21/08/2026
The Indian government has directed Google to shut down hundreds of accounts and databases on its Firebase platform after discovering that cybercriminals are misusing the infrastructure to execute massive banking fraud. [1, 2]
# # Key Details of the Crackdown
* The Directive: The Indian Cyber Crime Coordination Centre (I4C) issued multiple notices to Google, flagging dozens of fraudulent websites and databases hosted on Firebase. [2, 3]
* Three-Hour Takedown Rule: Under India’s strict cyber regulations, Google faces legal liability if it does not remove the flagged links within three hours of receiving the government notice. [4, 5]
* No Platform Fault: Government authorities specified that Google and Firebase are not at fault; rather, scammers are actively migrating to Firebase to exploit its generous free-tier services and powerful database tools. [4, 5, 6]
# # How the Scam Works
Fraudsters leverage Firebase backend infrastructure to support highly sophisticated phishing schemes: [7]
* Bank Impersonation: Scammers build websites and apps mimicking prominent Indian financial institutions, including State Bank of India (SBI), ICICI Bank, and Axis Bank. [3, 8, 9, 10, 11]
* Fake Offers & Welfare Schemes: Victims are lured via SMS or links promising reward redemptions, credit limit upgrades, or cash disbursements from federal programs like PM-KISAN (a government payment scheme for small farmers). [4, 12]
* "Android God Mode" Malware: Clicking the fraudulent links prompts users to download malicious applications. Once installed, this malware grants scammers near-total control over the device. [12, 13, 14]
* Data Exfiltration: The rogue applications silently harvest personal data, credit card details, and One-Time Passwords (OTPs), instantly routing them back to the scammers' Firebase databases to drain the victims' bank accounts. [12, 15]
# # Context and Response
This administrative push follows severe financial losses in India, where citizens lost nearly $2.4 billion to cyber fraud in 2025 alone. In a formal response via media outlets like [Reuters](https://www.reuters.com/world/india/india-orders-removal-google-firebase-accounts-after-spotting-scam-pattern-2026-08-21/), Google stated that it enforces strict policies prohibiting phishing, malware, and fraud, and is actively collaborating with the I4C to review and eliminate the malicious accounts. [4, 5, 12, 16]
If you are interested, I can provide more details on how to spot "Android God Mode" malware or share best practices to protect your smartphone from malicious banking apps. Let me know how you would like to proceed.
[1] [https://www.indiatoday.in](https://www.indiatoday.in/amp/technology/news/story/govt-orders-google-to-shut-hundreds-of-firebase-accounts-after-spotting-scam-pattern-2976530-2026-08-21)
[2] [https://www.businesstoday.in](https://www.businesstoday.in/technology/news/story/govt-flags-scam-pattern-asks-google-to-shut-hundreds-of-firebase-accounts-550660-2026-08-21)
[3] [https://www.moneycontrol.com](https://www.moneycontrol.com/news/india/india-orders-removal-of-google-firebase-accounts-after-spotting-scam-pattern-14012227.html)
[4] [https://www.reuters.com](https://www.reuters.com/world/india/india-orders-removal-google-firebase-accounts-after-spotting-scam-pattern-2026-08-21/)
[5] [https://indiantelevision.com](https://indiantelevision.com/mam/india-orders-google-to-remove-firebase-links-used-in-cyber-scams/)
[6] [https://www.thehansindia.com](https://www.thehansindia.com/tech/govt-orders-google-to-remove-firebase-accounts-linked-to-cyber-scams-1112256)
[7] [https://www.straitstimes.com](https://www.straitstimes.com/asia/south-asia/india-orders-removal-of-google-firebase-accounts-after-spotting-scam-pattern)
[8] [https://kelo.com](https://kelo.com/2026/08/21/india-orders-removal-of-google-firebase-accounts-after-spotting-scam-pattern/)
[9] [https://whbl.com](https://whbl.com/2026/08/21/india-orders-removal-of-google-firebase-accounts-after-spotting-scam-pattern/)
[10] [https://www.instagram.com](https://www.instagram.com/p/DcS_speoNBH/)
[11] [https://www.benzinga.com](https://www.benzinga.com/markets/tech/26/08/61350854/alphabet-google-firebase-india-bank-scam-liability)
[12] [https://timesofindia.indiatimes.com](https://timesofindia.indiatimes.com/technology/tech-news/government-orders-google-to-shut-down-hundreds-of-firebase-accounts-after-finding-pattern-of-the-service-being-misused-by-criminals/articleshow/133403273.cms)
[13] [https://www.straitstimes.com](https://www.straitstimes.com/asia/south-asia/india-orders-removal-of-google-firebase-accounts-after-spotting-scam-pattern)
[14] [https://english.aawsat.com](https://english.aawsat.com/technology/5309450-india-orders-removal-google-firebase-accounts-after-spotting-scam-pattern)
[15] [https://www.newsbytesapp.com](https://www.newsbytesapp.com/news/science/india-asks-google-to-block-firebase-accounts-linked-to-scams/tldr)
[16] [https://www.amlintelligence.com](https://www.amlintelligence.com/2026/08/news-india-orders-google-to-shut-firebase-accounts-used-in-banking-scams/)
India has directed Google to shut down hundreds of accounts on its Firebase web development platform after finding a pattern of criminals misusing the service to impersonate major banks and defraud people, according to government notices and a source familiar with the matter.