India orders removal of Firebase accounts after bank-fraud networks found

An Indian agency ordered Google to remove hundreds of accounts after finding Firebase repeatedly used for sites posing as banks, malicious Android apps and the collection of stolen financial data, it was reported on August 21, 2026. Reports covered three August notices and examined at least 57 sites and databases.

Ordinary backend platforms can be folded into the fraud distribution chain, so fast abuse response is needed.

Tenant reputation, unusual app distribution, credential collection and takedown SLAs should be monitored. The total number of accounts and the losses were not confirmed in public sources.