Google Is Beefing Up Android Against Scams. Here Is What Actually Changes

Scams are no longer just obvious robocalls and clumsy phishing texts. Google says they now include spoofed numbers, fake bank alerts, and AI voice cloning, and its new Android protections are aimed at the harder cases: the slow burn message thread, the convincing bank call, and the link that looks fine until you tap it.

Google announced a new set of defenses across calls, texts, and chat apps. Enhanced protection has now started rolling out, so this is no longer just an announcement. Some other pieces are still coming in the next few weeks, and some depend on your phone maker or your bank. Here is what matters, and what is still marketing to take with a grain of salt.

The scale of the problem

Google says AI powered Scam Detection in Phone by Google and Google Messages now flags more than 5 million suspected scam calls and texts every month. In a survey Google conducted with YouGov across the US, Canada, and Australia, 40 percent of smartphone users said they are now very or extremely concerned about mobile fraud.

That concern makes sense. The best scams do not ask you to click one bad link. They build trust over days, impersonate a bank or delivery company, then create urgency at exactly the wrong moment.

Enhanced protection mode in Google Messages

The biggest change for most Android users is a new opt in setting called Enhanced protection mode in Google Messages. Google originally said it would roll out in the coming weeks, and reports on October 24 say it has now started rolling out, initially spotted in a beta build. That means it may not be on every phone yet, but it is actively reaching users. When enabled, it unlocks Google's most powerful defenses against complex scams.

It includes three main upgrades:

Smarter scam detection with cloud AI: For conversations with an unknown sender, Enhanced protection can use Google's more capable cloud Gemini models to evaluate the full context of a message thread and spot a scammer's intent faster. Google says this is meant to catch novel, slow burn attacks that on device detection alone might miss. The cloud analysis runs in Private AI Compute, which Google describes as an encrypted, secure space where data is kept private to the user and inaccessible to anyone else, including Google.
Smarter link checks with Gemini Nano: Google Messages already flags links to known malicious and phishing sites. The problem is that scammers constantly register brand new sites that have not been cataloged yet. With Enhanced protection on, on device Gemini Nano adds real time web signals to judge whether an unfamiliar link looks trustworthy before you tap.
Checkpoints for unfamiliar links: Redesigned warnings give you extra time and clearer context before tapping a link from a number not saved in your contacts. This feature was previously limited to devices in select countries or devices with Android Advanced Protection enabled.

The practical takeaway: check Google Messages under Protection and safety, where the setting now offers Enhanced protection, Standard protection, and No protection. If Enhanced protection has reached your phone, turn it on. It is opt in, so it will not help if you never enable it.

Scam alerts are coming to more phones, not just Pixel

Google previously launched Scam Detection in chat notifications on Pixel, which warns you about a suspicious message directly from the notification shade, before you even open a chat app.

Now Google says it is partnering with Android device makers to bring that on device protection to hundreds of millions of additional users later this year. That expansion matters more than any single Pixel feature, because most Android users do not own a Pixel. Availability will still vary by device and region, so check for updates from your phone maker if you do not see it yet.

Two call scams Google is trying to shut down

1. Screen sharing traps

Screen sharing is useful for helping family or working with a colleague, but it is dangerous if a scammer talks you into sharing your screen while you type a password or card details.

Android already automatically hides sensitive info in native apps during screen sharing. Google says that protection now extends to Chrome and Android WebView, automatically blanking out login fields and payment screens during live screen share sessions.

This does not make screen sharing with a stranger safe. It just removes one easy way for a scammer to watch you type sensitive details.

2. Call forwarding hijacks

Another classic account takeover trick is to secretly redirect your incoming calls to another number, so the scammer can intercept one time passcodes and take over your accounts.

Android now blocks apps from quietly enabling call forwarding in the background. If a scammer tries to trick you into manually typing a call forwarding code (an MMI code) on your dial pad, Android will proactively warn you before it takes effect.

If you ever get a warning like that, stop. No legitimate support agent should need you to forward your calls or type a dialer code to fix an account problem.

Verified bank calls: the Brazil test case

The most concrete result in Google's announcement comes from bank impersonation, one of the most damaging scam types.

Caller ID spoofing lets a scammer make an incoming call look like it came from an official bank. According to the Brazilian Federation of Banks (FEBRABAN), bank impersonation scams in Brazil surged by 195.7 percent over a 12 month period.

To fight this, Android partnered with Banco do Brasil, Itaú Unibanco, and other banks on verified financial calls. Working with official banking apps, Android checks in real time whether the bank actually initiated the call. If a caller claiming to represent a bank fails that check, Android hangs up the call and alerts you.

Since launching in June, Google says Android has blocked more than 3 million spoofed calls from Banco do Brasil and Itaú Unibanco alone, by automatically ending calls that spoofed inbound only numbers (official bank lines that are never used to contact customers directly).

The feature is already protecting customers of other institutions, including Revolut, and Google says it will keep adding partners. This is the part to watch outside Brazil: verified calls only work if your bank participates, so the benefit is real but not universal yet.

How strong is Android's protection, really?

Google points to a Google commissioned evaluation by Leviathan Security Group, which found Android devices provide the strongest out of the box scam protections and outperformed iOS on proactive call screening, fake call detection, and Circle to Search threat warnings.

That is worth noting, and also worth framing honestly: the study was commissioned by Google. It is useful evidence, not a neutral verdict. Similarly, Google's YouGov survey found iPhone users were significantly more likely than Pixel users to say they had fallen victim to a scam and that their device was not effective at protecting them. Those are Google's survey results, not an independent ranking.

The safer conclusion is narrower: Android's built in defenses are getting deeper, especially for Messages and calls, and Google is investing heavily in AI detection. That does not mean Android users are immune, and it does not mean every phone gets every feature on day one.

What you should do now

Check Google Messages under Protection and safety for Enhanced protection mode, which has started rolling out, and turn it on if it is available on your device.
Pause on links from unknown numbers, even if the message thread feels familiar. Slow burn scams are designed to feel familiar.
Never share a screen with someone who contacted you out of the blue, and never type passwords or payment details while sharing.
If someone asks you to forward calls or dial a code, treat it as a scam until proven otherwise.
If a caller claims to be your bank, hang up and call the bank back on the number on your card or in its official app. Do not trust caller ID alone.
Check whether your bank supports verified calls, and keep your phone and Messages app updated.

Google's pitch is that staying safe should not be entirely up to you, and these updates move in that direction. The best defense is still a mix: stronger built in warnings, plus a habit of slowing down when a message or call creates urgency.

That pause is the part no AI feature can fully replace.