Google Asked to Remove Firebase Links Linked to Cyber Fraud in India
India has ordered Google to erase hundreds of accounts and links hosted on Firebase that are suspected to be engaged in cyber frauds and financial crime. Law enforcement discovered fraudsters posing as banks who spread malware and stole sensitive financial information through dangerous connections.
Hundreds of accounts and links hosted on Google's Firebase platform have been directed to be removed by the Indian government. The move comes after authorities found that criminals were utilising the platform to pose as banks in order to defraud unsuspecting customers.
The move is in response to the substantial financial burden that internet fraud is causing in India. Users lost roughly $2.4 billion in 2025 due to claimed internet frauds, according to government statistics included in the report. But recently, scammers have been using genuine cloud and app-development infrastructure to store illicit content, according to authorities.
Indian Authorities Putting Firm Scanner on Google
In August alone, the Indian Cyber Crime Coordination Centre (ICRC) directed the deletion of no less than fifty-seven websites and databases hosted on Firebase. They were being utilised to disseminate malware and steal private financial data, according to the Centre. The notifications were submitted to Google as part of a broader effort to combat fraudulent internet activities. The use of Android malware posing as real banking services to target credit card customers was brought to light in one of the alerts. Allegedly, the scammers enticed victims with offers of new credit cards, redemption of reward points, and boosts to their credit limits, but then they sent them to malicious links.
The problem is not with Firebase per se, but with the abuse of its infrastructure. Firebase is a popular choice for developers looking to host websites and build applications. In addition, its size, accessibility, and trustworthy infrastructure appeal to both genuine users and con artists seeking an apparently trustworthy online shelter. Neither Google nor Firebase has been implicated in any wrongdoing by the authorities. On the other hand, according to reports, the notifications highlight regulations that could put Google in a sticky situation if the authorities do not remove the links that have been notified within three hours.
Responses from the Google
Google has stated that it has stringent measures in place to combat financial fraud, virus dissemination, and phishing. In addition, the IT company has stated that it collaborates with law enforcement organisations, such as I4C, to evaluate and respond to legitimate requests. Cybercriminals aren't always constructing questionable infrastructure from scratch, and this new development highlights a rising problem for regulators.
Scammers, on the other hand, are finding more and more ways to ride on the jackets of genuine digital tools and services. Hence, transforming platforms that were meant to assist businesses and developers in creating online products into breeding grounds for fraud. Because even the most trusted cloud services can be compromised, this makes the seemingly trustworthy link a less and less dependable indicator of safety for Indian consumers.
