India Targets Google’s Firebase in Crackdown on Sophisticated Banking Scams

By Munsif Vengattil

In an aggressive move to curb a surging wave of financial crime, the Indian government has formally directed Google to terminate hundreds of accounts hosted on its Firebase web development platform. Authorities identified a systematic pattern in which cybercriminals utilized the service to host fraudulent websites designed to impersonate major banking institutions and deceive unsuspecting citizens.

The directive comes as law enforcement agencies across India struggle to contain a rampant cybercrime epidemic. According to recent government data, Indians lost approximately $2.4 billion to alleged cyber fraud in 2025 alone, marking a significant escalation in the scope and sophistication of digital threats.

A New Front in Cyber Enforcement

For years, the Indian government’s primary strategy for combating online fraud involved issuing takedown orders for individual scam websites. However, the move against Google’s Firebase signals a shift toward holding major technology infrastructure providers accountable for the misuse of their platforms. By targeting the underlying hosting services rather than just the front-end sites, officials aim to disrupt the tools that allow scammers to scale their operations quickly.

Firebase, a comprehensive development platform owned by Google, provides backend services—including hosting and authentication—that are essential for developers. While intended for legitimate app and web development, the platform’s ease of use and infrastructure reliability have increasingly attracted bad actors looking to create high-fidelity replicas of banking portals to harvest sensitive user credentials.

Escalating Stakes

The scale of the losses reported in 2025 underscores the urgency of the government’s actions. As digital banking adoption has skyrocketed in India, so too has the inventiveness of fraudsters. These scams often involve sophisticated phishing campaigns that bypass traditional security filters, making it difficult for the average user to distinguish between a legitimate banking interface and a malicious clone.

Industry experts have long pointed to the banking scams as a critical threat to national financial stability. As the government continues to put pressure on big tech companies to police their ecosystems more effectively, the tech giant now faces the challenge of implementing more robust monitoring systems to ensure its services are not weaponized by criminal enterprises.

Neither the Indian government nor Google has provided specific details on the timeline for the account closures, but the directive suggests a deepening collaboration between regulators and global tech platforms to stem the tide of digital fraud.