我的 Google Workspace 账户被暂停的悲伤故事
My Google Workspace account suspension

原始链接: https://zencapital.substack.com/p/sad-story-of-my-google-workspace

一位 Google Workspace 用户在国外旅行期间删除了恢复电话号码后,账户被完全暂停。尽管通过 DNS 验证证明了域名所有权,并且启用了身份验证器和密码密钥安全措施,Google 仍然将此次访问标记为“劫持”并锁定了账户。 此次暂停导致了严重的业务中断。该账户是 Workspace 的超级管理员,控制着电子邮件、云端硬盘、日历、工资单以及众多关键服务的身份验证——所有这些都无法访问。作为备份的转发规则也在暂停期间被禁用。 恢复尝试均未成功,用户不断遇到无帮助的支持人员和无结果的提示。虽然最初的电话支持表示问题可以迅速解决,但已经过去了 40 多小时,账户仍然无法访问,这危及了工资单和重要的商务谈判。尽管用户已经证明了账户所有权和安全措施,但仍面临长达 30 天的暂停期,且无法接收任何电子邮件。

黑客新闻 新 | 过去 | 评论 | 提问 | 展示 | 招聘 | 提交 登录 我的Google Workspace账户被暂停的悲惨故事 (zencapital.substack.com) 17点 由 zenincognito 44分钟前 | 隐藏 | 过去 | 收藏 | 讨论 帮助 指南 | 常见问题 | 列表 | API | 安全 | 法律 | 申请YC | 联系 搜索:
相关文章

原文

As the title suggests, I have finally become the victim of Google’s account suspension. The reason given over the phone was that my account had been “hijacked” — when in reality, I was simply the one accessing it from overseas.

Despite repeatedly explaining this, they ignored my assertions and continue to hold my email hostage. I understand they may believe they’re protecting me from social engineering, but a DNS verification was already completed to prove I own the domain. While suspended, no emails are received and no forwards work.

On Saturday, April 4, around 5:00 AM I removed my phone number from the account. I am travelling to the UK for a short period and did not want to have roaming on my Australian phone. Despite setting up an authenticator and passkey, gmail insisted that I use my phone number to login via SMS. Ofcourse, this was not what I wanted. So I removed the recovery phone, expecting the system to fall back to my authenticator. I was in the UK to negotiate a business outcome — I should have realised that if Gmail fails, everything downstream fails with it.

On Saturday, April 4, at 5:06 AM, I received a notification saying my authenticator had been removed. It hadn’t. The authenticator was still active on my phone - it was the recovery phone I had removed. Google apparently conflated the two.

I had my logged-in laptop, phone, passkey, and backup codes, but none of it worked.

Every recovery attempt kept hitting the same “something went wrong” dead end, despite tapping the correct recovery prompt on my phone.

This email is the sole account on my Google Workspace - and the super admin account. A single point of failure. It has three aliases across different domains. Email, Drive, Calendar, payroll, and authentication for multiple services are all tied to it.

I had multiple email forwards configured precisely for situations like this, but because the account is suspended, forwards don’t work either. Payroll is tomorrow. I won’t be able to run it because of my reliance on Gmail-based authentication. I cannot login to Pipedrive - sales CRM because I use Google Auth. I can’t login to our Task management app. I can’t login to our internal systems because - you guessed it - it releied on Google Oauth.

Then, it get worse.

I tried account recovery and was asked to verify DNS ownership via CNAME and TXT records. I did this promptly. Meanwhile, the recovery email option told me I’d need to wait 30 days.

Thirty days of a suspended business email. No incoming mail. No forwards. Nothing.

So Google will suspend my email for 30 days and no emails will be received during this time.

Fortunately, I run another Google Workspace account. I logged into that admin console and contacted Google support through it. The rep told me to fill out a form at a link - which required me to log in. With my suspended account. Which I obviously can’t do.

Another rep on chat told me the account was “simply suspended” and that I could recover it in incognito mode. I told them I’d already tried this multiple times and hit the same error every time. They filed another ticket.

I tell them - I have already done this numerous times and it fails with the same error I got previously.

This back-and-forth repeated several times over 24 hours. There are now four open cases. None of the case managers seem to know what’s happening - one case gets closed in favour of another, then reopened because the other was closed.

I read community forums and reach out Google Workspace on X.com. They ask for case numbers which I promptly give and they tell me to wait.

I finally reached someone by phone and explained that I had removed the phone number myself. I asked them to verify the DNS record, confirmed I’d passed their “knowledge test.” They said everything checked out and that there would be a resolution within a few hours. They confirmed as much in a follow-up email.

More than 40 hours have passed. Having chatted to someone on the phone. I’ve since been told the person handling my case isn’t on shift for another 90 minutes. This means I will likely miss payroll. A negotiation with a business associate will need to be rescheduled. I could give them my personal email, but I’d rather keep business and personal separate.

Update 1 - I know I can simply change the MX record to someone else but It has its own challenges.

联系我们 contact @ memedata.com