Stay Safe: How Android Scam Detection Keeps Your Data and Money Secure

Android’s AI-powered Scam Detection and real-time protections guard against spoofing, banking scams, suspicious messages and harmful apps.

Proactive Scam Detection works right when you need it.

Scammers are becoming more sophisticated, but Android’s multi-layered protection evolves to keep up with the latest threats. Rather than just reacting, the Android ecosystem uses advanced on-device security features to try and stop criminals in their tracks. From blocking deceptive phone calls to scanning for apps running stealthy operations in the background, Android Scam Detection helps protect you from scams before they cause harm. This guide explores the built-in features that work together to help keep your personal information, privacy and finances more secure.

Stop imposter scams in their tracks with fake call detection and verified financial calls.

Scammers can pretend to be a trusted contact or your financial institution in order to carry out complex scams. They use a tactic called spoofing, where they mask their caller ID using internet-based calling systems to appear legitimate. This trick makes it look like your friend or your bank is calling you for money or to resolve an urgent issue, which can easily mislead you into sharing password details or transferring money.

To protect you from this threat, Google is introducing two protections. Fake call detection works to keep you safe from scammers trying to pose as your personal contact. And we’re partnering with financial institutions to introduce verified financial calls¹, aiming to stop spoofed calls that appear to be from your bank.

Fake call detection works by verifying if a caller that appears to be a contact is actually calling from your contact’s phone. Here’s how it works:

1. When a contact calls you and you’re both using Phone by Google, their device sends a silent confirmation signal in real time to your device to verify the call is legitimate and truly coming from the contact’s device.
2. Now when a scammer tries to call you and impersonate the same contact, your device will look for the real-time verification signal. 
3. If that signal is missing, your device will reach out to your contact’s actual device to ask if they’re calling you right now and if they aren’t actively calling, you’ll get a real-time warning advising that it’s likely someone pretending to be your contact. 

Verified financial calls runs quietly in the background without requiring you to do anything. Here’s a breakdown of how the verification process works:

1. The system detects an incoming call that appears to be from your bank. Android silently queries the installed bank app to verify if the institution is actually initiating the call and automatically terminates the spoofed call instantly if the app confirms no call is active.
2. Banks can also designate specific numbers as inbound-only, which means banks only receive calls using this number. If an incoming call to a user uses this number, Android will automatically block it.

Extra in-call safeguards for real-time protection.

With more real-time in-call protections, Android helps safeguard against scammers who try to steal your financial information or persuade you to download malicious apps.

More time to think when you open your banking app.

If you’re screen sharing with someone not in your contacts and you launch a participating bank’s app, your device will warn you and give you the option to end the call and stop sharing your screen. There’s also a 30-second pause before you’re able to continue, giving you time to consider whether a scammer could be creating a false sense of urgency.

Side-loading prevention while you’re on a call.

Android’s in-call protections block you from turning off Google Play Protect during a phone or video call to prevent scammers from persuading you to turn off app security. During calls, Play Protect also prevents you from side-loading an app by installing it from a browser, message or other unofficial source, as this is a common way that scammers get people to install malicious apps on their devices.

Powerful AI Scam Detection for live threat monitoring.

Protecting you from scams also means looking at how apps behave on your phone. With Live Threat Detection, Android uses advanced AI processes locally on your device to analyze app behaviors in real time. Because these processes happen on your phone, your personal data stays private and never goes to cloud servers.

Spotting suspicious app behaviour before it causes harm.

We’re enhancing Live Threat Detection with dynamic signal monitoring, to provide even more help in find predatory apps that engage in suspicious behaviors:

• SMS forwarding: Some malicious apps use unauthorized SMS forwarding to steal one-time passcodes (OTPs) sent to your phone. To protect you, Android hides these security codes away from most apps for three hours.
• Accessibility overlays: Apps can abuse accessibility permissions to create accessibility overlays, which are invisible layers over your screen that trick you into tapping something you didn’t mean to. Live Threat Detection warns you about apps that are abusing accessibility permissions so you can stay safe.
• Hidden apps: Android also uses dynamic signal monitoring to watch how apps interact with your system. This helps detect accessibility permission and background activity launch abuses, as well as apps that change or hide their icons to run secretly in the background. Google also can push new security rules dynamically to your device, giving you immediate protection against new tactics.

These advanced protections will be enabled on Android 17 devices, with updates starting in the second half of 2026.

Identifying message scams with next-level AI.

In Google Messages, Scam Detection uses powerful AI to notice patterns in conversations and displays a “Likely scam” warning if suspicious activity is found. Scam Detection works in real-time on your device, so your conversations stay private unless you choose to share it and your information stays protected.

Not sure if a message or notification is real? Circle to Search can assess whether it’s likely to be a scam by analyzing text and links using AI and online information. Long-press your Android device’s home button or navigation bar to activate Circle to Search and circle the text to get an AI Overview.

Proactive multi-layered protection for everyday peace of mind.

Android brings together multiple built-in security features to help detect threats, safeguard your personal information and make everyday tasks more secure. Working across your device, apps and accounts, these layers help you stay ahead of scams without getting in your way.

Your device stays shielded from malicious apps.

Beyond real-time monitoring, Google Play Protect acts as your primary shield. This built-in security tool analyzes apps before you download them and performs daily scans of your device to detect and disable malware.

Thieves are locked out with Advanced Protection for Android.

Android secures your phone from a range of physical and digital threats through Advanced Protection. This is Android’s one-tap tool to get extra security on your device without needing extra expertise. Features like Theft Detection Lock and Offline Device Lock keep your data safe if someone takes your phone. Scam Detection in Phone by Google and Google Messages work to protect you from incoming scams. Advanced Protection makes it easy to keep these and many other protections on and hard to turn off.

Encryption that works behind the scenes.

Your payment information is protected, too. Payment credentials stored in Google Wallet and Google Pay are encrypted and aren't shared during transactions. Built-in device encryption helps keep your data secure, while encrypted cloud backups make it easy to move your information to a new Android device.

Frequently asked questions.

How do I set my phone to detect fake calls?

To ensure your phone conversations are protected by fake call detection, you should follow these steps:

1. Use Phone by Google as your phone app on an Android 12+ device
2. Ensure that you also have Google Messages, with RCS chats enabled and Google Contacts installed. You will also need to enable Caller ID and spam settings on the Google app in your phone
3. Exchange a phone call or a text message with a legitimate contact

Find out about more ways to stop and block spam and unwanted calls.

What should I do if an app on my phone is flagged as suspicious?

If you receive a notification that an app may be behaving harmfully, you should:

• Review the security alert details on your screen.
• Uninstall the flagged app immediately to protect your data.
• Check your remaining app permissions through the privacy settings hub on your Android device.

Android continues to build new ways to help keep you secure. With layers of intelligent features working together, you stay safer as you call, browse, download and connect.