except its not a spoofed email. It's really from Google. You cant spoof emails from Google that inbox.

You can use Google Cloud or Google Sites to trigger emails to anyone that legit come for Google email addresses and servers or submit forms on Google that will send legit emails to Gmail users/targets.

They simply either just embed their scam text into these emails or use the emails from legal@ as a scare tactic and pretext for their scam when they call you.

> except its not a spoofed email. It's really from Google

Read the text shown in the screenshot in an article. I am 99.9% sure that is not from Google. The wording screams scam to me, most likely from someone who is not a native English speaker.

Among many many other red flags, it specifically says not to try and change your password for 6-12 hours and to not share the details of the email with anyone.