Google Announces New Android Security Features - Scam & Theft Protection

Enhanced Security and Privacy Features Unveiled for Android

Prior to Google I/O, at the Android Show on Tuesday, Google detailed a suite of new security and privacy enhancements for the Android operating system.

These advancements encompass strengthened defenses for phone calls, screen sharing activities, messaging interactions, device access controls, and fundamental system permissions.

Protecting Users from Scams and Attacks

Google’s primary objective with these features is to safeguard users against falling victim to scams.

Furthermore, the updates aim to secure personal information in the event of device theft or unauthorized access by malicious actors, and to generally bolster device-level security against a wide range of potential attacks.

Combating Phone Scams

Phone scammers frequently attempt to deceive users into performing risky actions, such as clicking on compromised links or installing applications from untrusted sources.

To counter this, Google is implementing measures to block certain actions and proactively warn users when they are engaged in a call with a number not present in their contacts.

Restrictions in Android 16

Specifically for Android 16, the following actions will be restricted:

• Side-loading applications for the first time via web browsers, messaging apps, or unverified sources.
• Granting accessibility permissions to applications, which could allow scammers to gain control of the device.

Additionally, Google is preventing users with Android 6 or newer from disabling Google Play Protect, the system’s built-in app scanning service, during active calls.

Screen Sharing Safeguards

New screen-sharing protection is being introduced, prompting users with reminders to cease screen sharing immediately after a call concludes.

Fraud Prevention with Banking Partners

A new warning screen is currently being tested in collaboration with select banks in the United Kingdom to mitigate fraud facilitated through screen sharing.

When users with devices running Android 11 or later access a participating bank’s application while actively sharing their screen with an unrecognized number, a warning screen will appear.

This screen will include a prominent button enabling users to quickly terminate the screen-sharing session.

Enhanced Security Measures in Google Messages

Google is strengthening its defenses against fraudulent activities within the Google Messages application. Following its initial rollout in March, the platform is receiving updates to its scam protection capabilities.

These improvements leverage artificial intelligence, processed directly on the user’s device, to identify and flag potentially deceptive conversations. The system’s scope is being expanded to encompass a wider range of scams.

Expanded Scam Detection

The updated tool now recognizes more sophisticated fraud schemes. This includes scams involving cryptocurrency, requests for gift cards, fraudulent toll road and billing fees, financial impersonation, and deceptive technical support requests.

By broadening the detection parameters, Google aims to provide a more robust layer of security for its users.

Introducing Verification Keys in Google Contacts

In addition to enhanced scam detection, Google is introducing a new verification key feature within the Google Contacts app.

This feature allows users to confirm the authenticity of their contacts, ensuring they are communicating with the intended recipient.

How Verification Keys Work

Verification can be achieved through a simple process. Users can have their contacts scan a unique QR code or compare numbers displayed on their respective screens.

Successfully verified keys guarantee that the conversation within Google Messages is protected by end-to-end encryption, bolstering the security of the exchange.

Should a SIM swap attack occur, where an attacker gains control of a phone number and initiates communication from a new device, the Google Contacts app will indicate the contact’s verification status as unverified.

This feature will become available for Google Messages users with Android 10 or later this summer.

Enhanced Theft Protection in Android

Google initially launched its Identity Check protection earlier in the year for Pixel devices and Samsung phones running OneUI 7. This security feature mandates biometric verification for modifications to crucial settings.

These settings include alterations to the device's PIN, biometric data, disabling theft protection, and accessing Passkeys outside of pre-defined trusted locations.

Now, Google is extending the availability of this functionality to a wider range of device manufacturers with the release of Android 16.

Strengthened Factory Reset Protection

Further bolstering security, Google will introduce improved safeguards for the Factory Reset process later this year. This will restrict device functionality following a reset if it occurs without proper authorization.

Authorization will require either the previous lock screen pattern/PIN or valid Google account credentials, significantly hindering the usability of a stolen device.

Preventing Remote Device Locking and OTP Exposure

To safeguard against malicious remote locking of your device, a security question challenge is being implemented to deter unauthorized access.

With Android 16, a new privacy measure will also conceal one-time passwords (OTPs) when the device isn't connected to a Wi-Fi network and hasn't been recently unlocked.

Enhanced Security Measures

New functionalities are being integrated into Google Play Protect's real-time detection system. These enhancements focus on identifying potentially harmful applications that employ disguised or altered icons.

Availability of this feature is scheduled for the coming months, initially for users of the Google Pixel 6 and newer models. Google has confirmed the implementation of an updated suite of on-device regulations designed to identify a wider range of malicious applications.

Strengthening Advanced Protection Mode

Google is implementing additional safeguards to its Advanced Protection Mode, specifically aimed at providing heightened security for individuals in the public eye. This includes the introduction of novel on-device capabilities.

Alongside these security improvements, a new Find My Hub is being launched. This tool facilitates the tracking of personal belongings, as well as the location of friends and family members.

Further Information

Details regarding the Google I/O livestream and related announcements can be found elsewhere.