link, they land on a website made to resemble a crypto transaction platform. Here, victims are asked to contact so-called “blockchain support” and make a small commission payment in cryptocurrency to receive the fake transfer. Following this process often leads to loss of funds, as the entire transaction is fabricated.

4. The attack bypasses spam filters using trusted infrastructure

Since the email is technically sent from a legitimate Google domain, it often passes through spam filters undetected. This makes the scam harder to identify. The combination of a real Google email address and familiar design elements can deceive even cautious users.

5. Stay vigilant

Andrey Kovtun, Email Threats Protection group manager at Kaspersky, warns that “the campaign demonstrates a cunning exploitation of a trusted platform.”

Kaspersky advises users to:

Avoid clicking unexpected links
Watch for suspicious details like unfamiliar Google Forms content
Use reliable security tools to block fraudulent sites

If an email promises free crypto but asks for payment first, it’s likely a scam. Users should verify the source and never trust links blindly — even if the sender appears legitimate.

Read: Dubai Police arrest cybercrime gang behind fake online investment schemes