The Indian government has asked Google to close hundreds of accounts on the Firebase platform after fraudsters stole information from a fake banking website.
Google Firebase account closed.
Cases of online fraud are constantly in the news. Now, the scope of action against cybercriminals is expanding to the platforms used to perpetrate these frauds. The Indian government has directed Google to close hundreds of accounts on its Firebase web development platform.
This move was taken after cases were identified where criminals were allegedly creating websites and services imitating major banks to obtain financial information from people. According to a Reuters report, Indian authorities ordered the removal of at least 57 websites and databases hosted on Firebase in August alone. These were allegedly being used to spread malware and steal people's sensitive financial information.
What is the government's major action against Firebase?
The Indian Cyber Crime Coordination Centre (I4C) sent at least three notices to Google in August. These notices ordered the removal of 57 websites and databases. According to officials, these links were being used to spread malware and steal sensitive information. According to the notices, if Google does not remove any of the mentioned links within three hours of receiving the notice, action could be taken against it. However, these notices do not hold Google or Firebase responsible for these cyber frauds.
How did they cheat by creating a fake website?
Of the websites and databases identified in August, seven were phishing websites built on Firebase. These websites imitated names of Indian banks, including major ones like SBI, ICICI Bank, and Axis Bank. The remaining websites and databases were being used to store information stolen from victims' phones, including sensitive information like credit card information and one-time passwords (OTPs).
This is how Android users were targeted.
According to an I4C notice dated August 17, fraudsters were using Android malware that disguised itself as a genuine banking service. People were lured with offers like new credit cards, rewards, and credit limit increases. They were then asked to download an app that looked like a banking app. Once the app was installed, information from the phone could be sent to a Firebase database controlled by the fraudsters. In one case, the name of the PM-KISAN scheme was also used. People were asked to download the app to avail payment benefits. The app could then access information from other apps on the phone.
How is action against cyber fraud increasing in India?
Amid these Firebase-related incidents, India is stepping up its crackdown on online financial fraud. According to government data, Indians lost approximately $2.4 billion in alleged cyber fraud in 2025. In March, the government issued an advisory regarding malware, which cybersecurity researchers call Android God Mode. This malware allows fraudsters to gain significant control over Android phones. Google has stated that it works with law enforcement agencies, including I4C, to investigate and take action on such cases.
