India Targets Google's Firebase in Scam Takedown

India has ordered Google to shut down hundreds of accounts on its Firebase platform, citing a pattern of criminals misusing the service to impersonate major banks and defraud citizens. Online scams have become a pressing issue in India, leading to nearly $2.4 billion in alleged cyber fraud losses in 2025. Officials observed scammers increasingly using Google's app and website development tool, Firebase, to distribute malware and steal sensitive financial information from victims' phones.

The Indian Cyber Crime Coordination Centre (I4C) issued directives in August to take down at least 57 websites and databases hosted on Firebase. These sites were designed to mimic legitimate banking services, luring Android users with fake offers to install malicious apps. Google stated it has strict policies against phishing and fraud and cooperates with law enforcement on such notices.

Scam operators are reportedly migrating to Firebase from other tools, attracted by its generous free options and capable database features. This trend aligns with the booming digital payments ecosystem in India, which processed approximately 242 billion digital transactions in the year leading up to March 2026. The fraudulent apps, sometimes referred to as "Android God Mode," can grant scammers near-total control over victims' phones.

Seven of the removed sites were phishing pages mimicking top Indian banks, while others were created to harvest stolen data like credit card details and one-time passwords. One scheme exploited a federal government program for small farmers, promising assistance in claiming payments via a malicious app download. This app then transmitted user data to a scammer's Firebase database, enabling further fraud.