India Orders Google to Remove Hundreds of Firebase Accounts Amid Scam Pattern

Indian authorities have instructed Google to disable hundreds of accounts on its Firebase web development platform, citing a pattern of misuse by criminals. These scammers have been exploiting the service to impersonate major banks and defraud unsuspecting individuals.

Online scams pose a significant law enforcement challenge in India. Government data reveals that Indians lost approximately $2.4 billion to alleged cyber fraud in 2025 alone. In response, officials have increasingly targeted scammers by ordering the removal of their websites.

Recently, Indian officials observed a "pattern" where scammers are leveraging Google's Firebase, a widely used app and website development tool. The Indian Cyber Crime Coordination Centre (I4C) issued directives in August for the removal of at least 57 websites and databases hosted on Firebase. These platforms were reportedly used to distribute malware and illicitly obtain sensitive financial information from victims' phones.

“

Android-based malware programs are masquerading as legitimate banking services, specifically targeting Android users with credit cards. Scammers lure victims by promoting offers such as new credit cards, reward redemptions, or credit limit upgrades.

Notices sent to Google by the I4C specified that "Android-based malware programs are masquerading as legitimate banking services, specifically targeting Android users with credit cards." Scammers reportedly lure victims with enticing offers such as new credit cards, reward redemptions, or credit limit upgrades.

Google, owned by Alphabet, stated that it maintains strict policies against the use of its services for phishing, malware, or financial fraud and collaborates with law enforcement agencies like the I4C. The company can be held liable for listed links if they are not removed within three hours of a notice being issued. Scam operators have reportedly been migrating to Firebase due to its generous free options and robust database features, especially as they increasingly target India's rapidly growing digital payments ecosystem.

“

strict policies prohibiting the use of our services for phishing, malware, or financial fraud and works with law enforcement, including I4C, to evaluate and act on notices.