Google's new Android security features auto-block banking scams and protect user privacy

Google Introduces Verified Financial Calls to Combat Banking Scams

Google has announced a major expansion of Android security measures at the Android Show I/O Edition, with verified financial calls emerging as the centerpiece of its enhanced scam protection strategy1

1

. The new anti-spoofing feature addresses a critical vulnerability that has led to annual losses exceeding 850 million euros, approximately $997 million, according to Europol data from October1

1

. When users receive calls appearing to be from their bank, Android now queries the installed banking app in real time to verify legitimacy. If the app confirms no one from the financial institution is actually calling, the phone automatically disconnects2

2

.

The system works by leveraging the relationship between Android devices and banking applications. Banks can also designate certain numbers as inbound-only, meaning they never initiate outbound calls to customers. Any call spoofing from these designated numbers triggers automatic termination1

1

. Rolling out to devices with Android 11 or higher in the coming weeks, the feature initially supports Brazil-based banks Revolut, Itaú, and Nubank, with Google promising expanded bank partnerships later this year1

1

.

Live Threat Detection Expands with On-Device AI Capabilities

Launched in 2024, Live Threat Detection is receiving significant upgrades that extend its malicious app detection capabilities1

1

. The on-device AI tool now monitors for apps that silently forward SMS messages or use accessibility permissions to display hidden content on screens2

2

. A new dynamic signal monitoring capability watches in real time for apps that change or hide their icons before launching in the background, a common malware tactic. This enhancement allows Google to push updated threat rules to devices as new attack patterns emerge, arriving with Android 17 on select devices in the second half of the year2

2

.

Android Will Hide One-Time Passwords from Rogue Software

Scammers frequently attempt to intercept one-time passwords from text messages to access personal accounts, a vulnerability Google is now addressing directly. Android will automatically hide one-time passwords for three hours from most apps, ensuring these security codes remain safe from unauthorized access1

1

. This protection targets malicious apps with SMS access that previously could intercept active OTPs2

2

. The measure adds another layer of defense against financial fraud attempts that exploit SMS-based authentication systems.

Advanced Protection Mode Gets Stronger with Android 17

For high-risk users requiring maximum security, Advanced Protection is receiving substantial upgrades with Android 17. The feature already warns users about apps that change or hide their icons, a potential indicator of malicious intent. With the upcoming release, Advanced Protection will remove access to the accessibility service for all apps not explicitly labeled as accessibility tools1

1

. Additional restrictions include disabling device-to-device unlocking, Chrome WebGPU support, and adding scam detection for chat notifications2

2

.

Biometrics and Location Sharing Enhance User Privacy

Google's Find Hub currently helps users track lost or stolen phones and lock them remotely, but devices can still be unlocked by anyone who knows the passcode or PIN. Android 17 will introduce a requirement for biometric authentication, such as facial or fingerprint scans, preventing thieves who discover passcodes from accessing devices1

1

. A new location sharing button in Android 17 will let users share precise location data only for specific tasks while an app is open, addressing privacy concerns around navigation apps that need exact whereabouts without granting permanent access1

1

.

Chrome on Android will gain the ability to scan APK files for known malware before downloads complete, available to users with Safe Browsing enabled2

2

. Most of these protections will operate automatically in the background, meaning Android users will be safeguarded against a wide range of attacks without changing settings. "The updates we've shared today represent a significant leap forward in our journey toward a world of verifiable, transparent trust," Google stated in a blog post, emphasizing that these improvements ensure Android remains the most secure platform1

1

.