Key points
- Enhanced protection in Google Messages uses cloud AI to scan chats with unknown senders for scam intent.
- Android 15 will block apps from silently forwarding calls, a tactic used to steal one-time passcodes.
- Verified financial calls now allow banks like Revolut to prove their identity before a user answers.
Google has launched a suite of AI-driven security features designed to detect and block fraudulent messages and calls on Android devices. The company announced these updates on 14 October, aiming to reduce the impact of the growing global scam economy. The new tools leverage Gemini models to identify malicious intent earlier in the interaction process.
How it unfolded
- On 14 October, Google announced new Android scam defenses, including an opt-in Enhanced protection mode for Google Messages that utilizes cloud-based Gemini models.
- The company revealed that Android will begin blocking apps from enabling call forwarding in the background starting in early December, a measure to prevent theft of one-time passcodes.
- Google stated that its existing Scam Detection tools already flag more than 5 million suspected scams monthly, with new features rolling out to Pixel and partner brands throughout the year.
Who is affected
The Enhanced protection mode in Google Messages is available as an opt-in feature for Android users. Once enabled, it sends conversations with unknown senders to Gemini models in the cloud for analysis. Google asserts that this process occurs within Private AI Compute, keeping messages encrypted and inaccessible to Google employees. This cloud-based check aims to spot scammer intent before the user engages further.
On-device protection will also expand. Gemini Nano will analyze unfamiliar links directly on the phone before users tap them. This local check is coming to the Pixel 10 and later models, Samsung Galaxy S26 series, Z Flip, and Z Fold8 devices. These on-device checks provide an additional layer of security without requiring an internet connection for every link.
What happens next
Android will introduce several system-level changes to protect user data during interactions. Starting this month on Android 15 and later, Chrome will hide login and payment fields when a user shares their screen. This prevents viewers from seeing sensitive credentials during remote assistance or screen-sharing sessions. Additionally, users will receive warnings before any typed call forwarding code takes effect.
Call verification features are expanding to more financial institutions. Google added verified call support for Banco do Brasil, Itaú Unibanco, and Revolut. The system checks the bank’s app to confirm the caller’s identity. Since launching in June, this feature has blocked over 3 million fake calls from the two Brazilian banks alone. Scam alerts in notifications will also reach Motorola, OPPO, OnePlus, vivo, and Xiaomi devices later this year.
The background in plain language
When using cloud-based security tools, user data is processed on remote servers rather than on the device. This allows for faster updates and more powerful analysis but raises privacy concerns. To address this, companies use secure enclaves where data remains encrypted during processing. Additionally, call forwarding is a standard telephony feature that redirects incoming calls to another number. Malicious actors exploit this by installing apps that silently forward calls to their own servers, allowing them to intercept verification codes sent via SMS.
What to do and how to stay safe: Google
- Enable the Enhanced protection mode in Google Messages to allow cloud-based AI to scan messages from unknown senders for potential scams.
- Keep your Android system updated to the latest version, particularly Android 15, to benefit from screen-sharing protections that hide login fields.
- Verify the identity of incoming calls from financial institutions by checking for verified caller badges or calling the bank directly through official channels.
- Monitor app permissions regularly to ensure no unauthorized applications have control over call forwarding settings or other sensitive telephony functions.
Step-by-step guide: Mobile Device Security for Small Business: Control Without Cost
General security guidance from the Circuit Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Does Google read my messages when I use the Enhanced protection mode?
No, Google states that messages are processed in Private AI Compute, which keeps them encrypted and out of reach, even from Google employees.
Which phones will get the on-device link scanning feature?
The Gemini Nano link check will come to Pixel 10 and later, Galaxy S26 series, Galaxy Z Flip, Z Fold8, and some other phones.
When will the call forwarding block be implemented?
Android will stop apps from turning on call forwarding in the background from early December.
