The Indian government has instructed Google to deactivate hundreds of accounts on its Firebase web development platform, following the detection of a scam pattern involving impersonation of prominent banks. According to official notices and a source familiar with the situation, this move is part of efforts to combat online fraud, which has emerged as a significant challenge for law enforcement in India.

Reports indicate that in 2025, Indians lost approximately $2.4 billion to alleged cyber fraud, highlighting the alarming rise of online scams. In response, the government has been actively shutting down websites associated with fraudulent activities, but recent insights suggest a growing adoption of Firebase by scammers exploiting its capabilities.

The Indian Cyber Crime Coordination Centre (I4C) has mandated the removal of at least 57 websites and databases hosted on Firebase as of August 2026. They were reportedly linked to the distribution of malware and theft of sensitive financial data from victims’ devices, based on three notices reviewed by Reuters.

Nature of the Scams Reported

According to the I4C’s August 17 notice to Google, malicious Android applications were characterised by their presentation as legitimate banking services, predominantly aimed at Android users. The scams typically involved luring victims with promotions, such as credit card incentives, rewards, or credit limit enhancements, to gain access to their personal information.

In recent months, numerous notices have been issued to Google regarding Firebase accounts, reflecting a concerning trend in the use of this platform by fraudsters, although the specific number remains undisclosed. Google has stated that it maintains strict policies against the use of its services for phishing and financial fraud, and it collaborates with law enforcement to assess reported cases.

Despite receiving requests for information, representatives from India’s home ministry, which oversees the I4C, have not commented on this ongoing situation. The recent surge in online scams serves as a stark reminder of the urgent need for enhanced digital security measures within India’s expansive digital ecosystem.

Rise of Digital Payments and Associated Risks

Firebase is a widely used platform among developers globally to create applications and host websites. As part of Google’s cloud services, it has significantly contributed to the company’s revenue, which was reported to be nearly $25 billion last quarter. The Indian government has identified that scammers are increasingly transferring their operations to Firebase from other free tools due to its generous offerings and enhanced database features.

Scammers are reportedly capitalising on India’s burgeoning digital payments sector, which processed approximately 242 billion transactions through its real-time payments system in the year concluding March 2026. This positioning makes India one of the largest global markets for digital transactions, thus presenting scammers with ample opportunities to exploit users.

Out of the 57 targeted websites, seven were identified as phishing sites that emulated well-established Indian banks, including the State Bank of India, ICICI Bank, and Axis Bank. The remaining websites were said to be designed to harvest sensitive information from victims, collecting data such as credit card details and one-time passwords.

Fraudulent schemes reported involve persuading victims to download applications disguised as authentic banking services. One specific scam exploited the PM-KISAN initiative, which provides financial assistance to small farmers. Allegations suggest that these fraudulent websites promised help in accessing payments, prompting victims to install applications that ultimately compromised their data.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store –  https://apps.apple.com/in/app/newspin/id6746449540 

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share