Top News

The Indian government has asked Google to shut down hundreds of accounts on the Firebase platform. This action follows incidents where fraudsters stole information using fake banking websites.

Cases of online fraud are frequently in the news. Now, the scope of action against cybercriminals is extending to the platforms used to perpetrate these scams. The Indian government has directed Google to close hundreds of accounts hosted on its Firebase web development platform.

This move follows the identification of cases where criminals were allegedly obtaining financial information from people by creating websites and services that mimicked major banks. According to a Reuters report, Indian officials directed the removal of at least 57 websites and databases hosted on Firebase back in August. These were allegedly being used to spread malware and steal sensitive financial information.

What is the government's major action regarding Firebase?

The Indian Cyber ​​Crime Coordination Centre (I4C) sent at least three notices to Google in August, directing the removal of 57 websites and databases. According to officials, these links were being used to distribute malware and steal sensitive information. The notices stated that if Google failed to remove a specified link within three hours of receiving the notice, action could be taken against the company. However, the notices did not hold Google or Firebase responsible for the cyber fraud itself.

How was the fraud committed using fake websites?

Among the websites and databases identified in August, seven were phishing sites created on Firebase. These websites mimicked Indian banks, including major institutions like SBI, ICICI Bank, and Axis Bank. The remaining websites and databases were used to collect information stolen from victims' phones, including sensitive data such as credit card details and One-Time Passwords (OTPs).

How Android Users Were Targeted

According to an I4C notice dated August 17, fraudsters were using Android malware that masqueraded as legitimate banking services. Victims were lured with offers such as new credit cards, rewards, and credit limit increases. They were then prompted to download an app that mimicked the appearance of a genuine banking application. Once installed, the app could transmit data from the phone to a Firebase database controlled by the fraudsters. In one instance, the PM-KISAN scheme was exploited; people were asked to download the app to claim payment benefits. The app could then access data from other applications on the phone.

Action Against Rising Cyber ​​Fraud in India

Amidst these cases involving Firebase, efforts to combat online financial fraud in India are being intensified. Government data indicates that Indians lost approximately $2.4 billion to alleged cyber fraud in 2025. In March, the government also issued an advisory regarding a type of malware that cybersecurity researchers refer to as "Android God Mode." This malware allows fraudsters to gain significant control over Android phones. Google has stated that it collaborates with law enforcement agencies, including I4C, to investigate and take action in such cases.