You are reading a single comment by @DragunovCZ1 and its replies.
Click here to read the full conversation.
-
Just did all you've said. Thanks so much. A bit of extra piece of mind...
I have used some public WiFi networks, but not so often anymore as there's no need to with my data plan.
DragunovCZ1-
It's advance feed fraud. They probably got your google credentials by getting you to click a fake google drive link or similar some time ago. Their message even says they will only take bank transfer. Just change all your passwords and set up Last Pass, keep an eye on any bank accounts, PayPal etc and you'll be OK. Report any odd behaviour.
stevo_com
Sorry to hear this - sounds like a huge pain in the arse but it’ll be fine, basically.
Time to enable 2FA on your gmail. Use an authenticator app such as Authy, not sms messages.
You can also use 2FA on PayPal but that’s all sms based.
You can also sign out of all devices from the google settings page.
I’d be curious to try and find out how it happened. Do you use public WiFi networks?