New Delhi, August 23, 2026 (Yes Punjab News)
India’s action against at least 57 websites and databases hosted on Google’s Firebase platform has highlighted how cybercriminals are allegedly repurposing legitimate cloud infrastructure for phishing, malware distribution and financial fraud.
So, what is Firebase, how is it being misused and why has it become a concern for Indian cyber authorities?
What is Google Firebase?
Firebase is Google’s cloud-based development platform that provides developers with ready-made tools and infrastructure to build and operate mobile applications and websites. Its services include website hosting, databases, authentication, analytics and other backend capabilities.
Firebase Hosting, for instance, allows developers to host web content and applications, while Firebase Authentication provides services for managing user identities and sign-ins.
The platform is widely used for legitimate software development. Its misuse by cybercriminals does not mean that Firebase or Google is responsible for fraudulent activity.
How are scammers allegedly using Firebase?
According to notices issued by India’s Indian Cyber Crime Coordination Centre (I4C) to Google, scammers were allegedly creating Firebase-hosted websites that impersonated major banks and other trusted organisations.
At least seven of the 57 websites and databases flagged in August were reportedly phishing pages mimicking banks including State Bank of India, ICICI Bank and Axis Bank. Other infrastructure was allegedly used to collect sensitive information, including credit card details and one-time passwords, from victims’ devices.
Fraudsters could use such pages to make victims believe they were interacting with a genuine banking service. They may lure users with offers such as reward-point redemption, credit-limit upgrades or other financial benefits before attempting to obtain sensitive information.
How does the fraud chain work?
One reported scheme allegedly involved a fake website offering assistance related to PM-KISAN payments. Victims were persuaded to download an Android application through the fraudulent website.
The application was allegedly malicious and capable of obtaining information from the victim’s phone. That information could then be transmitted to a Firebase database controlled by the scammers.
In simple terms, the operation could involve three stages:
Fake website → malicious application → Firebase database
The website serves as the lure, the malicious application attempts to obtain information from the device, and the database provides backend infrastructure for receiving or storing the stolen information.
Why is Firebase attractive to cybercriminals?
Firebase is often described as a backend-as-a-service platform because it provides developers with ready-made infrastructure rather than requiring them to build every backend component themselves.
Its hosting, database and authentication capabilities are valuable for legitimate developers because they simplify application development and deployment.
The same legitimate features can, however, potentially be repurposed by criminals. Investigators say scammers have increasingly turned to Firebase to support phishing pages, malicious applications and systems used to collect stolen information.
The concern, therefore, is not Firebase itself but the misuse of legitimate cloud infrastructure for criminal purposes.
Why has India ordered takedowns?
The I4C has directed Google to remove at least 57 Firebase-hosted websites and databases identified in August as allegedly being linked to phishing, malware distribution and financial fraud. The action forms part of a broader effort by Indian authorities to disrupt the digital infrastructure supporting online scams.
Google has said it has policies prohibiting phishing, malware and financial fraud and works with law-enforcement agencies to assess and respond to removal requests.
The episode demonstrates how cybercriminals can exploit trusted digital platforms to make fraudulent operations appear more legitimate, underlining the need for stronger cooperation between technology companies, banks, law-enforcement agencies and users.
FOLLOW NOW
