Cyber Security News

Google Automatically Adds Your Phone Number to Every Google Account on Your Android Phone

Google automatically verifies phone numbers on Android devices and adds them to every Google account signed in on the Phone. The setting is enabled by default, raising privacy concerns for users who keep personal, work, and secondary accounts separate.

Google’s documentation confirms that the behavior covers both existing accounts and accounts added later. The feature, called Phone number verification, also covers new phone numbers added to a device.

Adding another Google account can link it to numbers already on the Phone, while adding a new number can attach it to accounts already signed in. Users must turn the setting off themselves to stop automatic verification.

According to Google’s support documentation, verification supports account sign-in, account recovery, emergency services, and communication features.

Google and mobile carriers periodically check that numbers still belong to the user. The company notes that carrier charges may apply during this process.

Google Auto-Adds Phone Numbers to Android Accounts

Android Authority reported that users received unexpected emails saying their phone numbers had been verified. Its staff also found automatic verification enabled on their devices.

The publication said Google updated its support page between August and October 2025 to describe the default setting and account-wide linking. That documentation change does not establish an exact rollout date.

Phone number verification on Android ( source: Androidauthority )

For someone using a separate account for public discussions, testing, or other activities, attaching a personal number creates an unwanted connection within Google’s systems. The concern is losing control over which accounts hold that number.

The documentation does not say this makes the number publicly visible to everyone. Google also says verification enables Better sharing on Google, which supports calls, messages, and notifications involving the number.

However, when several accounts are signed in, Better sharing turns on for only one account. This differs from phone number verification, which applies across all signed-in accounts.

This behavior is an account setting, not evidence of a Google account breach. Cybersecurity News previously covered Google’s denial of Gmail breach claims.

Adding all phone numbers to all Google accounts signed in on the device (source: Android Authority)

Its reporting on Google’s move toward passkeys also highlights the company’s efforts to simplify account access. Open Android Settings, select Google, and open All services. Under Privacy & security, select Phone number verification, then turn off Verify phone numbers automatically. Google says device settings manage this control.

Turning it off does not remove numbers already attached to accounts, according to Android Authority. Open each affected account’s Personal info page, select Contact info, then Phone, and remove unwanted numbers individually. Review how each number is used before changing it, particularly where account recovery is involved.

Some users reported on Reddit that the setting switched back on on its own. Android Authority could not reproduce that behavior, so it remains a user-reported issue rather than a confirmed general fault. Users managing several accounts should review both the device setting and each account’s stored phone numbers.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.

Abinaya

Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.

Recent Posts

Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft

Google has announced a new set of Android security protections designed to stop mobile scams…

1 hour ago

Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware

Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a…

3 hours ago

Microsoft Confirms October Windows Updates Can Break Exchange Server Email Services

Microsoft has confirmed that Windows Server security updates released on October 13, 2026, can disrupt…

3 hours ago

OpenCode Security Breach Exposes Third-Party API Keys of its Console Users

OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party…

1 day ago

Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes

Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic…

2 days ago

Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts

Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365…

2 days ago