If someone asks you about a suspicious email they received from your email address that you didn’t send, if you get bounce messages for emails that look like they were sent from your account, or if you get a reply to a message you never sent, you may think someone else has gained access to your account. However, it may be that someone is spoofing your email address, making an email appear to come from your address when it really isn’t. Often, Google Inbox or Gmail will designate a suspicious email like this for you with a fishing hook or a banner across the email, but the detection isn’t perfect. If you or the recipient of a spoofed email gets a message like this, marking it as spam will help Google identify the activity in the future.

Remember, you can protect your account from being compromised by enrolling in Duo.