A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account