{"id":15029,"date":"2026-08-21T15:04:29","date_gmt":"2026-08-21T15:04:29","guid":{"rendered":"https:\/\/koshalsambada.in\/?p=15029"},"modified":"2026-08-21T15:04:29","modified_gmt":"2026-08-21T15:04:29","slug":"government-orders-google-to-shut-down-hundreds-of-firebase-accounts-after-finding-pattern-of-the-service-being-misused-by-criminals","status":"publish","type":"post","link":"https:\/\/koshalsambada.in\/?p=15029","title":{"rendered":"Government orders Google to shut down hundreds of Firebase accounts after finding pattern of the service being misused by criminals"},"content":{"rendered":"<p><br \/>\n<\/p>\n<div>\n<div class=\"e9jwa\">\n<div class=\"vdo_embedd\">\n<div class=\"GfdvZ\">\n<section class=\"_bIDB  clearfix id-r-component leadmedia undefined undefined  E9tg9 \" style=\"top:0px\">\n<div class=\"_bIDB\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">\n<div class=\"ypVvZ\">\n<div class=\"WGttI\"><img src=\"https:\/\/static.toiimg.com\/thumb\/msid-133403707,imgsize-25368,width-400,height-225,resizemode-4\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg\" alt=\"Government orders Google to shut down hundreds of Firebase accounts after finding pattern of the service being misused by criminals\" title=\"Representative Image\" decoding=\"async\" fetchpriority=\"high\"\/><\/div>\n<\/div>\n<\/div>\n<\/section>\n<\/div><\/div>\n<\/div>\n<p><span class=\"id-r-component br\" data-pos=\"0\"\/>The government has directed <a href=\"https:\/\/gadgetsnow.indiatimes.com\/brands\/Google\" styleobj=\"[object Object]\" class=\"\" commonstate=\"[object Object]\" target=\"\" frmappuse=\"1\" rel=\"noopener\">Google<\/a> to shut down hundreds of accounts on its Firebase web development platform. A report by the news agency Reuters cited government notices and a source familiar with the matter, saying the order came after officials found a pattern of criminals using the service to impersonate major banks and defraud people.<!-- --> The Indian Cyber Crime Coordination Centre (I4C) directed Google to remove at least 57 websites and databases hosted on Firebase in August alone, saying they were being used to distribute malware and steal sensitive financial information.<span class=\"id-r-component br\" data-pos=\"6\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"8\"\/>The notices, reviewed by the news agency, said the websites were being used in scams targeting Android users, including schemes that mimicked banking services and collected financial information from victims&#8217; phones. Google said it has <span class=\"strong\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">&#8220;strict policies prohibiting the use of our services for phishing, malware, or <\/span><span class=\"strong\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">financial fraud<\/span><span class=\"strong\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">&#8220;<\/span> and works with law enforcement, including I4C, to evaluate and act on notices.<span class=\"id-r-component br\" data-pos=\"16\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"18\"\/><\/p>\n<p><h2><b><keyword id=\"38532846\" type=\"Denny\" weightage=\"20\" keywordseo=\"Google-Firebase\" source=\"keywords\">Google Firebase<\/keyword> accounts targeted in India<\/b><\/h2>\n<\/p>\n<p>\u200b<span class=\"id-r-component br\" data-pos=\"21\"\/>The I4C issued at least three notices to Google in August directing the removal of the 57 websites and databases. The notices said the links were involved in malware distribution and the theft of sensitive information. Google can be held liable for the named links if they are not removed within three hours of a notice being issued.<span class=\"id-r-component br\" data-pos=\"23\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"25\"\/>The notices did not suggest that Google or Firebase was responsible for the scams. The source, who has direct knowledge of the matter, said Indian officials had identified a pattern in recent months involving scammers using Firebase, Google&#8217;s app and website development platform.<span class=\"id-r-component br\" data-pos=\"28\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"30\"\/>The source said the number of notices sent to Google over Firebase had reached dozens in recent months, although an exact figure was not provided.<span class=\"id-r-component br\" data-pos=\"32\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"34\"\/>Seven of the websites and databases identified in the August notices were phishing pages created using Firebase that mimicked Indian banks, including State Bank of India, ICICI Bank and Axis Bank. The government agency described the remaining websites as being used to collect data stolen from victims&#8217; phones, including credit card details and one-time passwords.<span class=\"id-r-component br\" data-pos=\"37\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"39\"\/><\/p>\n<p><h2><b><keyword id=\"29894743\" type=\"Denny\" weightage=\"20\" keywordseo=\"Android-malware\" source=\"keywords\">Android malware<\/keyword> used in banking scams<\/b><\/h2>\n<\/p>\n<p>\u200b<span class=\"id-r-component br\" data-pos=\"42\"\/>In an August 17 notice, I4C said scammers were using Android-based malware programs that masqueraded as legitimate banking services and targeted Android users with credit cards.<span class=\"id-r-component br\" data-pos=\"44\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"46\"\/><span class=\"strong\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">&#8220;Android-based malware programs are masquerading as legitimate banking services, specifically targeting Android users with credit cards. Scammers lure victims by promoting offers such as new credit cards, reward redemptions, or credit limit upgrades,&#8221;<\/span> I4C said in the notice seen by Reuters.<span class=\"id-r-component br\" data-pos=\"50\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"52\"\/>The scams involved convincing victims to install applications that appeared to be legitimate banking services. Once installed, the applications could send information from the user&#8217;s phone to a Firebase database controlled by the scammers.<span class=\"id-r-component br\" data-pos=\"54\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"56\"\/>One scheme identified by officials involved PM-KISAN, a federal government programme that provides payments to small farmers. According to a government notice and the source, scam websites promised recipients assistance in claiming their payments and asked them to download an application to redeem the money.