India orders removal of Google Firebase accounts after spotting scam pattern

India has ordered Google to remove hundreds of accounts from its Firebase web development platform following the discovery of a scam pattern, according to government notices and a source familiar with the situation. The Indian government has been targeting cybercriminals, with Indians losing nearly $2.4 billion in alleged cyber fraud in 2025.

Indian officials have noticed that scammers are increasingly using Google's Firebase tool, which has millions of users worldwide, to distribute malware and steal sensitive financial information from victims' phones. The Indian Cyber Crime Coordination Centre (I4C) directed at least 57 websites and databases hosted on Firebase to be taken down in August alone, alleging they were used for malware distribution and sensitive data theft.

While no blame was placed on Google or Firebase, the company risks liability if it fails to remove the specified links within three hours of the notice. Android malware programs are posing as legitimate banking services, targeting Android users with credit cards. Scammers lure victims with offers like new credit cards, reward redemptions, or credit limit upgrades.

Alphabet-owned Google stated that it has strict policies against phishing, malware, and financial fraud, working with law enforcement to evaluate and act on notices.