Loading story…
Google has expanded Android protections that tie a phone number to a device and Google accounts, while also adding fake call detection aimed at stopping deepfake-enabled phone scams. Reporting on the new anti-scam feature indicates Android can analyze calls for signs of impersonation and other fraudulent behavior, reflecting Google’s broader push to harden mobile devices against voice-based social engineering attacks.
Separate reporting on Android’s phone number verification shows Google verifies that a SIM associated with a number is physically present in a device, then links that verified number to active Google accounts for services including RCS messaging, account recovery, emergency features, and anti-scam protections. The process has used hidden SMS messages and now increasingly relies on carrier APIs that exchange encrypted device and SIM-related data; the feature is enabled by default, can generate “number is now verified” alerts, and has raised privacy concerns because one verified number may be associated with multiple Google accounts on the same device.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
A Google system update in September 2025 made Android’s phone number verification feature more noticeable, including visible “number is now verified” notifications and, in some cases, hidden outgoing SMS-based verification behavior.
Google published a security announcement introducing Android fake call detection aimed at stopping deepfake scam calls. The announcement marked public disclosure of the new anti-scam capability.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google is launching **fake call detection** on Android to help stop scam calls that use caller ID spoofing and AI voice cloning to impersonate trusted contacts. The feature is rolling out globally this month for devices running **Android 12 and later**, starting with **Pixel** phones, and works through **Phone by Google** with supported **RCS** services. It is designed to warn users when a caller claims to be someone in their contacts but the call cannot be verified as coming from that person’s device. The protection uses a silent background verification process in which the caller’s phone sends an encrypted confirmation signal during the call. If that signal is missing, the recipient’s device checks whether the real contact’s phone is actually placing the call and displays an impersonation warning if not. Google said the feature is enabled by default where supported, though users can turn it off in settings, and framed the rollout as a response to growing impersonation fraud that has expanded from consumer scams into business-focused social engineering and caused billions in reported losses.
Jun 29, 2026
Google announced updated **Android Theft Protection** capabilities aimed at reducing account takeover and financial fraud risks following device theft, with availability starting on devices running **Android 16+**. The updates strengthen authentication safeguards by making **screen lock guessing** harder (longer lockout periods after repeated failed PIN/pattern/password attempts) and by improving controls around lock behavior after excessive failed authentications, including a dedicated settings toggle for *Failed Authentication Lock*. Google also expanded **Identity Check**—which requires biometric authentication for sensitive actions when the device is outside trusted places—to cover a broader set of actions and apps that use the **Android Biometric Prompt**, including third-party banking apps and **Google Password Manager**. In parallel, Android’s *Remote Lock* capabilities were highlighted as part of the theft-response toolset, giving users more control to lock a lost or stolen device and limit further misuse.
Jun 29, 2026
Android has implemented an AI-powered Scam Defense system that reportedly blocks 10 billion monthly threats, with users being 58% more likely to avoid scam texts compared to iOS users. This development comes amid a surge in cybercriminal activity leveraging artificial intelligence to craft more convincing and frequent fraudulent SMS messages, targeting mobile users at scale. Industry experts highlight that 73% of sophisticated cyber attacks now utilize AI, and 89% of successful breaches involve AI-enhanced social engineering. The effectiveness of AI-driven phishing, such as GPT-4-powered campaigns, has led to a 43% click rate, significantly higher than traditional methods. While organizations are rapidly adopting AI for business, only a minority have implemented robust AI security governance, leaving both enterprises and consumers vulnerable to advanced SMS-based scams. Messaging platforms, unlike email, lack comprehensive security standards, making them a preferred vector for attackers exploiting the immediacy and high open rates of text messages.
Jun 29, 2026