<span class=\"id-r-component br\" data-pos=\"59\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"61\"\/>The application then sent user data to the scammers&#8217; Firebase database, allowing them to access information from other applications on the phone and potentially use it to defraud victims.<span class=\"id-r-component br\" data-pos=\"63\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"65\"\/><\/p>\n<p><h2><b>India steps up action against online scams<\/b><\/h2>\n<\/p>\n<p>\u200b<span class=\"id-r-component br\" data-pos=\"68\"\/>The action against Firebase-based scams comes as Indian authorities increase efforts to tackle online financial fraud. Government data shows that Indians lost nearly $2.4 billion in alleged <a href=\"https:\/\/timesofindia.indiatimes.com\/topic\/cyber-fraud\" styleobj=\"[object Object]\" class=\"\" commonstate=\"[object Object]\" frmappuse=\"1\" target=\"_blank\" rel=\"noopener\">cyber fraud<\/a> in 2025.<span class=\"id-r-component br\" data-pos=\"72\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"74\"\/>Indian officials have traditionally targeted scam websites by ordering their removal. <!-- -->The notices reviewed by Reuters indicate that authorities are also examining the infrastructure used to distribute malicious applications and collect information from victims.<span class=\"id-r-component br\" data-pos=\"78\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"80\"\/>The government issued a public advisory in March warning about a form of malware that cybersecurity researchers widely refer to as <span class=\"strong\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">&#8220;Android God Mode&#8221;.<\/span> The term describes malicious software that can give scammers extensive control over victims&#8217; Android phones.<span class=\"id-r-component br\" data-pos=\"86\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"88\"\/><span class=\"strong\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">&#8220;These malicious apps often impersonate trusted services such as banking, government and utility platforms, and trick users into installing them through links,&#8221;<\/span> the advisory said.<span class=\"id-r-component br\" data-pos=\"91\"\/>\u200b<span class=\"id-r-component br\" data-pos=\"93\"\/>Google said it works with law enforcement agencies, including I4C, when evaluating notices involving potential policy violations.<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/timesofindia.indiatimes.com\/technology\/tech-news\/government-orders-google-to-shut-down-hundreds-of-firebase-accounts-after-finding-pattern-of-the-service-being-misused-by-criminals\/articleshow\/133403273.cms\" target=\"_blank\" rel=\"noopener\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The government has directed Google to shut down hundreds of accounts on its Firebase web development platform. A report by the news agency Reuters cited government notices and a source familiar with the matter, saying the order came after officials found a pattern of criminals using the service to impersonate major banks and defraud people. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":15030,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-15029","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-31"],"magazineBlocksPostFeaturedMedia":{"thumbnail":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","medium":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","medium_large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","1536x1536":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","2048x2048":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","blogsy-small":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","blogsy-small-tall":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","blogsy-small-square":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","blogsy-small-masonry":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","blogsy-medium":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","blogsy-medium-masonry":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","blogsy-large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg","blogsy-wide":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg"},"magazineBlocksPostAuthor":{"name":"admin","avatar":"https:\/\/secure.gravatar.com\/avatar\/8709732a479614e7a8aa24d3eb1b239f30dc6d90c61464ed495001e7a469d856?s=96&d=mm&r=g"},"magazineBlocksPostCommentsNumber":"0","magazineBlocksPostExcerpt":"The government has directed Google to shut down hundreds of accounts on its Firebase web development platform. A report by the news agency Reuters cited government notices and a source familiar with the matter, saying the order came after officials found a pattern of criminals using the service to impersonate major banks and defraud people. [&hellip;]","magazineBlocksPostCategories":["\u0b26\u0b47\u0b36 \u0b2c\u0b3f\u0b26\u0b47\u0b36"],"magazineBlocksPostViewCount":1,"magazineBlocksPostReadTime":4,"magazine_blocks_featured_image_url":{"full":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg",400,225,false],"medium":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg",300,169,false],"thumbnail":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/scammers-used-google-firebase-to-mimic-sbi-icici-bank-and-axis-bank-india-tells-google.jpg",150,84,false]},"magazine_blocks_author":{"display_name":"admin","author_link":"https:\/\/koshalsambada.in\/author\/admin"},"magazine_blocks_comment":0,"magazine_blocks_author_image":"https:\/\/secure.gravatar.com\/avatar\/8709732a479614e7a8aa24d3eb1b239f30dc6d90c61464ed495001e7a469d856?s=96&d=mm&r=g","magazine_blocks_category":"<a href=\"#\" class=\"category-link category-link-31\">\u0b26\u0b47\u0b36 \u0b2c\u0b3f\u0b26\u0b47\u0b36<\/a>","_links":{"self":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts\/15029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=15029"}],"version-history":[{"count":0,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts\/15029\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/media\/15030"}],"wp:attachment":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=15029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=15029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=15029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}