Punjab Newsline | Chandigarh

Google has removed several Firebase accounts and associated websites allegedly being used by cybercriminals to create fake websites and mobile applications impersonating government and private banks and other financial institutions.

The action came after the Central Government flagged the fraudulent platforms, which were allegedly being used to lure people with fake offers related to credit card reward points, credit limit increases and other banking services.

I4C Flags Fraudulent Websites

Indian Cyber Crime Coordination Centre (I4C), under the Ministry of Home Affairs, issued a notice to Google highlighting the websites and databases allegedly created to mimic the official platforms of major banks.

According to sources, the fraudulent websites were hosted using Google's Firebase service. Cybercriminals allegedly exploited the platform to create and operate fake banking websites and applications designed to appear legitimate.

Customers Targeted Through Fake Offers

The fraudsters allegedly contacted or redirected users to these platforms with attractive offers, including the redemption of credit card reward points and increases in credit card limits.

Users were then asked to enter sensitive information such as login credentials, banking details, card information and other personal data. The websites were reportedly designed to closely resemble genuine banking platforms, making it easier for unsuspecting customers to fall into the trap.

Reuters Report Highlighted Firebase Misuse

The alleged misuse of Firebase came to wider attention following a Reuters report that highlighted how Google's cloud infrastructure and Firebase services were being used in fraudulent activities.

Firebase is a legitimate development platform widely used to build mobile applications and websites and manage their backend services. However, cybercriminals allegedly exploited its infrastructure to create fake banking platforms.

Google Says Fraudulent Use Is Against Its Policies

Responding to the government's notice, a Google spokesperson said the company's policies prohibit the use of its services for phishing, malware and financial fraud.

Google said it is committed to protecting users and works with law enforcement agencies and government departments, including I4C in India. The company also said government notices are reviewed through established procedures and appropriate action is taken when violations are identified.

Cyber Fraud Causes Rs 52,000 Crore Loss

The action comes amid a sharp rise in cyber and digital fraud in India. Government data shows that cyber fraud has caused losses of nearly Rs 52,000 crore over the past five years.

In 2025 alone, losses from digital and cyber fraud were around Rs 22,500 crore, while nearly 28 lakh complaints related to cyber fraud were registered during the year.

The latest action highlights growing efforts by authorities and technology companies to identify and dismantle the digital infrastructure being exploited by cybercriminals to impersonate banks and target customers.