India Orders Google Remove Firebase Accounts Impersonating Banks

India has directed Google to shut down hundreds of Firebase accounts after investigators found criminals were using the platform to impersonate major banks and defraud users, part of a broader crackdown on online scams tied to India’s surge in digital payments. The Indian Cyber Crime Coordination Centre says at least 57 websites hosted on Firebase were targeted for takedowns in August for distributing malware and stealing financial data, with Google potentially liable for the links if they are not removed within three hours. Officials note a pattern of Android-based banking scams leveraging Firebase’s free, large-scale tools amid India’s booming digital payments market, which includes hundreds of billions of annual transactions and a reported $2.4 billion in cyber fraud losses in 2025. Google has stated it enforces strict policies against phishing, malware, and financial fraud and works with law enforcement, but the notices emphasize that responsibility for takedowns lies with platform operators and the clock is running on action. The coordinated action reflects India’s ongoing efforts to curb cybercrime as the country’s digital economy expands, with authorities citing the scale of fraud and the allure of Firebase’s reach to explain the focus on removing malicious links. The government’s move underscores the tension between rapid, open online services and the need to prevent financial fraud, even as Google reiterates its commitment to safety and compliance with local authorities.