This morning I received an email from Gmail/Google asking me to confirm my recovery email. The email appears to be a clever phishing attempt to gain access to my Google account. It is was easy to see how someone reading this email would be tempted to click the “take action button”. Clicking “take action” would allow this unknown email account to change my Google account password.
If you are not sure what email accounts can change your Google account password. Head over to https://myaccount.google.com/security and take note of all the accounts that can “recover” your account.