India orders Google to remove Firebase accounts linked to bank fraud

The Indian Cyber Crime Coordination Centre (I4C) has ordered Google to shut down hundreds of accounts on its Firebase platform and remove at least 57 websites and databases used by scammers. Authorities identified these resources as tools for running phishing pages and distributing malware designed to steal sensitive financial information, including credit card details and one-time passwords (OTPs).

Criminals allegedly used the Firebase-hosted sites to impersonate major financial institutions such as State Bank of India, ICICI Bank, and Axis Bank, as well as the PM-KISAN farmer-payment program. Some schemes involved camouflaged Android malware that appeared to be legitimate banking apps offering rewards or higher credit limits. Once installed, the software would forward stolen data to databases controlled by the scammers.

The crackdown comes as India faces significant economic losses due to digital crime, with government data indicating nearly $2.4 billion in alleged cyber-fraud losses in 2025. The move signals a shift in strategy toward targeting the digital infrastructure used to host fraudulent activities rather than just individual scam websites.