Govt orders Google to shut down hundreds of Firebase accounts over scam misuse

The Indian government has ordered Google to shut down hundreds of accounts on its Firebase web development platform following evidence that the service was being misused in scams. Officials identified a growing trend of cybercriminals exploiting Firebase to impersonate major banks and defraud users, prompting urgent action. According to government notices obtained by Reuters and confirmed by a source familiar with the case, the Indian Cyber Crime Coordination Centre (I4C) directed Google to remove at least 57 websites and databases hosted on Firebase in August alone. These sites were allegedly being used to distribute malware and siphon sensitive financial information from victims. In August, I4C issued three formal notices to Google, instructing the company to take down the 57 websites and databases linked to fraudulent activities. The notices stated that these links were actively involved in distributing malware and stealing personal and financial data. Under the directives, Google faces potential liability if it fails to remove the specified content within three hours of receiving a notice. However, the notices made clear that neither Google nor Firebase itself was deemed directly responsible for the scams, though the platforms were being exploited by bad actors. A source with direct knowledge of the situation told Reuters that Indian officials had observed a consistent pattern of abuse involving Firebase in recent months. While the exact number of notices sent to Google remained unspecified, the source indicated that the volume had grown significantly over time. Among the 57 targeted websites, seven were identified as phishing pages designed to mimic well-known Indian banks, including State Bank of India, ICICI Bank, and Axis Bank. The remaining websites were reportedly used to gather data stolen from victims' mobile devices, such as credit card details and one-time passwords. According to an August 17 notice reviewed by Reuters, I4C highlighted the increasing sophistication of scams involving Android-based malware. These malicious programs were crafted to appear as legitimate banking services, luring users with promises of new credit cards, reward redemptions, or credit limit upgrades. Victims were enticed into downloading apps that seemed authentic but were designed to transmit sensitive information from their phones to Firebase databases controlled by scammers. One specific scheme uncovered by officials involved the PM-KISAN program, a federal initiative providing financial support to small farmers. Fraudulent websites associated with this program offered assistance in claiming benefits and prompted users to download an application to redeem funds. Once installed, the app transmitted user data to the scammers’ Firebase database, granting access to information from other applications on the device. This allowed perpetrators to potentially exploit the data for further financial fraud. Indian authorities have intensified their efforts to combat online financial fraud in recent years, particularly as cybercrime continues to evolve. Government data indicates that Indians suffered losses amounting to nearly $2.4 billion due to alleged cyber fraud in 2025. Traditionally, officials have focused on removing scam websites, but recent actions suggest a broader strategy aimed at dismantling the infrastructure used to distribute malicious software and harvest victim data. The notices reviewed by Reuters show that Indian authorities are increasingly scrutinizing the technical frameworks behind these crimes, seeking to disrupt operations at their core rather than merely addressing surface-level threats. Authorities continue to monitor the effectiveness of measures taken against Firebase-linked scams, while also exploring additional avenues to prevent future exploitation of similar platforms. As part of this effort, collaboration with tech companies like Google remains critical, ensuring that security protocols are enforced swiftly and effectively. The latest developments underscore the ongoing challenge faced by regulators in keeping pace with rapidly evolving digital threats.