Here's how someone who had malicious intent could set you up with a Gmail account and then later hack into your new mailbox and contact list: First, they need a secondary account that isn't a Gmail address. A Yahoo or Hotmail address would work fine. Now, when they generate an invitation for you, they type in your first and last name, but their email address. The invitation is sent to them and they forward it along to you, cut and paste it into a friendly response to your request ("Try this link for an account:") or even just redirect the message so it appears to have come directly from Gmail