Google's AI-Powered Android Security Blocks 10 Billion Scam Messages Monthly, Outperforms iOS

Google's Built-In AI Defenses on Android Now Block 10 Billion Scam Messages a Month

Google on Thursday revealed that the scam defenses built into Android safeguard users around the world from more than 10 billion suspected malicious calls and messages every month. The tech giant also said it has blocked over 100 million suspicious numbers from using Rich Communication Services (RCS), an evolution of the SMS protocol, thereby preventing scams before they could even be sent. In recent years, the company has adopted various safeguards to combat phone call scams and automatically filter known spam using on-device artificial intelligence and move them automatically to the "spam & blocked" folder in the Google Messages app for Android. Earlier this month, Google also globally rolled out safer links in Google Messages, warning users when they attempt to click on any URLs in a message flagged as spam and step them visiting the potentially harmful website, unless the message is marked as "not spam." Google said its analysis of user-submitted reports in August 2025 found employment fraud to be the most prevalent scam category, where individuals searching for work are lured with fake opportunities in order to steal their personal and financial information. Another prominent category relates to financially-motivated scams that revolve around bogus unpaid bills, subscriptions, and fees, as well as fraudulent investment schemes. Also observed to a lesser extent are scams related to package deliveries, government agency impersonation, romance, and technical support scams. In an interesting twist, Google said it has increasingly witnessed scam messages arrive in the form of a group chat with a number of potential victims, as opposed to sending them a direct message. "This shift may have happened because group messages can feel less suspicious to recipients, particularly when a scammer includes a fellow scammer in the group to validate the initial message and make it appear to be a legitimate conversation," Google said. The company's analysis also found that the malicious messages stick to a "distinct daily and weekly schedule," with the activity commencing around 5 a.m. PT in the U.S., before peaking between 8 a.m. and 10 a.m. PT. The highest volume of fraudulent messages is typically sent on Mondays, coinciding with the start of the workday, when recipients are likely to be the busiest and less wary of incoming messages. Some of the common aspects that tie these scams together are that they begin with a "Spray and Pray" approach by casting a wide net in hopes of reeling in a small fraction of victims by inducing a false sense of urgency through lures related to topical events, package delivery notifications, or toll charges. The intention is to rush prospective targets into acting on the message without thinking too much, causing them to click on malicious links that are often shortened using URL shorteners to mask dangerous websites and ultimately steal their information. Alternatively, scams can also embrace what's called as "Bait and Wait," which refers to a more calculated, personalised targeting method where the threat actor establishes rapport with a target over time before going for the kill. Scams like romance baiting (aka pig butchering) fall into this category. "The scammer engages you in a longer conversation, pretending to be a recruiter or old friend," Google explained. "They may even include personal details gathered from public websites like your name or job title, all designed to build trust. The tactics are more patient, aiming to maximize financial loss over time." Regardless of the high-pressure or slow-moving tactic employed, the end goal remains the same: to steal information or money from unsuspecting users, whose details, such as phone numbers, are often procured from dark web marketplaces that sell data stolen from security breaches. The operation is also supported by suppliers that provide the necessary hardware for operating phone and SIM farms that are used to blast smishing messages at scale, Phishing-as-a-Service (PhaaS) kits that deliver a turnkey solution to harvest credentials and financial information and manage the campaigns, and third-party bulk messaging services to distribute the messages themselves. "[The messaging services] are the distribution engine that connects the scammer's infrastructure and target lists to the end victim, delivering the malicious links that lead to the PhaaS-hosted websites," Google said. The search behemoth also described the scam message landscape as highly volatile, where fraudsters seek to purchase SIM cards in bulk from markets that present the fewest obstacles. "While it may appear that waves of scams are moving between countries, this constant churn doesn't mean scammers are physically relocating," it added. "Once enforcement tightens in one area, they simply pivot to another, creating a perpetual cycle of shifting hotspots." "While it may appear that waves of scams are moving between countries, this constant churn doesn't mean scammers are physically relocating," it added. "Once enforcement tightens in one area, they simply pivot to another, creating a perpetual cycle of shifting hotspots."

Google report claims Android is turning into the ultimate scam-fighting machine

Apple's iOS being the gold standard for smartphone security was the long-running belief for a long time, but that tide has started to shift. Google has released a report that, it claims, shows Android as being the far more secure platform for protection against scammers, protecting users against over 10 billion suspected scam calls and messages every single month. Android's protections score well in user polling Google joined forces with YouGov to quiz 5,000 phone users in the US, India, and Brazil, and it resulted in a clear result. Namely, Android users felt their device protected them better against scams, and on the whole, received fewer spam messages. Granted, 5,000 responses isn't a lot where surveys are concerned, but the numbers it's talking about do speak for themselves. Owners of Android phones were 58% less likely to have received a spam text message in the week before taking the survey, with Pixel owners in particular being a stunning 96% less likely to have gotten a spam message than iPhone owners. Owners of Android phones were also 20% more likely to say their device's scam protections were "very effective" or "extremely effective". On the whole, iPhone owners were less likely to be happy with their device's protection, and received more scam messages every week. Google's claims its AI-driven approach is behind its success It wouldn't be a 2025 tech press release without a mention of AI, and so it comes as no surprise that Google has taken the opportunity to puff up its own Google AI. Though, in fairness, it does seem to be doing a good job. A separate report from Counterpoint Research found that Android's AI scam and spam protection far outstripped that offered by Apple in sheer number, with iOS only offering two areas of coverage compared to Android's far larger coverage. It also found that the Google Pixel performed strongest when asked to filter out spam calls and texts, which isn't surprising, since it benefits from having Google's AI-powered Call Screen protecting it. Of course, Apple will doubtless have its own spin and surveys that put its own products on top, but even reading between the lines, it's clear that Google's efforts to reduce spam and scams are working well, and making Android users amongst the most secure around.

Android users 58% less exposed to scam texts than iPhone users: Report

As Cybersecurity Awareness Month concludes, Google has shared how Android helps protect users from one of today's most common digital threats -- mobile scams. Over the past year, AI-assisted fraud has become increasingly sophisticated, resulting in more than $400 billion in global financial losses. Android has long been at the forefront of combating such threats, using Google AI and multi-layered security systems to detect and block scams before they reach users. Each month, Android prevents over 10 billion suspected scam calls and messages, while Google's RCS safety checks continue to block suspicious activity -- including over 100 million numbers in the past month alone. To assess user experiences, Google and YouGov surveyed 5,000 smartphone users across the U.S., India, and Brazil. These results show that users feel more secure and encounter fewer scams on Android devices, particularly on Google Pixel phones. According to a Counterpoint Research evaluation, Android smartphones offer the broadest AI-powered protection, covering ten key areas such as email filtering, browsing safety, and behavioral detection. In contrast, iOS devices were found to use AI in only two protection categories. A separate assessment by Leviathan Security Group compared scam and fraud protection on the iPhone 17, Pixel 10 Pro, Moto Razr+ 2025, and Samsung Galaxy Z Fold 7. The study concluded that Android devices, led by the Pixel 10 Pro, provide the strongest default scam and fraud defense. These independent findings reinforce that Android's AI-based protections are more comprehensive and adaptive than those on competing platforms. Together, these integrated layers form a proactive system designed to identify, block, and neutralize scams across apps, messages, calls, and web interactions. Google continues to enhance Android's built-in security with AI models that learn from global threat patterns, adapting automatically to new scam techniques. With ongoing improvements to scam detection, call screening, and Play Protect, Android users remain protected by intelligent, real-time defenses that evolve with emerging threats.