Our Bureau
New Delhi
Indian authorities have directed Google to shut down hundreds of accounts on its Firebase platform after identifying a growing pattern of cybercriminals using the service to impersonate banks, distribute malware and steal sensitive financial information, according to government notices.
The Indian Cyber Crime Coordination Centre (I4C) ordered the removal of at least 57 websites and databases hosted on Firebase in August alone. Officials said the links were being used to distribute malicious software and collect information such as credit-card details and one-time passwords from victims. Seven of the flagged websites reportedly mimicked major Indian banks, including State Bank of India, ICICI Bank and Axis Bank.
The notices highlighted a growing misuse of Android-based malware disguised as legitimate banking applications. According to an August 17 notice, scammers lured users with offers such as new credit cards, reward redemptions and credit-limit increases before persuading them to install fraudulent applications. The apps could then transmit information from victims’ phones to databases controlled by the scammers.
One identified scheme allegedly exploited PM-KISAN, with fake websites promising beneficiaries assistance in claiming government payments and directing them to download an application. Once installed, the application could transmit users’ data to the scammers’ Firebase database.
Google said it has strict policies against phishing, malware and financial fraud and works with law-enforcement agencies, including I4C, to assess and act on removal requests. The government notices did not suggest that Google or Firebase was responsible for the scams.
The action comes amid rising cyber fraud in India. Government data cited in the report shows Indians lost nearly $2.4 billion to alleged cyber fraud in 2025.