NEW DELHI — In a major regulatory enforcement action against cybercrime networks, the Central government has issued formal take-down directives to tech giant Google. The orders mandate the immediate deletion of multiple Google Firebase web development accounts and databases that were actively impersonating top public and private-sector banks to defraud Indian citizens.

The formal notices were dispatched by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs (MHA). Investigators identified a structured malicious ecosystem where rogue developers hosted mobile application clones and database endpoints mimicking major retail banks. Scammers utilized these pages to trick account holders through fraudulent reward-point redemption portals, credit-card limit upgrade schemes, and fake government scheme distribution links.

Technical Exploitation of Firebase Cloud Infrastructure

According to regulatory filings and intelligence reports, 57 specific Firebase web addresses and backend databases were flagged in August. At least seven of these were full-fledged phishing portals mirroring the official digital interfaces of premier institutions, including State Bank of India (SBI), ICICI Bank, and Axis Bank.

The remaining databases functioned as backend data collection sinks. Once victims downloaded compromised Android applications (.APK files) distributed via malicious SMS links, the apps quietly scraped sensitive phone logs, extracted two-factor authentication One-Time Passwords (OTPs), and harvested credit card CVVs, funneling the stolen credentials straight into the scammers' Firebase databases.

Responding to the governmental directive, a Google spokesperson reaffirmed the company's anti-fraud stance:

Mounting Financial Losses & RBI Fraud Mitigation Norms

The intervention highlights the rising scale of digital transaction fraud across the country. Official government metrics show that citizens lost ₹22,500 crore to digital and cyber fraud in 2025 alone, pushing total financial fraud losses past ₹52,000 crore over the last five years.

To shield retail account holders, the Reserve Bank of India (RBI) has instituted comprehensive digital payment security guidelines and updated multi-factor authentication requirements. Furthermore, the central bank established a customer compensation framework for small-value digital frauds. Eligible victims losing up to ₹50,000 in fraudulent electronic transactions can receive a one-time relief payout covering 85 percent of their net loss, capped at ₹25,000, provided the incident is reported to official channels within five calendar days.