AppSheet Email Scam: How Scammers Use Job Offers and Account Deletion Threats

The AppSheet email scam is a new twist in online fraud. Scammers are misusing Google AppSheet, a genuine tool owned by Google, to send fake job offers that look completely real.

According to cybersecurity researchers at RavenMail, nearly 11 percent of all global phishing emails were sent using AppSheet. These attacks completely bypass standard security gateways because the domain is fully authenticated. 

Usually, you receive a phishing email containing a job offer or a message claiming your Facebook page or ad account has violated policy and may be suspended. 

The email is well written, professional, and does not raise immediate suspicion. 

Many of these emails are sent from addresses like “noreply@appsheet.com,” which makes them appear trustworthy. 

Once you open the email, the real manipulation begins. 

In case of job offers, it might say your profile has been shortlisted, or that you need to respond quickly to secure the opportunity. 

Some emails ask you to click a link to apply or schedule an interview. That link often takes you to a fake job portal or login page. The goal is simple. They want your personal details, your email password, or access to your social media accounts. 

In some cases, the scam does not stop at data theft. After gaining your trust, scammers may ask for money. They may call it a registration fee, training cost, or document verification charge. 

In other cases, email redirects you to a form built using Google AppSheet. Since AppSheet is a trusted Google service, the link appears safe and often bypasses spam filters. This makes the scam more convincing.

Once you open the form, you are asked to “verify” your account by entering login details, business information, or recovery codes. In reality, this data goes directly to scammers. With access, they can take control of your account, run ads, or lock you out completely.

How does it work?

AppSheet itself is not a scam. It is a legitimate no-code platform to build apps and automate workflows. 

The problem starts when scammers use this trusted platform to send phishing emails. They create free accounts on AppSheet and use its automated email features to send out fake job offers.

Because these emails genuinely come from a Google server, your email provider (like Gmail or Outlook) looks at them and thinks they are perfectly safe. Instead of throwing them into the spam folder, your inbox often marks them as important. 

What makes the AppSheet job scam different from older scams is how technically clean it looks. 

They use AI to write highly convincing emails for roles like “Head of Marketing” or “Director of Engineering” at huge companies. 

The emails look professional and do not have the obvious spelling mistakes or weird grammar we usually expect from spam.

Data Targeting

Another layer to this scam is data targeting. Many victims report that these emails match their skills or job roles. This suggests that scammers may be collecting data from platforms like LinkedIn or using leaked databases to personalise their messages. 

That is why the job offer does not feel random. It feels like someone has actually reviewed your profile.

How to be Safe?

If you look closely, there are still signs you can catch. Never trust links in such emails, even if they look clean or come through trusted services like Google AppSheet. 

Instead, open your account directly by typing the official website in your browser or using the app. If there is a real issue, you will see it in your account dashboard or notifications.

In case of job offers, the email may not mention a real recruiter’s name. The company may not have the job listed on its official website. The reply email may belong to a completely unrelated domain. Sometimes the job description is too vague or too good to be true.

The safest way to deal with such messages is simple. Do not click on links in unsolicited job emails. 

Instead, go directly to the company’s official website and check if the job exists. 

Never share your passwords or personal details through unknown forms. And most importantly, remember this basic rule. A genuine employer will never ask you to pay money to get a job.