Unknown devices on my Google account.

[silverweb]

This morning, I was doing some Google account maintenance and discovered that there are two T-Mobile smart phones called OnePlus on my list of devices. I have never used T-Mobile (I use AT&T) and have never had a OnePlus phone (my last and current phones are LG), so I have no idea how these came to be linked to my account.

Both phones were registered within two days of each other in November 2018. That's the last time one of the them was used and the other was last used this March. I tried to delete them, but cannot; "update" and "cancel" are the only options in "edit," and "update" doesn't show what it's done.

The help section says that in order to block or delete them, I have to upgrade to a pay version of G Suite and, as administrator, "notify users in your organization that you are going to manage their devices." There's no organization here, just me.

This has me pretty freaked out. How could someone add phones I've never owned with a provider I've never used to my Google account? I'm afraid my account security has been compromised. Can I find out who owns/owned these devices and how do I get them deleted without paying for G Suite?

[TreasonousBastard]

1. I'm not sure they did. I have Belkin router as one of the devices on my network, but I...

don't have a Belkin router, and none is listed as available WiFi in my area.

This means to me that either there is a major screwup in these utilities or spying is way deeper than we thought it was. I prefer to believe the former.

[silverweb]

2. That's so weird.

Google has been no help, so I think I'll ask AT&T. Maybe they've heard about this happening before and know what to do.

Thanks for the reply.

[mitch96]

3. "I have never used T-Mobile (I use AT&T) and have never had a OnePlus phone "

Could you go to a T-mobile store and talk to them about it??
m

[silverweb]

4. I could.

I'll add that to talking with AT&T tomorrow.

Thanks!

[Moonriver78]

5. Silverweb do you have...

a cell phone where you can enable 2- factor authentication? Last time I enabled it if you scroll to the bottom during set up you can click remove all trusted devices and then use authentication to sign back in on your trusted ones that might help clean up your list of devices.

[silverweb]

6. I do use it for my Google account.

After logging in on my computer, a message is sent to my cell phone to verify that it's me. I can't find that capability or any list of devices on my phone, though. Unless I'm misunderstanding you somehow?

On edit: Checking the settings on my computer and verifying that 2-step authentication is turned on, I did find a list of "signed in devices" that is correct: current phone, PC, and Chromebook. I have also changed my password three times so far this year, so there's that.

Those T-Mobile phones apparently no longer have access. I'd still like to know how they got on there in the first place, though!

[Moonriver78]

7. I would like to know..

As well how they got on there because there are many, many people who have the same problem. Only thing I can think is that it had to have happened before you enabled two factor authentication. If you want you can go to a computer disable and then reenable two factor and that will sign out and kick all devices off and then you can reauthorize the ones you have in hand. You are secure at that point and if one tries to sign in again you will get a text. The recent activity page for google only shows active devices for the last 28 days. Sometimes if you do a google account checkup you can remove devices or even click them to see where they signed in from but if not they should eventually fall off your account as google cleans up old devices but that can take several months with no activity. Some programs and apps like Bluestacks and different emulators, desktop and mobile texting apps etc. can also spoof devices on your account and if you use them it looks like some strange phone has access when it is actually a program.

[silverweb]

8. Good advice!

I'll disable/reenable the 2-step authentication to make sure the strange devices are excluded.

Also, I had to use Bluestacks for work some time back (maybe in November?), but then they switched to another platform. That also might be the problem. I'll make sure Bluestacks is completely removed from my computer.

Thanks!