Is Google Docs Phishing – How to Check Shared Document Links real or a scam?

Treat the message as suspicious until you verify it through an official website or trusted contact method. Do not enter passwords, payment details, or verification codes after clicking a message link.

What should I do if I receive Google Docs Phishing – How to Check Shared Document Links?

Do not click the link. Go to the official website manually, check your account from there, and contact the company through a trusted support channel if needed.

Google Docs phishing: check fake shared document links

A Google Docs phishing link may look like a shared file but open a copied sign-in page, request unnecessary app access or send you to a download outside Google. If you were not expecting the share, check Google Drive directly before opening it.

This guide shows a realistic example, specific warning signs, recovery steps and official reporting routes.

Last reviewed: 18 July 2026. Author: ScanLens. Source review: official guidance listed below.

Quick answer: should you open the shared document?

Do not open it from the email if you do not recognise the sender, the file title is alarming, or the message asks you to sign in again through an unexpected page. Go to Google Drive manually and check sharing activity from there.

Be careful with document titles that create urgency, fear or account warnings.
Do not enter your Google password after following an unexpected document link.
Scan the URL first if the link was sent by email, SMS, WhatsApp or another app.

How the scam works

An email or chat message claims that a document, invoice or complaint has been shared with you.
The button may lead to a non-Google domain or a document containing another external link.
A copied sign-in page asks for your Google password or a consent screen asks for broad account access.

Common signs it may be fake

You do not recognise the sender or the document title is designed to alarm you.
The address bar is not on an expected google.com domain when it asks you to sign in.
The document tells you to enable a download, call a number or follow a second unrelated link.
The permission request does not match the simple task of viewing a document.

How to check if a link is safe

Never click suspicious links directly. The safest move is to copy the URL and scan it first with a phishing link checker or scam URL scanner.

Scan this link on homepage

This article page does not run direct API scans because public scanning requires verification. Clicking the button opens the main ScanLens web scanner, where you can check if a link is safe before opening it.

What to do if it looks like a scam

Do not sign in through suspicious links.
Open Google Drive manually and check whether the file exists there.
Verify the sender before requesting access or downloading anything.
Do not grant app permissions from a document you were not expecting.

If you opened a fake Google Docs link

If you entered a Google password, change it immediately from the real Google Account page.
Review recent security activity and sign out of unknown sessions.
Remove suspicious third-party access from your Google Account.
Warn your contacts if the scam may have been sent from your account.

Official Google help

Google provides help pages for reporting abusive Docs, Drive files and suspicious account activity. Use the official Google Help links if you need account recovery or want to report a specific document.

Safer habit

If a message says your account has a problem, never solve it through the link inside the message. Go to the official site manually or use a scanner first.

Even a safe-looking domain can be used for redirection, imitation, or social engineering.

Example of a fake Google Docs share

Example: "Payroll document shared with you - review before 5pm" followed by a button labelled Open in Docs. The button leads to a lookalike sign-in page on an unrelated domain.

A familiar Google logo does not prove the destination is Google. Check the address bar and open Drive directly.

Scam category

This guide is part of the Account scams hub. Use the category page to compare similar scams and warning signs.

View Account scams

FAQ

How do I check whether a Google Docs link is safe?

Check the destination without opening it, confirm the sender separately and look for the file by opening Google Drive directly. A sign-in request should use an expected Google domain.

What if I entered my Google password?

Change it from the real Google Account page, review security activity and sessions, and remove third-party access you do not recognise.

How can ScanLens help?

ScanLens can check suspicious URLs, highlight risky patterns, and give you a fast verdict before you open a link.

Explore more scams

Browse all scam types in one place.

View all scam examples