Archive · 21 Aug 2026
India Orders Google to Remove Firebase Accounts Used in Scams
Indian officials say criminals used Google’s Firebase tools to run online scams.
Some fake websites looked like real banks.
Others helped collect information from people’s phones.
Scammers advertised offers such as new credit cards, rewards and higher credit limits.
In another scheme, fake PM-KISAN websites asked people to install an app to claim government payments.
The app could send information from the phone to the scammers.
This might let criminals reach other apps and steal money.
Officials asked Google to remove at least 57 websites and databases in August.
Google said scams and malware are not allowed on its services and that it works with law enforcement.
India’s Cyber Crime Coordination Centre ordered Google to remove at least 57 Firebase-hosted websites and databases in August.
Officials said the services were used to impersonate banks, distribute malware and collect sensitive financial information.
Seven flagged sites mimicked State Bank of India, ICICI Bank and Axis Bank; others allegedly gathered card details and one-time passwords.
A PM-KISAN scam allegedly lured users into installing apps that sent phone data to scammer-controlled Firebase databases.
Google said its policies prohibit phishing, malware and financial fraud, while Indian rules allow liability if flagged links remain online beyond three hours.
- Who
- The Indian Cyber Crime Coordination Centre directed Google to remove Firebase-hosted services allegedly used by scammers.
- What
- Authorities ordered the removal of at least 57 websites and databases in August as part of a broader action targeting hundreds of Firebase accounts.
- When
- The removal notices were issued in August; the government also published a related malware advisory in March.
- Where
- The services were hosted on Google Firebase and targeted users in India through websites and mobile apps.
- Why
- Officials said criminals were impersonating banks and government services to distribute malware and obtain sensitive financial information.
Indian authorities
Removal of scam services
Indian authorities
I4C said Firebase-hosted websites and databases were being used to impersonate banks, distribute malware and collect financial information, and ordered their removal.
Google said it has strict policies against phishing, malware and financial fraud and works with law enforcement to evaluate and act on removal notices.
Platform responsibility
Indian authorities
Indian rules can make Google liable for named links if they are not removed within three hours of receiving a notice.
The notices did not suggest that Google or Firebase was responsible for the scams; Google described the activity as prohibited misuse of its services.
Why scammers used Firebase
Indian authorities
The Indian government assessed that criminals shifted from other free tools because Firebase offered generous free options and stronger database features.
Google did not specifically address why scammers selected Firebase, but said it collaborates with authorities on reported abuse.
- Government agency
- Indian Cyber Crime Coordination Centre (I4C)
- Platform
- Google Firebase
- August removals
- At least 57 Firebase-hosted websites and databases were named in notices
- Impersonated banks
- State Bank of India, ICICI Bank and Axis Bank
- Alleged cyber-fraud losses
- Nearly $2.4 billion in India in 2025, according to government data
- Removal deadline
- Google can face liability if named links are not removed within three hours of notification
- Digital-payment volume
- Nearly 242 billion real-time payment transactions were processed in the year to March 2026
Sources
Govt orders Google to remove Firebase accounts linked to cyber scams
Govt flags scam pattern, asks Google to shut hundreds of Firebase accounts
Centre Orders Google To Remove Hundreds of Firebase Accounts After Spotting Scam Pattern
India orders removal of Google Firebase accounts used in online scams targeting bank customers
India Targets Google Platform For Scams
