Google has announced a major change in its two-step verification process to enhance Gmail account security. The company is set to replace the traditional 6-digit SMS code with QR code-based authentication. This new security feature aims to reduce cyber threats, phishing attacks, phone hacking, and SIM swapping scams.

Why is Google Moving Away from SMS-Based Two-Step Verification?

To tackle cyber fraud and fake account creation, Google initially introduced two-step verification, where users received a 6-digit code on their mobile number for authentication. However, cybercriminals have developed methods to bypass this security measure, leading to vulnerabilities.

Traffic Pumping and Toll Fraud: A Major Concern

One of the key reasons behind this shift is traffic pumping and toll fraud. In this scam, cybercriminals misuse telephone systems or VoIP (Voice over Internet Protocol) services to generate unnecessary charges and force users to pay fraudulent fees. These criminals earn money for each SMS verification message sent, making the system an easy target for abuse.

Google spokesperson Ross Richendrfer stated, "SMS codes are no longer a secure option, as cybercriminals can intercept them through SIM swapping and other methods. QR code authentication will significantly enhance Gmail account security and reduce hacking risks."

How Can Gmail Accounts Be Hacked?

Cybersecurity experts warn that hackers use multiple methods to gain access to Gmail accounts. Rahul Mishra, Cybersecurity Advisor for the Uttar Pradesh Police, outlined the following common hacking techniques:

1. Phishing Emails and Messages

One of the most widely used hacking techniques is phishing, where cybercriminals send fake emails or messages claiming to be from government agencies, banks, or reputable organizations.

• These messages contain fraudulent links designed to steal users’ account credentials.
• Clicking on these links can also install malware on the user’s device, allowing hackers to access sensitive information like email passwords.

2. Logging in from Public Devices

If a user logs into their Gmail account from a public computer (such as in a library, office, or cybercafé) and forgets to log out, hackers can exploit this opportunity to steal login credentials.

3. Guessing Weak Passwords

Many users choose weak and easy-to-guess passwords, such as "123456," birth dates, names, or pet names. Hackers can easily crack such passwords and gain unauthorized access.

What to Do If Your Gmail Account Gets Hacked?

If a user loses access to their Gmail account, they should immediately follow these recovery steps:

✔ Step 1: Visit Google’s Account Recovery Page.
✔ Step 2: Enter the email ID and try using the last known password.
✔ Step 3: If the password is forgotten, Google will ask security questions to verify the account owner.
✔ Step 4: Use the recovery email or registered mobile number to receive a security code.
✔ Step 5: Enter the security code and set a new password.
✔ Step 6: Once logged in, update security settings and enable two-step verification.

Why Is QR Code-Based Authentication More Secure?

Google’s new QR code authentication system is more secure than SMS-based verification.

• QR codes must be scanned using an authenticated device, making it impossible for hackers to intercept via SIM swapping or message interception.
• The process is faster, more reliable, and significantly more secure, offering an extra layer of protection for users.
• Authentication will be limited to previously trusted devices, preventing unauthorized access.

Conclusion

Google’s new QR code-based two-step verification is a modern and secure authentication method that will help protect Gmail accounts from cyber threats. This proactive security upgrade aims to combat phishing, SIM swapping, and traffic pumping frauds.

If you want to enhance your Gmail account security, be ready to switch to the new QR verification system soon.