In a decisive move to curb online fraud, India’s Cyber Crime Coordination Centre (I4C) has directed Google to take down more than 50 websites and databases hosted on the Firebase development platform. The action follows a pattern of scammers using Firebase to create fraudulent apps that mimic major Indian banks, steal credit‑card details, and hijack users’ phones.
Government notice and scope of the takedowns
According to three notices reviewed by Reuters, the I4C identified 57 Firebase‑based sites in August that were either distributing malware or collecting sensitive financial information. Seven of those sites were phishing pages designed to look like the State Bank of India, ICICI Bank, Axis Bank and other leading institutions. The remaining sites were used to harvest data such as one‑time passwords and credit‑card numbers from victims’ devices.
The notices describe how scammers lure Android users with offers of new credit cards, reward redemptions or credit‑limit upgrades. Once the victim installs the fake app, it gains near‑total control of the phone – a technique researchers have dubbed “Android God Mode.” The compromised device can then be used to access other apps and siphon funds.
Targeting government programmes
One scheme specifically exploited the PM‑KISAN programme, a federal initiative that pays small farmers roughly 2,000 rupees (about $21) every four months. Fraudulent websites promised assistance in claiming the payment, prompting users to download a malicious app. The app transmitted the user’s data to a Firebase database controlled by the scammers, effectively hacking the phone.
Google’s response
Alphabet‑owned Google said it maintains strict policies that prohibit the use of its services for phishing, malware or financial fraud. The company works with law‑enforcement agencies, including the I4C, to evaluate and act on removal requests. Under Indian law, Google could be held liable for any listed links that remain online after three hours of notice.
Why scammers favor Firebase
Firebase offers free tiers and robust database features, making it attractive to developers—and, increasingly, to fraud operators. The Indian government notes that scammers have been migrating to Firebase from other free tools since last year, drawn by the platform’s ease of use and scalability.
India’s digital payments ecosystem continues to expand rapidly. In the fiscal year ending March 2026, the country processed nearly 242 billion digital transactions through its real‑time payments system, ranking it among the world’s largest markets. The surge in online activity has created new opportunities for cybercriminals, prompting authorities to intensify their efforts.
Broader context
Online scams remain a top law‑enforcement challenge in India, with reported losses of almost $2.4 billion in 2025. The government has a history of ordering the removal of scam‑related websites, and the recent Firebase takedowns represent the latest chapter in that ongoing battle.
Google’s Firebase is part of the company’s cloud business, which generated close to $25 billion in revenue in the most recent quarter. While the platform powers millions of legitimate apps worldwide, the current crackdown underscores the need for vigilance when using free development tools.
Representatives for India’s Home Ministry, which oversees the I4C, did not respond to requests for comment.
Original reporting: Appleton, WI News Feed (HLL/CB) — read the source article.
