Google Android AI Protects Against Scam Calls, Phishing, OTP Theft

Key Takeaways

• Google has rolled out a comprehensive suite of AI-powered security enhancements for Android, targeting sophisticated mobile scams.
• The new protections aim to prevent users from engaging with fraudulent activities across calls, messages, web links, and screen-sharing sessions.
• Key features include Enhanced Protection in Google Messages, real-time link analysis with Gemini Nano, and safeguards against screen-sharing and call-forwarding exploits.
• These updates are designed to counter the growing threat of social engineering, phishing, and OTP theft, leveraging on-device and cloud AI.

Google Bolsters Android Security with Advanced AI Against Scams

Google has unveiled a significant upgrade to Android’s security infrastructure, introducing a new array of protections engineered to combat pervasive mobile scams. These enhancements are designed to safeguard users across multiple vectors, including fraudulent calls, deceptive text messages, malicious chat app interactions, dangerous web links, and schemes targeting account verification codes.

This strategic update arrives as cybercriminals increasingly employ sophisticated tactics, such as spoofed phone numbers, fabricated bank alerts, convincing phishing pages, remote screen-sharing manipulation, and even AI-generated voices, to defraud individuals of their money or steal sensitive login credentials.

Google has previously stated that its existing AI-driven scam detection capabilities within “Phone by Google” and “Google Messages” successfully flag over five million suspected scam calls and texts each month. The latest round of protections builds on this foundation, shifting focus to proactively prevent users from reaching the critical, most dangerous stages of a scam, rather than merely blocking known malicious links or spam numbers.

The updated Android system will integrate a multifaceted approach, combining on-device artificial intelligence, cloud-based analytical processes, robust privacy protections, and real-time behavioral checks. This layered defense aims to identify suspicious activities before victims inadvertently disclose passwords, payment information, or critical one-time passcodes.

Enhanced Messaging Security with Private AI

A notable addition is an opt-in “Enhanced Protection” mode within Google Messages. Google announced that this setting will be progressively rolled out in the coming weeks, activating more stringent protections specifically tailored for complex messaging scams.

This includes an expanded “Scam Detection” feature that utilizes Google’s “Private AI Compute” platform. This platform allows Gemini models to analyze the contextual nuances of conversations with unknown senders, all within an encrypted environment inaccessible to Google employees. The objective is to detect slow-burning social engineering scams where fraudsters cultivate trust over a series of messages before introducing a fraudulent request or malicious link.

Enhanced Protection will also fortify link verification within Google Messages. Scammers frequently generate novel phishing domains that have not yet been indexed by traditional threat blocklists, diminishing the efficacy of standard URL filtering. Google’s Gemini Nano, an on-device AI model, will now merge real-time web intelligence with local analysis to evaluate unfamiliar links before a user clicks them.

Furthermore, Android will present redesigned warning prompts for links originating from numbers not stored in a user’s contacts. This serves as an additional security checkpoint before users navigate to a potentially malicious phishing page.

Google is also extending its scam alerts, previously a Pixel-exclusive feature, to a broader Android user base. “Scam Detection” in chat notifications will now be able to flag suspicious messages from supported chat applications directly within the notification panel, providing users with a warning before they even open the message. Google is collaborating with Android device manufacturers to deploy this on-device capability to hundreds of millions of additional users later this year.

Protecting Against Call-Based Social Engineering

The recent Google update also specifically targets phone-based social engineering schemes, particularly those where criminals manipulate victims into sharing their screen or redirecting incoming calls.

Android will now automatically obscure sensitive login fields and payment screens during active screen-sharing sessions conducted via Chrome and Android WebView. This protection is designed to prevent fraudsters from viewing passwords, credit card details, and other confidential information while deceptively guiding a victim through a fake support or banking procedure.

Another crucial safeguard addresses the growing threat of One-Time Passcode (OTP) theft facilitated by call forwarding. Threat actors may trick users into entering a call-forwarding code, thereby rerouting incoming calls that contain verification codes to a number controlled by the criminal. Android will now prevent applications from silently enabling call forwarding in the background and will issue warnings to users before any manually entered MMI (Man-Machine Interface) forwarding code takes effect.

Google is also expanding its “verified financial calls” feature, developed in collaboration with banks such as Banco do Brasil and Itaú Unibanco. This system verifies whether a call purportedly from a bank was genuinely initiated by the bank’s official application. If the verification fails, Android can terminate the call and alert the user. Google said the feature has successfully blocked over three million spoofed calls involving these two Brazilian banks since its launch in June.

This announcement underscores a significant evolution in mobile security, moving beyond basic spam filtering towards a more sophisticated, behavior-based approach to fraud prevention. While these advanced protections offer substantial defense, users are still advised to exercise caution and avoid sharing passwords, credit card information, recovery codes, or OTPs over calls and messages, even when the caller or sender appears legitimate.

What You Should Do

• Enable Enhanced Protection: Look for and activate the new “Enhanced Protection” mode in Google Messages once it becomes available on your device.
• Review Link Warnings: Pay close attention to any warnings displayed for links, especially those from unsaved contacts. Avoid clicking suspicious links.
• Be Wary of Screen Sharing Requests: Never share your screen with unknown individuals or during unsolicited support calls. Android’s new features will help, but vigilance is key.
• Verify Call Forwarding Settings: Regularly check your phone’s call forwarding settings and be cautious about entering any MMI codes requested by unknown parties.
• Exercise General Caution: Always be skeptical of unsolicited requests for personal or financial information, even if they appear to come from legitimate sources. Banks and reputable organizations will rarely ask for sensitive details via unverified calls or messages.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.