India orders Google to take down 57 fake banking sites on Firebase

India's cyber crime agency, the Indian Cyber Crime Coordination Centre (I4C), has directed Google to remove at least 57 websites and databases hosted on its Firebase platform in August alone, according to government notices reviewed by Reuters. Livemint reports that the sites were used to distribute malware and steal sensitive financial information, including credit card details and one-time passwords. The Economic Times adds that I4C warned Android-based malware programs were masquerading as legitimate banking services to lure victims with offers of new credit cards or reward redemptions.

Fraudsters are increasingly using Firebase, a Google app-development platform, to host phishing pages that mimic major Indian banks such as State Bank of India, ICICI Bank and Axis Bank, Livemint says. Once users download a malicious app, it can access stored financial data and one-time passwords. Livemint also notes a scheme exploiting the PM-KISAN government programme, where victims were promised help claiming payments. Both sources cite government data showing Indians lost nearly $2.4 billion to alleged cyber fraud in 2025.

Google stated it has strict policies against phishing, malware and financial fraud and works with law enforcement to act on notices. The Economic Times notes that under Indian law, Google can be held liable if offending links are not removed within three hours of a notice. The number of notices sent to Google over Firebase has run into dozens in recent months, according to a source cited by both outlets.