Just had the ‘Suspicious sign-in prevented’ email from Google relating to one of my son’s accounts. Now, I know there has been a phishing scam relating to this, but I got the email in both the account in question and my main email account (the backup account linked to the google account (Hotmail)).

Does this mean that the emails are genuine, or that the google account has been more thoroughly compromised than just an attempted log-in?

As an aside, can anyone point me to the direct link to the bit of Google accounts where you change the password? Buggered if I can find it in settings.

Have you actually Googled ‘suspicious Google sign-in prevented’ to see what they say?

if logged in to gmail, scroll to bottom of page, then in bottom right there’s a link showing the latest IP addys from where a login was made. always worth checking. might be similar link on other google pages.

edit: and here https://www.google.com/settings/security (lets you change password too)