Google’s Android Phone Verification Can Link Numbers to Separate Accounts

Google’s automatic phone number verification on Android, enabled by default, can associate a device’s phone number with every Google account signed in on that device, including accounts added later. Users have reported unexpected verification emails for secondary accounts, raising privacy concerns that accounts deliberately kept separate could become linked to the same real-world identity. The reports describe account-linking behavior, not a confirmed security breach.

Users seeking to preserve account separation should disable automatic phone number verification and review each account’s phone number, recovery, and 2-Step Verification settings independently, because disabling the feature does not remove existing associations. Some users also report that automatic verification re-enables itself after being disabled, although this has not been established as universal behavior. Organizations relying on separate Google accounts for work or sensitive activities should account for this potential identity linkage when assessing shared-device practices.