India directs Google to remove 57 Firebase sites in August scam crackdown

August 21, 2026 at 01:09 PM2 min

This digest was compiled by AI from multiple sources — links to the originals are below.

India has directed Google to shut down hundreds of Firebase accounts after detecting a pattern of scammers using the platform to impersonate banks. The Indian Cyber Crime Coordination Centre directed Google to remove at least 57 Firebase-hosted websites and databases in August alone. Indians lost nearly $2.4 billion in cyber fraud in 2025, according to government data.

Key Facts

India sent three notices to Google in August over a pattern of Firebase misuse.
The Indian Cyber Crime Coordination Centre directed at least 57 Firebase-hosted websites and databases be taken down in August alone.
Indians lost nearly $2.4 billion in alleged cyber fraud in 2025, according to government data.
Google said it has strict policies prohibiting the use of its services for phishing, malware, or financial fraud and works with the I4C.
Scam operators have been migrating to Firebase from other free tools since last year, according to the government assessment.

The Firebase Scam Pattern

Indian officials noticed a pattern of scammers using Google's Firebase tool to impersonate major banks and defraud people. The Indian Cyber Crime Coordination Centre said Android-based malware programs were masquerading as legitimate banking services and specifically targeting Android users with credit cards. Scammers lured victims by promoting offers such as new credit cards, reward redemptions, or credit limit upgrades, according to an August 17 notice to Google. There was no suggestion in the notices that Google or Firebase were responsible, but Google can be held liable for the named links if they are not taken down within three hours of the notice being issued. Scam operators have been migrating to Firebase from other free tools since last year, drawn by free options and more capable database features, the Indian government has assessed.

Government Directives

India has directed Google to shut down hundreds of accounts on its Firebase web development platform after finding the scam pattern, according to government notices and a source familiar with the matter. The I4C sent three notices to Google in August alone, directing that at least 57 websites and databases hosted on Firebase be taken down for distributing malware and stealing sensitive financial information. Google said in a statement that it has strict policies prohibiting the use of its services for phishing, malware, or financial fraud and works with law enforcement, including the I4C, to evaluate and act on notices. Representatives for India's home ministry, which controls the I4C, did not respond to questions.

Cyber Fraud Scale

Indians lost nearly $2.4 billion in alleged cyber fraud in 2025, according to government data. For years, the Indian government has ordered the removal of scam websites. Scammers are increasingly targeting India's booming digital payments ecosystem. Firebase is used by millions of developers worldwide and is part of Google's cloud business, which generated nearly $25 billion in revenue in the most recent quarter.