Android pushes scam defense into calls and messages: bank calls verified in real time, over 3 million spoofed calls blocked
Synopsis
Android is rolling out a set of new scam defenses: an Enhanced protection mode in Google Messages that uses cloud Gemini models to judge an unknown sender's intent, on-device Gemini Nano that weighs real-time web signals to decide whether an unfamiliar link is trustworthy, and a real-time check with banking apps that hangs up and warns users about calls failing to verify as bank-initiated. Previously these protections were limited to select devices, select countries, or devices with Android Advanced Protection enabled, and chat notification scam alerts covered only Pixel. Google says that since launching in June, more than 3 million spoofed calls from Banco do Brasil and Itaú Unibanco alone have been blocked.
Interpretation
The new Android defenses extend scam detection from message content to call origin and link trustworthiness, and bring some capabilities to more devices. Chat notification scam alerts were previously available only on Pixel, and built-in checkpoints for unfamiliar links were limited to devices in select countries or with Android Advanced Protection enabled. Google says it is partnering with Android device makers to bring this on-device protection to hundreds of millions of additional users later this year.
Enhanced protection mode splits the work between a cloud model and an on-device model, with the cloud judging conversational intent and the device judging link trustworthiness. The existing Scam Detection relied mainly on on-device detection, which struggles with slow-burn conversations and newly registered websites that have not been cataloged. The cloud analysis runs in Private AI Compute, where data is encrypted and processed in a dedicated space; on-device Gemini Nano evaluates unfamiliar links using real-time web signals.
Android checks incoming calls in real time with banking apps to verify whether the bank actually initiated the call, and hangs up and alerts the user when a caller claiming to be a bank fails that check. Users previously had to judge the caller from caller ID alone, while number spoofing makes a scam call look like an official bank line. Google says that since launching in June, more than 3 million spoofed calls from Banco do Brasil and Itaú Unibanco alone have been blocked, by automatically ending calls spoofing inbound-only official bank numbers.
Perspective
The capabilities target Android phone users; Enhanced protection mode is an opt-in setting rolling out over the coming weeks, and the expanded chat notification scam alerts are planned for more device makers' phones later this year. Call verification requires banking app cooperation and is already in place with institutions including Banco do Brasil, Itaú Unibanco and Revolut; Google says it will keep adding partners and has published developer documentation for banks and financial apps.
Google states that Android devices provide the highest level of built-in scam and fraud protection, a conclusion drawn from an evaluation by Leviathan Security Group that Google commissioned. A Google and YouGov survey of 4,500 smartphone users found most respondents had never fallen victim to a mobile scam and considered their device at least moderately effective, but experiences varied significantly by device type. Enhanced protection mode and the notification alert expansion are both described as arriving in the coming weeks or later this year, so actual coverage is not yet determined.