India Orders Google to Remove Firebase Accounts Amid Scam Concerns
India has directed Google to shut down hundreds of accounts on its Firebase platform after authorities identified a pattern of scammers using the service to impersonate major banks and steal sensitive financial information. The Indian Cyber Crime Coordination Centre (I4C) issued at least three notices to Google in August, seeking the removal of 57 websites and databases hosted on Firebase.
According to the notices reviewed by Reuters, several phishing websites mimicked banks including State Bank of India, ICICI Bank and Axis Bank. Other sites were allegedly used to distribute Android malware and collect victims’ credit card details, one-time passwords and other sensitive data. Scammers also reportedly used fake offers involving credit cards, rewards and credit-limit upgrades to trick users into installing malicious applications.
Authorities said scammers have increasingly shifted to Firebase from other free development platforms, taking advantage of its features and free options. The move comes amid rising cyber fraud in India, where nearly $2.4 billion was lost to alleged cybercrime in 2025. Google said it has strict policies against phishing, malware and financial fraud and works with law enforcement agencies to review and act on removal requests.
