India Orders Google to Remove Firebase Accounts Amid Crackdown on Digital Fraud
The Indian Cyber Crime Coordination Centre (I4C), operating under the Ministry of Home Affairs, has directed Google to shut down hundreds of accounts on its Firebase web development platform, according to Reuters reporting published in August 2026. Fraudsters have heavily misused the service to masquerade as major Indian banks, stealing sensitive financial details from citizens in a mounting regulatory crisis.
Online financial theft has escalated into one of the country’s most formidable law enforcement challenges. Government figures cited by Reuters reveal that Indian citizens lost nearly $2.4 billion to cyber fraud in 2025 alone. To combat this expanding fiscal drain, federal authorities ordered the removal of at least 57 malicious websites and databases hosted on Google’s Firebase infrastructure during August.
How Scammers Exploit Google Firebase Infrastructure
Firebase is a massively popular Google app development platform utilized by millions of legitimate developers globally to build applications and host websites. However, threat actors have migrated to the service because of its capable database features and generous free options, according to an official source cited by Reuters. The platform itself is entirely legitimate, and government notices stress that Google or Firebase is not responsible for the fraudulent activity. The vulnerability emerges when criminals abuse legitimate online infrastructure to host phishing pages.
Seven of the targeted Firebase pages explicitly mimicked leading financial institutions, including State Bank of India, ICICI Bank, and Axis Bank. Scammers lure unsuspecting targets through fake offers promising new credit cards, reward redemptions, or credit-limit increases. Once victims interact with these malicious links, mobile phones become infected with malware designed to swipe credit card details and one-time passwords (OTPs).
Beyond traditional phishing, bad actors have weaponized government welfare initiatives. Federal notices reviewed by Reuters detail schemes exploiting the PM-KISAN program, which disburses income support to small farmers. Scammers construct deceptive portals promising assistance in claiming government payments, tricking users into installing malicious apps that secretly upload personal data to hacker-controlled databases. Cybersecurity researchers designate these advanced intrusions as “Android God Mode,” a capability granting criminals near-total control over compromised mobile devices.
Regulatory Crackdown and Corporate Compliance Realities
The aggressive federal intervention aligns with the Reserve Bank of India’s broader fraud-prevention push, which spans three core areas of digital payment security.
Google stated it maintains strict policies against fraud and is actively working with law enforcement to act on incoming government notices, according to Reuters.