India orders removal of Google Firebase accounts after spotting scam pattern

India has instructed Google to remove hundreds of Firebase web development accounts used to impersonate major banks and defraud citizens, according to government notices and a source with knowledge of the matter. Online scams have become one of India's most pressing law enforcement challenges, with citizens losing nearly US$2.4 billion in alleged cyber fraud in 2025.

The Indian Cyber Crime Coordination Centre (I4C) directed the removal of at least 57 websites hosted on Firebase in August, alleging they were utilized to distribute malware and steal sensitive financial information from victims' phones. No responsibility was implied for Google or Firebase in the notices, but Google must comply with the removal within three hours of receiving a notice.

Scammers use Android-based malware, posing as legitimate banking services, to target Android users with credit cards. The total number of notices sent to Google regarding Firebase exceeds dozens in recent months. Firebase, a tool used by millions, has become a preferred platform for scammers, migrating away from previous free tools.

Scam operations have shifted to Firebase due to its generous free options and advanced database features. The government attributes the rise in scams to India's flourishing digital payments ecosystem, with over 242 billion digital transactions processed through the real-time payments system in the year ending March 2026. The fraud typically involves victims downloading apps that mimic trusted banking services, leading to data theft and financial fraud.