Reporting a Google Form as Spam/Phishing

A Google Form is breaching security by requesting sensitive information, including passwords.

Issue

A Google Form is requesting sensitive information, including passwords.

 

Environment

• Google Forms

 

Information

Sensitive information, including passwords, should never be entered into Google Forms. To help users remember this, at the bottom of Google Forms it states "Never submit passwords through Google Forms."

 

Resolution/Process/Answer

If a user ever sees a Google Form asking for a password they should:

1. Click on "Report Abuse" at the bottom of the Google Form
2. Select Spam, malware or "phishing" (fake login) and click the Submit Abuse Report

Doing this will inform Google and they will remove access to the Google Form as well as investigate the user who created it.