India orders Google to close hundreds of Firebase accounts used for banking scams
India's cyber crime agency directed Google to shut down hundreds of Firebase accounts after uncovering their use in phishing and malware schemes targeting bank customers.
The Indian Cyber Crime Coordination Centre (I4C) has issued directives to Google to shut down hundreds of accounts on its Firebase development platform, citing repeated misuse by fraudsters. Notices reviewed show that in August the agency demanded the removal of at least 57 websites and databases hosted on Firebase, which were being used to spread malware and harvest sensitive financial information from Android users. Several of the takedown targets were phishing pages that copied the look of banks such as State Bank of India, ICICI Bank and Axis Bank, tricking victims into providing credit-card details and one-time passwords.
Other sites collected data stolen from phones, including information from apps like the PM-KISAN farmer-payment scheme. I4C warned that Android-based malware masquerading as legitimate banking services was luring users with offers of new cards or credit-limit upgrades. Google reiterated its policy prohibiting phishing, malware and financial fraud, and noted its cooperation with law-enforcement agencies in evaluating and acting on such notices. The move reflects a broader push by Indian authorities to curb online financial fraud, which cost citizens nearly $2.4 billion in 2025.
Why it matters
It highlights how major tech platforms are being forced to dismantle infrastructure enabling large-scale financial scams in India.
In this story
