Then a fake (but authentic-looking) email from someone claiming to be ... the target to provide the criminals with the user's Gmail recovery code, claiming it's needed to restore the account." ...

Business Disruption: Compromised Gmail accounts can be used to disrupt business operations, such as by sending fake emails ... Report phishing emails to Google by clicking on the “Report spam” button.