This episode is a personal and confronting reflection on how quickly even a cyberaware professional can lose control of a long-standing Gmail account. What began as a seemingly legitimate brand collaboration unfolded into a carefully orchestrated phishing attack that removed all security measures within seconds. The experience highlights how modern cybercrime blends patience, credibility signals, automation and psychological triggers to bypass even cautious users.

• The phishing grooming process and credibility signals used • The red flags hidden in plain sight • What happened in the 60-second account takeover • The recovery journey and escalation through professional networks • Three essential security measures: 2FA, passkeys and backup codes

This story is not about fear. It is about awareness, practical action and understanding how sophisticated attacks have become. The lesson is simple: five minutes of security setup can prevent four days of stress.

1Password, LastPass Authenticator, Coursera, Impact, Google, Gmail, Revolut, Claude, ChatGPT, LinkedIn, Twitter, TeamYouTube

Episode resources and links:

Alex falcon Huerta’s story : https://www.linkedin.com/posts/alexfalconhuerta_fraud-alexfalconhuerta-share-7394786345610682370-s-49/

https://cyberwardens.com.au partners with the Australian Government to deliver free online security courses with verifiable CPD.

If this episode helped you, the best way to support the show is to leave a review somewhere as it helps more people find us. And if you want to continue the conversation, come find me Heather Smith | Accountant and Storyteller on:

LinkedIn: https://www.linkedin.com/in/HeatherSmithAU/

Accounting Apps newsletter: http://accountingapps.io/

Accounting Apps Mastermind: https://www.facebook.com/groups/XeroMasterMind

YouTube Channel: https://www.youtube.com/ANISEConsulting

X: https://twitter.com/HeatherSmithAU