1 week ago
India Orders Google to Remove Firebase Accounts Used in Scams
Indian officials say criminals used Google’s Firebase tools to run online scams.
Some fake websites looked like real banks.
Others helped collect information from people’s phones.
Scammers advertised offers such as new credit cards, rewards and higher credit limits.
In another scheme, fake PM-KISAN websites asked people to install an app to claim government payments.
The app could send information from the phone to the scammers.
This might let criminals reach other apps and steal money.
Officials asked Google to remove at least 57 websites and databases in August.
Google said scams and malware are not allowed on its services and that it works with law enforcement.
India’s Cyber Crime Coordination Centre ordered Google to remove at least 57 Firebase-hosted websites and databases in August.
Officials said the services were used to impersonate banks, distribute malware and collect sensitive financial information.
Seven flagged sites mimicked State Bank of India, ICICI Bank and Axis Bank; others allegedly gathered card details and one-time passwords.
A PM-KISAN scam allegedly lured users into installing apps that sent phone data to scammer-controlled Firebase databases.
Google said its policies prohibit phishing, malware and financial fraud, while Indian rules allow liability if flagged links remain online beyond three hours.
- Who
- The Indian Cyber Crime Coordination Centre directed Google to remove Firebase-hosted services allegedly used by scammers.
- What
- Authorities ordered the removal of at least 57 websites and databases in August as part of a broader action targeting hundreds of Firebase accounts.
- Where
- The services were hosted on Google Firebase and targeted users in India through websites and mobile apps.
- When
- The removal notices were issued in August; the government also published a related malware advisory in March.
- Why
- Officials said criminals were impersonating banks and government services to distribute malware and obtain sensitive financial information.
Indian authorities
Removal of scam services
Indian authorities
I4C said Firebase-hosted websites and databases were being used to impersonate banks, distribute malware and collect financial information, and ordered their removal.
Google said it has strict policies against phishing, malware and financial fraud and works with law enforcement to evaluate and act on removal notices.
Platform responsibility
Indian authorities
Indian rules can make Google liable for named links if they are not removed within three hours of receiving a notice.
The notices did not suggest that Google or Firebase was responsible for the scams; Google described the activity as prohibited misuse of its services.
Why scammers used Firebase
Indian authorities
The Indian government assessed that criminals shifted from other free tools because Firebase offered generous free options and stronger database features.
Google did not specifically address why scammers selected Firebase, but said it collaborates with authorities on reported abuse.
Key facts
- Government agency
- Indian Cyber Crime Coordination Centre (I4C)
- Platform
- Google Firebase
- August removals
- At least 57 Firebase-hosted websites and databases were named in notices
- Impersonated banks
- State Bank of India, ICICI Bank and Axis Bank
- Alleged cyber-fraud losses
- Nearly $2.4 billion in India in 2025, according to government data
- Removal deadline
- Google can face liability if named links are not removed within three hours of notification
- Digital-payment volume
- Nearly 242 billion real-time payment transactions were processed in the year to March 2026
Quotes
Indian Cyber Crime Coordination Centre (I4C)
Indian government cybercrime coordination agency that issued removal notices to Google
“Android-based malware programs are masquerading as legitimate banking services, specifically targeting Android users with credit cards. Scammers lure victims by promoting offers such as new credit cards, reward redemptions, or credit limit upgrades.”
thehansindia.com
deccanchronicle.com
telegraphindia.com
livemint.com
“These malicious apps often impersonate trusted services such as banking, government and utility platforms, and trick users into installing them through links.”
deccanchronicle.com
Technology company operating the Firebase platform
“strict policies prohibiting the use of our services for phishing, malware, or financial fraud”
thehansindia.com
deccanchronicle.com
telegraphindia.com
Sources
Govt orders Google to remove Firebase accounts linked to cyber scams
Govt flags scam pattern, asks Google to shut hundreds of Firebase accounts
Centre Orders Google To Remove Hundreds of Firebase Accounts After Spotting Scam Pattern
India orders removal of Google Firebase accounts used in online scams targeting bank customers
India Targets Google Platform For Scams
India orders Google to take down Firebase sites used to impersonate banks, defraud users
Related news
India Urges Google to Remove Bank-Impersonating Firebase Pages
India Orders Google to Shut Down Firebase Scam Accounts
Meta Removes Scam Ads After India Flags Porn Malware Bait
I4C Orders Google To Remove Three Malicious Loan Apps
Centre Blocks 3,718 Apps, Saves Rs 11,158 Crore From Fraud
India Warns of Fake Porn Apps Stealing Android Banking Details
Andhra Pradesh to Require Farmer IDs for Government Crop Procurement
India Urges Faster Farmer IDs and Digital Agriculture Rollout
BJP Plans Month-Long Seva Sankalp Abhiyan For Nationwide Public Outreach
BJP Resolution Targets Congress Vande Mataram Stand, Youth Campaign Drive
PM Modi Urges New BJP Team to Deepen Public Connect
