Gmail users must remain vigilant as scammers turn to a new tactic to catch them out.