India Orders Google Firebase Scam Crackdown
India has directed Google to shut down hundreds of accounts on its Firebase development platform after cybercrime investigators identified a pattern of scammers using the service to impersonate major banks, distribute malicious applications and steal financial information from Indian users.
India Targets Google Firebase Scam Accounts
The Indian Cyber Crime Coordination Centre has intensified takedown action against websites and databases hosted on Firebase.
In August alone, authorities directed Google to remove at least 57 Firebase-hosted websites and databases suspected of being used for cyber fraud. Government notices concerning Firebase have reportedly run into dozens over recent months.
The action does not accuse Google or Firebase of participating in the scams. Google has said it prohibits phishing, malware and financial fraud and works with Indian law enforcement on takedown requests.
Fake SBI, ICICI and Axis Pages Detected
Seven of the 57 flagged Firebase resources allegedly operated as phishing pages impersonating major Indian banks, including State Bank of India, ICICI Bank and Axis Bank.
Other websites and databases were allegedly used to receive information stolen from victims’ phones, including credit card details and one-time passwords.
Scammers typically encouraged Android users to install fake banking applications promising credit cards, reward redemptions or increased credit limits.
PM-KISAN Apps Used to Spread Malware
Investigators also identified scams impersonating the government’s PM-KISAN scheme. Fraudulent websites allegedly asked beneficiaries to install applications to claim payments.
Once installed, the malicious software could transmit sensitive information to Firebase databases and potentially give criminals extensive access to victims’ smartphones.
The crackdown comes as cyber fraud grows rapidly in India. Indians reportedly lost nearly $2.4 billion to alleged cyber fraud during 2025, increasing pressure on authorities and technology platforms to disrupt online scam infrastructure.
