Consumer Protection Tuesday: What to Do If Your Google Account is Compromised
Adapted from educational content originally created by zeroShadow, used with permission.
Key Takeaways for Coinbase Users
✅ Your email is your crypto's first line of defense—secure it like you secure your wallet
✅ Never share 2FA codes with anyone—not via phone, email, or text. Google and Coinbase will never ask for them
✅ Use unique passwords for your email and Coinbase accounts. Consider a password manager
✅ Enable hardware security keys on both Google and Coinbase for maximum protection
✅ Stay vigilant: Review your account activity regularly and report suspicious behavior immediately
Why This Matters
Your Google account is often the gateway to your Coinbase account—whether you use it for login authentication, two-factor verification, or as your primary email for account recovery. If a threat actor gains access to your Google account, they may attempt to:
Reset your Coinbase password
Intercept 2FA codes sent to your email
Access recovery information for your Coinbase account
Bypass security measures and gain unauthorized access to your crypto assets
Taking immediate action to secure your Google account is critical to protecting your Coinbase holdings.
Immediate Action Steps
1. Change Your Google Account Password Immediately
Navigate to myaccount.google.com/security
Select Password under "How you sign in to Google"
Create a strong, unique password (minimum 12 characters with uppercase, lowercase, numbers, and symbols)
Never reuse this password on any other site, including Coinbase
⚠️ Pro Tip: If you can't log in, use Google's Account Recovery to regain access.
2. Sign Out of All Devices
Review recent activity at myaccount.google.com/device-activity
Sign out of any unfamiliar devices or all devices as a precaution
Complete the Security Checkup
3. Check for Email Forwarding and Client Connections
This is critical for Coinbase security: Attackers often set up email forwarding rules to intercept password resets and 2FA codes.
In Gmail, go to Settings → See all settings → Forwarding and POP/IMAP
Check Forwarding for any unauthorized email addresses and delete them
Under POP Download, select Disable POP
Review Filters and Blocked Addresses for suspicious auto-forwarding rules
Why this matters: If an attacker forwards your emails, they can intercept Coinbase security notifications and password reset links.
4. Revoke Third-Party App Access
Review "Third-party apps with account access"
Revoke access to any unfamiliar or non-essential apps
Check detailed permissions at myaccount.google.com/permissions
5. Reset Your Two-Factor Authentication (2FA)
Since an attacker may have compromised your authenticator:
a) Temporarily disable 2FA:
Under "2-Step Verification," select Turn off
b) Re-enable 2FA with fresh credentials:
Set up a new 2FA method—do NOT reuse previous QR codes
Recommended options:
Google Authenticator (fresh setup)
Hardware security key (YubiKey)
Google Prompt on a secure device
🔒 Coinbase Recommendation: Use a hardware security key for both your Google and Coinbase accounts for maximum protection.
6. Update Account Recovery Options
From myaccount.google.com/security, verify:
Recovery email address
Recovery phone number
Ensure these are current, secure, and not compromised
7. Secure Accounts Linked via Google Sign-In
If you use "Sign in with Google" for Coinbase or other services:
Revoke access and reset passwords on linked accounts
For Coinbase specifically: Log in directly and change your password, even if you use Google sign-in
8. Review Your Coinbase Account Security
After securing your Google account, immediately check your Coinbase account:
Change your Coinbase password
Review recent activity and transactions
Verify all 2FA methods are still under your control
Check withdrawal addresses for any unauthorized additions
Review API keys and revoke any you don't recognize
Enable address whitelisting if not already active
🔗 Visit: Coinbase Security Center for additional protection options.
9. Enable Enhanced Google Security Features
Turn on Enhanced Safe Browsing at myaccount.google.com/security
Consider enrolling in Google's Advanced Protection Program if you're a high-value target
10. Report the Incident
Report to Google: support.google.com/accounts/contact/compromised
If you suspect unauthorized Coinbase access, contact Coinbase Support immediately
For additional security resources, visit the Coinbase Security Hub or contact Coinbase Support.
