Google rolls out AI-powered scam defenses for Android users

New protections include cloud-based Gemini analysis and on-device checks for messaging and call forwarding abuse

By LineZotpaper
Published
Read Time2 min
Google has announced a new suite of AI-powered defenses for Android devices, including cloud-based Gemini analysis in Google Messages and expanded scam detection across the platform, as mobile scams grow increasingly sophisticated. The features are rolling out now to eligible devices.

Google is introducing advanced AI protections against scam messages and call-forwarding abuse on Android, the company announced this week. The new measures target sophisticated mobile scams that use spoofed numbers, fake bank alerts and voice cloning.

"Mobile scams have evolved far beyond basic robocalls and phishing texts, turning into sophisticated operations that use spoofed numbers, fake bank alerts, and AI voice cloning," Google said in a blog post. "With scams growing harder to spot, it's nearly impossible for users to catch every red flag themselves."

The centerpiece of the update is a new cloud-based Gemini-backed analysis system in Google Messages. It reviews conversations with unknown senders within an encrypted Private AI Compute environment for signs of fraud. Additionally, on-device Gemini Nano checks unfamiliar links using real-time web signals and provides clearer warnings before opening links from unsaved numbers. The cloud protections are disabled by default and users can opt in.

Google says its existing scam detection flags more than five million suspected scam calls and texts each month, and the new features are expected to catch more threats.

Other improvements include expanding on-device scam detection in chat notifications — previously limited to Pixel devices — to more Android devices through partners later this year. Android's sensitive-information masking now covers Chrome and Android WebView, hiding login and payment screens during screen sharing. The system will also block apps from silently enabling call forwarding and warn users before manually entered forwarding codes take effect.

Google is expanding its verified bank calls system, introduced earlier this year, to include more financial institutions. The system checks whether an incoming call originates from a real bank's call center or is a spoofing attempt, and automatically ends unverified calls.

§

Analysis

Why This Matters

  • Directly affects hundreds of millions of Android users who face increasingly convincing scam calls, texts and bank fraud attempts.
  • Shifts security responsibility from users to AI, acknowledging that humans cannot reliably detect advanced social engineering.
  • Google's use of cloud-based AI (Gemini) for message scanning raises new questions about privacy, even with the Private AI Compute environment.

Background

Mobile scams have escalated from simple robocalls to attacks using deepfake voices, spoofed caller IDs and fake bank alerts. Google has been adding scam defenses to Android for years, including on-device detection in the Phone and Messages apps. The latest update leverages its Gemini AI models, both on-device and in the cloud, to analyse conversation patterns and link destinations. The cloud component is opt-in and processes data in a secure environment, but this is a significant expansion of automated analysis.

Key Perspectives

Google: Positions these tools as necessary because scams are too hard for users to spot alone. Emphasises privacy with on-device processing and encrypted cloud analysis. Benefits from increasing the value of its AI platform. Users: Gain a safety net against fraud, but some may be uneasy about their messages being analysed by AI in the cloud, even with privacy assurances. Opt-in design gives choice but may limit adoption. Critics and skeptics: Could argue that AI-based false positives risk blocking legitimate messages, or that determined scammers will adapt to evade detection. Privacy advocates will watch how Google handles data from the Gemini cloud analysis.

What to Watch

  • How many users enable the cloud-based Messaging protection and whether false positive rates remain low.
  • Whether scammers quickly develop techniques to bypass Gemini-driven detection.
  • Expansion of verified bank calls to more countries and financial institutions as a measure of industry cooperation.

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workSubscribe