don't have a Belkin router, and none is listed as available WiFi in my area.

This means to me that either there is a major screwup in these utilities or spying is way deeper than we thought it was. I prefer to believe the former.

Google has been no help, so I think I'll ask AT&T. Maybe they've heard about this happening before and know what to do.

Thanks for the reply.

Could you go to a T-mobile store and talk to them about it??
m

I'll add that to talking with AT&T tomorrow.

Thanks!

a cell phone where you can enable 2- factor authentication? Last time I enabled it if you scroll to the bottom during set up you can click remove all trusted devices and then use authentication to sign back in on your trusted ones that might help clean up your list of devices.

After logging in on my computer, a message is sent to my cell phone to verify that it's me. I can't find that capability or any list of devices on my phone, though. Unless I'm misunderstanding you somehow?

On edit: Checking the settings on my computer and verifying that 2-step authentication is turned on, I did find a list of "signed in devices" that is correct: current phone, PC, and Chromebook. I have also changed my password three times so far this year, so there's that.

Those T-Mobile phones apparently no longer have access. I'd still like to know how they got on there in the first place, though!

As well how they got on there because there are many, many people who have the same problem. Only thing I can think is that it had to have happened before you enabled two factor authentication. If you want you can go to a computer disable and then reenable two factor and that will sign out and kick all devices off and then you can reauthorize the ones you have in hand. You are secure at that point and if one tries to sign in again you will get a text. The recent activity page for google only shows active devices for the last 28 days. Sometimes if you do a google account checkup you can remove devices or even click them to see where they signed in from but if not they should eventually fall off your account as google cleans up old devices but that can take several months with no activity. Some programs and apps like Bluestacks and different emulators, desktop and mobile texting apps etc. can also spoof devices on your account and if you use them it looks like some strange phone has access when it is actually a program.

I'll disable/reenable the 2-step authentication to make sure the strange devices are excluded.

Also, I had to use Bluestacks for work some time back (maybe in November?), but then they switched to another platform. That also might be the problem. I'll make sure Bluestacks is completely removed from my computer.

Thanks!